Privacy Policy

1. Who handles your data

Indica7, whose registered company name is Tsd Indica7 Trabalho Temporário, Lda, legal person no. 517256614, is a temporary work and recruitment agency licensed by the Portuguese IEFP under licence no. 097023, with its office at Avenida Valbom, 17 3B, 2750-508 Cascais, Portugal.

Indica7 decides what happens to the data you send through this website — that is what the law calls being the data controller.

For any question about your data, including exercising the rights described below, write to admin.marketing@indica7.pt.

2. What we collect

We collect what you send us yourself, through one of the three forms on this website, and the visit statistics explained in section 10. We collect data in no other way and we do not buy lists from anyone.

• Request a proposal (companies): name, company, company tax number, email, phone, sector, number of workers needed and the message you write.
• Job application: whether you live in Portugal, name, email, phone or WhatsApp, line of work, experience, availability, the message you write and, if you attach it, your CV.
• General contact: name, email, subject and message.

The fields marked as required are the minimum we need in order to reply: without them we cannot prepare a proposal or assess an application, and the form will not go through. Everything else is optional and up to you, including your CV, the phone number on proposal requests and the free message.

With each form we also record the country it was sent from, which the server works out from the IP address at the moment of sending, using the free DB-IP database (db-ip.com). The IP address is not kept. The country goes with the request to our team and helps it organise the requests it receives, but every request is read and decided on by a person.

3. What it is used for, and on what basis

Company data is used to answer the request and prepare a proposal. Candidate data is used to assess the profile, present job opportunities and, where a placement happens, handle the hiring and immigration process.

The legal basis is your consent, given when you submit the form, together with the pre-contractual steps you ask for by applying or requesting a proposal. You may withdraw your consent at any time, without affecting what was done before.

We do not make automated decisions about you and we do not profile you by computer. Applications are assessed by a person on our team.

4. Who we share it with

Candidate data is presented to client companies with matching vacancies, and only as far as that presentation requires.

Where a placement happens, we share the data required by law with the competent authorities, namely AIMA, Social Security, the Tax Authority and consular services, as regards visas and permits.

We also rely on two providers to run this website: OVH, a European company, which hosts it; and SendGrid, from Twilio Inc., which delivers the emails the forms generate. They process the data on our behalf, only to provide us that service, and are bound by confidentiality.

If you accept cookies, the map on the Contact page is loaded from Google Maps. Google then receives your IP address and sets the cookies described in the Cookie Policy, and handles that data as a controller in its own right, under its own privacy policy. If you refuse, nothing is sent to Google.

We never sell personal data to anyone, under any circumstances.

5. Transfers outside Europe

The emails from this website are sent through SendGrid, a service of Twilio Inc., based in the United States. Twilio Inc. has joined the EU-U.S. Data Privacy Framework, the mechanism the European Commission recognised as providing protection equivalent to European law. In practice, what passes through it is the message the form generates, and nothing else.

Indica7 also recruits in countries outside the European Economic Area. Whenever a recruitment process involves partners in those countries, we pass on only the data strictly necessary for that purpose.

If you want to know what safeguards apply to a specific transfer concerning you, write to us and we will tell you.

6. How long we keep it

We keep data only for as long as the purposes above require, and then we delete it.

Applications that do not lead to a placement stay in our candidate database for ONE YEAR from the day we receive them, so that we can present you with opportunities in the meantime. After that they are deleted, unless you tell us you want to stay with us — in which case a new year starts. If you would rather have your data deleted sooner, just ask.

Proposal requests and contact messages are kept for one year, on the same basis.

What you send us through a form is stored on our own server, at OVH in France, in encrypted form so that only our team can read it, and it is deleted automatically when that year is over. Your CV is not stored on the server and only goes by email to the team that assesses applications.

From each form we also keep, for internal statistics and with no time limit, information that does not identify the person who filled it in, namely the type of request, the page it was sent from, the country it was sent from, whether it was sent from a phone or a computer, the options chosen from the lists (the sector, the area or the availability, for example) and the domain of the email address (company.pt, for example, or only the fact that it is a personal address). For proposal requests we also keep the company name and tax number, but never the tax number of an individual.

Data about people who are actually placed follows a different rule, which is not ours to set: it is kept for the periods that employment and tax law require.

7. Your rights

The law gives you a set of rights over your data, which you can exercise at any time by writing to admin.marketing@indica7.pt. We reply within one month at most.

• Know what data we hold about you and receive a copy.
• Correct data that is wrong or incomplete.
• Ask us to erase it.
• Ask us to restrict its use, or object to that use.
• Receive your data in a format you can take elsewhere.
• Withdraw the consent you gave us, at any time.

8. If you think we handled your data badly

Talk to us first: most situations are resolved with an explanation or a correction. If you are still not satisfied, you have the right to complain to the Comissão Nacional de Proteção de Dados, the Portuguese authority on this matter, at www.cnpd.pt.

9. Security

We take appropriate technical and organisational measures to protect your data against unauthorised access, loss or improper disclosure. Access is limited to those who need it to work on your case.

Like any website, the server keeps a technical record of failures so that we can fix them. That record is deleted after 30 days and does not keep your email or your phone number: they are hidden automatically before the line is written.

10. Visit statistics

We measure visits to this website with Umami, open-source software that runs on our own server, at OVH in France, and is served from this website's own domain. We use it to understand how the website is used and to improve it, on the basis of our legitimate interest.

Umami uses no cookies and stores nothing on your device. It records the pages viewed, the page you came from, the campaign parameters in links (UTM), the type of device, the operating system, the browser, the language, the country, region and city, the time spent on each page and how far down you scroll, clicks on buttons and links (including phone, email and WhatsApp links) and how the forms are used: when you start filling one in, which field you stopped at if you do not send it, and whether sending worked. It also measures how fast each page loads and responds on your device, the addresses that do not exist on the website and language changes. It never records the content of what you write.

Your IP address is not kept. It is used at that moment to work out the country, region and city and, together with the browser details, to calculate an anonymous session identifier. That calculation uses a value that changes periodically, so it cannot recognise you from one day to the next.

This data is not shared with third parties or used for advertising. It is viewed in aggregate and the records are kept for up to 24 months.

The server also keeps a technical record of the requests it receives, with the IP address shortened by removing its last digits. It is used for aggregate statistics and security, does not identify the person and is deleted after 30 days.

11. Changes to this policy

If we change anything relevant, we update this page and the date shown at the top. We recommend checking it from time to time.