Privacy policy

1. Who is responsible for your data

Indica7 works through two companies: one in Portugal and one in Romania. The company responsible for an enquiry sent through this website depends on the country you choose in the form.

If you choose Romania, your enquiry goes to our team in Romania and the Romanian company is responsible for it:

• Legal name: [Legal name of the company to be completed].
• Unique registration code (CUI): [Unique registration code to be completed].
• Trade Register: [Trade Register number to be completed].
• Registered office: [Registered office to be confirmed].

Contact: tia@indica7.ro, +40 731 772 777.

If you choose any other country, your enquiry goes to our team in Portugal and the Portuguese company is responsible for it. Indica7, whose registered company name is Tsd Indica7 Trabalho Temporário, Lda, legal person no. 517256614, is a temporary work and recruitment agency licensed by the Portuguese IEFP under licence no. 097023, with its office at Avenida Valbom, 17 3B, 2750-508 Cascais, Portugal.

Contact: admin.marketing@indica7.pt.

2. What data we collect

We receive the data you send us yourself, through the enquiry form on the For Employers page, and the visit statistics explained in section 10. We do not buy data lists and we do not collect data any other way.

• The enquiry form: the country where your company operates, company name, contact person, email, phone (optional), staffing requirements and message (optional).
• With the form: your confirmation that you have read this policy, the page you sent it from and the language of the page.

The required fields are the minimum we need to reply. Without them the form is not sent. Do not send identity documents or health information through the form.

3. What happens when you send the form

• Your enquiry reaches our team in Romania or in Portugal by email, depending on the country you chose.
• You receive a confirmation email at the address you entered.
• A copy of your enquiry is stored on our own server, at OVH in France, in encrypted form so that only our team can read it. If the email cannot be sent, the team picks the enquiry up from that copy.
• Your IP address is used to limit submissions to 5 in 10 minutes, as protection against spam. It is held only in the server's memory and is not saved.

4. Purposes and legal bases

We use your data to reply to your enquiry and, if you ask for it, to prepare a proposal.

The legal basis is your consent, given when you send the form, and the steps before a contract that you ask for when you request a proposal (Article 6(1)(a) and (b) GDPR). The technical error log relies on our legitimate interest in keeping the website working and secure (point (f)). You can withdraw your consent at any time, without affecting what was done before.

We do not make automated decisions about you or create automated profiles.

5. Who we share data with

• OVH, a European company, which hosts the website.
• SendGrid, a service of Twilio Inc., which delivers the emails the form generates.

The providers process the data on our behalf, only for the service they provide us. We do not sell personal data to anyone.

6. Transfers outside Europe

Twilio Inc., which runs SendGrid, is based in the United States and has joined the EU-U.S. Data Privacy Framework, the mechanism the European Commission recognised as providing protection equivalent to European law. The email the form generates passes through it.

7. How long we keep data

• Enquiries: one year from receipt, and then they are deleted automatically. You can ask for earlier deletion.
• From each enquiry we also keep, with no time limit, information that does not identify you, namely the page and the country it was sent from, the type of device, the country you chose, the company name and the domain of the email address.
• The technical error log: 30 days. Email addresses and phone numbers are masked automatically before they are written.
• Visit statistics are kept for up to 24 months.
• The record of requests received by the server, with shortened IP addresses, is kept for 30 days.

8. Your rights

You can ask for access to your data and a copy of it, correction, deletion, restriction of processing or portability. You can object to processing and withdraw your consent at any time. Write to the contact of the company responsible for your enquiry (section 1); we reply within one month.

If you are not satisfied with the reply, you can lodge a complaint with the supervisory authority: in Portugal, the Comissão Nacional de Proteção de Dados (CNPD); in Romania, the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP).

• CNPD
• ANSPDCP: information about complaints

9. Job applications

Applications for work are made on the website of the country you choose, and each of those websites has its own privacy policy.

• Privacy policy: Indica7 Portugal

10. Visit statistics

We measure visits to this website with Umami, open-source software that runs on our own server, at OVH in France, and is served from this website's own domain. We use it to understand how the website is used and to improve it, on the basis of our legitimate interest (Article 6(1)(f) GDPR).

Umami uses no cookies and stores nothing on your device. It records the pages viewed, the page you came from, the campaign parameters in links (UTM), the type of device, the operating system, the browser, the language, the country, region and city, the time spent on each page and how far down you scroll, clicks on buttons and links (including phone, email and WhatsApp links) and how the forms are used: when you start filling one in, which field you stopped at if you do not send it, and whether sending worked. It also measures how fast each page loads and responds on your device, the addresses that do not exist on the website and language changes. It never records the content of what you write.

Your IP address is not kept. It is used at that moment to work out the country, region and city and, together with the browser details, to calculate an anonymous session identifier. That calculation uses a value that changes periodically, so it cannot recognise you from one day to the next.

This data is not shared with third parties or used for advertising. It is viewed in aggregate and the records are kept for up to 24 months.

The server also keeps a technical record of the requests it receives, with the IP address shortened by removing its last digits. It is used for aggregate statistics and security, does not identify the person and is deleted after 30 days.

11. Cookies and links to other services

The website does not use cookies, and the visit statistics store nothing on your device. If you close the bar suggesting the website for your country, your browser keeps one record so that it does not appear again.

The «Directions» buttons on the Contact page open Google Maps, and the social media links open those services, only when you choose them.

• Cookie policy

12. Updates to this policy

The date of the latest revision is shown at the top of the page. If we change anything important, we update this page before collecting data in a new way.