SC Haktos Creative SRL (hereby known as “Klarq” or “Company” or “Haktos”), a company registered Str. Panselelor 1, bl. P11, ap. 14, Sannicolau-Mare, jud. Timis, Romania, are committed to protecting and respecting your privacy. This privacy policy explains how we collect, use, and share personal data about you if you are (i) an authorized user or representative of a company which is a customer and/or partner of Teamtailor; (ii) visiting our website; or (iii) in contact with us in any other way, e.g., through our customer service. In addition, this privacy policy explains how you can exercise your rights.

Data Protection Rights

You have several rights in accordance with the General Data Protection Regulation ("GDPR"), the California Consumer Privacy Act ("CCPA") and other applicable data protection legislation. These rights are:

Rights to access your information: You can get information from Klarq about what personal data we have collected, why we have collected it and so on.

Right to rectification: If any of your personal data that we process is inaccurate, you are entitled to have it corrected.

Right to erasure ("right to be forgotten"): You can request that Klarq erase personal data that we have gathered about you. Klarq will then, if no exceptions to this rule is applicable, remove the requested personal data.

Right to restriction: You can request that Klarq restricts the processing of your personal data under certain circumstances, e.g. if you contest the accuracy of the personal data processed by us. We must then restrict the processing of data, while verifying the accuracy of your request.

Right to object: You can object to the processing of your personal data that Klarq carries out based on the legal basis of our legitimate interest, as specified above in this privacy notice, including profiling that we carry out based on our legitimate interest, whereby we must assess if we can continue to process your personal data. You also have the right to object to the processing of your personal data for direct marketing purposes.

Right to data portability: You can request that Klarq provides all the personal data that Klarq processes about you in an easy and usable format.

Lodge a complaint: If you are unhappy with our handling of your personal data, you can lodge a complaint to the The Romanian National Supervisory Authority for the Processing of Personal Data, which is the lead supervisory authority in relation to Klarq, in the EU. You can also lodge a complaint with the data protection authority in your home country, in the EU. If you are based in the UK, you can lodge a complaint to the Information Commissioner's Office in the UK.

To exercise your rights, please contact us at[email protected].
If you contact us and ask us to provide you with the information, we have collected about you or exercise any other rights mentioned in this privacy notice, we will ask you to verify yourself to prevent disclosure of personal data to the wrong person. The legal basis for such processing is based on legal obligations under the GDPR and our legitimate interest of verifying your identity, to prevent disclosure of personal data to the wrong person.

CALIFORNIA CONSUMER NOTICE Under California Civil Code Section 1789.3, California users must receive the following specific consumer rights notice: The Complaint Assistance Unit of the Division of Consumer Services of the California Department of Consumer Affairs may be contacted in writing at 1020 N Street, #501, Sacramento, California 95814, or by telephone at 1-916-445-1254.

CALIFORNIA AND NEVADA – SHINE THE LIGHT LAW & YOUR PRIVACY RIGHTS

California and Nevada residents may request and obtain from us, once a year, free of charge, a list of third parties, if any, to which we disclosed their Personal Information (as defined in the Shine the Light Law, Cal. Civ. Code § 1798.83 or under Nevada law) for direct marketing purposes during the preceding calendar year and the categories of Personal Information shared with those third parties. If you are a California or Nevada resident and wish to obtain that information, please submit your request by sending us an email at [email protected]. We will confirm your identity and respond in accordance with legal requirements.

2. What type of personal data do we collect, for what purpose and what legal basis do we rely on?

2.1 Representatives of a Klarq Customer and/or Partner.

If you are a representative of a customer and/or partner of Klarq, we will process your personal data in connection with the onboarding of the customer and/or partner and to administer our relationship with and fulfil our agreement with the company that you are representing.

Categories of personal data

• Name
• Phone number
• Email address

Purpose

• To provide services and support, and to administer the agreement with the company that you are representing.
• To set-up user accounts and user roles.
• To send marketing to you, through email and/or SMS. You can opt-out from further marketing by clicking on a link in each message sent through e-mail and/or SMS, or by contacting us via the contact information set out below.
• To fulfil legal obligations (e.g. accounting requirements) and to report criminal activity.

Legal basis

• Legal obligation: To fulfil our legal obligations, e.g. accounting and tax legislation.
• Legitimate interest: To pursue a legitimate and compelling interest, e.g. to fulfil an agreement with our customers, to set up use accounts and roles and to communicate with you.

2.2 Website visits

Whenever you visit our website, we collect information that you choose to submit to us, e.g. name, e-mail address and phone number. We may also collect personal data through cookies. Klarq's use of cookies is described in our cookie policy.

Categories of personal data

• Contact information: name, phone number and email address.
• Surfing habits and visiting history: which pages you have visited on our (and others) website, and for how long.
• Demographic information: age, address, and education.
• Login credentials: e-mail address and password.
• Profiling- and movement patterns: choices and purchases made, number of clicks, location data, preferences, and profile.
• Technical data: technical equipment used, timestamps, metadata, cookie-ID and IP-address.

Purpose

• To maintain, provide, test and improve our website.
• To offer you support when facing a problem on our website.
• To send marketing to you, inter alia, through email and/or SMS. You can opt-out from further marketing by clicking on a link in each message sent through email and/or SMS, or by contacting us via the contact information set out below.
• To create reports, review the effect of marketing campaigns and create anonymized statistics regarding the usage of our website.
• For management, development and testing of our IT systems to ensure that our website uphold high quality, and to identify and prevent any attacks, with viruses or malware, and breaches.
• To provide relevant, personalized offerings and advertisements to you.

Legal basis

• Legitimate interest: we have a legitimate and compelling interest for processing your personal data, e.g. to provide you with marketing, to obtain anonymized statistics, and to and manage, develop, test and improve our IT system and services.

2.3 Contacting Customer Service

When you contact us, e.g. with queries to our customer service or when you otherwise interact with us, we process the personal data that you choose to submit to us.

Categories of personal data

• Contact information: name, phone number and email address.
• Customer service requests: information which you choose to submit to us, and information related to your inquiry.

Categories of personal data

• To communicate with you and administer your request.
• To analyze conversations to improve our communication, and for your and our security.
• To obtain anonymized statistics regarding the usage of Klarq's communication channels.
• To maintain, develop, test and improve Klarq's services and the technical platforms on which they are provided.

Legal basis

• Legitimate interest: we have a legitimate and compelling interest for processing your personal data, e.g. to provide you with marketing, to obtain anonymized statistics, and to and manage, develop, test and improve our IT system and services.

3. Personal Data Sharing

In connection with one or more of the purposes outlined in this privacy notice, Klarq may disclose your personal data to:

• Other entities within the Klarq group of companies.
• Third parties that provide services to us, such as system hosting, management, and support; data analysis; facilitation of advertisements; data backup; and data security and storage services.
• Other third parties as we believe necessary or appropriate under applicable law (such as, but not limited to a government order or a subpoena, which we will take steps to contest prior to disclosing), or if we believe in good faith that it is reasonably necessary (i) to respond to claims asserted against us or to comply with the legal process (for example, discovery requests, subpoenas or warrants); (ii) to enforce or administer our policies and agreements with users; (iii) for fraud prevention, risk assessment, investigation, customer support, product development and debugging purposes, including investigation of violation of our terms or agreements with others; or (iv) to protect our rights, property or safety, its users, business partners or members of the general public.

We also may sell, transfer or otherwise share some or all of its assets, including your personal data, in connection with a merger, acquisition, reorganization or sale of assets or in the event of bankruptcy. Under such circumstances, we will use commercially reasonable efforts to notify our users if their personal data is to be disclosed or transferred and/or becomes subject to a different privacy notice.

The disclosures described in this section may result in the transfer of your data to countries or regions with data protection laws that differ from those in your country of residence.

In cases where your data is transferred outside of your country of residence, we take steps to ensure that appropriate safeguards are in place to protect such data. If you are based in the EU/EEA, such safeguards may include a data transfer agreement with the data recipient based on standard contractual clauses or such other mechanism as is approved by the European Commission for transfers of personal data to third countries. For further details relating to the transfers described above and the adequate safeguards used with respect to such transfers, please contact us via the contact details below.

4. For how long do we process your personal data?

We will only process your personal data for as long as we need to fulfil the purpose the personal data was collected for or to fulfil legal obligations, such as storing specific information in accordance to bookkeeping or tax requirements.

5. How do we protect your personal data?

We take appropriate measures to ensure that your personal data is kept secure in accordance with industry best practices and applicable laws to protect data we collect from loss, alteration, destruction, misuse, and unauthorized access or disclosure.

To prevent unauthorized access, maintain data accuracy, and ensure the appropriate use of the personal data we collect, we have implemented physical, electronic, and administrative procedures. We utilize hashing and encryption techniques to help ensure your personal data is safeguarded.

We have policies to help maintain control and physical security of the facilities used to store data and only allow access to authorized personnel, restrict access to data to only those employees, contractors and agents that require it to provide and support our services. All our employees are bound by confidentiality obligations and may be subject to disciplinary or legal action if they fail to meet these responsibilities.

We process information in a way that is compatible with and relevant for the purpose for which it was collected. To the extent necessary for those purposes, we take reasonable steps to ensure that any information in our care is accurate, complete, current, and reliable for its intended use.

6. Third party websites

Our website may contain links to third-party owned and/or operated websites including, without limitation, websites owned and/or operated by third parties. We are not responsible for the privacy practices or the content of such websites. These third-party websites have separate privacy and data collection practices and we have no responsibility or liability relating to them.

7. Use by minors

Visitors under eighteen years of age are not permitted to use and/or submit their personal information into this website. If you become aware of someone sixteen years old or younger submitting information into this website, please contact us at [email protected] so we can take steps to investigate and remove their information.

8. Changes to this Privacy Policy

Klarq has the discretion to update this Privacy Policy at any time. We encourage you to frequently check this page for any changes to stay informed about how we process and protect your personal data. The date at the top of this Privacy Policy indicates when it was last updated.

9. Contact information

If you wish to get in touch with Klarq to exercise your rights, or if you have any questions or concerns about how we handle your personal data, you can reach us by email to [email protected]