Privacy Notice / Recruitment Process

1 WHO WE ARE AND HOW TO COMMUNICATE WITH OUR COMPANY

We are FASTPROBR SERVIÇOS DE INFORMÁTICA LTDA, a legal entity registered with the CNPJ under No. 30.726.774/0001-65, headquartered at Av. Doutor Romeu Tortima, nº 194 – CEP 13.084-791, Jardim Santa Genebra II (Barão Geraldo), in the city of Campinas/SP.

If you wish to communicate with us, please send an email to our Data Protection Officer, Ms. Karol Carbone at the email address: dpo@fastprobr.com.

2 WHAT PERSONAL DATA WE COLLECT, HOW WE COLLECT IT, AND FOR WHAT REASON

For the selection and recruitment process of FastProBR, personal data will be collected to get to know the CANDIDATE, and with the aim of managing the application process. The data provided is necessary to assess the skills and qualifications concerning the position to which the CANDIDATE applied. Personal data is also used to verify if the information provided is truthful.

The personal data collected includes:

IDENTIFICATION DATA:

    full name, CPF number, date of birth, RG number, among others related.

CONTACT DATA:

    email address, phone number, among others related.

ACADEMIC AND PROFESSIONAL HISTORY DATA:

    data on course history, events, certifications, previous experiences, and jobs, among others related.

HEALTH DATA (SENSITIVE DATA)

    • if the

CANDIDATE

    advances in the selection process and is asked to participate in the Palographic Test and/or Quati Test stage, some data related to their health and/or psychosocial characteristics will be collected and processed to analyze and obtain the results related to the test.

The data and information of CANDIDATES can be collected by FastProBR in the following ways:

DIRECT REFERRAL

    • The data and information of

CANDIDATES

    • can be collected through direct referral from internal service providers/collaborators or partner companies, at which time some personal data (those contained in the resume, for example) will be passed on to FastProBR. Furthermore, FastProBR may contact directly and request these and/or other information from these

CANDIDATES

    indicated.

EDUCATIONAL INSTITUTIONS:

    • The data and information of

CANDIDATES

    • at the internship and/or junior level can be provided by partner educational institutions with which FastProBR has an agreement, which carry out the pre-selection stages (initial information collection) and indicate some

CANDIDATES

    to FastProBR, at which time some personal data (those contained in the resume and prior registration with the educational institution) will be passed on to FastProBR.

RECRUITMENT THROUGH THIRD PARTIES:

    • All data and information of

CANDIDATES

    • will be collected and pre-analyzed by third-party companies (OPERATORS), specialized in providing recruitment services. These third-party companies will carry out the pre-selection stages (preliminary analysis of information and contact/initial information collection) and indicate some

CANDIDATES

    • to FastProBR, at which time some personal data (those contained in the resume and prior registration with the third-party company), referring only to the

CANDIDATES

    pre-selected in the first stage, will be passed on to FastProBR.

ADVERTISEMENTS ON THIRD-PARTY SITES:

    • FastProBR may also place advertisements on third-party sites related to job search/offers. All data sent by the

CANDIDATES

    • will undergo an internal analysis, where at the end of this, FastProBR may or may not contact directly and request more information from these

CANDIDATES

    .

2.1 About the Palographic Test and the Quati Test

Depending on the position to be filled, for those CANDIDATES (Holders) who were approved in the interview stage, a psychological test will be scheduled to verify, among other behavioral characteristics, the candidate’s level of extroversion, focus, and emotional balance.

Palographic Test
The Palographic test is conducted by competent professionals from a third-party company (Facce Nova Treinamento em Gestão de Pessoas). The third-party company declares that all information collected during the evaluation is confidential and respects the requirements contained in the LGPD and the Federal Council of Psychology.

Quati Test
The Quati test is conducted by the company Facce Nova. For the application of this test, Facce Nova uses the online platform of a third-party company (Vetor Editora Psico Pedagógica LTDA), and the data obtained is processed in accordance with the requirements contained in the LGPD, Vetor Editora’s Privacy Policy, and the Federal Council of Psychology.

It should be noted that the test is mandatory and has a disqualifying nature. Thus, the non-attendance of the CANDIDATE, or their refusal to take it, will be considered as withdrawal from the offered position. The data will be collected and processed by a third-party company, and FastProBR will only receive a copy of the result (conclusive report issued by the responsible third-party professional).

2.2 About Sensitive Personal Data Related to Image Captured by CCTV

Aiming to protect professionals/collaborators, visitors, and the property (material and immaterial) of FastProBR, there are video monitoring cameras located at strategic points of the company. During the selection process, CANDIDATES (Holders) may be invited to visit one of FastProBR’s units, in which case their image will be captured by the CCTV system installed at the unit visited by the CANDIDATE.

Campinas Unit (Barão Geraldo)
The installed equipment is managed by the company Verisure and automatically photographs upon detecting movements. The images are stored in an encrypted manner in Amazon’s cloud (AWS), configured to use servers in Brazil, for 90 days, being automatically deleted after this period. According to the LGPD, the image of a natural person can be considered sensitive data as it contains perceptible information regarding racial or ethnic origin and religious belief (for example, in the case of using characteristic symbols/clothing).

São Paulo Unit (Campo Belo)
The collected images are stored on local servers, without internet access. Storage is protected through the use of encryption, and images are accessed using login and password. Only the CEO and the administrative department manager have access to images, under the applicable Internal Policies. The images are programmed to be automatically deleted after a pre-programmed period.

3 HOW LONG WE KEEP PERSONAL DATA

Personal data will be processed during the selection process and after the process is completed. In the case of hiring, personal data will be stored for the entire duration of the contract and for the retention period defined by FastProBR to exercise its rights. In the case of non-hiring, personal data (provided in the resume and other completed stages) will be immediately deleted.

The CANDIDATE may revoke, at any time, the consent for the processing of personal data through the Consent Denial Form. The form can be requested by email to the DPO (dpo@fastprobr.com) and, after completion, sent to the same email address.

4 TRANSFERS TO THIRD PARTIES

During the processing of personal data, for the purposes indicated above, FastProBR may use third-party services, which may process the personal data of the CANDIDATE. More information about this type of transfer and the processing carried out can be obtained by contacting and requesting the Data Protection Officer (DPO).

Among other types of sharing, examples include: external accounting firm, external data storage processing system (“cloud services”), external legal consultancy, public bodies and authorities, among others.

When using third-party services, FastProBR will seek guarantees that the third party will provide adequate technical and organizational measures to protect personal data, as required by applicable law.

Finally, it is informed that, given the dynamics in the use of third-party services and systems, an updated list of this can be consulted with the HR Department (rh@fastprobr.com) or the DPO (dpo@fastprobr.com).

5 INTERNATIONAL DATA TRANSFER

Considering that the Company uses services from third-party companies of international origin, as well as the application of good technical practices aimed at preserving data backup copies in a physical territory different from that of the Company (outside Brazilian territory), it is informed that backup copies (personal data backup) may occur in countries other than Brazil, through the contracted systems. Furthermore, FastProBR’s business processes may go beyond Brazilian territory. This internationalization requires not only the availability of communications and information systems throughout the Company but also the processing of information abroad. Consequently, the CANDIDATE‘s data may be subject to international data transfers, where third-party companies operate, under the terms of article 33 of Law 13.709/2018 – LGPD. The CANDIDATE can request more information regarding International Data Transfer from the Data Protection Officer (DPO).

6 WHAT ARE YOUR RIGHTS REGARDING THE COLLECTED PERSONAL DATA?

Under art. 18 of Law No. 13.709/2018, the CANDIDATE, regarding any Personal Data provided, may exercise their rights (which can be exercised when the LGPD comes into force):
I – Confirmation of the existence of processing;
II – Access to data;
III – Correction of incomplete, inaccurate, or outdated data;
IV – Anonymization, blocking, or elimination of unnecessary, excessive, or non-compliant data with the provisions of this Law;
V – Data portability to another service or product provider, upon express request, in accordance with the regulation of the national authority, observing commercial and industrial secrets;
VI – Elimination of personal data processed with the consent of the holder, except in the cases provided for in art. 16 of this Law;
VII – information on public and private entities with which the controller has shared data use;
VIII – information on the possibility of not providing consent and the consequences of refusal;
IX – Revocation of consent, under the terms of § 5 of art. 8 of this Law.
Furthermore, if the Company does not comply with the request, the personal data holder has the right to petition regarding their data against the controller before the national authority, by accessing and filling out a specific form on the ANPD website, and in accordance with the rules presented there. For more information, visit: https://www.gov.br/anpd/pt-br/canais_atendimento/cidadao-titular-de-dados/peticao-de-titular-contra-controlador-de-dados.

7 AWARENESS AND CONSENT

The CANDIDATE declares that they are aware and agree with the provisions of this document, which they had access to during the selection process. Furthermore, when applicable, they declare to be aware that other privacy policies may apply, given the participation of third-party companies during this process.

Consent – Sensitive Personal Data
In addition to the above, and to comply with the provisions of art. 11 and following of the LGPD, it is informed that whenever there is a need or submission of sensitive data, the CANDIDATE is aware that the provision and processing will be for the purposes requested by them. It is highlighted that, under the LGPD, Sensitive Personal Data is considered: “personal data about racial or ethnic origin, religious belief, political opinion, union membership or membership in a religious, philosophical, or political organization, data concerning health or sexual life, genetic or biometric data, when linked to a natural person.”

8 FINAL PROVISIONS

This “Privacy Notice” may be reviewed and/or updated at any time. This document will always be available for consultation and can be requested at the email address of the Data Protection Officer (DPO), dpo@fastprobr.com. We reserve the right to promote improvements and updates that may change its structure or layout, according to our convenience and need. If any provision of this document is deemed unenforceable or invalid, that provision will be invalidated separately and will not affect the remaining provisions contained herein. Furthermore, it is informed that situations not provided for in this document are subject to analysis and deliberation by the team responsible for this company, upon request. In case of doubts, suggestions, and/or any other type of contact regarding this document, the CANDIDATE should send a message to our Data Protection Officer (DPO), Ms. Karol Carbone, at the email address: dpo@fastprobr.com.

Last update: June 19, 2023