Cyber Security & Data Specialist
Hamad is an MSc Cybersecurity & AI graduate with hands-on experience from IT Audit experience at KPMG. He specializes in ITGC and ITAC testing, risk assessments, SOC report reviews, and data analysis, supporting audits across banking, oil & gas, retail, and telecommunications with a strong focus on governance and compliance.
PRIVACY POLICY
The Spreadhire Portal (“Portal,” “we,” “us,” “our,” or “Spreadhire”) is an online platform operated by Spreadhire S.R.L., providing a centralized, secure, and user-friendly environment for managing recruitments and facilitating talent mobility opportunities (the “Service”). Through the Portal, we connect users, including candidates and employers, through referral partners, and consultants (“Users”), to deliver an efficient, streamlined, and secure Service experience. The Service enables the movement of candidates or employees across roles, locations, and organizations to meet staffing needs, support skill development, and match individuals with suitable opportunities. Personal Data (as defined herein) may be collected directly from candidates or indirectly via referral partners or consultants and is subsequently verified by the relevant candidate or employer.
We respect your privacy and the trust you place in us. This Privacy Policy (“Privacy Policy”) explains how and why we collect, use, store, and share Personal Data through the Portal and the Service, and outlines your rights in relation to your Personal Data. By accessing or using the Portal or Service, you acknowledge and agree to this Privacy Policy and provide your revocable consent for the processing of Personal Data for Service-related purposes, in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
This Privacy Policy explains:
We have endeavored to present this information as clearly as possible. However, if you are unfamiliar with terms such as “cookies,” “IP addresses,” “pixel tags,” or “browsers,” we recommend reviewing these concepts before proceeding. Protecting your privacy is important to us, and we encourage you to familiarize yourself with our practices. Should you have any questions or require further clarification, please contact us at info@spreadhire.com.
“Personal Information” or “Personal Data” refers to any information that directly or indirectly identifies, relates to, describes, or is reasonably capable of being associated with a specific User. Your use of our Service is subject to this Privacy Policy, which governs any disputes related to privacy and data protection.
To provide the best experience to you, we collect and store Personal Data provided by you from time to time on the Portal. When you contact us, we keep a record of your communication to help address any questions or issues you may have while using the Portal. The Personal Data that we may collect about you broadly falls into the following categories:
When you interact with the Portal or Service, we may collect contact details and unique identifiers, including your name, email, phone number, date of birth, and other personal information.
To enhance your experience on the Portal and facilitate recruitment or talent mobility, we may gather specific information and content from you, including:
When you engage with the Portal, certain information may be automatically collected, including details such as:
We use technologies such as “Cookies,” as described below, to collect this data. The information gathered is utilized to support internal operations, conduct research and analysis, and generate aggregated reports for our internal use.
We may receive personal information about you from third-party sources to support recruitment, talent mobility, and verification processes, including:
All third-party data is collected, processed, and stored in compliance with applicable data protection laws.
Any information submitted by referral partners or consultants is verified by the relevant User (candidate or employer) before it is used for Service-related purposes.
Spreadhire may disclose your Personal Data for specific purposes and to authorized third parties, as outlined below:
Spreadhire collects and processes Personal Data only where there is a valid legal basis under applicable data protection laws, including the GDPR. Depending on the context, this may include your consent, the performance of a contract, compliance with legal obligations, or our legitimate interests, provided such interests are not overridden by your rights and freedoms.
We collect and process Personal Data for the following purposes:
Where we rely on legitimate interests, such interests typically include operating and improving the Portal, managing relationships with Users, ensuring data accuracy, maintaining security, responding to User inquiries, and enhancing Service outcomes. These interests are carefully balanced against your rights and expectations.
Spreadhire may also use Personal Data in an aggregated or anonymized form, such that it can no longer be linked to an identifiable individual. Such anonymized data may be used for statistical analysis, reporting, research, and service optimization, and we do not attempt to re-identify individuals from such data.
Under the GDPR and other applicable data protection laws, you have the following rights in relation to your Personal Data processed through the Spreadhire Portal and Service:
To exercise any of the above rights, or if you have questions regarding the processing of your Personal Data, please contact us at info@spreadhire.com. We will respond to your request within the timeframes required under applicable data protection laws.
We retain Personal Data only for as long as necessary to fulfill the purposes for which it was collected, including the provision of Service, maintaining user accounts, facilitating current or future opportunities, complying with legal and regulatory obligations, and resolving disputes. Retention periods may vary depending on the nature of the data, the role of the User (candidate, employer, referral partner, or consultant), and applicable legal requirements, but, in any case, Personal Data will not be retained for more than two (2) years [AT2] unless a longer period is required or permitted by law.
Personal Data relating to candidates and employers may be retained beyond a specific recruitment process to enable consideration for future roles or talent mobility opportunities, unless the relevant User requests deletion or withdraws consent where applicable. Where retention is required by law (for example, for compliance, audit, or record-keeping purposes), such data will be retained in accordance with applicable statutory retention periods.
Where we no longer have a legitimate business or legal need to process Personal Data, we will securely delete or irreversibly anonymize it. If immediate deletion is not technically feasible (for example, where data is stored in secure backup systems), the data will be isolated from active processing and securely retained only for as long as necessary until deletion can be completed.
We implement appropriate technical and organizational measures to protect Personal Data against unauthorized access, loss, misuse, alteration, or disclosure. These measures include encryption, pseudonymization where appropriate, access controls, role-based permissions, and regular security assessments. In the event of a Personal Data breach that is likely to result in a risk to the rights and freedoms of Users, we will notify affected Users and the relevant supervisory authorities without undue delay, in accordance with applicable data protection laws.
You may request the deletion of your Personal Data or withdraw your consent to processing at any time, subject to legal or contractual limitations. Please note that deleting or withdrawing consent for certain Personal Data may limit or prevent our ability to provide some or all aspects of the Service, including consideration for recruitment or talent mobility opportunities.
The Spreadhire Portal and its Services are not intended for Users under the age of 14. If a User is under 14, a parent or legal guardian must provide verifiable consent for the minor to use the Portal and access the Services. By granting such consent, the parent or guardian acknowledges and accepts responsibility for the minor’s use of the Portal, including the collection, processing, and storage of any Personal Data in accordance with this Privacy Policy.
Parents or guardians may contact us at info@spreadhire.com to review, correct, or request deletion of their minor’s Personal Data or to withdraw consent at any time.
Spreadhire is committed to protecting the Personal Data of all Users of the Portal in compliance with the GDPR and other applicable data protection laws.
Our data protection measures include:
When Personal Data is shared with third parties, such as Service Providers or verification partners, they are required to maintain equivalent data protection standards and are held accountable under the same obligations as Spreadhire.
This section explains how we use cookies and similar technologies to recognize you when you use the Spreadhire Portal and access our Services.
Cookies are small text files placed on your browser or device that help identify it when you return to the Portal. These cookies allow the Portal to recognize your device, remember your preferences, and provide a seamless user experience.
We use first- and third-party cookies for several purposes:
Some cookies may come from external services or social media platforms if you register using a social account, share Portal content, or access embedded media. These platforms have their own privacy policies governing the use of the data they collect.
You can manage cookies through your browser settings, including:
Please note that disabling cookies or similar technologies may limit your ability to access certain features of the Portal or receive a personalized talent mobility and recruitment experience.
Spreadhire may update this Privacy Policy from time to time to reflect changes in legal requirements, business practices, or technological developments. When updates are made, we will take appropriate steps to inform Users, depending on the significance of the changes.
If required by applicable data protection laws, we will obtain your consent before implementing any material changes that affect how your Personal Data is collected, processed, or shared.
All updates will be posted on the Spreadhire Portal, and once posted, the revised Privacy Policy will take effect immediately. You can always check the “last updated” date displayed at the top of this Privacy Policy to see when it was most recently amended.
[AT1]@Spreadhire Please confirm the data that the Portal will collect from Users (candidates, employers, consultants, or referrers) directly. If there are any additional data points not listed, kindly include them as well.
[AT2]@Spreadhire Please confirm.
