Privacy Notice for those in the EU or the UK
At Harri, we respect your privacy, and we understand the importance of the information you entrust to us. This Privacy Notice tells you how Harri uses your data when you visit our website, create a Harri profile or contact us about our platform.
OUR CONTACT DETAILS
Harri US LLC
665 Broadway
Suite 402
New York
NY 10013
844-427-7443
You can contact Harri at DPO@harri.com. The address of the DPO is Threeways House, 40-44 Clipstone Street, London W1W 5DW, United Kingdom.
1. PERSONAL DATA THAT WE COLLECT, OUR LEGAL BASIS AND RETENTION PERIODS
REQUEST A DEMO
If you contact our customer support team to request a demo, we will collect and use your name, email address, phone number, job title, the name of the company that you work for and the solution that you are interested in.
Legal basis: our legal basis for processing your data is consent, as you choose to send us a message.
Data retention period: we keep your data for 120 days in our ticket system and then archive it.
CHATBOT
If you use our chatbot, we will collect and use the information that you provide to us.
We will only collect your IP address, location and any device identifiers if you consent to our use of cookies. If you don’t consent to our use of cookies, then we won’t collect this data.
Legal basis: our legal basis is your consent, both for using the chatbot and agreeing to our cookies.
Data retention period: we will keep this information for 120 days in our systems and then archive it.
HARRI PROFILE – JOB APPLICANTS
If you wish to apply for a job on our website, then you will need to create a Harri profile and enter your personal data. You use your Harri profile to apply for jobs for companies that use Harri.
In order to create a Harri profile, we need your:
- name
- email address
- phone number
- employment details (employer, position, duties, dates)
- education (institution, location, qualification, dates)
You can also add a description of yourself and your references, if you want to.
You can also upload your CV and a photograph of yourself, if you want to.
You can be included in our Talent Community, if you want to. Being part of our Talent Community allows us to send you jobs that you might be interested in, and it also makes your profile searchable and contactable by employers who can invite you to apply for positions.
Using your Harri profile to apply for a job
If you apply for a job or become an employee of one of our client companies, then that company is the controller for your data. We are not the controller for data that is created or processed by any employer; we are the processor for that data.
When you apply for a job, the employer becomes the controller for any of your personal data that they use or create during the employment process. Please read the Privacy Notice of each employer to see how they will handle your personal data. As the controller for the recruitment/ employment process, the employer will have access to your application and will be able to use it to assess your suitability as a candidate with them. For example, the employer can use Harri to schedule interviews, make recruitment notes and to ask you specific questions during the recruitment process. If you are hired by an employer, they may use Harri to manage their workforce. Please see your employer’s privacy notice for more information about how they do this. One feature of Harri that your employer may use is called ‘Social Referral’. ‘Social Referral’ allows your employer to send you job vacancies which you can then post on your own social media pages, if you wish to. If you would like to unsubscribe from ‘Social Referral’ communications, please contact your employer. Harri cannot unsubscribe you.
If you would like your data deleted, then you will need to ask the company. Harri is a software platform and we can’t delete any data entered into the platform by one of our client companies.
We can only delete your Harri profile if it isn’t being used by a current or former employer or a company that you have applied for a job with. If a company has used your profile, then we can hide it for you.
Legal basis:
We need a legal basis in order to process your personal data. Creating a Harri profile is entirely your choice, so our legal basis for its processing is with your consent. You can put in as much or as little information as you like. You can withdraw your consent at any time by requesting that your profile be deleted. If you have applied for a job, we will pass your deletion request over to the employers. They will then handle your request. We can only hide your Harri profile if you have used it to apply for a job or jobs.
Data retention period: we retain your Harri profile until you tell us that you would like it deleted. If your profile isn’t being used by a current or former employer, then we can delete it. If you have used your profile to apply for a job or have obtained a job, then we will pass your request onto that company.
WEBSITE VISITORS
We only collect and process information about our website visitors when they consent to our use of cookies. If you consent, then we will record your computer’s IP address, unique mobile device identifier, browser type, ISP or carrier name, and the URL of the last webpage you visited before visiting our website. This information gives us insights on how our users use our site and our services. We use this information to ensure that our service continues to appeal to our users and to monitor overall usage trends, metrics, page views, etc.
MARKETING
We send marketing emails to work email addresses of people in organisations that would be interested in using our platform. Our legal basis for this is legitimate interest as these are work emails and the context is business to business. We don’t send marketing emails to individuals who have a Harri profile.
We always have an unsubscribe link and you are free to unsubscribe at anytime. If you do unsubscribe, we will hold your email address in a suppression list so that we don’t email you again in error. This will be for five years and having a suppression list is a legitimate interest.
SOCIAL MEDIA
You can choose to interact with our social media pages. If you do so, then we will collect and process the information that you have provided. All of our social media pages are public so any information that you provide will be publicly available and can be seen by many people.
We don’t have any control over how the social media platforms use your data so please read their Privacy Notices.
Legal basis: you provide information on our pages with your consent.
2. WHO WE SHARE YOUR DATA WITH
Service or product providers:
We will share your personal data with organisations that perform services or functions on our behalf, including cloud storage and web hosting providers, email service providers, and software maintenance service providers. We must necessarily share your information with these organisations for them to perform their functions.
Legal basis: legitimate interest
Law enforcement, courts or regulators:
If requested or required by law enforcement authorities, courts, or regulators, we may disclose any information we have collected from you.
Legal basis: legal obligation or the legitimate interests of a third party
Legal claims:
We also may disclose your information to exercise or protect our legal rights or to defend against legal claims.
Legal basis: legitimate interest
Corporate reorganisation or sale:
In a business transfer, customer information is typically one of the business assets that are transferred. Moreover, if all or substantially all of our business assets were acquired, or in the unlikely event that we go out of business or enter into bankruptcy, customer information would be one of the assets that is transferred or acquired by a third party.
Legal basis: legitimate interest.
3. INTERNATIONAL TRANSFERS
We share your personal data between our offices in the USA, UK, Palestine and India in order to provide the software service and for administrative reasons. The USA, Palestine and India are non-adequate countries for data transfers and we use the UK’s International Data Transfer Agreement (IDTA) as our transfer safeguard.
Legal basis: we share your data between our entities using the legal basis of legitimate interest as the sharing is for administrative and business purposes.
4. AUTOMATED DECISION MAKING
Harri does not use any automated decision making.
However, an employer might use automated decision-making in their recruitment questions. Please read their Privacy Notice for more information on their recruitment process.
5. SECURITY OF PERSONAL DATA
The security of your personal data is important to us and we strive to implement and maintain reasonable, commercially acceptable security procedures and practices appropriate to the nature of the information we store, in order to protect it from unauthorized access, destruction, use, modification, or disclosure.
6. DATA OF CHILDREN
We will only collect the information of people who are aged 14 and older. If we learn that we have collected the information of someone who is under the age of 14, we will delete that data. Please contact our DPO if you think that we have the data of someone who is under the age of 14.
7. YOUR RIGHTS
You have the following rights in relation to the personal data we hold about you:
- Your right of access
If you ask us, we’ll confirm whether we’re processing your personal data and, if necessary, provide you with a copy of that personal data (along with certain other details). If you require additional copies, we may need to charge a reasonable fee.
- Your right to rectification
If the personal data we hold about you is inaccurate or incomplete, you are entitled to request to have it rectified. If you are entitled to rectification and if we’ve shared your personal data with others, we’ll let them know about the rectification where possible. If you ask us, where possible and lawful to do so, we’ll also tell you who we’ve shared your personal data with so that you can contact them directly.
- Your right to erasure
You can ask us to delete or remove your personal data in some circumstances such as where we no longer need it or if you withdraw your consent (where applicable). If you are entitled to erasure and if we’ve shared your personal data with others, we’ll let them know about the erasure where possible. If you ask us, where it is possible and lawful for us to do so, we’ll also tell you who we’ve shared your personal data with so that you can contact them directly.
- Your right to restrict processing
You can ask us to ‘block’ or suppress the processing of your personal data in certain circumstances, such as where you contest the accuracy of that personal data or you object to us. If you are entitled to restriction and if we’ve shared your personal data with others, we’ll let them know about the restriction where it is possible for us to do so. If you ask us, where it is possible and lawful for us to do so, we’ll also tell you who we’ve shared your personal data with so that you can contact them directly.
- Your right to data portability
You have the right, in certain circumstances, to obtain personal data you’ve provided us with (in a structured, commonly used and machine readable format) and to reuse it elsewhere or to ask us to transfer this to a third party of your choice.
- Your right to object
You can ask us to stop processing your personal data, and we will do so, if we are:
o relying on our own or someone else’s legitimate interests to process your personal data, except if we can demonstrate compelling legal grounds for the processing; or
o processing your personal data for direct marketing purposes.
- Your right to withdraw consent
If we rely on your consent as our legal basis for processing your personal data, you have the right to withdraw that consent at any time.
- Your right to lodge a complaint with the Information Commissioner’s Office in the UK or the Supervisory Authority in your country
If you have a concern about any aspect of our privacy practices, including the way we’ve handled your personal data, you can report it to the ICO or another Supervisory Authority. We would, however, appreciate the chance to deal with your concerns before you approach the ICO or another Supervisory Authority so please contact us in the first instance.
Please note that some of these rights may be limited where we have an overriding interest or legal obligation to continue to process the data or where data may be exempt from disclosure due.
The ICO can be contacted at:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 0303 123 1113
Fax: 01625 524510
