Responsible data controller in the meaning of Art. 4 No. 7 GDPR is:

Rua Ricardo Severo, 3 - 5º A 4050-515 Porto, Portugal

You can contact the data protection officer via email at: [email protected]

During the course of carrying out our business and performing our services, 25Friday collects personal data to conduct our business, provide and market our services, and meet our legal obligations. Likewise, we may also collect personal data for other purposes, which we would describe in more detail to you at the point we collect the personal data.

You may refuse to provide us with some or all of your personal data; however, this may limit the ways in which we can interact with you, including providing you with our services.

We collect personal data through our internet access logs. When you access our website, your internet address is automatically collected and is placed in our internet access logs (i.e., log files on server). We also record the URLs of the websites and pages you visit, the times and dates of such visits, information about the computer hardware and software you use.

This information may include Internet protocol (IP) addresses, browser type and version, internet service provider (ISP), referring/exit pages, operating system, date/time stamp, and/or clickstream data, number of visits, websites from which you accessed our site (Referrer), and websites that are accessed by your system via our site.

The processing of this data is necessary for the provision and the security of our website. The legal basis for this processing is Art. 6(1)(f) GDPR. We do not link these data to certain individuals. After the processing for the mentioned purposes, the data will be deleted.

On our website we use several contact forms which can be used to get in contact with us electronically. To handle your request it is necessary to provide us with a valid email address, and, in addition, we store your IP address and the time of your request to prevent any misuse of our contact forms. Alternatively, you may contact us via the e-mail addresses cited above (Section 1). If you use one of these channels, the personal data transmitted will be stored automatically by 25Friday as data controller to handle our contact with you. The legal basis for this processing is Art. 6(1)(f) GDPR.

In some cases we may ask you for further information, such as name, occupation, address or telephone number. Regarding the processing of this personal data you will be asked to grant your explicit consent. The legal basis for this processing is Art. 6(1)(a) GDPR.

If you make use of our website to register for certain services or events, you will be asked to provide personal data. The information inserted in the respective registration form will be transmitted to 25Friday as data controller. The legal basis for the processing of data - which is necessary to provide you with the respective service - is Art. 6(1)(b) GDPR. Regarding the processing of further personal data you will be asked to grant your explicit consent, and the legal basis for that processing is Art. 6(1)(a) GDPR.

Our website offers the opportunity to apply for employment, either via a job advertisement published on our side, or as speculative application. If you make use of these possibilities by providing your personal data, including contact details, experiences, roles, etc. or provide (solicited or unsolicited) special categories of personal data (see Section 7), the information inserted in the application form or otherwise provided (e.g., by you including it in a resume) will be transmitted to 25Friday as data controller. With regard to the processing of this personal data you will be asked to grant your explicit consent. The legal basis for this processing is Art. 6(1)(a) GDPR. We store this personal data only for internal use to handle your application. We will delete your personal data on completion of the application process if further retention is not required for the establishment, exercise or defence of legal claims occurring out of the application process, or unless this personal data are required for the formation of or performance under a contract.

Please be aware that application forms will be provided and managed by Freshworks, Inc., 12950 S. Delaware Street, Suite 201, San Mateo, CA 94403, USA, www.freshworks.com as our service provider. The personal data you provide will thus be collected and stored on our behalf by Freshworks and shared with the respective 25Friday entity(ies) processing your application.

Any non EU/EEA transfer of your personal data in conjunction with the processing by 25Friday is covered by a Model Clause agreement for the transfer of personal data to third countries.

At your registration on the job application portal, your IP-address and date and time of your registration will be collected. This allows us to prevent misuse of our services. The legal basis for this processing is Art. 6(1)(f) GDPR.

Other than the information you provide when you apply for a job at 25Friday (see Section 6), we do not generally seek to collect special categories of personal data through this site.

"Special categories of personal data" includes the various categories of personal information and data identified by privacy laws of United States, European and other jurisdictions as requiring special treatment, including in some circumstances the need to obtain explicit consent. These categories may include personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, genetic data, biometric data, data concerning health or data concerning sexual orientation (Art. 9 GDPR).

Therefore, we advise you not to provide any unsolicited sensitive personal data. 25Friday applies HTTPS or other appropriate technical and organizational measures to secure the personal data transmitted over its website.

We may provide the opportunity to sign-up for a periodic email newsletter by entering in your email address and confirming it by clicking on a confirmation link sent to you by us by e-mail (double opt-in). The legal basis for this processing is Art. 6(1)(a) GDPR.

In some cases we may ask you for further information, such as name, occupation, address or telephone number. Regarding the processing of this personal data you will be asked to grant your explicit consent. The legal basis for this processing is Art. 6(1)(a) GDPR.

If you subscribe for our periodic email newsletter your IP address as well as data and time of subscription will be collected and stored at 25Friday as data controller. This allows us to prevent misuse of our services or of the e-mail address of the subscriber. The legal basis for this processing is Art. 6(1)(f) GDPR. This data is only used for the distribution of the newsletter. The subscription may be terminated by you at any time by following the unsubscribe instructions included in each newsletter. We will delete the relevant personal data promptly upon your unsubscribe instruction.

Our website may offer publicly accessible blogs. You should be aware that any information you provide in these areas may be read, collected and used by others who read them.

We display personal testimonials of satisfied customers on our site in addition to other endorsements. With your consent we may post your testimonial along with your name. The legal basis for this processing is Art. 6(1)(a) GDPR. If you wish to update or delete your testimonial, you can contact us at [email protected].

25Friday’s websites make use of cookies to save and retrieve information about your visit to our sites. Cookies are small files of software which save and retrieve information about your visit to a website or application. They reside in your internet browser to help remember your preferences and previous activity. You can find more information about cookies at www.allaboutcookies.org and www.youronlinechoices.eu.

Cookies currently used on our site identify you as an anonymized number. We and our partners (e.g., marketing partners, affiliates, or analytics providers) use cookies and log files to analyze trends, administer the website, track users movements around the website, and gather demographic information about our user base. We may receive anonymized reports based on the use of these technologies by our partners on an aggregated basis. We also use this data to provide the site’s content, ensure the functionality of our information technology systems, and to optimize our website. The legal basis for this processing is Art. 6(1)(f) GDPR. The data of log files will be stored separately from your other personal data.

Users can control and refuse the use of cookies at the individual browser level. Cookies installed can be deleted. If you have visited our website in the past and would like to make changes to your cookie preferences, please first clear the cookies from your browser and then update your cookie preferences. If you reject cookies, you may still use our website, but your ability to use some features or areas of our website may be limited. If you are accessing the website from the EU region you can change your cookie settings from here.

When you visit our website, the following categories of cookies will be set in your browser:

We will respect and protect your privacy as set out in this Privacy Policy. We will share your personal data with third parties only in the ways that are described in this Privacy Policy - and do not and will not sell your personal data.

25Friday shares your personal data with third parties, in particular non-25Friday parties, only with your express consent or under another lawful basis for processing under the applicable law.

Categories of non-25Friday parties with which we share your personal data include vendors such as host and cloud service providers, marketing and mailing agencies, and sub-contractors involved in the fulfillment of our contractual obligations towards our clients. The legal basis for this processing is Art. 6(1)(f) GDPR.

You can find 25Friday on the following social media:

These providers are controllers for the relevant data processing.

25Friday processes and stores your personal data only for the time necessary to achieve the stated purpose (unless otherwise stated in this Privacy Policy) and as permitted under the applicable laws or regulations.

As soon as the purpose for data storage is achieved, or the appropriate term of storage provided for by any applicable laws or regulations expires, your personal data will be deleted consistent with this and any other applicable 25Friday policies (e.g., document retention and/or records management policy) unless your personal data are required for the formation of or performance under a contract.

You have the following rights:

This Privacy Policy may be updated from time to time and will note the date of any updates. In the event of any material and significant changes we will endeavor to provide a more prominent notice of the changes to this Privacy Policy.