Gupy has a strong commitment to privacy and the protection of your personal data. Therefore, we present this Privacy Notice, which contains all the necessary information about when and for what purposes Gupy processes your personal data when you use Gupy Recruitment and Selection and/or Gupy Hiring as a company user.
Your data is always collected in accordance with this Privacy Notice and in compliance with relevant data protection laws, especially LGPD.
Talent Pool: a location where information about candidate individuals who have previously applied for positions at the Company and/or have been invited by the Company to join their respective Talent Pool is stored;
Controller: a natural or legal person, public or private, who is responsible for decisions regarding the processing of personal data. In Gupy Recruitment and Selection, both the Company and Gupy predominantly fall under the category of Controllers in relation to Candidate data. Regarding company user data, Gupy acts as an Operator while the Company acts as a Controller;
Talent CRM: also known as Candidate Relationship Management, it is a paid module of Gupy Recruitment and Selection for Client Companies seeking to add talents (potential candidates) to the pool to develop a relationship to accelerate their arrival to a position.
Data: Personal Data and/or Sensitive Data;
Personal Data: information related to an identified or identifiable natural person – does not apply to data from legal persons;
Sensitive Personal Data: Personal Data about racial or ethnic origin, religious belief, political opinion, membership in a union or organization of a religious, philosophical, or political nature, Data relating to health or sex life, genetic or biometric data, when linked to a natural person;
Company: a company that contracts the services offered by Gupy, especially the services related to Gupy Recruitment and Selection and Gupy Hiring;
Data Protection Officer (DPO): a person appointed by the controller and processor to act as a communication channel between the controller, data subjects, and the National Data Protection Authority (ANPD);
Gupy: refers to the company GUPY TECNOLOGIA EM RECRUTAMENTO LTDA, registered under CNPJ number 23.514.668/0001-52, headquartered at Avenida Paulista, 1079, Bela Vista, in the City of São Paulo, State of São Paulo, ZIP code 01.311-200. Manager of Gupy Recruitment and Selection and Gupy Hiring;
Gupy Admission: refers to Gupy's Hiring Platform, which allows companies to expedite and automate the process of hiring new employees, offering solutions such as automatic document validation, electronic signature, communication with pre-employees, and customization of the hiring process;
Gupy Recruitment and Selection: refers to Gupy's Recruitment and Selection Platform, a tool used by Client Companies to manage their Selection Processes;
Artificial Intelligence: a computational system capable of learning and performing tasks that normally require human intelligence;
LGPD: General Data Protection Law - Law No. 13,709, of August 14, 2018;
Operator: a natural or legal person, public or private, who performs the processing of Personal Data on behalf of the controller. Gupy falls under the category of Operator in activities related to the processing of User company Data in Gupy Recruitment and Selection and Gupy Hiring;
Candidate Individuals: individuals who apply and are interested in occupying a specific position or role through selection processes for Company vacancies;
Selection Processes: a set of techniques that assist in choosing the most suitable candidates for a specific job opening. Through it, it is possible to identify skills and competencies and verify which profiles have the greatest compatibility with the position and the company's culture;
Suboperator: has a direct relationship with the Operator and is hired to assist in the execution of activities related to the processing of Personal Data on behalf of the Controller;
Company User: Employee of the Company who uses Gupy Recruitment and Selection for selection processes and/or Gupy Hiring for hiring processes.
Gupy is the owner of Gupy Recruitment and Selection and Gupy Admissions and acts as an Operator when processing personal data of Company Users. For this reason, we recommend that you also consult the Privacy Notice of the company where you work, the Personal Data Controller.
Name: Renata Benjamin
E-mail: privacidade@gupy.com.br
Gupy processes your data on behalf of the Company to enable the use of Gupy Recruitment and Selection and Gupy Admissions, according to the permissions granted to us. We take your privacy very seriously and will never sell your data. We emphasize that we will not use your data for purposes other than those indicated below without your authorization.
| Type of Data | Purposes | How Data is collected |
|
Identification Data: |
|
Entered by you, through your own submission or by the Company in Gupy Recruitment and Selection and/or Gupy Admissions. Data provided by the Company will be its responsibility and you must request any changes to the account administrator. |
| Optional Data: Area, position, and branch; interests on the Platform; role on the Platform. |
|
Entered by you, through your own submission or by the Company in Gupy Recruitment and Selection and Gupy Admissions. |
| Test Results | You may be invited to take tests to help us determine the Company's profile. | Entered by you, through your own submission. |
| Navigation Data: Information about your device, records of access to the internet application (such as IP, date and time), usage time of Gupy Recruitment and Selection and Gupy Admissions, duration of access, clicks, and searched terms. | Monitor the functioning of Gupy Admissions and Gupy Recruitment and Selection, carry out analyzes for improvements, operationalize new products and services, and fulfill legal and administrative obligations. | Automatically through cookies and other similar technologies, during your navigation on Gupy Recruitment and Selection and Gupy Admissions. To learn more, see our Cookie Notice. |
Your Data will be shared (and only if strictly necessary) with some service providers we hire to help us carry out our activities, namely:
| Provider | Provided Service |
| Amazon Web Services | Cloud storage and data processing |
| Primeira Escolha | Test provision |
| MailGun | Email delivery |
| Zendesk | Support channel |
| Metabase | Analysis of company user behavior |
| Sentry | Application monitoring |
| New Relic | Application monitoring |
| Google Analytics | Use of navigation data for analysis |
| Hotjar | Product surveys |
Those providers have been carefully selected, have strict confidentiality agreements, and obligations related to the protection of your data, and may only process them for the purposes of providing the service contracted by the Company through Gupy.
Other specific legal demands may lead to the sharing of personal data, including for eventual defense of our rights and interests in any kind of conflicts or to comply with determinations of competent authorities.
We may transfer your personal data outside Brazil, specifically to the United States or countries in the European Union, if the Company or any of the Suboperator companies have servers in these countries.
We observe all the guidelines established by current legislation and adopt the best security and privacy practices to ensure the integrity, confidentiality, availability, and privacy of your personal data throughout the process. Our relationships with such companies are governed by contracts that include obligations of data protection and information security appropriate to the nature of the personal data processing we carry out and compatible with the requirements of Brazilian legislation.
We care deeply about the privacy and protection of your personal data, so we adopt technical, administrative, and organizational security measures and best practices to protect our systems and databases, using the best technologies available in the market - including the use of antivirus, data encryption, anonymization of personal data, access control, use of firewalls, implementation of information security policy, software solution architecture with intrusion prevention, and use of HTTPS, institutional measures (Privacy and Data Protection Governance Program), training and awareness of employees, protection against unauthorized access, among others.
However, despite our efforts, considering the nature and architecture of the internet (which includes elements that are not under our control), it is impossible to guarantee that malicious actors will not be able to access or misuse personal data, as it is an inherent risk in the use of computer systems.
Your data is stored in the cloud by the Amazon Web Services company, whose server is located in the state of Virginia, United States.
We store your personal data only for as long as necessary to achieve the purposes for which they were collected, in accordance with the instructions of the Client Company. Your personal data will be kept only while:
(i) you are indicated by the Company as a User-company of Gupy Recruitment and Selection and/or Gupy Admissions and;
(ii) Gupy and the Company have an ongoing commercial relationship. Once these conditions cease to exist, your data will be deleted, with only those necessary for defense in a judicial or administrative process or for the regular exercise of rights being retained.
During the process of posting a new job opening, the recruiter establishes various essential and desirable requirements, such as education, experience, field of work, whether the position is on-site or remote, among others.
Analyzing these requirements, the profile of the Client Company, the resume, and other information provided by the candidate (in their profile and during registration for that specific process), Gupy's artificial intelligence presents to the recruiter the candidates who have applied for that position, organizing them based on the affinity that these criteria have among themselves, in order to give more opportunity to the most compatible candidates with the position.
This organization of candidates is not static and changes during the selection process, according to new applications or withdrawals and, especially, with the interaction of the recruiter regarding the resumes, which provides the Artificial Intelligence with more information about the company's preferences.
It is worth noting that Artificial Intelligence does not eliminate any analyzed resume, nor makes approval or rejection decisions about them. Any decision made during the selection process is made directly by the recruiter and/or the manager responsible for the position.
In addition to this support to the recruiter in the resume screening stage, AI also evaluates the candidates registered in a company's talent pool and, for each available position, makes recommendations of the candidates with the highest adherence to the position. Such recommendations serve only as a suggestion to the recruiter, and the decision to include or not include a candidate in a particular selection process is the responsibility of the professional conducting the recruitment.
In Gupy Admissions, Artificial Intelligence is used for validation and verification of attached admission documents.
Gupy AI only analyzes the resume information of the candidates and analyzes the job information to verify, based on such data, how compatible a candidate is with a particular position - presenting this result to the recruiter in the form of resume sorting.
Sensitive data and/or information about gender, sexual orientation, age, race, and ethnicity are not read (in fact, gender textual markers are excluded to avoid any bias in this regard). For example, if the candidate indicates that their current job title is "lawyer," the AI will only read "law," making it impossible for it to identify the gender.
Attention! Gupy AI does not read Identification Data or Diversity Data, nor does it use them for learning or improvement.
ID, Proof of Residence, Work Card (CTPS), Driver's License (CNH), Voter's ID, Reserve Certificate, Bank details, National Health Card (CNS), NIS (PIS, PASEP or NIT), CPF (Brazilian Taxpayer Registry), Occupational Health Certificate (ASO), among others that may be included as standard documents, according to the extensive need of the Company.
Such data is read by Artificial Intelligence solely for the purpose of verifying compatibility between the information contained in the attached documents and the information filled out by the pre-employee.
Gupy AI operates in a specific and punctual manner in its activities and will never:
i) Eliminate, approve, or move a candidate in the selection process. No decision is made by AI in screening candidates. Decisions related to this stage of the selection process are made by the recruiter, who has the support of information provided by Artificial Intelligence but is free at all times to ignore them and follow their own criteria. It is the recruiter who decides who will proceed to the next stages, who will be interviewed, and who will be hired or not;
ii) Analyze behavioral profiles;
iii) Correct tests performed by you - the scores assigned to various tests are considered by Artificial Intelligence, but the relevance of such scores in sorting applications depends on the client company's previous behavior in analyzing the results of previous tests. Gupy AI does not analyze behavioral profile tests, tests of behavioral factor indicators, and the Integrity indicator;
iv) Send automatic messages about the outcome of the selection process. Feedback on processes is provided by the Client Company.
To learn more about how Gupy AI works in the selection processes, consult our Official Positioning by clicking here.
You can exercise your rights provided for in the LGPD, such as confirmation of treatment existence, right of access, correction of incomplete, inaccurate, or outdated Data, portability right, consent revocation, opposition right, or request for account deletion or your Data, through direct contact with your Company.
However, if that is not the case and you encounter usability issues with Gupy Recruitment and Selection or Gupy Admissions, you should contact us via support using this link: https://support-companies.gupy.io/hc/pt-br
Gupy provides an exclusive channel for privacy and Data protection-related matters for Companies to contact our Data Protection department via email: privacidade@gupy.com.br.
Gupy Recruitment and Selection and Gupy Admissions are compliant and follow the guidelines established by LGPD. Companies choosing to use them outside Brazil should be aware that they may be subject to other legislations, in addition to LGPD, without Gupy's interference.
This Privacy Notice may undergo updates. Therefore, we recommend visiting this page periodically to stay informed about any modifications. If significant changes requiring new authorizations from your side are made, you will be notified through Gupy Recruitment and Selection and Gupy Admissions.
25/03/2024 - Updated Version
07/12/2022 - Privacy Notice - 2nd version
24/08/2020 - Privacy Notice - 1st version