Únete a FlipShyft

Privacy Policy

At FlipShyft we value the privacy of our users. We do not sell your personal data. We process your personal data primarily to provide and improve our Services and may use your data for service-related communications and, where applicable, for marketing purposes in accordance with applicable law. This Privacy Policy explains:

a) Which personal data we (FlipShyft S.r.l.) collect and process;

b) How and why we collect and process your personal data;

c) The legal grounds for data processing;

d) What your rights are. 

Please carefully read this Privacy Policy. By accessing or using our Services you declare to have read, understood and accepted our Privacy Policy. If you do not agree with our Privacy Policy, please do not use our Services.    

1. WHAT ARE OUR SERVICES?

With ‘Service’ or ‘Services’ we refer to FlipShyft website and app, a digital platform designed to facilitate instant, algorithm-driven matching between information related to job opportunities and information related to job profiles, including matching functionalities based on our internal reliability score (a rating system that assigns a rating to users based on objective criteria related to their activity on the platform, as specified in paragraph 7.2) and functionalities supported by standardized occupational and skills classification systems such as ESCO (European Skills, Competences, Qualifications and Occupations).

If you are an Employer, this Privacy Policy applies to you except from paragraphs 7-8.

If you are a Worker, this Privacy Policy applies to you except from paragraphs 5-6.

If you are a guest user of our Service, exclusively paragraph 15 of this Privacy Policy applies to you.

2. WHO IS THE DATA CONTROLLER?            

The Data Controller is the subject that determines the purposes and means of the processing of personal data and that collects and processes personal data.

The Data Controller is FlipShyft S.r.l., with registered office at Via Giuseppe Ripamonti, 234/A, 20141, Milano (MI), Italy.

You can contact us at privacy@flipshyft.com

3. WHO IS THE DATA PROCESSOR?

The Data Processor is the subject that processes personal data on behalf of the Data Controller.

We reserve the right to appoint Data Processors at any time. You can check a list of our Data Processors on our website or app.

4. WHO IS THE DATA PROTECTION OFFICER?

The Data Protection Officer (DPO) oversees our compliance with applicable privacy and data protection laws. You may contact our DPO at any time for information related to our processing of your personal data at: dpo@flipshyft.com

5. WHICH PERSONAL DATA WE COLLECT AND PROCESS IF YOU ARE AN EMPLOYER?

If you are an Employer, we collect and process the following personal data.

5.1 Employer that is a natural person

We collect and process your full name, date of birth, residence address, fiscal code, VAT number, contact details (e-mail and telephone), business details and payment details.

5.2 Employer that is a legal person

If the Employer is a legal person (a company), its data are not protected by the GDPR (Regulation EU 2016/679), but we may collect and process data that refer to a natural person that is related to the Employer, for example the owner of the company and/or the person that uses our Service on behalf of the company and/or that is related to the company for purposes related to the Service.

We collect and process the following data of any natural person that uses our Service on behalf of an Employer and/or that is related to the company for purposes related to the Service: full name, date of birth, residence address, fiscal code, VAT number, contact details (e-mail and telephone), business details and payment details.

5.3 Note:

Please note that certain personal data provided by Workers may be made available to Employers for the purpose of job matching, and vice versa, in accordance with the functionalities of the Service.

6. WHY DO WE COLLECT AND PROCESS YOUR DATA IF YOU ARE AN EMPLOYER AND WHY IS IT POSSIBLE TO DO SO?

We collect and process your personal data exclusively for the following purposes.

7. WHICH PERSONAL DATA WE COLLECT AND PROCESS IF YOU ARE A WORKER?

7.1 Personal data

If you are a Worker, we collect and process your full name, date of birth, residence address, fiscal code, VAT number, contact details (e-mail and telephone), the details of your resume and any personal data related to your job profile that you voluntarily input in your account on the Service.

7.2 Your activity on the Service

We collect and process data related to your activity on the Service, including completed jobs, cancellations, and no-shows.

7.3 Sensitive data

Sensitive data are special categories of data revealing particular information about you, like religious belief, or information related to your health. It is not necessary to provide this type of data, but you may do so if you choose to specify them in your job profile.

7.4 Note:

Please note that certain personal data provided by Workers may be made available to Employers for the purpose of job matching, and vice versa, in accordance with the functionalities of the Service.

8. WHY DO WE COLLECT AND PROCESS YOUR DATA IF YOU ARE A WORKER AND WHY IS IT POSSIBLE TO DO SO?

8.1 Personal data

We collect and process your personal data exclusively for the following purposes.

The Service uses algorithmic and AI-based systems to analyze user-provided data and generate job matches. These systems assist in ranking and recommending opportunities but do not make fully automated decisions producing legal effects. Final decisions are always made by Users.

8.2 Your activity on the Service

8.3 Sensitive data

We collect and process your sensitive data exclusively for the following purpose and on the basis of your consent. You can express or deny your consent. You can revoke your consent at any time, without prejudice to the legitimacy of the data processing prior to the revocation of the consent.

9. HOW DO WE PROCESS YOUR DATA?

We process your data in compliance with the principles of lawfulness, fairness and transparency.

We take reasonable technical and organizational measures to prevent unauthorized access and unlawful use of your data. If you require more information on how we process your data, you may contact us at any time to the following email address: privacy@flipshyft.com

10. HOW LONG DO WE RETAIN YOUR DATA?

We retain personal data only for as long as necessary for the purposes for which they were collected, including to provide the Service, comply with legal and regulatory obligations, establish or defend legal claims, prevent fraud and misuse, and maintain the security and integrity of the Service.

Unless a longer retention period is required or permitted by applicable law, or retention is necessary in connection with an ongoing dispute, investigation or legal claim, the following retention periods apply:

• authentication sessions and tokens: for up to 30 days after expiry;
• login and IP records: for 12 months from the relevant event;
• notifications: for 12 months;
• rejected content and moderation records: for 12 months from the relevant moderation decision;
• platform and analytics events: for 24 months;
• messages between Employers and Workers: for 24 months from the end of the Shyft to which they relate. Where a dispute, investigation or legal claim is ongoing, the relevant retention period may be suspended until the matter is resolved;
• records relating to privacy and data-subject requests: for 5 years from completion or closure of the request;
• audit records relating to relevant platform actions: for 10 years, after which identifying information is removed or anonymized;
• accounting and payment records: for 10 years from the relevant transaction, or for a longer period where required by applicable law or in connection with an ongoing tax assessment, proceeding or legal obligation.

When an account is deleted, personal data associated with the account are deleted or anonymized in accordance with the applicable retention requirements. Certain information may be retained where necessary to comply with legal, accounting, security or compliance obligations.

In particular, audit records may be retained with the identity of the User removed or anonymized. Records relating to privacy and data-subject requests may also be retained as a minimized compliance record, while unnecessary personal data, including the requester’s free-text narrative, IP address and device information, are removed.

Accounting and payment records may survive account deletion to the extent necessary to comply with applicable accounting, tax and legal obligations.

Sensitive data, where voluntarily provided and processed on the basis of consent, are retained only for as long as necessary for the relevant purposes or until consent is withdrawn, unless continued retention is required or permitted by applicable law.

At the end of the applicable retention period, personal data are deleted or anonymized, as appropriate.

11. WHERE DO WE PROCESS YOUR DATA?

We process your data on servers located within the European Economic Area (EEA). Some of our service providers may process data outside the EEA in accordance with applicable data protection laws.

12. DO WE TRANSFER YOUR DATA TO NON-EU COUNTRIES?

Where personal data are transferred to countries outside the European Economic Area, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission or other lawful transfer mechanisms.

13. WHAT ARE YOUR RIGHTS IN RESPECT OF DATA PROCESSING?

With respect to the processing of your data, you have the following rights:

a) withdraw your consent (where applicable), without affecting the lawfulness of processing based on consent before its withdrawal, or object to the processing of your data;

b) access your data;

c) ask to rectify, complete or erase your data;

d) ask to restrict your data processing;

e) request data portability, where applicable;

f) complain to the Data Authority;

g) receive a notification in the case of data breach;

h) know the origin of data, the purposes and the modalities of processing, the logic involved in any automatic personal data processing, the identification data of the data controller and of the subjects to which the data may be communicated.

You may exercise your rights that require our involvement by writing to: privacy@flipshyft.com

14. WHO IS YOUR DATA SHARED WITH?

We may share your personal data with the following categories of recipients:

·      IT service providers (hosting, cloud infrastructure)

·      payment service providers, including Stripe, which we use to process payments made through the Service.

·      analytics providers

·      communication service providers (e-mail, messaging systems)

·      professional advisors (legal, accounting)

·      public authorities where required by law

All recipients process data in compliance with applicable data protection laws and, where required, under appropriate contractual safeguards.

15. USE OF COOKIES, TRACKING TECHNOLOGIES AND DEVICE DATA

15.1 Cookies 

We use cookies and similar tracking technologies to operate and improve the Service.

Cookies are small text files that are stored on your device when you visit our website or use our application. They allow us to recognize your device and store certain information about your preferences or past actions.

We use the following types of cookies:

a) Strictly necessary cookies 

These cookies are essential for the functioning of the Service, including user authentication, security, and access to core features. The Service cannot function properly without these cookies.

b) Functional cookies 

These cookies allow us to remember your preferences and improve your experience when using the Service.

c) Analytics cookies 

These cookies help us understand how Users interact with the Service, including information about pages visited, time spent on the platform, and other usage statistics. This information is used to improve the performance and functionality of the Service.

d) Marketing cookies 

Where applicable, these cookies may be used to deliver relevant advertisements and measure the effectiveness of advertising campaigns.

Non-essential cookies (such as analytics and marketing cookies) are used only with your consent, where required by applicable law.

You can manage your cookie preferences at any time through your browser settings or through the cookie banner displayed on the Service. 

15.2 Others

We collect basic device and usage data (like IP address, browser type) for technical, security, and analytics purposes. 

 16. CHANGES TO PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes to our Service, legal requirements, or data processing activities. In case of substantial changes, we will inform Users through the Service or through the contact information associated with their account.