Privacy policy.

At Otta, we are concerned about your privacy. We have developed this policy to inform you about what, who and why we collect and process your personal data, how we protect them and how you can contact us.

In this regard, this document sets out the privacy policy of the website (hereinafter, the "Website") owned by Craft Technology Limited, trading as Otta (hereinafter, "Otta"). Hereunder, we indicate our identifying data:

Corporate name: Craft Technology Limited

Company number 11794989

Address: Cannon Place, 78 Cannon Street, London, United Kingdom, EC4N 6AF

E-mail: notifications@otta.com

Applicability of this Privacy Policy

In this Privacy Policy, we explain how we process the personal data of users who contact Otta through the Website or who access it - otta.com. This would include the processing of personal data of (i) candidates, (ii) employees of companies registered on the Otta platform (hereinafter "Employer" or "Employers"), (iii) employees of Otta service providers, (iv) users and/or potential users of the Website and (v) any other user who accesses or transmits information through the Website.

If you are a candidate who uses the platform offered by Otta through the Website, we inform you that your personal data will be processed in accordance with the Candidate Privacy Policy present at the bottom of this page.

  1. What personal data do we process, for what purpose and on what legitimate basis?

    We inform you that all the data we request or may request from you are necessary for the purposes described in this privacy policy and if you do not provide them, we will not be able to contact you or offer a response to any request you make. For this reason, we reserve the right not to respond or process any kind of request if you do not provide the relevant data.

    It is important that you guarantee the veracity of the personal data that you provide us, and periodically we may ask you to review and update them, in order that such personal data are the most accurate and truthful, as far as possible.

    If you are an Employer, you guarantee us that, in the event that you contact a candidate, your company complies with the obligations imposed by data protection regulations, when giving third parties access to personal data. In this Website, you can find additional information regarding the services that are offered by Otta, as well as how to make the most of the platform. In this respect, Otta will only process the necessary data to process the consultation carried out, provide the contracted service or initiate and maintain a commercial, contractual and/or pre-contractual relationship with you.

    Below, we describe the different purposes for which your personal data will be processed, that is, we explain why we will process your personal data. Also - by means of the following titles - we indicate you the legal basis through which we legitimise the processing:

    1. Performance of a contract or, prior steps to enter into a contract:

      1. If you are a candidate

        • Deliver relevant job search results, facilitate job applications, present your profile to Employers, manage your interactions with Employers on the platform, as well as keep you informed of messages from Employers to facilitate your participation in conversations.
        • Attend to the requests and queries you may have.
      2. If you are an employee/representative of an entity registered on the platform

        • Present your profile (including your name, job title and photo) to candidates to start conversations
        • Manage the existing contractual relationship (formalised through the acceptance of the T&C) between the company you represent and Otta, allowing said company to benefit from the features offered on the platform.
        • Attend to the requests and queries you may have.
      3. In case you are an employee of an Otta service provider

        • Manage the existing contractual relationship between the company you belong to and Otta.
        • Attend to the requests and queries you may have.
      4. If you are a user and/or potential user of the Website or any other user who accesses or transmits information through the Website

        • Manage your contact requests, as well as requests for information through the means enabled on the Website.
    2. Legal obligation:

      • Communicate information to public authorities, regulators or government bodies when required to do so by law, local regulations or in compliance with regulatory obligations.
    3. Legitimate interest of Otta:

      • If you are an Employer or a Candidate we will process your personal data to keep you informed of the main news related to Otta, the Website or, the products and services we provide. In this case, our legitimate interest would be to carry out direct marketing activities, in accordance with Article 47 of the General Data Protection Regulation (“GDPR”).
      • We will perform statistics, studies and analysis of visitors to the Website, for which we will carry out a commercial profile based on your browsing habits, consumption and preferences shown during the use of our services. Our legitimate interest in carrying out this processing lies in the improvement of our commercial offer, in the best knowledge and continuous improvement of our business.

    Data processing related to the mere browsing of the Website

    In order to improve our services, provide you more relevant content, and analyse how visitors use this Website, we may use technologies, such as cookies or tracking software. In most cases, we will not be able to identify you by the information we collect with such technologies.

    Please note that cookies are small pieces of information stored by your browser on your computer's hard drive. They allow you to navigate this Website and allow us to provide features such as remembering aspects of your last search in order to perform subsequent searches more quickly. If you wish, you can delete cookies. Although most features will still be accessible without cookies, we inform you that certain cookies are necessary for viewing and browsing this Website. For more information on how to use cookies and how to delete them please contact notifications@otta.com.

  2. With whom do we share your data?

    The personal data you have provided to Otta may only be communicated to third parties to whom Otta is obliged to transmit information, such as public authorities, in order to comply with the requirements of those authorities and the applicable regulations, where applicable.

    In addition to the aforementioned communications, we also have the collaboration of some third party service providers who have access to your personal data and who process the data in our name and on our behalf, only during the provision of the service we have contracted.

    In this regard and with the aim of protecting your privacy, we follow strict criteria for the selection of our service providers in order to comply with our data protection obligations. In this regard, we undertake to sign with them the corresponding Data Processing Agreement - in compliance with the requirements established by GDPR.

    This agreement will impose, among others, the following obligations: to apply appropriate technical and organisational measures; to process personal data for the agreed purposes, attending only to Otta’s instructions and to delete or return the data once the provision of services has ended. All obligations that we impose on our service providers who access your personal data are aimed at ensuring maximum privacy.

  3. How do we protect your personal data?

    We have appropriate policies and technical and organisational measures to safeguard and protect your personal data against unlawful or unauthorised access, accidental loss or destruction, damage, unlawful or unauthorised use and disclosure.

    We will also take all reasonable precautions to ensure that our staff and employees who have access to your personal data have received appropriate training.

    In any case, we inform you that any data transfer over the Internet is not completely secure and, as such, is at your own risk. Although we will do our best to protect your personal data, we cannot guarantee the security of personal data transmitted through our Website.

  4. How long do we keep your data?

    Unless a longer retention period is required or permitted by law, we will only hold your Data on our systems for the period necessary to fulfil the purposes outlined in this privacy policy or until you request that the Data be deleted.

    Even if we delete your Data, it may persist on backup or archival media for legal, tax or regulatory purposes.

  5. Which rights do you own as data subject? How can you exercise them?

    To make enquiries, exercise any of your rights set out above, or withdraw your consent to the processing of your Data (where consent is our legal basis for processing your Data), please contact us via this email address: notifications@otta.com.

    If you are not satisfied with the way a complaint you make in relation to your Data is handled by us, you may be able to refer your complaint to the relevant data protection authority. For the UK, this is the Information Commissioner's Office (ICO). The ICO's contact details can be found on their website at https://ico.org.uk/.

    Candidate Privacy Policy

    At Otta, we are concerned about your privacy. We have developed this policy to inform you about what, who and why we collect and process your personal data, how we protect them and how you can contact us.

    In this regard, this document sets out the privacy policy of the website (hereinafter, the "Website") owned by Craft Technology Limited, trading as Otta (hereinafter, "Otta"). Hereunder, we indicate our identifying data:

    Corporate name: Craft Technology Limited

    Company number 11794989

    Address: Cannon Place, 78 Cannon Street, London, United Kingdom, EC4N 6AF

    E-mail: notifications@otta.com

    It is important for you to note that when we refer throughout this privacy policy to your personal data we are referring to the information you have provided to us during your registration on our platform (hereinafter the "Platform").

  1. What personal data do we process, for what purpose and on what legitimate basis?

    We inform you that all the data that we request are necessary for the purposes described in this privacy policy and if you do not provide them, we will not be able to contact you or offer a response to any request you make. For this reason, we reserve the right not to allow your registration or process your request if you do not provide us with the above data.

    It is important for you to guarantee the veracity of the personal data that you provide us with, and periodically we may ask you to review and update them, so that these personal data are as accurate and truthful as possible.

    Once you register in the Platform we will process, among others, the following personal data: Name and surname, email, your education and work history, any preferences you fill out on Otta, your interactions on Otta, your LinkedIn profile and any profiles on platforms you have provided us with links to. We also may request additional personal data to build up a more complete professional profile. We will share this data with companies on the Platform to facilitate conversations between you and them.

    On this Website, you can find information that can be useful in order to inform you about the services offered by Otta, as well as how to get the most out of the Platform. In this sense, Otta will mainly process your personal data to manage your registration as a Candidate on the Platform, as well as to keep and develop the services object of the agreement signed with Otta (through the acceptance of the T&C) as a consequence of your registration on it.

    Here, we’ll describe the different purposes for which your personal data will be processed. Also - by means of the following titles - we indicate to you the legal basis through which we legitimise such processing:

    1. Performance of a contract or, prior steps to enter into a contract:

      • Manage your registration on the Platform
      • Communicate your personal data to the companies registered in the Platform to facilitate conversations between you and them
      • Enrich your profile information, for example, including information from your LinkedIn profile
      • Communicate with you by any means, including email, Telegram, WhatsApp, SMS LinkedIn, etc. as long as you have proactively provided us with access to these forms of contact, in order to send you updates or news related to your job search and to inform you about possible interest that the different companies using the Platform may have in your profile.
    2. Legal obligation:

      • Communicate information to public authorities, regulators or government bodies when required to do so by law, local regulations or in compliance with regulatory obligations.
    3. Legitimate interest of Otta:

      • We will process your personal data to keep you informed of the main news related to Otta, the Website or the products and services we provide. In this case, our legitimate interest would be to carry out direct marketing activities, in accordance with Article 47 of the General Data Protection Regulation.
      • We will perform statistics, studies and analysis of website visitors, for which we will carry out a commercial profile based on your browsing habits, consumer and preferences shown during the use of our services. Our legitimate interest in carrying out this processing is based on the improvement of our commercial offer and a better knowledge and continuous improvement of our business. Otta will process the data for the purposes indicated while evaluating the results of statistics, studies and analysis.
  2. Data processing related to the mere browsing of the Website

    In order to improve our services, provide you more relevant content, and analyse how visitors use this Website, we may use technologies, such as cookies or tracking software. In most cases, we will not be able to identify you by the information we collect with such technologies.

    Please note that cookies are small pieces of information stored by your browser on your computer's hard drive. They allow you to navigate this Website and allow us to provide features such as remembering aspects of your last search in order to perform subsequent searches more quickly. If you wish, you can delete cookies. Although most features will still be accessible without cookies, we inform you that certain cookies are necessary for viewing and browsing this Website.

    For more information on how to use cookies and how to delete them, contact us at notifications@otta.com.

  3. Where do we collect your personal data?

    In addition to those cases in which you have provided us your personal data through the Platform, Otta may obtain your personal data from different sources, for example, from LinkedIn and any platforms you have provided us with links to.

    In this regard, the personal data that we obtain through the aforementioned entities includes your name and surname, your education and work history and any other information related to your professional experience.

  4. With whom do we share your data?

    The personal data you have provided may be transferred to third parties registered on the Platform, in order to provide you with the service we offer through the Platform and, consequently, that a greater number of companies know your profile and increase the chances of starting a conversation about a potential job opportunity. Likewise, we will also transfer your personal data to third parties to whom Otta is obliged to transmit information, such as public authorities, with the aim of complying with the requirements of said authorities and the applicable regulations, as the case may be.

    In addition to the aforementioned communications, we have the collaboration of some third party service providers who have access to your personal data and who process the data in our name and on our behalf, only during the provision of the service we have contracted.

    In this regard and with the aim of protecting your privacy, we follow strict criteria for the selection of our service providers in order to comply with our data protection obligations. In this regard, we undertake to sign with them the corresponding Data Processing Agreement - in compliance with the requirements established by GDPR. This agreement will impose, among others, the following obligations: to apply appropriate technical and organisational measures; to process personal data for the agreed purposes, attending only to Otta's instructions and to delete or return the data once the provision of services has ended. All obligations that we impose on our service providers who access your personal data are aimed at ensuring maximum privacy.

    You can obtain a detailed copy of the service providers indicated in the previous paragraph and of the measures that Otta requires by contacting us through the contact details indicated below.

  5. How do we protect your personal data?

    We have appropriate policies and technical and organisational measures to safeguard and protect your personal data against unlawful or unauthorised access, accidental loss or destruction, damage, unlawful or unauthorized use and disclosure.

    We will also take all reasonable precautions to ensure that our staff and employees who have access to your personal data have received appropriate training. In any case, we inform you that any data transfer over the Internet is not completely secure and, as such, is at your own risk. Although we will do our best to protect your personal data, we cannot guarantee the security of personal data transmitted through our Website.

  6. How long do we keep your data?

    Unless a longer retention period is required or permitted by law, we will only hold your Data on our systems for the period necessary to fulfil the purposes outlined in this privacy policy or until you request that the Data be deleted.

    Even if we delete your Data, it may persist on backup or archival media for legal, tax or regulatory purposes.

  7. Which rights do you own as data subject? How can you exercise them?

    To make enquiries, exercise any of your rights set out above, or withdraw your consent to the processing of your Data (where consent is our legal basis for processing your Data), please contact us via this email address: notifications@otta.com.

    If you are not satisfied with the way a complaint you make in relation to your Data is handled by us, you may be able to refer your complaint to the relevant data protection authority. For the UK, this is the Information Commissioner's Office (ICO). The ICO's contact details can be found on their website at https://ico.org.uk/.