QAVALUE respects your privacy by looking at various data protection legislation, such as the GDPR (EU Regulation 2016/679), the CCPA (California Consumer Privacy Act of July 1, 2020) and the LGPD (Brazilian Law No. 13.853 of July 8, 2019), protecting the personal data you provide us, as the holder of such data.

1. INTRODUCTION

1.1. Our website (https://www.qavalue.com) was developed, is managed and maintained exclusively by QAVALUE, just like our other websites/applications that we develop and operate.

1.2. QAVALUE intends to provide you with the best use of our website, never neglecting the protection of your personal data as well as your privacy, striving for our website to be safe, intuitive and functional.

1.3. It is a duty and one of QAVALUE's priorities to protect individuals and the personal data it collects in the exercise of its activity, complying with and enforcing the terms of the Regulations/Laws referred to at the beginning of this Privacy Policy concerning the processing and the free circulation of your personal data.

1.4. QAVALUE processes Personal Data legally, fairly and transparently.

1.5. In case you need any clarification regarding our Privacy Policy or the functioning of our website, contact us at [email protected].

2. PRINCIPLES OF OUR PRIVACY POLICY

2.1. Bearing in mind that the privacy of Data Subjects is important to QAVALUE and knowing that Personal Data only to them belongs, we regard the security of these data as a priority. Thus, only duly authorized personnel process authorized/consented data and only for similarly authorized/consented purposes.

2.2. For compliance reasons we regularly review our Privacy Policy looking at new regulations issued and in line with new technologies. As a result, we reserve the right to introduce changes/updates without prior notice. However, you may be alerted to this fact when accessing our website, and by continuing to use it, you are bound by the new terms of this policy.

2.3. If you access our website and make available Personal Data, you must first know our Privacy Policy (,our Terms and Conditions) and our Cookies Policy, consenting to its use.

2.4. Our Privacy Policy is limited to our website and any other application/platform that we make available, not covering websites that do not belong and to us to which we eventually include links.

3. INFORMATION AND CONCEPTS

3.1. Controller of the Data Processing:QAVALUE is the entity responsible for the processing of personal data.

3.2. Personal Data: Any information relating to a duly identified or identifiable natural person (‘data subject’). A natural person is considered identifiable if it is possible to be identified, directly or indirectly, by an identification number, by one or more specific elements of his physical, physiological, mental, educational, economic, cultural or social identity.

3.3. Ways by which we collect your Personal Data: Through our website or our landing pages, in writing, in the context of a contractual or pre-contractual relationship or any other suitable for this medium.

3.4. Personal Data that we collect to provide our services: the Personal Data that we collect and process are those strictly necessary for these data processing or services we provide:

3.4.1. Identification: Name, nationality;

3.4.2. Contact: Mobile phone, email;

3.4.3. Professional: This is data that accumulates during the normal course of operation on our websites/platforms. They may include transaction logs, stored files, user profiles, analytics and other metrics, as well as other types of information, created or generated as users interact with our services. Some examples of this data are: organization, professional email, salary expectations, professional availability, LinkedIn and XING profiles.

We do not intentionally collect Personal Data from persons under 16 years of age. If we verify this type of occurrence, this data will be immediately deleted.

3.5. Spontaneous Curriculum Vitae Submission: QAVALUE only accepts spontaneous CV submissions through its website at https://qavalue.com/join-us/. By submitting your application and your Curriculum Vitae, you must consent to its treatment for purposes of possible hiring and, if a hiring process is not currently underway, authorize its storage permanently or for only one year, this being the minimum archive period that we accept for spontaneous applications.

3.6.Ways of Handling Personal Data: the Personal Data we collect are computer-processed and stored in databases, following all data protection and security rules required by the various Regulations/Laws covered by this Privacy Policy. The Personal Data collected will only be processed following one or more specific and legitimate purposes defined at the precise moment of its collection and will never be further processed for other purposes, except for public interest archive, scientific/historical research or even for statistical purposes.

3.7.Consent for Data Processing: if the Data Processing is based on the legal basis of Consent given by the Data Subject, it will only be valid if it reflects a specific, informed and explicit expression of free will. This Consent might easily be withdrawn at any time without, by doing so, invalidating the lawfulness of the treatment previously carried out based on the previously given consent or any subsequent treatment based on legal bases. At the end of this Privacy Policy, you will find the contacts and the link to be used to withdraw the consent given, at which point all Data Processing will cease, except for those relating to legal obligations.

3.8.Special Categories of Personal Data: in the case of recollection of Personal Data considered as being "sensitive" by the Regulations/Laws referred in this Policy, the respective Data Processing will scrupulously comply with their requirements. If such processing is carried out based on the consent given by the Data Subjects, we will inform of the right to withdraw this consent, without, however, compromising the lawfulness of the processing carried out based on the previously given consent.

3.9. Purposes of the Data Processing we carry out:

3.9.1. To identify you as our customer;

3.9.2. To provide the contracted services;

3.9.3. For billing and accounting management purposes;

3.9.4. For communication of changes to the conditions of providing of contracted services;

3.9.5. To optimize the visit and navigation on our website;

3.9.6. To adapt the services we provide to our customers' needs;

3.9.7. For the management and execution of the contractual relationship between parties;

3.9.8. For the fulfillment of legal obligations;

3.9.9. To guarantee QAVALUE's legitimate interests.

3.10. Personal Data retention period:

3.10.1. For the legally required period of time;

3.10.2. In case the Data Processing is based on the Consent of the Data Subject until the processing ends, when the consent period expires or until the latter expresses its opposition to such processing;

3.10.3. Once the treatments are completed for the reasons presented in the previous two points, the data will be eliminated or anonymized.

3.11. Rights of the Data Subjects: the Regulations/Laws listed at the beginning of this Privacy Policy, which are its foundation, provide the Data Subjects of natural persons with a set of rights:

3.11.1. ARCO Rights:

3.11.1.1. Right of Access: is the right to know whether or not personal data concerning the Data Subject are being processed, the purposes of the processing, the categories of personal data concerned and to access those personal data;

3.11.1.2. Right to Rectification: is the right to correct inaccurate or incomplete data, without justifiable delay, belonging to the Data Subject;

3.11.1.3. Right to Object: is the right to object at any time to processing of personal data, including profiling, carried out for reasons related to the Data Subject particular situation in compliance with the provisions laid down in the Regulations/Laws that are the base of this Privacy Policy;

3.11.2. Right to Data Portability: the Data Subject has the right to request the transfer of his personal data to another entity or to request a copy of this data for its own storage, which will be provided in a standard reading CSV format. This procedure may have an associated cost;

3.11.3. Right to Restrition of Processing: the Data Subject has the right to obtain from the Data Controller the restriction of personal data processing when he intends to contest the accuracy of his personal data for a period of time that allows the Data Controller to verify its accuracy, when the processing is unlawful or if you have deducted your Right of Opposition despite not wishing to erase the data.

Should you wish to execute any of these rights, please send your request to [email protected]. Subsequently, you will be sent a Form for the Execution of Rights by Data Subjects which, after being duly filled in and received, will be followed up on your exercise of rights.

QAVALUE will respond to requests made as soon as possible, within a maximum period of 30 calendar days which may be extended to 60 days depending on the complexity or on the number of requests made, in a concise manner, transparent, intelligible and easily accessible, using clear and simple language.

Information or responses will be provided in writing or by other means, such as electronically. If the Data Subject so requests, the information or response may be given orally, as long as he proves his identity.

It must also be noted that the Data Subject has the right, at any time, to file a complaint with a Data Protection Authority.

3.12. Measures we implement to ensure the security of the Personal Data we store and process: we implement technical and organizational measures in order to ensure an adequate level of security to the risk associated with the personal data we store and the processing we carry out, remembering that no method of electronic storage or transmission is 100% secure and that absolute data security cannot be guaranteed. These measures are periodically reviewed and readjusted.

We intend to ensure that Personal Data are:

3.12.1. Safe and secure;

3.12.2. Secure its:

3.12.2.1. Authenticity;

3.12.2.2. Integrity;

3.12.2.3. Confidentiality.

3.12.3. Prevent:

3.12.3.1. Its loss;

3.12.3.2. Misuse;

3.12.3.3. Change;

3.12.3.4. Unauthorized access or processing;

3.12.3.5. Any other form of illicit processing.

3.13. Data Breaches: we will scrupulously comply with all legislation relating to security breaches, in particular concerning timely contact with the affected Data Subjects, as well as the respective Data Protection Authority, in addition, to immediately starting procedures to correct the security breach.

3.14. Transfers of Personal Data

3.14.1. Personal Data Communication to Third Parties: whenever QAVALUE resorts to processers (subcontractors, partners or entities belonging to our group) to carry out the defined data processing on our behalf, we will not only obtain, if necessary, prior consent but also ensure that these processors comply with the technical and organizational measures contractually provided, which we understand as adequate and sufficient.

3.14.2. International Personal Data Transfers: we will strictly comply with the legal provisions applicable under the Regulations/Laws covered by this Privacy Policy if we have to transfer Personal Data to third countries or international organizations outside the European Economic Area. These transfers will not occur if the required levels of protection are not guaranteed.

3.15. Cookies: Cookies are small text files that are stored on your device and used to make the user's browsing experience more efficient, allowing to personalize the website's content and analyze traffic. To find out more about the cookies we use, see our Cookies Policy.

3.16. Contact in case you wish to clarify any doubts about our Privacy Policy or about the way we process Personal Data, you can do so by contacting us through the following contacts:

3.16.1. Email: [email protected]

3.16.2. Address: De Entree 232 - 1101EE - Amsterdam - Netherlands