Privacy Policy (GDPR)

Commitment is committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) (EU 2016/679). This Privacy Policy explains how your personal data is collected, used, and safeguarded when using the Commitment platform.

1. Data Controller

Commitment acts as the data controller for personal data collected through the platform. For data protection inquiries, contact commitment.contact@gmail.com.

2. Data Collected

• Account data: Name, email, company name, role, and industry.
• Staff data: Full name, photo, title, skills, rates, and availability — visible in the marketplace to all partner companies.
• Usage data: Messages, formal offers, contracts, timesheets, and invoices created on the platform.
• Technical data: IP address, browser type, and device information.

3. Legal Basis for Processing

• Contract performance: Processing necessary to provide the platform and facilitate staff engagements.
• Legal obligation: Compliance with EU and Greek law, including tax and employment regulations.
• Legitimate interest: Platform security, fraud prevention, and service improvement.
• Consent: Where you provide explicit consent (e.g., optional marketing communications).

4. How Your Data Is Used

• To create and manage your company account.
• To facilitate connections, messaging, and formal offers between companies.
• To manage digital contract signing and non-poaching enforcement.
• To process timesheets and generate reference invoice records.
• To display staff profiles (name, photo, skills, rate) in the marketplace to partner companies.
• To provide customer support and notifications.
• To improve the platform's features and security.

5. Data Sharing

Staff information (full name, photo, title, skills, rate, and availability) is shared in the Staff Pool marketplace, visible to all partner companies on the platform. Personal data is never sold to third parties.

Data may be shared with service providers (e.g., cloud hosting) under strict data processing agreements, or when required by law. Commitment does not share payment data, as no payments are processed through the platform.

6. Data Retention

Personal data is retained for as long as your account is active, and for a reasonable period thereafter as required by law (e.g., tax records for 7 years under Greek law). You may request deletion of your data at any time, subject to legal retention obligations.

7. Data Security

Appropriate technical and organizational measures are implemented to protect your data, including encryption in transit and at rest, access controls, and regular security assessments. All data is hosted on EU-based servers.

8. International Transfers

Your data is stored and processed within the European Union. Where any data is shared with providers outside the EU, Standard Contractual Clauses approved by the European Commission are relied upon.

Questions about your privacy? Contact commitment.contact@gmail.com