This Data Protection Policy ("Policy") has been developed to demonstrate that personal data within Jobado (Jobado Work) is processed and protected in accordance with legal requirements: the Law of Ukraine "On Protection of Personal Data" and Regulation (EU) 2016/679 (GDPR/RODO).

 

Contact Information

You may contact us:

• By mail — Address: Yaroslaviv Val st., 6A, Kyiv city, Ukraine, 01054

• By email — my@jobado.work (or other official domain email)

• By other means indicated by Jobado (Jobado Work) on the website.

​

Definitions:

• Data Controller / Company — Jobado (Jobado Work) (EDRPOU code 45998310).

• Personal Data — any information relating to an identified or identifiable natural person.

• Information System — a set of interacting devices, programs, and procedures used by Jobado (Jobado Work) for data processing.

• User — a person authorized by the Data Controller to process personal data.

• Data Processing — any operation performed on personal data, such as collection, recording, storage, adaptation, disclosure, or deletion, in both traditional and computer systems of Jobado (Jobado Work).

 

I. General Provisions

1. The Policy applies to all personal data processed at Jobado (Jobado Work), regardless of the form of processing (traditional filing systems or IT systems).

2. To ensure effective implementation of the Policy, Jobado (Jobado Work) provides technical measures and organizational solutions appropriate to the risks and categories of data.

3. The Data Controller shall ensure that activities related to the processing and protection of personal data comply with this Policy and relevant legislation.

 

II. Personal Data and Register of Activities

1. Jobado (Jobado Work) maintains a register of processing activities in both written and electronic forms.

2. Personal data processed by Jobado (Jobado Work) is used to:

   • conclude or perform contracts entered into with you or involving you;

   • comply with legal obligations;

   • pursue the legitimate interests of the Company.

3. Providing data is voluntary but necessary for entering into and performing a contract with Jobado (Jobado Work).

 

III. Duties and Responsibility

1. All persons are obliged to process personal data in accordance with the law and the Policy established by Jobado (Jobado Work).

2. Specifically, a breach or attempted breach includes transferring data to unauthorized persons or failing to maintain confidentiality within Jobado (Jobado Work).

3. Every employee of Jobado (Jobado Work) must have a written authorization to process data and must sign a declaration of confidentiality.

 

IV. Technical and Organizational Measures

Jobado (Jobado Work) ensures the application of necessary measures to guarantee data confidentiality, integrity, and accountability:

• Secure data servers, network drives, and encrypted email servers.

• Strict access control to premises where Jobado (Jobado Work) processes personal data.

• Use of firewalls, anti-malware software, and encryption for data transmission.

• Physical security, including locking offices and using shredders for document disposal.

​

V. Breach of Data Protection Principles

In the event of a personal data breach at Jobado (Jobado Work), the Controller shall assess the risk to the rights and freedoms of individuals. The Controller is obliged to notify the supervisory authority without undue delay (no later than 72 hours after discovery). If the risk is high, Jobado (Jobado Work) will also notify the data subject directly.

​

VI. Transfer of Data to a Third Country

Jobado (Jobado Work) will not transfer personal data to third countries except at the request of the data subject (e.g., for international recruitment purposes) and in compliance with statutory safeguards.

​

VII. Final Provisions

For failure to comply with the obligations set forth in this document at Jobado (Jobado Work), the employee shall be held liable in accordance with the Labor Code and legislation regarding the protection of personal data.

Annexes to the Policy:

• Annex 1 — Template Authorization for the Processing of Personal Data.

• Annex 2 — Template Declaration and Commitment of the Data Processor.

• Annex 3 — Template for Data Breach Notification.