Privacy policy

MatchWorky acts as a data processor for interview and analysis operations carried out on behalf of customer companies, which are the data controllers responsible for candidate data.

For privacy-related inquiries, contact privacidade@matchworky.pt. We will identify the correct controller if your request relates to data managed by a customer company.

We collect identification and contact data (name, email, phone), interview responses provided by the candidate, and technical session metadata (IP address, timestamps, session identifier) to ensure platform operation and basic auditing.

We do not collect special categories of data (GDPR Art. 9) — such as health data, ethnic origin, or political beliefs — without a specific legal basis and explicit configuration by the customer company.

Contract performance (Art. 6(1)(b)): processing necessary to provide the interview service contracted by the customer.

Legitimate interests (Art. 6(1)(f)): platform security, abuse prevention, and service stability.

Legal obligation (Art. 6(1)(c)): retention of records required by applicable tax or employment law.

Data is used to run interviews, display responses in the customer's admin dashboard, and enable structured candidate comparison.

Technical data is used for security, fraud prevention, and platform availability. We do not use candidate data for our own commercial purposes or to train AI models without explicit consent.

Candidate data is retained for the period defined by each customer company, within the limits set by the GDPR and applicable employment law.

You may request erasure or anonymization of your data at any time under GDPR Art. 17 (right to erasure) by contacting privacidade@matchworky.pt or the company responsible for the recruitment process.

You have the right to: access your data (Art. 15), rectification of inaccurate data (Art. 16), erasure under certain circumstances (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection to processing (Art. 21).

To exercise any of these rights, contact privacidade@matchworky.pt, indicating the company responsible for the recruitment process. We respond within 30 days (extendable to 90 days in complex cases, with prior notice), as per GDPR Art. 12.

We apply appropriate technical and organizational measures to protect data against unauthorized access, accidental loss, or destruction, in accordance with GDPR Art. 32.

In the event of a data breach posing a risk to your rights and freedoms, the data controller will notify the supervisory authority within 72 hours and, where necessary, the affected data subjects (GDPR Arts. 33–34).

You have the right to lodge a complaint with the Comissão Nacional de Proteção de Dados (CNPD), the competent supervisory authority in Portugal, at www.cnpd.pt.

This right does not affect any other administrative or judicial remedy available to you.