FullStack Labs Privacy Notice
1. WHAT IS THE PURPOSE OF THIS DOCUMENT
FullStack Labs, Inc. and its affiliates and subsidiaries (collectively, the “Company,” “FullStack,” “we,” “us,” and “our”) are committed to protecting the privacy, integrity and confidentiality of your personal information.
This privacy notice (the “Notice”) applies to all applicants for employment or contracting engagements, regardless of the medium, based in North America and South America, and describes how we collect and use personal information about you during and after your application process. This Notice also applies to personnel actually hired as employees or engaged as contractors.
This Notice may be updated at any time. The most current version can always be accessed on our Main Company Page. You should periodically review this Notice to be informed of how FullStack is protecting your information. If we make a material or significant change to this Notice, we will notify you as required by applicable law.
This Notice should be read in conjunction with our Terms of Use, our Privacy Policy, and our Cookie Policy. This Notice controls with respect to the matters set forth herein if there is any conflict with the website Privacy Policy.
Personal data or personal information means any information that can be used to identify an individual, including (1) any information that can be used to distinguish or trace an individual’s identity, such as name, social security number, date and place of birth, mother’s maiden name, or biometric records; and (2) any other information that is linked or linkable to an individual, such as medical, educational, financial, and employment information. Personal information also includes any data that classifies as personal information, personal data, personally identifiable information, or similar terms under applicable data privacy and security laws and regulations. It does not include data excluded or exempted from those laws or regulations, such as aggregated, anonymized, or deidentified data. Nothing in this Notice will constitute an admission or evidence that any particular data privacy or information security law or regulation applies to FullStack generally or in any specific context.
Notice at Collection: At or before the time of collection, California residents have a right to receive notice of our practices, including the categories of personal information to be collected, the purposes for which such information is collected or used, whether such information is sold or shared and how to opt-out of such uses, and how long such information is retained. You can find those details in this statement by clicking on the foregoing links.
This Notice does not imply in any way any contract of employment or contract for services or any other relationship between the reader and FullStack, nor does it form the basis for, or can it be claimed or used as the basis for, any contractual obligation, employment, or services relationship between you and FullStack.
2. INFORMATION WE STORE ABOUT APPLICANTS
We may collect, store, and use the following categories of personal information about you:
- Contact Information includes first and last name, job title, mailing address, email address, and phone number.
- Background Check Information includes date of birth, social security number, and/or other government issued identifiers. Where applicable, post-offer background checks may also include information related to references, criminal history, credit history, drug screenings, fingerprint verification, and other screening results particular to the role.
- Professional and Employment-Related Information includes your CV or resume, professional social media profiles, cover letter, application forms and other information related to your employment history such as dates of employment, job titles, job descriptions, skills, reason for leaving, previous salary and benefits information, any websites or blogs you own or have contributed to, any photographs contained in your CV, resume, or professional social media profile, areas of interests, and/or notice periods/availability for employment.
- Interview Information includes interview history, questions, notes, and various assessment results and analysis. Depending on the specific position, these may include, but are not limited to, technical, personality, and cognitive assessments. During the application and interview process, we may also collect your salary or other remuneration expectations and details of any offers made by us to you and your responses. To the extent the interview or hiring process includes them, this also includes audio, visual, and other similar information collected through recorded meetings, interviews, phone calls, assessments, or profile photos.
- Demographic Information includes, for U.S. applicants, your responses to any FullStack questionnaires required for federal contractor compliance regarding gender, ethnicity, race, veteran status and disability status, as well as information to assess your right to work in the hire location, such as work permit status. We may also collect characteristics of protected classifications under California or U.S. federal law, such as age, marital status, gender, sex, race, color, disability, citizenship, primary language, immigration status, military/veteran status, disability, requests for leave, and medical conditions.
- Analytics and Device Information includes information we receive from your use of our website including, but not limited to, IP address, ISP, referring/exit pages, platform type, date/time stamp, number of clicks, domain name, and geolocation information such as country/state of user. This also includes any information you provide while accessing FullStack’s systems such as credit card information or passwords.
3. HOW WE COLLECT APPLICANT PERSONAL INFORMATION
We collect personal information about applicants from the following sources:
- Directly from you when you share the information with us during the applicant process or in communications, or when you use our website.
- From current FullStack employees or contractors, with your prior permission, as part of our internal referral program.
From third parties, like websites, job boards, recruitment agencies or platforms that you have used to seek employment, display a professional profile, and/or registered on and have agreed for them to provide us with your information.
4. HOW WE USE APPLICANT PERSONAL INFORMATION
We may use your personal information for the following purposes:
- To consider you or contact you for any role you have applied to or that we are otherwise considering candidates for.
- To provide potential clients with your application or profile information.
- To review or report on federal contractor compliance or other legal requirements as applicable.
- To update you on any changes to our privacy notice, security updates, or changes to our website or online profile area.
- To make a decision regarding your recruitment or candidacy for employment or other engagement, or any employment action post-employment.
- To determine any terms on which you may work for us or our clients.
- To conduct assessments, background checks and drug screens, and to check references.
- For internal reporting and understanding how we can improve our internal recruitment processes and website.
- To understand user traffic to our website.
- To prevent fraud or other harm to FullStack, our customers, or other third parties.
If you are hired or engaged, information may be incorporated into our HR or vendor system and become part of your HR or vendor file and may be used for employment or engagement-related purposes.
5. DATA SHARING
Given the nature of FullStack’s business, from time to time our clients would like to receive summary CVs of applicants like you, as well as our existing employees. At times we might provide only an anonymized summary CV but this is not always possible. We may provide our clients with your personal information so that they can consider you or contact you for their project needs as part of our services offering to them.
In order to understand how we can improve our internal recruitment processes, we may use a third party survey provider to (i) send you an invitation to a survey and/or (ii) collect your responses.
We may also partner with a background check vendor to assist in any post-offer background checks of applicants, which may require sharing certain personal information such as name, date of birth, address, social security number or other government identifier, etc., for the purpose of ordering the check. Such checks will only be performed after securing your express consent.
We may also use third party communication providers to help us manage communications around our recruitment and information campaigns.
We may also need to use third party service providers, for example, to help us manage our applicant tracking system or to host our websites or servers. We may also use a third party to assist in administration and analysis of our assessments, which include but are not limited to technical, personality and cognitive assessments. Where we need technical testing of your skills, we may use third party providers to undertake the testing on our behalf.
We may disclose personal information to other companies within the FullStack group, as well as our business partners and affiliates; advisors such as legal advisors and financial advisors; related entities, parent companies, investors, subsidiaries, joint ventures, or other companies under common control; and other third parties.
We may also disclose your personal information to third parties when we believe, in good faith and in our sole discretion, that such disclosure is reasonably necessary to (a) enforce or apply the terms and conditions of our website or any other contract we have with you, including investigation of potential violations thereof, (b) comply with legal or regulatory requirements or an enforceable governmental request, (c) protect the rights, property or safety of us, our customers and users or other third parties, (d) prevent a crime or protect national security, or (e) detect, prevent or otherwise address fraud, security or technical issues.
We reserve the right to transfer information (including your personal information) to a third party in the event of a sale, merger, or transfer of all or substantially all of the assets of FullStack, or in the unlikely event of a bankruptcy, liquidation, or receivership of our business. We will use commercially reasonable efforts to notify you of such transfer, for example via email or by posting notice on our website.
6. DATA SECURITY, TRANSFERS, AND RETENTION
We have put in place various reasonable security measures designed to ensure the confidentiality, integrity, and availability of your personal information. We have put in place policies to deal with any suspected data security breach and will follow any legally required breach notification processes. However, we cannot and do not guarantee complete security, as it does not exist on the internet.
As FullStack is a company with global operations, we may transfer the personal information we collect about you to the U.S. or outside of U.S. borders. Please note that, if you are not a U.S. resident, the laws in the U.S. that apply to your personal information may not be the same, or provide the same degree of protection, as those in your own country. If you are not a U.S. resident, you expressly consent to the transfer of your personal information to the U.S., where our servers are located. Note, where, in accordance with this Notice, we send or outsource your personal information to a country other than the country in which you are applying to render services for FullStack, that personal information may be available to the applicable foreign government or its agencies under a lawful order or other legal requirement in that foreign country for purposes other than described herein.
FullStack retains the information it receives about you until it is no longer necessary to accomplish the purpose for which it was provided. We may retain your personal information for shorter or longer periods for specific purposes to the extent we are obliged to do so in accordance with applicable laws and regulations, to protect you, other people, and us from fraud, abuse, an unauthorized access, as necessary to protect our legal rights, or for certain business requirements.
7. RECRUITMENT CAMPAIGNS
For any recruitment campaigns that FullStack decided to engage in, you can opt in to receive information about our recruitment campaigns and you may also unsubscribe from these emails at any time by clicking the unsubscribe link on any recruitment campaign email from us.
We will unsubscribe you from these emails within ten (10) business days.
Note that you will continue to receive transaction-related emails regarding products or services you have requested. We may also send you certain non-promotional communications regarding us and our services, and you will not be able to opt out of those communications (e.g., communications regarding our services or updates to our Terms of Use or this Notice).
8. YOUR CONSENT
By proceeding with your application, you indicate your acceptance of our collection, saving, use, transfer and disclosure of personal information as described in this Notice. If you do not accept these terms you will not be allowed access to apply for a position online or have your written, offline submission considered for a position. You also agree to the transfer of personal information about you to countries outside the country in which you reside, which may include countries with a different data protection regime than in place in the country in which you reside, as outlined above.
The provision of personal information, including sensitive information, is voluntary. Please note however, failure to provide sufficient information may result in FullStack being unable to consider your application.
9. ADDITIONAL TERMS FOR:
A) UNITED STATES BASED APPLICANTS
Under certain U.S. state consumer privacy laws, you may be entitled to various privacy rights, subject to certain exceptions. These may include:
- Right to Know/Access. You may have the right to confirm whether we are processing your personal information, the right to know specific pieces of personal information we have collected about you, to know the categories of personal information we are processing or have processed, and the right to access that data. You also have the right to know the third parties to whom we have disclosed your personal information.
- Right of Correction. You may have the right to correct inaccuracies in your personal information, taking into account the nature of the personal information and the purposes of the processing of the personal information.
- Right of Deletion. You may have the right to delete your personal information provided by you or obtained about you.
- Right to Restrict or Object. You may have the right to object to the processing of your personal information that is based on legitimate interests or your consent.
- Right of Portability. You may have the right to obtain your personal information in a portable and—to the extent technically feasible—readily usable format that allows you to transmit the data to another entity without hindrance.
- Right to Opt-Out. You may have the right to opt-out of the processing of your personal information for the purposes of: (i) targeted advertising or sharing, (ii) the sale of personal information, and/or (iii) profiling in furtherance of decisions that produce legal or similarly significant effects concerning you.
- Right Against Retaliation and/or Discrimination. You may have the right not to receive retaliatory or discriminatory treatment for exercising the privacy rights conferred by law. We will not retaliate or discriminate against you by, for example, denying employment opportunities, because you exercised any of your privacy rights.
- Right to Appeal Your Decision. You may have the right to appeal our decision if we decline to process your request. If applicable laws grant you an appeal right and you would like to appeal our decision with respect to your request, you may do so by informing us of this and providing us with information supporting your appeal.
If you would like to exercise your rights, withdraw consent, file a complaint, or ask questions about this Notice, you may do so by contacting us at privacy@fullstacklabs.co or at (855) 237-0834.
To ensure the protection of your personal information, we may need to verify that the individual submitting a request is the consumer to whom the request relates prior to processing the request, or an authorized agent. To verify a consumer’s identity, we may request up to three pieces of personal information about you to compare against our records when you make a request. If you make a request to access, correct, delete, or limit your personal information, please make clear what personal information you would like to access or have changed, whether you would like to have personal information that you have provided to us suppressed from our database, or otherwise let us know what limitations you would like to put on our use of your personal information.
Supplemental Provisions for California Applicants
This section supplements our Policy and only applies to our processing of personal information that is subject to California Consumer Privacy Act, Cal. Civ. Code § 1798.100 et seq. as amended by the California Privacy Rights Act and implementing regulations (collectively “CCPA”).
- Collection of Personal Information
In the preceding 12 months, we have collected personal information from the following categories identified in Section 2, which are described using the terms identified under the CCPA: identifiers, personal information, characteristics of protected classifications, biometric information, internet or other similar network activity, professional or employment related information, education information, and inferences.
- Disclosure of Personal Information
In the preceding 12 months, we have disclosed personal information in the following categories: identifiers, personal information, characteristics of protected classifications, biometric information, internet or other similar network activity, professional or employment related information, education information, and inferences with service providers. We disclose content posted on our social media platforms (e.g., if a consumer “comments” on a story) with other consumers. Such posts may include information in the category of personal information and identifiers, but the content depends on the individual posts.
- Sharing of Personal Information
In the preceding 12 months, we have shared for cross-contextual behavioral advertising personal information in the following categories: identifiers, personal information, internet or similar networking activity, and professional or employment related information.
- Sales of Personal Information
In the preceding 12 months, we have not sold the personal information of any consumer for monetary consideration. However, our use for cookies and other tracking technologies may be considered a sale of personal information under the CCPA. Categories of personal information that we have sold under the CCPA include the following: identifiers, personal information, internet or similar network activities, and inferences. Categories of third parties to whom personal information is sold under the CCPA include data analytics providers and advertising and marketing providers.
- Collection of Personal Information from Children under 16
In the preceding 12 months, we have not knowingly collected or processed personal information pertaining to children under the age of 16.
- Sensitive Data
If we process sensitive data as defined by California law, we will only do so for the purposes specifically authorized by California law and in a manner that is necessary and proportionate for those purposes. As such, we do not perform any processing for which a Right to Restrict request is available.
B) CANADA-BASED APPLICANTS
Subject to applicable law, you may be entitled to various privacy rights, subject to certain exceptions. These privacy rights may include:
- Right to Know/Access. You may have the right to confirm whether we are processing your personal information, the right to know specific pieces of personal information we have collected about you, to know the categories of personal information we are processing or have processed, and the right to access that data. You also have the right to know the third parties to whom we have disclosed your personal information.
- Right of Correction. You may have the right to correct inaccuracies in your personal information, taking into account the nature of the personal information and the purposes of the processing of the personal information.
- Right of Portability. You may have the right to obtain your personal information in a portable and—to the extent technically feasible—readily usable format that allows you to transmit the data to another entity without hindrance.
- Right to Withdraw Your Consent. You may have the right to withdraw your consent to our processing of your personal information. Please note that your withdrawal will only take effect for future processing, and will not affect the lawfulness of processing before the withdrawal.
If you would like to exercise your rights, withdraw consent, file a complaint, or ask questions about this policy, you may do so by contacting us at privacy@fullstacklabs.co.
If you make a request to access or correct your personal information, please make clear what personal information you would like to access or have changed, or otherwise let us know what limitations you would like to put on our use of your personal information.
C) ARGENTINA-BASED APPLICANTS
In Argentina, you have the following privacy rights:
- Right to Know/Access. You may have the right to confirm whether we are processing your personal information, the right to know specific pieces of personal information we have collected about you, to know the categories of personal information we are processing or have processed, and the right to access that data. You also have the right to know the third parties to whom we have disclosed your personal information.
- Right of Correction. You may have the right to correct inaccuracies in your personal information, taking into account the nature of the personal information and the purposes of the processing of the personal information.
- Right of Deletion. You may have the right to delete your personal information provided by you or obtained about you.
- Right to Restrict or Object. You may have the right to object to the processing of your personal information that is based on legitimate interests or your consent.
- Right of Portability. You may have the right to obtain your personal information in a portable and—to the extent technically feasible—readily usable format that allows you to transmit the data to another entity without hindrance.
- Right to Opt-Out. You may have the right to opt-out of solely automated processing of your personal information for the purposes of profiling in furtherance of decisions that produce legal or similarly significant effects concerning you.
- Right to Lodge a Complaint or Request Assistance. You may have a right to lodge a complaint with a competent supervisory authority if you believe our processing of your personal information violates applicable law, or to request the assistance of a supervisory authority in exercising your rights. The relevant supervisory authority in Argentina is the Agency of Access to Public Information (Agencia de Acceso a la Información Pública). More information about the supervisory authority can be found at: https://www.argentina.gob.ar/aaip/.
You may submit a request to access or correct your personal information at intervals of not less than six months free of charge, unless a specified legitimate interest is proven. If you would like to exercise your privacy rights, you may contact us by submitting an email to privacy@fullstacklabs.co.
D) BOLIVIA-BASED APPLICANTS
Users in Bolivia have certain privacy rights as specified under Bolivian law. FullStack acts as Data Controller of the applicant's personal information. In Bolivia, you may have the following privacy rights:
- Right to Know/Access. You may have the right to confirm whether we are processing your personal information, the right to know specific pieces of personal information we have collected about you, to know the categories of personal information we are processing or have processed, and the right to access that data. You also have the right to request a copy of the data we are processing.
- Right of Correction. You may have the right to correct inaccuracies in your personal information, taking into account the nature of the personal information and the purposes of the processing of the personal information.
- Right of Deletion. You may have the right to delete the personal information provided by you or obtained about you, when it is no longer needed for the processing purpose, or when it has been used inappropriately.
- Right to Object. You may have the right to object to the processing of your personal information if you believe it may cause you harm or if it is being used for purposes other than those they were originally informed about.
You may submit a request to access correct or delete your personal information. If you would like to exercise your rights, withdraw consent, file a complaint, or ask questions about this policy, you should contact us at privacy@fullstacklabs.co.
E) BRAZIL-BASED APPLICANTS
Users in Brazil have certain privacy rights as specified under Brazilian law, including the Lei Geral de Proteção de Dados Pessoais (LGPD). FullStack acts as Data Controller of the applicant's personal information. In Brazil, you may have the following privacy rights:
- Right to Know/Access. You may have the right to confirm whether we are processing your personal information, the right to know specific pieces of personal information we have collected about you, to know the categories of personal information we are processing or have processed, and the right to access that data. You also have the right to know the third parties to whom we have disclosed your personal information.
- Right of Correction. You may have the right to correct inaccuracies in your personal information, taking into account the nature of the personal information and the purposes of the processing of the personal information.
- Right of Deletion. You may have the right to delete your personal information provided by you or obtained about you.
- Right to Restrict or Object. You may have the right to object to the processing of your personal information that is based on legitimate interests or your consent.
- Right of Portability. You may have the right to obtain your personal information in a portable and—to the extent technically feasible—readily usable format that allows you to transmit the data to another entity without hindrance.
FullStack uses your personal information based on:
- Legitimate Interest. A reason we might use your information is because we have—or a third party has—a legitimate interest in doing so. For example, we need to use your information to provide and improve our services, including protecting your account.
- Consent. In some cases, we will ask for consent to use your information for specific purposes. If we do, we will make sure you can revoke your consent in our services or through your device permissions. Even if we are not relying on consent to use your information, we may ask you for permission to access data like contacts and location.
Legal Obligation. We may be required to use your personal information to comply with the law, like when we respond to valid legal processes or need to take action to protect our users.
F) CHILE-BASED APPLICANTS
Users in Chile have certain privacy rights as specified under Chile law, including the Law 19.628 on Personal Data Protection, as follows:
- Right to Know/Access. You may have the right to confirm whether we are processing your personal information, the right to know the personal information we have collected about you, to know the categories of personal information we are processing or have processed, and the right to access that data.
- Right of Correction. You may have the right to correct inaccuracies in your personal information, taking into account the nature of the personal information and the purposes of the processing of the personal information.
- Right of Deletion. You may have the right to delete the personal information provided by you or obtained about you, when: a) The data is no longer necessary in relation to the purposes of the processing for which it was collected. b) You revoke your consent to the processing and there is no other legal basis for it. c) The data has been obtained or processed unlawfully by us. d) The data is outdated. e) The data must be deleted in order to comply with a court ruling, a decision by the data protection authority, or a legal obligation.
- Right to Object. You may have the right to object to the processing of your personal information that is based on legitimate interests or your consent, under the following circumstances: a) When the legal basis for processing is solely the satisfaction of the legitimate interests of FullStack only, and not of yours. b) If the processing is carried out exclusively for the purposes of marketing or direct marketing of goods, products, or services, including profiling. c) If the processing is carried out in relation to data obtained from a publicly accessible source and there is no other legal basis for its processing.
- Right of Portability. You may have the right to obtain your personal information in a portable and—to the extent technically feasible—readily usable format that allows you to transmit the data to another entity without hindrance.
- Right of Blocking: You may have the right to request the temporary suspension of any processing of your personal data when you submit a request for correction, deletion, or objection, until such request is resolved.
Sensitive Data: To the extent that the personal data you provide to FullStack includes sensitive data, including as examples but not limited to photos, identity documents and fingerprints, you expressly authorize that such data may be used, processed and transferred for security purposes, information validation, as a biometric identification system, and for any other related to the purposes herein stated.
You may submit a request to access, correct, delete or object your personal information. These processes will be free of charge, and a copy of the altered record in the relevant part will be provided to you at request. If new modifications or deletions of data are made, you will also obtain, free of charge, a copy of the updated record, provided that at least six months have elapsed since the previous occasion on which you made use of this right. The right to obtain a copy free of charge may only be exercised in person.
If you would like to exercise your rights, withdraw consent, file a complaint, or ask questions about this policy, you should contact us at privacy@fullstacklabs.co.
G) COLOMBIA-BASED APPLICANTS
Subject to applicable law, you may have the following privacy rights, subject to certain exceptions:
- Right to Know/Access. You may have the right to confirm whether we are processing your personal information, the right to know specific pieces of personal information we have collected about you, to know the categories of personal information we are processing or have processed, and the right to access that data. You also have the right to know the third parties to whom we have disclosed your personal information.
- Right of Correction. You may have the right to correct inaccuracies in your personal information, taking into account the nature of the personal information and the purposes of the processing of the personal information.
- Right of Deletion. You may have the right to delete your personal information provided by you or obtained about you.
- Right to Withdraw Your Consent. You may have the right to withdraw your consent to our processing of your personal information. Please note that your withdrawal will only take effect for future processing, and will not affect the lawfulness of processing before the withdrawal.
Sensitive Data: To the extent that the personal data you provide to FullStack includes sensitive data, including as examples but not limited to photos, identity documents and fingerprints, you expressly authorize that such data may be used, processed and transferred for security purposes, information validation, as a biometric identification system, and for any other related to the purposes herein stated.
If you would like to exercise your rights, you may contact us by email at privacy@fullstacklabs.co, by mail at 21750 Hardy Oak Blvd, Ste. 104, PMB 21582, San Antonio, TX 7825, or by phone at +1-512-648-6703.
H) COSTA RICA-BASED APPLICANTS
Users in Costa Rica have certain privacy rights as specified under Costa Rica law, including Law 8968. FullStack acts as Data Controller of the applicant's personal information. In Costa Rica, you may have the following privacy rights:
- Right to Know/Access. You may have the right to confirm whether we are processing your personal information and by which systems, programs, methods or processes, the right to know specific pieces of personal information we have collected about you, and the right to access that data.
- Right of Correction. You may have the right to correct inaccuracies in your personal information, taking into account the nature of the personal information and the purposes of the processing of the personal information.
- Right of Deletion. You may have the right to delete your personal information provided by you or obtained about you.
Restricted access data: To the extent that the personal data you provide to FullStack includes restricted access data, including as examples but not limited to home address, personal phone number or e-mail address, you expressly authorize that such data may be used, processed and transferred for security purposes, information validation, and for any other related to the purposes herein stated.
If you would like to exercise your rights, withdraw consent, file a complaint, or ask questions about this policy, you should contact us at privacy@fullstacklabs.co.
I) DOMINICAN-BASED APPLICANTS
In the Dominican Republic, the owner of the data, the candidate or employee, may be entitled to the following privacy rights:
- Right to Know/Access. You may have the right to confirm whether we are processing your personal information, the right to know specific pieces of personal information we have collected about you, to know the categories of personal information we are processing or have processed, and the right to access that data. You also have the right to know the third parties to whom we have disclosed your personal information.
- Right of Correction. You may have the right to correct inaccuracies in your personal information, taking into account the nature of the personal information and the purposes of the processing of the personal information.
- Right of Deletion. You may have the right to delete your personal information provided by you or obtained about you.
If you would like to exercise your rights, you may contact us by email at privacy@fullstacklabs.co, by mail at 21750 Hardy Oak Blvd, Ste. 104, PMB 21582, San Antonio, TX 7825, or by phone at +1-512-648-6703.
J) ECUADOR-BASED APPLICANTS
Users in Ecuador have certain privacy rights as specified under Ecuador law, including the Official Register No. 459., as follows:
- Right to Know/Access. You may have the right to confirm whether we are processing your personal information, the right to know specific pieces of personal information we have collected about you, to know the categories of personal information we are processing or have processed, and the right to access that data.
- Right of Correction. You may have the right to correct inaccuracies in your personal information, taking into account the nature of the personal information and the purposes of the processing of the personal information.
- Right of Deletion. You may have the right to delete the personal information provided by you or obtained about you, as authorized by applicable law.
- Right to Object. You may have the right to object to the processing of your personal information that is based on legitimate interests or your consent as authorized by applicable law.
- Right of Portability. You may have the right to obtain your personal data in a compatible, up-to-date, structured, common, interoperable, and machine-readable format, preserving its characteristics; or to transmit it to other controllers.
If you would like to exercise your rights, withdraw consent, file a complaint, or ask questions about this policy, you should contact us at privacy@fullstacklabs.co.
K) INDIA-BASED APPLICANTS
Users in India have certain privacy rights as specified under Indian law, including the Digital Personal Data Protection Act, as follows:
- Right to Know/Access. You may have the right to confirm whether we are processing your personal information, the right to know specific pieces of personal information we have collected about you, to know the categories of personal information we are processing or have processed, and the right to access that data. You also have the right to know the third parties to whom we have disclosed your personal information. You may also have the right to know and obtain a summary of the personal data that is being processed and the processing activities undertaken by us.
- Right of Correction and Deletion. You may have the right to request the correction, completion, updating and deletion of your data.
- Right of Grievance Redressal. You may have the right to have readily available means of grievance redressal provided by us with respect to any act or omission regarding the performance of our obligations in relation to your personal data.
If you would like to exercise your rights, withdraw consent, file a complaint, or ask questions about this policy, you should contact us at privacy@fullstacklabs.co.
L) MEXICO-BASED APPLICANTS
Under local law, FullStack is a “data controller”. This means that we are responsible for deciding how we hold and use personal information about you.
In addition to the information provided within this Notice, personal data we collect from Mexico-based applicants may also include:
- Unique Population Registry Code (by its initials in Spanish, “CURP”)
- Federal Taxpayer Registry (by its initials in Spanish, “RFC”)
You should also be aware of your ARCO Rights (Access, Rectification, Cancellation and Opposition Rights). This means you may, at all times, have a right to request access to your personal data or the correction of such data. Likewise, you may request us to cancel your data, you may oppose to use of your data for specific purposes and you may request to revoke consent previously granted (the “ARCO Rights”). Please note that your ARCO rights may be subject to limitations, in accordance with law. To exercise your ARCO rights, you must send a request to the following email address privacy@fullstacklabs.co.
If you choose to exercise your ARCO Rights, we will explain: (i) the information and/or documents we require for identification purposes; (ii) the expected timeframe by which you can expect a response; (iii) how to submit your request, including any forms that might be required; and (iv) the form in which we will deliver your information to you (for example: copies of documents or digital files).
If you would like us to limit the way we use or disclose your personal data in a particular way, or if you disagree with any updates to this privacy notice, please contact us at privacy@fullstacklabs.co to discuss this request or concern. FullStack's mailing address is 21750 Hardy Oak Blvd, Ste. 104, PMB 21582, San Antonio, TX 7825.
M) PAKISTAN-BASED APPLICANTS
Users in Pakistan have certain privacy rights as specified under Pakistani law, including the Prevention of Electronic Crimes Act, as follows:
- Right to Access. You may have the right to confirm whether we are processing your personal information, the right to know specific pieces of personal information we have collected about you, to know the categories of personal information we are processing or have processed, and the right to access that data. You may also have the right to know and obtain access to all your personal data, to obtain confirmation from FullStack whether your personal data is under processing or has been processed, and to know the third parties to whom we have disclosed your personal information.
- Right of Correction. You may have the right to correct inaccuracies in your personal information, taking into account the nature of the personal information and the purposes of the processing of the personal information.
- Right of Withdrawal of consent. You may have the right to withdraw your consent to our processing of your personal information. Please note that your withdrawal will only take effect for future processing, and will not affect the lawfulness of processing before the withdrawal.
- Right of Deletion. You may have the right to delete your personal information provided by you or obtained about you, as authorized by applicable law.
If you would like to exercise your rights, withdraw consent, file a complaint, or ask questions about this policy, you should contact us at privacy@fullstacklabs.co.
N) PANAMA-BASED APPLICANTS
Users in Panama have certain privacy rights as specified under Panama law, including the Data Protection Law, as follows:
- Right to Know/Access. You may have the right to confirm whether we are processing your personal information, the right to know specific pieces of personal information we have collected about you, to know the categories of personal information we are processing or have processed, and the right to access that data.
- Right of Correction. You may have the right to correct inaccuracies in your personal information, taking into account the nature of the personal information and the purposes of the processing of the personal information.
- Right of Deletion. You may have the right to delete your personal information provided by you or obtained about you.
- Right to Object. You may have the right to object to the processing of your personal information that is based on legitimate interests or your consent, and revoke your consent.
- Right of Portability. You may have the right to obtain your personal information in a portable and—to the extent technically feasible—readily usable format that allows you to transmit the data to another entity without hindrance.
Sensitive data: To the extent that the personal data you provide to FSL includes sensitive data, including as examples but not limited to photos, identity documents and fingerprints, you expressly authorize that such data may be used, processed and transferred for security purposes, information validation, as a biometric identification system, and for any other related to the purposes herein stated.