Privacy Policy
Version 1.1 · Last updated 18 October 2026
1. Who is responsible for your data
The controller is Davide Ferrario, trading as Futura Human Resources, R LAGOA BUSINESS CENTER - RUA CORONEL FIGUEIREDO LOJA 5, 8400-306 LAGOA, Portugal, NIF 336609620. Contact: info@futurahumanresources.com.
2. What data we process
- Account: email, password (stored only as a secure hash), account type, consents with date and version, date of last activity.
- Candidate profile: first and last name; date of birth (to confirm you are 18 or over; companies see only your age); country and city of residence; phone; nationality (optional); types of identity, residence or work documents you hold (never their numbers); photo; the job categories, work modes, contract types and countries you are interested in; willingness to relocate; experience; education; languages; skills; certifications; presentation; your choice about visibility in candidate search.
- Applications: the job, your message and the status history.
- Identity verification: images of your identity document (temporary, see section 6), the result, its date and any rejection reason.
- Subscription: its status and the identifiers Creem sends us. We never receive your full card details.
- Statistics: which companies viewed your profile and when; daily counts of your appearances in search results.
- Communications: a record of the emails we send you (type, date, outcome; the content is deleted after sending) and the emails you send to info@futurahumanresources.com.
- Security: session and security cookies (see the Cookie Policy), a one-way hash of your IP address used to limit abuse, and the bot-protection check on our forms.
- Companies: name and email of the contact person, company name, package, job ads and invoicing data.
3. Why we process it and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Creating and running your account, profile and applications; showing your data to companies as described in section 4 | Contract, Art. 6(1)(b) |
| Confirming you are 18 or over | Contract, Art. 6(1)(b) |
| Futura Verified subscription and identity verification | Contract, Art. 6(1)(b) |
| Weekly emails with similar job offers | Consent, Art. 6(1)(a), which you can withdraw at any time |
| Service emails (confirmations, application updates, reminders, inactivity warnings) | Contract and legitimate interest, Art. 6(1)(b) and (f) |
| Security, fraud and abuse prevention, bot protection, admin action log | Legitimate interest, Art. 6(1)(f) |
| Accounting and tax records | Legal obligation, Art. 6(1)(c) |
We do not take decisions about you based solely on automated processing, we do not use facial recognition, we do not show advertising and we do not sell your data.
4. Who receives your data
- Companies. When you apply, the company receives your profile, photo, age, contact details and message. If you make your profile visible, companies with active access can see it in candidate search without your email and phone. Companies never see your date of birth, nationality or document types. Each company processes the data it receives as an independent controller.
- Service providers acting on our behalf: Cloudflare, Inc. (hosting, database, file storage, email delivery and bot protection; our database and files are stored in the EU jurisdiction); Google (the mailbox that receives emails sent to info@futurahumanresources.com).
- Creem (Armitage Labs OÜ, a company registered in Estonia, registry code 16977866) processes payments for Futura Verified as reseller and Merchant of Record, under its own privacy policy.
- Authorities, where the law requires it.
5. Transfers outside the EU
Our database and files are stored in the EU. Cloudflare and Google are US companies and may process some data outside the European Economic Area (for example, network traffic and email delivery). These transfers rely on the EU–U.S. Data Privacy Framework, where the relevant recipient is certified and the transfer falls within its scope, and/or the European Commission's Standard Contractual Clauses, as applicable to each provider and transfer. Creem applies the safeguards described in its Data Processing Agreement for transfers outside the EU/EEA.
6. How long we keep data
| Data | How long |
|---|---|
| Account and profile | Until you delete your account, or after 6 months without activity (warning email 14 days before; not while a subscription is active) |
| Identity document images | Deleted as soon as we decide; otherwise automatically after about one day |
| Verification result | While your account exists |
| Applications | Your personal data is removed when you delete your account; the company keeps only an anonymous record. Data a company has already received is governed by its own policy |
| Statistics | 12 months |
| Record of emails sent | 90 days; the content is deleted right after sending |
| Database backups | Deleted data may remain in backups for up to 30 days |
| Accounting records | 10 years, as required by Portuguese law |
7. Your rights
You have the right to access, rectify and erase your data, to restrict or object to its processing, to data portability and to withdraw consent at any time. In My account you can download your data, edit your profile, change your visibility, unsubscribe from job alerts and delete your account. For anything else, write to info@futurahumanresources.com: we reply within one month. You can also complain to the Portuguese data protection authority, CNPD (www.cnpd.pt), or to the authority of your country.
8. Security
Passwords are stored only as secure hashes, all connections are encrypted, identity documents are kept in private storage and deleted promptly, access to the admin area is restricted, and the site uses strict security settings.
9. Minors
Futura is only for people aged 18 or over.
10. Changes
We publish every new version with its date. For important changes we ask you to accept the new version at your next visit.