Privacy Policy and Terms of Use

MyDNA Digital SpA ("MyDNA") is a Human Resources technology company with presence in more than 10 countries across Latin America. We operate the Employee Experience platform accessible at www.mydnadigital.com and its subdomains.

By accessing or using any of our services, you accept this Privacy Policy. If you disagree with its terms, we ask that you refrain from using our services.

We collect information you provide directly when creating an account, filling out forms, or communicating with us:

• Identification data: first name, last name, job title, company, country.
• Contact data: email address, phone number.
• Usage data: platform activity, modules used, reports generated.
• Technical data: IP address, browser type, operating system, pages visited, and session duration.

We do not collect sensitive data (racial origin, religious beliefs, health, sexual orientation) unless required for the contracted service and with the explicit consent of the data subject.

We use collected information for the following purposes:

• Service delivery: operate and maintain the platform, process transactions, and respond to support requests.
• Communications: send service updates, product news, and relevant content. You may unsubscribe at any time by replying "UNSUBSCRIBE" to our emails.
• Continuous improvement: analyze platform usage to optimize features and user experience.
• Legal compliance: detect fraudulent activity and comply with applicable legal obligations.
• Research and statistics: generate aggregated, anonymized data on LATAM labor market trends. This data never identifies individual users.

MyDNA applies appropriate technical and organizational measures to protect your data against unauthorized access, loss, or destruction:

• TLS encryption on all communications between your browser and our servers.
• Secure storage on certified AWS infrastructure, with role-based access controls.
• Restricted access: only authorized personnel access personal data, under strict confidentiality protocols.
• Periodic security audits and vulnerability assessments.

Client data is stored on servers located in the region corresponding to the client's country. We never transfer personal data to third parties for our own commercial purposes without your consent.

We use cookies and similar technologies to improve your experience and analyze site traffic:

• Essential cookies: necessary for site operation (authentication, language preferences). Cannot be disabled.
• Analytical cookies: allow us to understand how visitors interact with the site (Google Analytics). Data is anonymized.
• Marketing cookies: used to display relevant content on third-party platforms (LinkedIn, Meta). You can decline them without affecting core functionality.

In accordance with applicable legislation, you have the right to:

• Access: request a copy of the personal data we hold about you.
• Rectification: correct inaccurate or incomplete data.
• Erasure: request deletion of your data when no longer necessary for its original purpose.
• Portability: receive your data in a structured, commonly used format.
• Objection: object to the processing of your data for direct marketing purposes.
• Withdrawal of consent: withdraw your consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, send an email to privacy@mydnadigital.com with your full name, registered email, and specific request. We respond within 30 business days.

MyDNA will generate a new report at no additional cost in the following cases:

• The user did not receive their report by email. In this case, the same generated report will be resent.
• The user requires specialized assistance to complete the form.
• The user and a MyDNA specialist jointly determine that an error occurred when completing the form.

No monetary refunds are issued. Platform licenses follow the terms of the contract signed between the parties.

For any request: contact@mydnadigital.com

MyDNA reserves the right to update this Privacy Policy when necessary. We will notify you of relevant changes by email or through a prominent notice on our platform. Continued use of our services after notification implies acceptance of the updated version.

This policy was last updated in June 2025.