CORP MONSTER

KOICONNECT LTD: Privacy Policy

Last updated: October 01, 2025

Introduction

Welcome to KOICONNECT LTD!

KOICONNECT LTD values your privacy and is committed to protecting your personal data. This Privacy Policy ("Privacy Notice") explains how KOICONNECT LTD, including its licensors and affiliates ("Company", "we", "our", or "us"), collects, processes, and protects your information when you visit our website at https://corp.monster (the "Site"), use our services ("Services"), or interact with us in any other way, such as through social media. This Privacy Notice outlines the types of personal data we collect from you, either directly or through your organization, as well as how we use and protect that personal data. It also details your rights regarding access, correction, and deletion of your personal information. By using our Site or Services, you ("you", "your", "client", "client representative", "data subject") may be required to confirm your acceptance of this Privacy Notice. For the purposes of this Privacy Notice, "personal data" refers to any information that can be used to directly or indirectly identify, contact, or locate you as a private individual ("Personal Data").

We process Personal Data in compliance with this Privacy Notice and applicable legislation, including the Cyprus Law on the Protection of Natural Persons with regard to the Processing of Personal Data and on the Free Movement of such Data (Law 125(I)/2018) and the General Data Protection Regulation (Regulation (EU) 2016/679) ("GDPR"), and any other relevant national data protection laws applicable to Company (collectively, "Data Protection Law"). We may act as both a Controller and a Processor of personal data depending on the context. When you directly engage with us for the processing of your personal data, we act as the Controller, determining the purposes and means of processing in compliance with applicable Data Protection Law. In most cases, however, we process personal data of End Users on behalf of our Customers and solely in accordance with their instructions, functioning as a Data Processor; our Customers determine the purposes, lawful basis, and methods of processing, and we implement appropriate technical and organizational measures to ensure confidentiality, integrity, and compliance. For visitors to our website, we similarly act as a Data Processor, collecting personal data through cookies and other tracking technologies for purposes such as improving user experience and providing access to content, always in accordance with Data Protection Law principles, including data minimization, security, and facilitating the exercise of data subject rights, and ensuring that any sub-processors engaged are bound by equivalent obligations.

This Privacy Policy forms part of our Company Terms of Service and the Data Processing Agreement. Unless otherwise defined in this Privacy Policy, capitalized terms used in this Privacy Policy have the same meanings as in our Terms of Service.

Purpose and Scope

This Privacy Notice applies to all individuals whose personal data we process for the following purposes:

(a) Performance of Agreement. We process personal data where it is necessary to enter into or perform agreement with you or to take steps at your request prior to entering into agreement. This includes:

registering your User Profile and verifying your personal information;
processing and fulfilling service subscriptions and transactions;
providing access to the Services and related support or training;
responding to your service-related requests and communications;
managing your uploaded content and User Profile settings; and
handling inquiries, complaints, or feedback from you or our partners.

(b) Legitimate Interests. We process personal data where it is necessary for our legitimate business interests, provided that such interests are not overridden by your rights and freedoms. This includes:

diagnosing technical issues and maintaining the security and functionality of our Site and Services;
analysing usage statistics to improve user experience;
sending one-time registration confirmations and essential service notifications;
pursuing or defending legal claims; and
ensuring business continuity, fraud prevention, and system integrity.

(c) Legitimate Interests and Your Consent. We may also process personal data for purposes related to business development, communication, and service improvement. Examples include:

improving and developing our products and services;
personalising communications and conducting customer satisfaction surveys;
sending service updates, product announcements, and special offers from us or selected third parties.

Such processing is carried out only where you have given your consent and remains valid until it is withdrawn. You may withdraw your consent at any time by contacting us or using the unsubscribe link provided in our communications.

(d) Legal Obligations. We may process and retain certain personal data where it is necessary for compliance with a legal obligation to which we are subject. This includes:

complying with applicable laws, regulations, and court orders;
enforcing our Terms of Use and other agreements;
protecting our legal rights and responding to lawful requests by public authorities.

In such cases, we may contact you if required by law, but these communications will never be used for marketing purposes if you have opted out of receiving marketing messages. Personal data is collected and processed only for the specified purposes, retained only as long as necessary, and handled in accordance with your rights under Data Protection Law, including access, correction, deletion, restriction of processing, data portability, and objection, with all sub-processors required to comply with applicable data protection laws. By accessing our Site, using our Services, or interacting with us, you acknowledge that you have read and understood this Privacy Notice and, where applicable, consent to the processing of your Personal Data as described herein.

Definition of Personal Data.

For the purposes of this Privacy Notice, “Personal Data” refers to any information that identifies or can be used to identify a natural person directly or indirectly. This may include, but is not limited to:

Name, Surname, email address, phone number
Identification numbers (e.g., national ID, tax ID, passport)
IP address, device and browser information
Employment or business affiliation
Financial and payment information
Any other data you voluntarily provide when using our Website or Services

Personal Information Collection.

We collect, store, and process personal data in accordance with applicable Data Protection Law. The scope and categories of Personal Data we process depend on your relationship with us, whether you are a Site visitor, user of our Services, representative of our Customer, or employee of one of our Customers.

We collect and process Personal Data only to the extent necessary for providing and improving our services, fulfilling contractual obligations, complying with legal requirements, and ensuring legitimate business operations.

Below is a list of types of Personal Data that we may collect and use about you.

Categories of Personal Data	Description
Identity Data	First name, last name, username or similar identifier, date of birth, nationality, government ID, passport, and other identification data.
Contact Data	Business or home address, email address, and phone or mobile numbers.
Professional Data	Job title, position, employer’s name, department, qualifications, career history, and educational background.
Financial and Transactional Data	Bank account details or payment card information, includes details about payments to and from you and other details of services you have purchased from us.
Contractual Data	Details about the products or services you or your employer receive from us, including User Profile and subscription data.
Technical Data	IP address, login data, browser type and version, time zone setting, operating system, and other technology used to access our Services.
Usage Data	Information about how you use our Services, applications, including access logs and metadata.
Locational Data	Information about your location (country, IP address, and device location, when consented).
Communications Data	Content of your communications with us, including support requests, emails, chat messages, and communication metadata.
User Profile Data and Content	Your username and password, your preferences, feedback and survey responses. Any data or content you voluntarily upload or post on the User Profile, including comments, messages, and files, which may contain Personal Data.
Consents and Preferences	Any permissions, consents, or marketing preferences you provide to us.
Public and Third-Party Data	Information obtained from public records, professional networking sites, or third-party service providers such as credit or fraud prevention agencies.
Other Information	Any other information you voluntarily share, such as responses to surveys, feedback forms, files or participation in events.

For the avoidance of doubt, Personal Data shall not include any personal information which is anonymized, after which the identifiable data is destroyed. Company may also collect and use non-Personal Information to analyze the effectiveness of our Services and to improve our Services. We may collect non-Personal Information through the Services, the Site and through cookies.

In providing our Services, we also act as a Data Processor on behalf of our Customers (employers). The Customer, acting as the Data Controller, determines the purposes and means of Personal Data processing. The types of Personal Data uploaded by our Customers may include:

Contact and employment data (e.g., name, work email, position, department);
Recruitment data (e.g., CVs, test results, interview evaluations);
Performance data (e.g., KPIs, assessments, feedback forms);
HR data (e.g., payroll, attendance, absences, leave records);
Engagement data (e.g., satisfaction surveys, requests, complaints);
Employment relationship data (e.g., contracts, start and termination dates);
Any other HR-related information entered by the Customer or its authorized users.

After granting access to our Services and User Profile, Customers independently collect and upload Personal Data of their employees or contractors. We store and process such data solely on behalf of and in accordance with the Customer’s documented instructions.

If you are a representative or employee of our Customer, we process your personal data (name, job title, company name, email, phone number) for:

Performance and settlement of the agreement concluded with your employer or principal;
Establishing and maintaining business relationships;
Conducting direct marketing of our services (legitimate interest);
Compliance with tax and accounting obligations;
Establishment, exercise, or defense of legal claims

We collect, store, and process the files that you upload, download, or otherwise access through the Services provided on our Site (“Files”). We understand that these Files may be confidential or contain sensitive information, and we are committed to protecting them with appropriate security measures. We do not share, disclose, or grant third parties access to your Files, except:

when required to comply with applicable law, regulation, or legal request; or
when it is necessary to operate, maintain, or improve our Services, in which case access is strictly limited to authorized personnel who are bound by confidentiality obligations.

We apply industry-standard technical and organizational measures to help protect your Files against unauthorized access, alteration, disclosure, or destruction. These include encryption, access controls, regular security assessments, and monitoring of system integrity. However, please note that no online system can be guaranteed to be completely secure. While we strive to protect your Files, we cannot fully eliminate all security risks.

How You Can Help Protect Your Files. You also play an important role in keeping your information secure. To help protect your Files and User Profile, we recommend that you:

keep your login credentials (such as passwords, verification codes, and security tokens) confidential and never share them with anyone;
use a strong and unique password and change it regularly;
enable two-factor authentication (2FA) if available;
log out of your User Profile after each session, especially when using a shared or public device;
avoid clicking suspicious links or sharing access codes received by email, phone, or messaging apps; and
promptly notify us if you suspect any unauthorized access or unusual activity in your User Profile.

By following these practices, you help ensure that your Files and personal information remain secure while using our Services.

Sources of Your Personal Data.

We may collect Personal Data about you or your business from a variety of sources, including:

Directly from You: When you use our Services, complete a contact form, request marketing communications, participate in surveys, or otherwise communicate with us.

Automatically Through Your Use of Our Site or Services: We collect usage and profile data when you interact with our Site and/or Services. This includes, but is not limited to, your login credentials, browser or app settings, marketing preferences, and information from the devices and browsers you use to access our Service. This information helps us deliver and improve our Services.

Through Cookies and Similar Technologies: We use cookies and other tracking technologies to collect data during your visit to our Site or use of our mobile applications. For further details, please refer to our [Cookie Policy].

From Third Parties: We may receive Personal Data about you from various third-party sources, including:

Companies, business partners, or individuals who refer or introduce you to us.
Business partners, service providers, subcontractors, advertising networks, analytics providers, search information providers, fraud prevention services.
Social media platforms and other online platforms, for example when you interact with our advertisements on Google.
Publicly available sources, such as national company registries or other government databases.
Market research firms.
Government authorities, law enforcement agencies, regulators, or other public authorities, where permitted by law.

Cookie Use.

We use cookies and similar technologies on our Site to improve its performance, enhance user experience, analyze traffic, and personalize content. Cookies are small text files placed on your device that help us recognize you and remember your preferences when you visit our Site. Similar technologies (such as web beacons, pixels, or local storage) may also be used for the same purposes.

Cookies may be “session cookies,” which expire when you close your browser, or “persistent cookies,” which remain stored on your device for a defined period or until you delete them. We use the following categories of cookies:

Strictly necessary cookies – required for the operation and security of the Site.
Functional cookies – allow the Site to remember your preferences and improve usability.
Analytical cookies – help us understand how visitors use the Site and enable us to improve its functionality.
Marketing and third-party cookies – used to deliver personalized content and measure the effectiveness of our marketing campaigns.

You have control over how cookies are used. When you visit our Site, you may choose to accept or reject non-essential cookies through the cookie consent banner or your browser settings. You can also delete cookies already stored on your device or configure your browser to block new ones. Please note that disabling certain cookies may affect the functionality or performance of the Site.

In some cases, we use analytics and advertising tools (such as Google Analytics or Meta Pixel) that are operated by third-party providers. These third parties may process information in accordance with their own privacy policies. You can opt out of such data processing by following the opt-out instructions provided by these providers or by using recognized industry tools, such as the Network Advertising Initiative (NAI), the Digital Advertising Alliance (DAA) or the European Interactive Digital Advertising Alliance (EDAA).

For more detailed information about the specific cookies we use, their duration, and purposes, please refer to our [Cookies Policy].

Personal Information Use.

Below is a list of the ways that we may use your Personal Data together with the legal basis of processing, where applicable under Data Protection Law.

Purposes for which we use your Personal Data	Legal basis
Providing and managing our Services creating and verifying User Profiles, giving access to services, processing subscriptions, responding to requests, managing uploaded content and User Profiles settings, handling feedback or complaints.	Performance of the agreement Compliance with our legal obligations
Improving our business by improving our services and operations, developing new ways and solutions to meet our customers’ needs and grow our business and analyzing and studying how our customers use products and services from Company	Performance of a agreement Legitimate interest Our legitimate interest is centered around enhancing the quality of our Services, optimizing operational efficiency, and maintaining a competitive edge in the market
Secure access to our Services, including but not limited to performing the necessary verification of our users prior to granting access to our Services  and User Profiles	Performance of the contract Legitimate interest Consent Our legitimate interest is to safeguard access to our Services to authorized only users who have gone through verification processes
Marketing and events-related communications, including but not limited to inviting you to participate in events, surveys, providing personalized content through advertising campaigns or otherwise communicating with you for marketing purposes to promote our Services	Consent Legitimate interest Our legitimate interest is to tailor our marketing communications to the preferences and interests of our audience and provide a personalized and engaging experience for our customers
Protect the security or integrity of us, our Site and our Services	Legitimate interest Our legitimate interest is to maintain the reliability and availability of our services by conducting verification, detecting and preventing security threats, fraud, money laundering and other crime, unauthorized access, risk and other activities that could harm our business, Site, or Services. Legal Obligation Performance of the agreement
Communicate with you about our Site and Services, such as to notify of changes and updates and to provide you with customer support and troubleshooting	Performance of the agreement Legitimate interest Our legitimate interest is grounded in our commitment to delivering a seamless and informative user experience and to provide assistance when needed
Meet our legal, regulatory, and tax reporting obligations	Legal obligation

In cases where we need to process personal data for the performance of the contract with you or as required by law and you refuse to provide your information, we may not be able to perform the agreement with you and consequently, we may not be able to provide certain services to you.

Communications.

We may contact you with newsletters, promotional materials, and other marketing communications that may be of interest to you. You may opt out of receiving these communications at any time by clicking the “unsubscribe” link in the email, following the instructions provided in our messages, or contacting us directly. Please note, however, that even if you opt out of marketing communications, we may still send you non-marketing communications related to your use of the Services. These may include service updates, administrative messages, transaction confirmations, or other important notices.

Information Sharing with Third Parties.

We do not sell or trade your Personal Information to third parties. We only share your information with trusted parties in the manner described below, and always for the limited purposes outlined in the “Information Use” section of this Privacy Policy, unless otherwise disclosed at the time of collection:

Regulatory and Legal Authorities: We may disclose your Personal Information to government bodies, law enforcement agencies, regulatory authorities, or other legally authorized entities where required to do so by applicable law or regulation, or where such disclosure is necessary to: i) Comply with legal obligations; ii) Protect our business or users; iii) Enforce our legal rights.

Business Transfers: If we undergo a merger, acquisition, restructuring, or sale of assets, we may transfer your Personal Information to the acquiring entity, provided such entity agrees to be bound by the terms of this Privacy Policy.

Public Reporting: From time to time, we may publish reports that include anonymized, aggregated statistics or insights derived from Personal Information.

Affiliates: We may share your Personal Information with our current or future affiliates for purposes consistent with this Privacy Policy.

Marketing Partners: We may share your Personal Information with advertising partners (such as social media platforms) to help deliver targeted marketing content that aligns with your interests.

With Your Consent: We may share your Personal Information with third parties in any other way, but only where you have given us your explicit consent to do so.

Automated Decision-Making and Profiling.

We do not engage in decision-making based solely on automated processing of your Personal Data including profiling, that produces legal or similarly significant effects on you. All decisions related to the provision of Services or processing of your data involve meaningful human review to ensure your rights and interests are protected.

Retention of Your Personal Information.

We retain your Personal Information only for as long as necessary to fulfill the purposes for which it was collected, in accordance with applicable laws and our internal data retention policies. This includes retaining your data to:

Comply with legal or regulatory obligations
Resolve disputes
Enforce our contractual rights
Conduct internal research and business analysis

To determine the appropriate retention period, we consider the nature, scope, and sensitivity of the data, the purposes for processing it, and whether those purposes can be achieved through other means. For information about specific retention periods related to services we provide, please refer to our Data Processing Addendum.

Security.

We are committed to protecting your Personal Information. To prevent unauthorized access, disclosure, alteration, or destruction of your data, we implement appropriate technical and organizational security measures. These include protections against internal and external threats and limiting access to Personal Information on a strict need-to-know basis. Authorized personnel are required to process Personal Information only in accordance with our instructions and are bound by confidentiality obligations.

If you have chosen a password or other access credentials to use the User Profile, you are responsible for maintaining their confidentiality. You must not share your login information with anyone else and should take reasonable precautions to secure your access.

Please note that while we take reasonable steps to protect your data, no method of electronic transmission or storage over the Internet is entirely secure. As such, we cannot guarantee the absolute security of your Personal Information. You play a crucial role in protecting your data. If you become aware of any security or data breach, please notify us immediately at info@koiconnect.com.

International Transfers.

Your Personal Information may be transferred to, and stored on, servers located in countries outside your jurisdiction, including locations where data protection laws may be less stringent than those in your home country. If you are located outside the Republic of Cyprus and choose to provide us with your information, please be advised that your data may be transferred to and processed in the Republic of Cyprus, where our operations are based. Where required, we implement safeguards, such as standard contractual clauses or similar legal mechanisms, to ensure that your Personal Information remains protected when transferred internationally.

By using our Site and Services, you acknowledge and consent to the transfer of your information to jurisdictions outside your country of residence, including the Republic of Cyprus and any other country where we or our service providers maintain operations.

Third-Party Advertising, Links, and Content.

Our Site may contain links to third-party websites or services that are not operated or controlled by us. We are not responsible for the content, privacy practices, or terms of use of such third parties. We strongly recommend that you review the privacy policies of any external sites you visit.

We also permit third parties, including advertising networks and analytics providers, to collect information about your browsing behavior through cookies, tracking pixels, and other technologies. These third parties may use this data to serve targeted advertisements tailored to your interests across websites and devices. Some of these third parties participate in industry-wide self-regulatory programs that allow users to opt out of targeted advertising. You can learn more about these programs and opt out of interest-based advertising by following the procedures outlined in the "Your Rights" section of this Privacy Policy.

We process your data for targeted marketing purposes only with your explicit consent or where we have a legitimate interest in personalizing and enhancing your experience. You have the right to object to the processing of your Personal Information for direct marketing at any time.

Children’s Privacy.

We do not knowingly collect Personal Information from individuals under the age of 18. Our Site and Services are not directed to minors. If you are a parent or guardian and become aware that your child has provided us with Personal Information, please contact us immediately. Upon becoming aware that we have collected Personal Information from a child under 18 without verifiable parental consent, we will take prompt steps to delete such information from our records.

Your Rights.

Subject to applicable data protection laws, you may have the following rights regarding your Personal Information:

To access a copy of your Personal Information and obtain information about how we process it;
To correct or update any inaccurate or incomplete Personal Information;
To request the deletion of your Personal Information where it is no longer necessary for the purposes for which it was collected or processed;
To request that we restrict the processing of your Personal Information in certain circumstances;
To object to our processing of your Personal Information where we rely on legitimate interests as the legal basis for processing;
To object to decisions based solely on automated processing, including profiling;
To receive your Personal Information in a portable format or to have it transferred directly to another data controller, where technically feasible;
To withdraw any consent you have given for processing your Personal Information at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

You also have the right to lodge a complaint with a relevant supervisory authority if you believe your data protection rights have been violated. To exercise these rights, please contact us at info@koiconnect.com. We may require additional information to verify your identity and protect your privacy before processing your request.

If you wish to make a request on behalf of another individual, you must provide valid authorization to do so.

We reserve the right to charge a reasonable fee if permitted by law, and to refuse requests that are manifestly unfounded, excessive, or would infringe on the privacy rights of others.

Certain Personal Information may be retained for a limited time as required by law or for legitimate business purposes such as record-keeping, accounting, and fraud prevention.

Please note that some rights may be exercised directly through your User Profile if you are a registered user of the Company Services.

Changes to This Privacy Policy.

This Privacy Policy is effective as of the date indicated at the top of this document and remains in effect until updated.

We reserve the right to modify or update this Privacy Policy at any time. Changes will take effect immediately upon posting on this page. Your continued use of our Site or Services after any updates constitutes your acceptance of the revised Privacy Policy.

We encourage you to review this Policy periodically to stay informed of any changes.

Contact Information.

If you have any questions or concerns regarding this Privacy Notice, please contact us at:

KOICONNECT LTD

Company Number: HE464213

Address: Kallipoleos, 3, GEOGAS TOWER, Flat/Office 102, 1055, Nicosia, Cyprus

Email: info@koiconnect.com