PRIVACY POLICY | Isthisjob4me

1. USER INFORMATION

Who is the controller of your personal data?

SETESCA BCN, S.L. is the Controller of the USER’s personal data and informs him/her that these data shall be processed in accordance with the provisions of Regulation (EU) 2016/679 of 27 April (GDPR) and the Organic Law 3/2018 of 5 December (LOPDGDD).

For what purpose do we process your personal data and why do we do it?

Depending on the form from which we have obtained the personal data, we will process it confidentially for the following purposes:

PROFILE COMPILATION

Purposes and legitimisation of the processing: to carry out a profiling process with the Data Subject’s consent, based on automated processing, aimed at evaluating the personal aspects specified in the CV provided by the Data Subject in order to include them in the selection processes of personnel from external companies appointed by the Controller.

Expected consequences: the processing of the data does not foresee any consequences that may have any legal effect or in any other way that may significantly affect the Data Subject.

Applied logic: in order to process the data, an automated procedure is used where all the fields are filtered in order to obtain a result that is the most similar to that requested by the companies that participate in the selection of candidates.

Updating data: in the event of any modification in your data, please update it immediately using the procedures provided for this purpose.

Data storage criteria: data shall be kept for a maximum period of one year after its last update. In this sense, once this period has

elapsed without updating the data, the information will be blocked in such a way that it will not be available to companies. Once three years have passed without updating the information, the data will be erased, guaranteeing total respect for confidentiality both in the processing and in their subsequent destruction.

Communication of the data: Data may be disclosed to affiliated external companies of the Controller in order to execute the employment contract and the training courses required for this purpose, or for legal reasons.

SETESCA BCN, S.L., no representations nor warranties to the user of the Is This Job 4 Me platform and/or software (the “User” and “Is This Job 4 Me”, respectively). In particular, SETESCA BCN, S.L., no representations nor warranties to the User with regards to the information, percentages, statements, suggestions, projections and/or forecasts shown in Is This Job 4 Me (the “Information”). By using Is This Job 4 Me, the User accepts and acknowledges that (i) the Information is based on recruitment and headhunting data obtained and processed by Setesca Talent according to its own standards and criteria; (ii) under no circumstances must the Information be taken or understood as conclusive, final and/or definitive regarding any potential recruitment, application, headhunting or any other similar process which may affect the User; (iii) there are uncertainties inherent in attempting to make the projections and forecasts included in the Information; (iv) the User is familiar with such uncertainties; (v) the User is taking full responsibility for making its own evaluation of the adequacy and accuracy of all such projections and forecasts so furnished to it; and (vi) the User shall have no claim against Setesca Talent, Is This Job 4 Me nor any other company and/or person related to them, with respect thereto. Thus, Setesca Talent and Is This Job 4 Me will not be responsible in any way for any damages, predictions, interpretations, or consequences arising from the use of either Is This Job 4 Me or/and the Information shown and/or provided in Is This Job 4 Me.

SERVICES

Purposes and legitimacy of the processing: provision of the requested services (because it is necessary for the execution of the contract that implies said services, art. 6.1.b GDPR) and sending communications concerning products or services (with the consent of the Data Subject, art. 6.1.a GDPR).

Data retention criteria: data shall be stored for no longer than is necessary to maintain the purpose of the processing or for as long as there are legal prescriptions dictating their custody, and when such purpose is no longer necessary the data shall be erased with appropriate security measures to ensure the anonymization of the data or their complete destruction.

Data disclosure: data will not be disclosed to third parties, unless legally obliged to do so or that is necessary for the provision of the service.

Cross border data transfers

Communication of the data: the data can be communicated to third parties in order to fulfil the purpose of processing, or for legal reasons.

Data international transfers: in accordance with the provisions of article 44 of the GDPR, authorisation for the international transfer of data to a country which has not been declared as having an adequate level of protection may be granted only if sufficient guarantees are obtained. Therefore, it may be granted if the Controller provides a written contract, entered into between the Data Exporter and the Data Importer, setting out the necessary guarantees in respect to the protection of the privacy of the Data Subject and their fundamental rights and freedoms and guaranteeing the ability to exercise their respective rights.

Risks of the processing: I declare that I have been informed regarding the transfer of data to the provider of the services described (according to the attached contract) and that I have been clearly informed of the risks of the processing due to the absence of appropriate guarantees for the protection of personal data existing in the recipient country.

For how long will we keep your personal data?

Data shall be stored for no longer than is necessary to maintain the purpose of the processing or for as long as there are legal prescriptions dictating their custody, and when such purpose is no longer necessary the data shall be erased with appropriate security measures to ensure the anonymization of the data or their complete destruction.

To whom do we disclose your personal data?

No communication of personal data to third parties is foreseen except, if necessary for the development and execution of the purposes of the processing, to our suppliers of services related to communications, with which the CONTROLLER has signed the confidentiality and data processor contracts required by current privacy regulations.

What are your rights?

The rights of the USER are:

Right to withdraw consent at any time.
Right of access, rectification, portability and erasure of your data and the limitation or objection to their processing.
The right to file a claim with the Spanish Supervisory Authority (www.aepd.es) if you consider that the processing does not comply with the current legislation.

Contact information for exercising rights:

SETESCA BCN, S.L.. Balmes, 200 - 08006 Barcelona (Barcelona). E-mail: setesca@setesca.com

2. COMPULSORY OR OPTIONAL NATURE OF THE INFORMATION PROVIDED BY THE USER

The USERS, by marking the corresponding boxes and entering data in the fields, marked with an asterisk (*) in the contact form or download forms, accept expressly and in a free and unequivocal way that their data are necessary for the supplier to meet their request, voluntarily providing their data in the remaining fields. The USER ensures that the personal data provided to the CONTROLLER are true and is responsible for communicating any changes to them.

The CONTROLLER informs that all data requested through the website are mandatory, as they are necessary for the provision of an optimal service to the USER. In the event that not all of the data is provided, there is no guarantee that the information and services provided will be completely adapted to the User’s needs.

3. SECURITY MEASURES

That in accordance with the provisions of the current regulations on the protection of personal data, the CONTROLLER is complying with all the provisions of the GDPR and LOPDGDD regulations for processing the personal data for which they are responsible, and is manifestly complying with the principles described in Article 5 of the GDPR, by which they are processed in a lawful, fair and transparent manner in relation to the data subject and appropriate, relevant and limited to what is necessary in relation to the purposes for which they are processed.

The CONTROLLER guarantees that all appropriate technical and organisational policies have been implemented to apply the security measures established by GDPR and LOPDGDD in order to protect the rights and freedoms of the USERS, and has communicated the appropriate information for them to be able to exercise their rights and freedoms.

For more information about privacy safeguards, you can contact the DATA CONTROLLER via SETESCA BCN, S.L.. Balmes, 200 - 08006 Barcelona (Barcelona). E-mail: setesca@setesca.com