Privacy Policy

Privacy Policy

This Privacy Policy (along with other documents referred to herein) describes what personal information we collect from you and how we collect, use, and process it.

1. DATA CONTROLLER DETAILS

THE WISE SEEKER S.L., NIF B88209929, Calle Almagro nº1, 2ª izda, 28010 Madrid, Phone +34 91 9152400, which has appointed a Data Protection Officer whom you may contact regarding any questions related to this Policy: protecciondedatos@thewiseseeker.com

1.1. Applicable Regulations

Our Privacy Policy has been designed in accordance with the EU General Data Protection Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.

The Wise Seeker may modify this Privacy Policy to adapt it to legislative, jurisprudential, or interpretative changes made by competent control authorities. These privacy conditions are complemented by the Legal Notice, Cookie Policy, and Terms of Service.

2. CATEGORIES OF DATA SUBJECTS

Our Privacy Policy concerns you if you belong to any of the following categories:

  • Users of our website.
  • Candidates to whom we provide employment services or who submit their application for a job vacancy and contact us through our website, job boards, social media pages, or other channels.
  • Potential candidates, as well as potential clients and their business contacts whom we contact to present our products and services.
  • Clients with whom we maintain a business relationship and whom we assist in filling vacancies.
  • Service providers who provide us with various services.

3. PURPOSE OF PROCESSING PERSONAL DATA

WEB USERS

Web Users
Purpose When you visit our website or application, we process your data for the following purposes:
  • Access the website
  • Ensure the established connection functions correctly
  • Guarantee and optimize the performance of our website and its accessibility
  • Ensure and evaluate the security and stability of the system
For this, we also use cookies and other technologies. For more information, please see our Cookie Policy.
Categories of Personal Data We process the following data:
  • Website from which it was accessed (source URL), browser used, and, when necessary, the operating system of the internet-connected device
  • Name of your internet provider
For more information, please see our Cookie Policy.
Legal Basis The data processing is based on the following legal bases:
  • Art. 6.1 b) GDPR - establishment, execution, or termination of our contract with you
  • Art. 6.1 f) GDPR - our legitimate interest in the security, stability, and usability of our website
  • Art. 6.1 a) GDPR - your consent
Collection of Your Data We collect data directly from you.
Recipients of Your Data No personal data is transferred except as legally permitted.

CANDIDATES

Candidates
Purpose 1 Purpose 2
Purposes We process your data when you register with us to provide you with employment and recruitment services or to carry out a selection process with you to establish an employment relationship with you. In this context, we may use your data to communicate with you, respond to your questions, analyze your CV and find a suitable position for you, create a candidate profile for you, arrange interviews, conduct aptitude tests, or send your application documents to the employer of your choice. We process your data when you register with us and make your application data available to us and, if applicable, to potential employers.
Categories of Personal Data For this, we may process the following data:
  • Name and address
  • Phone number
  • Email address
  • Information in your CV
  • Information about your educational background
  • Professional experience
  • Work references
  • Salary expectations
  • Professional aspirations
  • Nationality
  • Residence and work permit
  • Photos
  • Language skills
  • Results from assessment centers
  • In certain cases, special categories of data, such as disability
 For this, we may process the following data:
  • Name and address
  • Phone number
  • Email address
  • Information in your CV
  • Information about your educational background
  • Professional experience
  • Work references
  • Salary expectations
  • Professional aspirations
  • In certain cases, special categories of data, such as disability
Legal Basis The data processing is based on the following legal bases:
  • Art. 6.1 b) GDPR - establishment, execution, or termination of our contract with you
  • Art. 6.1 c) GDPR - compliance with legal labor and social obligations
  • Art. 6.1 f) GDPR - our legitimate interest in maintaining our client relationship with you
  • We only process your special categories of data with your consent in accordance with Art. 6.1 a) GDPR and to the extent that we are obligated to do so for labor and social reasons, and finally for equal opportunity reasons. In these cases, we base the processing of your data on Art. 9.2 b) g) and h) GDPR.
 The data processing is based on the following legal bases:
  • Art. 6.1 b) GDPR - establishment, execution, or termination of the user contract with you for the provision of our candidate registration service.
  • Art. 6.1 f) GDPR - our legitimate interest in maintaining our client relationship with you.
  • In this case, we only process your special categories of data with your consent in accordance with Art. 6.1 a) and 9.2 a) GDPR.
Collection of Your Data We collect data directly from you. Additionally, we may also collect your data from third parties, specifically from:
  • References, for example, former employers or your former clients to confirm your credentials and qualifications
  • Publicly accessible professional networks, such as LinkedIn, to expand the information we already have about you
We will only contact the references you have indicated during the service request process. 		We collect data directly from you.
Recipients of Your Data In order to provide our employment services, we may share personal information about you with potential employers who offer job vacancies in which you are interested. Within the data processing described here, it is also possible that both internal and external service providers may have access to your data. These include data processors, such as:
  • IT support
  • Web hosting, IT service
  • IT solutions to improve service quality
  • Data analysis
  • Recruitment support
  • Sales
  • Telecommunications providers
  • Professional network providers
  • Psychometric assessment or aptitude test providers
Our suppliers are contractually obliged by us to maintain confidentiality and comply with data protection standards and regulations. If you apply for a specific position, we will forward your candidate data to the potential employer who has requested it. 		In order to provide our employment services, we may share personal information about you with potential employers who offer job vacancies in which you are interested. Within the data processing described here, it is also possible that both internal and external service providers may have access to your data. These include data processors, as well as our processors in the following areas:
  • IT support
  • Web hosting, IT service
  • IT solutions to improve service quality
  • Data analysis
  • Recruitment support
  • Sales
  • Telecommunications providers
  • Professional network providers
  • Psychometric assessment or aptitude test providers
Our suppliers are contractually obliged by us to maintain confidentiality and comply with data protection standards and regulations. If you apply for a specific position, we will forward your candidate data to the potential employer who has requested it.

POTENTIAL CANDIDATES AND POTENTIAL CLIENTS

Potential Candidates and Potential Clients
Purpose We process your personal data to present our services to you and to contact you and respond to your inquiries. We process the personal data you provide when you contact us and make an inquiry. Additionally, we may process data about you obtained from public sources and professional and social networks such as LinkedIn, the company, or other job portals to contact you if we believe you may be interested in our employment services. Additionally, we may have learned of you through a referral from another candidate or client and may contact you. If you act as a business contact on behalf of a company, we will process your professional contact details.
Categories of Personal Data For this, we may process the following data:
  • Name and address
  • Position in the company
  • Phone number
  • Email address
  • Professional data
  • Name of the company you work for
  • Information in your CV, professional profile, company profile
  • Information about your educational background
  • References
  • Professional experience
  • Work references
  • Salary expectations
  • Professional aspirations
  • Open job advertisements
  • Nationality
  • Photos
  • Language skills
  • Status in your professional networks, for example, if you are open to job offers
Legal Basis The data processing is based on the following legal bases:
  • Art. 6.1 a) GDPR - your consent
  • Art. 6.1 b) GDPR - establishment, execution, or termination of our contract with you
  • Art. 6.1 f) GDPR - our legitimate interest in direct marketing measures and distribution of our recruitment and employment services, as well as our legitimate interest in finding new business contacts, clients, and potential candidates
Collection of Your Data We collect data directly from you. Additionally, we may also collect your data from third parties, namely:
  • Professional networks such as LinkedIn
  • Other candidates or clients
Recipients of Your Data In the context of the data processing described here, it is possible that internal and external service providers in the following areas may have access to your data:
  • Marketing
  • Sales
  • IT solutions
  • IT support
  • Postal and shipping services
  • Telecommunications
  • Data analysis

CLIENTS (B2B) AND CONTACT DETAILS

Clients (B2B) and Contact Details
Purpose We process your data to provide our services to you. For this, we process your data to communicate with you and find suitable candidates for your vacancies.
Categories of Personal Data For this, we may process the following data:
  • Company name
  • Address
  • Company contact details
  • Phone number
  • Information on vacancies and requirements profiles
Legal Basis The data processing is based on the following legal basis:
  • Art. 6.1 b) GDPR - establishment, execution, or termination of our contract with you
Collection of Your Data We collect data directly from you. Additionally, we may also collect your data from third parties, namely:
  • Professional networks such as LinkedIn
  • Other clients and candidates
Recipients of Your Data In the context of the data processing described here, it is possible that internal and external service providers in the following areas may have access to your data:
  • Marketing
  • Sales
  • IT solutions
  • IT support
  • Postal and shipping services
  • Telecommunications
  • Data analysis
  • Accounting
  • Administration
  • Banking

SERVICE PROVIDERS AND CONTACT DETAILS

Service Providers and Contact Details
Purpose 1 Purpose 2
Purposes We process your personal data to enter into the service contract with you and receive your services, as well as to communicate with you in the context of our business relationship. Additionally, we process your data for accounting purposes. We process your personal data to assess your suitability as our provider. Only in very limited cases and to the extent that we are legally obligated to do so, we compare your data with sanction lists and other lists and public records, including terrorist and embargo lists and PEP (Politically Exposed Persons) lists.
Categories of Personal Data For this, we may process the following data:
  • Company name
  • Name and address
  • Contact details of individuals
  • Phone number
  • Summary of services provided
  • Contractual and accounting data
 For this, we may process the following data:
  • Company name
  • Name and address
  • Contact details of individuals
  • Phone number
  • References
Legal Basis The data processing is based on the following legal basis:
  • Art. 6.1 b) GDPR - establishment, execution, or termination of our contract with you
 The data processing is based on the following legal bases:
  • Art. 6.1 c) GDPR - our legal obligation to conduct background checks
  • Art. 6.1 b) GDPR - establishment, execution, or termination of our contract with you
  • Art. 6.1 f) GDPR - our legitimate interest in conducting evaluations to assess your suitability
Collection of Your Data We collect data directly from you. We collect data directly from you. We may also use data from public records and sanction lists.
Recipients of Your Data In the context of the data processing described here, it is possible that internal and external service providers in the following areas may have access to your data:
  • Marketing
  • Sales
  • IT solutions
  • IT support
  • Postal and shipping services
  • Telecommunications
  • Data analysis
  • Accounting
  • Administration
  • Banking
 In the context of the data processing described here, it is possible that internal and external service providers in the following areas may have access to your data:
  • Recruitment
  • IT solutions
  • IT support
  • Postal and shipping services
  • Telecommunications
  • Administration

4. PROCESSING OF PERSONAL DATA IN THE JOB POSTING AND MULTIPOSTING SERVICE

Our clients can post job advertisements on our website and receive and manage application data.

Therefore, the user, as well as the company they work for, must register with us to post job advertisements on our website, including multiposting.

If the user creates a job advertisement for a vacant position in their company on our website and allows us to manage it or create a company profile, we process the following data:

  • Email address and any other contact information of the person responsible for the job advertisement in the company.
  • Contact information of the person who will receive the applications.
  • All information about the company included in the company profile, such as the company name, company address, contact details of company representatives, number of employees, turnover, key figures, key employees, texts, images, graphics and links, logos, etc.
  • Any other personal data or information included in the job description (e.g., job title, department, salary details, contact details of the potential supervisor, job requirements profile, company information, etc.).
  • Data generated by your use of our website, such as metadata, including information on the duration of the ad online, where it should be displayed, how often the ad is clicked, how many applications the ad receives, etc.

This personal information is processed so that we can manage the job advertisements on behalf of the client and their company, including the multiposting service, and so that the company can create a company profile on our website. Additionally, to publish in the multiposting service the advertisement on social networks, job portals, and online media that the company has contracted (see here for details). The job advertisements we publish and manage for you are usually publicly accessible.

5. DATA RETENTION PERIOD

We will retain users' personal data only for as long as necessary to fulfill the purposes for which it was collected, which in some cases may be an ongoing purpose, as long as the consents granted are not revoked. Subsequently, if necessary, the information will be kept blocked for the legally established periods.

In the case of data you provide us in relation to job offers you wish to subscribe to, it will be retained for two years from the date of the last update. After this period, if it has not been updated, the data will be deleted unless you tell us otherwise.

6. CONSENT TO PROCESS YOUR DATA IN OUR FORMS

By filling out the forms, checking the box "I accept the Privacy Policy," and clicking to submit the data, the User declares that they have read and expressly accepted this privacy policy and grants their unequivocal and express consent to the processing of their personal data in accordance with the purposes indicated.

The personal data requested is mandatory, so refusing to provide it will make it impossible to carry out the provision of the contracted services.

The user guarantees that the data provided is true, accurate, complete, and up-to-date, being responsible for any damage or harm, direct or indirect, that may be caused as a result of the breach of this obligation. If the user provides data of third parties, they declare to have the consent of these and agree to transfer the information contained in this clause, exempting us from any responsibility in this regard. However, we may carry out checks to verify this fact, adopting the corresponding due diligence measures in accordance with data protection regulations.

7. SECURITY MEASURES

As part of our commitment to ensure the security and confidentiality of your personal data, we inform you that the necessary technical and organizational measures have been adopted to guarantee the security of personal data and to prevent its alteration, loss, processing, or unauthorized access, taking into account the state of technology, the nature of the data stored, and the risks to which they are exposed, in accordance with Art. 32 of the EU GDPR 679/2016.

8. DATA DISCLOSURE

No data disclosures are foreseen, except those authorized by tax, commercial, and telecommunications legislation, as well as in those cases in which a judicial authority requires it.

Notwithstanding the foregoing, we may share your information in the cases established in the purposes chart of clause 3 of this document.

9. INTERNATIONAL DATA TRANSFERS

When we share your personal data, it may be transferred both within and outside the European Economic Area (EEA). If we transfer your personal data internationally, we will do so only in accordance with applicable law and will require an adequate level of protection for it, as well as that appropriate security measures are applied. Your personal data may be transferred from countries located within the EEA to countries outside of it. In such cases, we will require that the following safeguards are respected:

  • That the laws of the country to which your personal data is transferred ensure an adequate level of data protection. Click here to see the list of non-EEA countries that, according to the European Commission, offer an adequate level of data protection; or
  • That the transfer is subject to standard data protection clauses approved by the European Commission. You can learn more about these data protection clauses here; or
  • Any other appropriate safeguard applicable under Article 46 of the EU General Data Protection Regulation (2016/679).

The safeguards we apply are as follows:

As stated before carrying out the transfer, we will ensure that it is legally authorized and that sufficient guarantees exist to ensure an adequate level of data protection with respect to the data transfer (e.g., through contractual guarantees, officially recognized regulations, or internal binding data protection regulations at the recipient) or that you have given us your consent for such data transfer.

10. USER RIGHTS

Any data subject has the right to obtain confirmation as to whether we are processing personal data concerning them, or not. Data subjects have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request its deletion when, among other reasons, the data is no longer necessary for the purposes for which it was collected. In certain circumstances, data subjects may request the restriction of the processing of their data, in which case we will only keep it for the exercise or defense of claims. For reasons related to their particular situation, data subjects may oppose the processing of their data. The Data Controller will stop processing the data, unless for compelling legitimate reasons, or the exercise or defense of possible claims.

In accordance with current legislation, you have the following rights: the right to request access to your personal data, the right to request its rectification or deletion, the right to request the restriction of its processing, the right to object to processing, the right to data portability, and also, to withdraw the consent given.

10.1. How to exercise my rights?

To exercise your rights, you must contact the controller, requesting the corresponding form for the exercise of the chosen right. You can exercise your rights by writing to us at the following email address: protecciondedatos@thewiseseeker.com. Remember to attach a copy of a document that allows us to identify you.

Finally, you are informed of your right to file a complaint with the competent data protection authority (in Spain, www.aepd.es) in case you become aware of or consider that an event may constitute a breach of the applicable data protection regulations.

Last updated 26/08/2024.