PRIVACY POLICY
INFORMATION ON THE PROCESSING OF PERSONAL DATA
REGULATORY FRAMEWORK
This Privacy Policy is developed and informs users and visitors in accordance with the principles of lawfulness and fairness in the processing of personal data established in the European General Data Protection Regulation 2016/679 and Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights.
SCOPE OF THE PRIVACY POLICY
This privacy policy aims to explain and provide information on the data processing carried out through our website (data collected in forms, cookies, or email), although in some cases, we may also explain how we carry out offline processing.
DATA CONTROLLER
The data controller is Servitalent Gestión del Talento Directivo, S.L, (hereinafter SERVITALENT) with Tax ID B70398946, located at Avda. García Barbón, 29 - 1º D, 36201. Vigo (Pontevedra) - Spain. You can contact us by phone at 910 01 98 28 and by email at servitalent@servitalent.com. You can contact the Data Protection Officer at dpd@atdata.es.
PURPOSES OF DATA PROCESSING
To achieve its objectives, Servitalent requests a series of personal data and information for the following purposes:
- To register and facilitate access to our services for candidates in our database or job offers, in order to manage and match received job offers and demands. This may include displaying candidates' CVs to potential employers for their corresponding evaluation, within any of the services mentioned. The CV management process is carried out on the TeamTailor platform. You can access specific information on data processing on this platform here.
- To register and facilitate access to our services for client companies requesting professional profiles that can be offered by Servitalent.
- To answer inquiries made through the contact forms enabled on the website.
- To process payments for contractual terms, as well as sending invoices related to any service provided.
- To organize webinars and/or informative workshops on relevant and current topics, also managing user registration and attendance.
- To manage the whistleblowing channel confidentially or anonymously.
- To keep the user informed of future vacancies by mail, phone, email, or other means of communication, provided they have selected this option.
- To carry out commercial campaigns by mail, phone, email, or other means of communication, provided the user has given express consent by positively checking the option.
- To send communications by mail, phone, email, or other means of communication, including automatic notifications, confirmation of registration for job offers, changes in application status, requests for necessary data for reports, notification of necessary tests within the process, technical notices, support messages, satisfaction surveys, etc.
- To carry out internal statistical and analytical studies and research, such as recruitment evolution studies, platform registration evolution, salary mapping by position, mapping of received candidate positions, measuring the effectiveness of assignments/hires, etc.
As a service provider, we may also carry out activities on behalf of third parties for the following purposes:
- Candidate selection processes for client companies.
- Management and administration processes for executive and middle management rental services for client companies.
- Outplacement and career transition processes.
- Management of curriculum certification processes for our clients.
- Carrying out tests associated with any service. In this case, whenever such tests are subcontracted to third parties, we will advise them of the need to protect such personal information with appropriate security measures, prohibiting the use of your personal information for their own purposes and preventing them from disclosing your personal information to others.
LEGAL BASIS FOR DATA PROCESSING
The data processing collected through the whistleblowing channel is carried out based on the legal grounds for data processing: i) compliance with a task carried out in the public interest (art 6.1.d GDPR) and the consent of the data subject (art 6.1.a GDPR), and ii) compliance with legal obligations (art 6.1c GDPR).
In the case of processing contact data collected through commercial contacts, the legal basis for processing is the legitimate interest of the Data Controller (art 19 LOPDgdd).
The data processing collected through the whistleblowing channel is carried out based on the legal grounds for data processing: i) compliance with a task carried out in the public interest (art 6.1.d GDPR) and the consent of the data subject (art 6.1.a GDPR), and ii) compliance with legal obligations (art 6.1c GDPR).
DATA PROCESSING ON BEHALF OF THIRD PARTIES
When Servitalent acts on behalf of a third party that has commissioned its professional services, it does so as a Data Processor and will subscribe to the corresponding contractual clauses to comply with the obligations of Article 28 of the European General Data Protection Regulation 2016/679.
DATA RETENTION PERIODS
The data provided will be retained as long as the data subject does not request its deletion and, in any case, for the legally established prescription periods.
This whistleblowing and communication channel only retains data for the legally stipulated period of 3 months. Once this period has elapsed, the data is anonymized and retained solely for the purpose of proving the channel's operation to third parties.
DATA DISCLOSURES AND INTERNATIONAL DATA TRANSFERS
Our administrative service platform (including our whistleblowing channel) is based on Caspio Inc. technology. Caspio certifies that its services and the services supported by our clients are located in the EU territory and has appropriate contractual clauses as data processor in compliance with the provisions of the European General Data Protection Regulation.
Our email service is Google for business.
To carry out certain services such as webinars, we use third-party services and technology like Zoom, which may host data on their services. Zoom applies specific security measures for users located in EU territory in compliance with the GDPR. If authorized, we may obtain references from third parties for curriculum certification processes.
The administration and management of the talent management service are based on Teamtailor, and processes that include interviews with candidates require the use of tools such as Google Meet and Notebook. Any process involving the use of AI tools will be notified, and the user may object to this data processing.
Zoom and Google are companies that adhere to the Data Privacy Framework, which grants them an adequate level of data protection.
In some cases, Servitalent may contract with third parties to provide its services, provided that these are a necessary part of the execution of the contracted services, and in all cases assuming the obligations of a data processor regulated by the corresponding contract between both parties.
The client is informed that Servitalent may, within the legally enabled cases, communicate their data to administrative and/or judicial bodies, as well as to other third parties, whenever such communications are legally necessary for the provision of the contracted services.
SOCIAL NETWORKS
Servitalent has profiles on the main internet social networks (Facebook, Twitter, LinkedIn, Slideshare, YouTube, and Google+), recognizing itself in all cases as responsible for the processing of data of its followers, fans, subscribers, commentators, and other user profiles (hereinafter, followers). The processing that Servitalent will carry out with such data will be, at most, what the social network allows for corporate profiles. Thus, Servitalent may inform its followers, by any means allowed by the social network, about its services, offers, as well as provide personalized training and/or customer service. Under no circumstances will Servitalent extract data from social networks unless the user's express and specific consent is obtained for this purpose. When, due to the very nature of social networks, the effective exercise of the follower's rights depends on the modification of their personal profile, Servitalent will help and advise them to that end to the best of its ability.
NEWSLETTER OR RSS BY EMAIL
The automatic update service or feed subscription of the Website is managed by FeedBurner, by Google, Inc., under Google's privacy policy. The sending of content updates from the Website via email is daily, automatic, and free for the user who, to subscribe, must give their prior and express authorization through identity verification systems.
OBLIGATION OF PROFESSIONAL SECRECY, CONFIDENTIALITY, AND DOCUMENT DESTRUCTION
Individuals linked to Servitalent who have any involvement in the services provided to the client are committed not to disclose or use the information they have accessed by having assumed and signed the commitment to comply with Servitalent's code of good professional practices. The information provided by the client will, in any case, be considered confidential, and may not be used for purposes other than those related to the services contracted with Servitalent. Servitalent undertakes not to disclose or reveal information about the client's intentions, the reasons for the requested service, or the duration of their relationship with them.
EXERCISE OF DATA PROTECTION RIGHTS
The data subject has the right to:
- Access their data
- Rectify their data
- Erase their data
On occasion and in accordance with specific provisions, they may also:
- Port their data to another Controller
- Object to all or part of the processing
- Limit the use of their personal data
The data subject may at any time withdraw the consent voluntarily given for any data processing.
If your rights are not satisfied, you can file a complaint with the Data Protection Authority at C/ Jorge Juan 6, 28001, Madrid, Spain.
Interested parties can contact the Data Protection Officer for any questions related to the processing of their data at dpd[@]atdata.es.
ABSENCE OF AUTOMATED DECISION-MAKING PROCESSES
The data being processed is not subject to automated decision-making processes.
SECURITY MEASURES
The data controller has adopted appropriate organizational and technical security measures to ensure that data processing is carried out with all security measures and guarantees for the data subject.
UPDATE OF THE DATA PROTECTION POLICY
The Data Controller reserves the right to update this privacy policy, informing the data subjects of any changes if necessary.
COOKIE POLICY
Servitalent's website uses both first-party and third-party cookies to optimize the website's functionality for user access, account management, and to obtain relevant information about website traffic and usage.
The user can accept the installation of our cookies, reject their installation, and also obtain extended information about them.
If the user actively browses the Servitalent page, for example, by clicking and accessing second-level content or sections beyond the main page, or requests the creation of a user account, they actively and affirmatively accept the installation of the website's cookies.
In any case, the user has the option to prevent the generation of cookies and to delete them by selecting the corresponding option in their browser.
Servitalent cannot guarantee that if cookie blockers are used in your browser, some services or functionalities of the website will not be available or function correctly.
WHAT IS A COOKIE?
A cookie is a file or small piece of text that websites you visit send to your browser and that are stored on the user's device (be it a PC, laptop, mobile, etc.).
Cookies allow our website to remember information about your visit, language, and preferences, which can facilitate your next visit and make the site more useful by personalizing its content. Cookies play a very important role in improving the user experience of the website.
COOKIES EXCLUDED FROM CONSENT
The Article 29 Working Party in its Opinion 4/2012 excluded from the scope of said article cookies whose purpose is:
- "User input" cookies
- User authentication or identification cookies (session only)
- User security cookies
- Multimedia player session cookies
- Load balancing session cookies
- User interface personalization cookies
- Plug-in cookies for exchanging social content
- Technical cookies: These are strictly necessary cookies to allow the user to browse through a website, platform, or application and use the different options or services that exist in it, such as controlling traffic and data communication, identifying the session, or using security elements during navigation.
- Personalization cookies: These are cookies that allow the user to access the service with some predefined general characteristics based on a series of criteria in the user's terminal, such as the language or the type of browser through which they access the service.
TYPES OF COOKIES USED ON OUR WEBSITE
This website uses both temporary session cookies and persistent cookies. Session cookies store data only while the user accesses the website and are deleted once the user leaves the page. Persistent cookies store data on the terminal so that they can be accessed and used in more than one session, or the website can remember and retrieve them on the next access.
Among the cookies used are:
- Analysis or performance cookies: For the purpose of obtaining statistical data on the use of the website and its resources.
- Functional cookies: Those that enable the user to access the service with some predefined general characteristics based on a series of criteria in the user's terminal.
HOW ARE COOKIES USED?
By accepting the installation of analysis or performance cookies, cookies may be installed on your computer that allow us to know the following information:
- Statistical information on website usage.
- User login to keep the session active.
- Connection data with social networks for users who access with their Facebook, LinkedIn, or Twitter user, among others.
- Time of visit.
- Areas and sections consulted.
- From which page or service the visit originates.
HOW TO MANAGE COOKIES IN YOUR BROWSER
If you wish to customize how your browser manages cookies, or if you want to delete them, you can follow the instructions defined for the most common browsers by following the links below: