Candidate Privacy Policy

Data Controller

Controller: SMILEAT, S.L. (hereinafter, SMILEAT)

Tax ID: B-87.144.622

Postal address: Calle Gran Vía, 62, 5º D – 28013 Madrid

Email: info@smileat.com

Purposes of the processing

SMILEAT processes the data in order to manage your application for the selection processes of the vacant positions offered by SMILEAT or that have been voluntarily submitted, and to send professional opportunities if you so wish and consent. SMILEAT will not make automated decisions based on your professional profile.

The processing of your data for purposes other than those detailed above will require your prior and explicit consent in each case or another legal basis.

Legal basis for processing your data

The legal basis for the processing of your data by SMILEAT is the processing necessary for the execution of a contract or the establishment of pre-contractual measures, art. 6.1.b) of the GDPR, and your consent when expressly required, art. 6.1.a) of the GDPR, such consent may be revoked at any time.

Recipients

SMILEAT does not foresee communications of data to third parties, except those required by legal obligation, which will be carried out, in any case, complying with all legally provided guarantees. In other cases, SMILEAT will request your explicit consent or another legal basis.

 

Without prejudice to the above, SMILEAT informs you that, exceptionally, your data may be processed by it or by third-party companies contracted by SMILEAT. In such cases, the corresponding contract will be signed between the parties, with the indispensable requirement for its formalization that the service provider is aware of the existing personal data protection regulations and guarantees compliance during the contract execution.

 

Data processed

The personal data processed by SMILEAT have been provided by you by sending your resume to SMILEAT.

In the event that your data come from third parties to whom SMILEAT may entrust the selection process, SMILEAT informs you of the processing of the following categories of data: (i) Identification Data: Name and surname, DNI/NIE (ii) Contact data: Postal addresses, email addresses, and phone number; (iii) Academic training; (iv) Professional experience; and (v) Your image (photo) if applicable.

No special categories of data are processed.

International Data Transfers

No international transfers of your data are foreseen. However, if SMILEAT's activity requires transferring your data to a third country outside the European Union or that does not have an adequate level of protection according to the European Commission, it will adopt the appropriate safeguards to carry out such international transfers in accordance with applicable current legislation.

Accuracy of data and age of majority.

You guarantee that you are of legal age or over fourteen years old according to current data protection regulations (or that such data have been provided with the consent of your parents or legal guardians) and that the data provided are true, accurate, complete, and up to date, being responsible for any direct or indirect damage or harm that may arise as a consequence of non-compliance with this obligation.

Rights

You may exercise the rights granted to you by applicable current legislation: right of access, rectification, deletion and opposition, restriction of processing, data portability, and not to be subject to automated individual decisions.

• Access: allows the data subject to obtain information about whether SMILEAT processes personal data concerning them or not and, if so, the right to obtain information about their personal data being processed.
• Rectification: allows correcting errors and modifying data that are inaccurate or incomplete.
• Deletion: allows data to be deleted and no longer processed by SMILEAT unless there is a legal obligation to retain them and/or other legitimate reasons prevail for their processing by SMILEAT according to current legislation.
• Restriction: under legally established conditions, allows the processing of data to be halted so that SMILEAT avoids processing them in the future, only retaining them for the exercise or defense of claims.
• Opposition: allows the data subject, under certain circumstances and for reasons related to their particular situation, to object to the processing of their data.  SMILEAT will stop processing the data, except for legal reasons or the exercise or defense of possible claims.
• Portability: allows the data subject to receive their personal data and transmit them directly to another controller in a structured, commonly used, and machine-readable format. To exercise this right, the data subject must provide a valid email address.

You may exercise your rights by any means that allows proof of sending and receiving your request. The request must be addressed to SMILEAT through the contact details included in the “Data Controller” section indicating the reference “Data Protection.” The request must include: Name, surname, the specific request, and address for notification purposes. If there are doubts about your identity, any procedure that allows identification may be used, but without requiring a copy of the ID.

If you are not satisfied with SMILEAT's response to the exercise of your rights, you have the right to file a complaint with the Supervisory Authority, the Spanish Data Protection Agency, for their protection.

Without prejudice to the above, anyone has the right to obtain confirmation as to whether SMILEAT is processing personal data concerning them or not.

Data retention

SMILEAT informs you that it will process and store your data as long as necessary according to the purpose and legal basis of the processing for which they were collected, and provided that you do not object or expressly revoke your consent if that was the legal basis.

We will keep your personal data during the legal prescription periods, in accordance with applicable current legislation and the general and sector-specific regulations applicable to SMILEAT.

Once the processing of your data is no longer necessary and the legal prescription periods have elapsed, we will delete and/or block them according to our data retention and deletion policy. 

According to industry standards, SMILEAT informs you that it maintains technical and organizational measures against accidental or unlawful destruction, loss or accidental alteration, unauthorized disclosure or access, and other illegal forms or procedures.

In this regard, SMILEAT will adopt appropriate security measures to prevent alteration, loss, unauthorized processing, or access to data. Likewise, it will inform those who have access to your data about their security, confidentiality obligations, and duty of secrecy.