Privacy Policy for Candidates

Data Controller

Data Controller: SMILEAT, S.L. (hereinafter, SMILEAT)

Tax ID Number:B-87.144.622

Mailing Address: Calle Gran Vía, 62, 5th Floor, Apartment D – 28013 Madrid

Email: info@smileat.com

Purposes of the Processing

SMILEAT processes your data for the purpose of managing your application for the selection processes related to job openings offered by SMILEAT or those you have voluntarily submitted, and to send you career opportunities if you so wish and consent. SMILEAT will not make automated decisions based on your professional profile.

The processing of your data for purposes other than those detailed above will require your prior and explicit consent in each case or another legal basis.

Legal Basis for the Processing of Your Data

The legal basis for SMILEAT’s processing of your data is processing necessary for the performance of a contract or the implementation of precontractual measures, Article 6(1)(b) of the GDPR, and your consent when expressly required, Article 6(1)(a) of the GDPR; such consent may be revoked at any time.

Recipients

SMILEAT does not plan to disclose data to third parties, except as required by law, in which case such disclosures will be made in full compliance with all legally established safeguards. In other cases, SMILEAT will request your explicit consent or another legal basis for processing.

 

Notwithstanding the foregoing, SMILEAT hereby informs you that, on an exceptional basis, your data may be processed by SMILEAT or by third-party companies contracted by SMILEAT. In such cases, the corresponding contract will be signed between the parties, and it is an essential requirement for the formalization of this contract that the service provider be familiar with the existing regulations regarding the protection of personal data and that compliance with these regulations be guaranteed throughout the term of the contract.

 

Data Processed

The personal data processed by SMILEAT was provided by you when you submitted your resume to SMILEAT.

In the event that your data comes from third parties to whom SMILEAT may entrust the selection process, SMILEAT hereby informs you of the processing of the following categories of data: (i) Identifying Information: First and last names, ID number (DNI/NIE); (ii) Contact Information: Mailing address, email address, and phone number; (iii) Educational Background; (iv) Professional Experience; and (v) Your image (photo), if applicable.

No special categories of data are processed.

International Data Transfers

No international transfers of your data are planned. However, in the event that SMILEAT’s activities require the transfer of your data to a third country outside the European Union or to a country that does not have an adequate level of protection as determined by the European Commission, SMILEAT will implement appropriate safeguards to carry out such international transfers in accordance with applicable law.

Accuracy of Data and Legal Age.

You warrant that you are of legal age or at least fourteen years old in accordance with current data protection regulations (or that such information has been provided with the consent of your parents or legal guardians) and that the information provided is true, accurate, complete, and up-to-date; you are liable for any direct or indirect damage or harm that may result from a breach of this obligation.

Rights

You may exercise the rights granted to you under applicable law: the right of access, rectification, erasure, and objection; the right to restrict processing; the right to data portability; and the right not to be subject to automated individual decision-making.

  • Right of Access: This right allows the data subject to determine whether SMILEAT is processing personal data concerning him or her and, if so, to obtain information about the personal data being processed.
  • Correction: Allows you to correct errors and modify data that turns out to be inaccurate or incomplete.
  • Erasure: Allows data to be erased and no longer processed by SMILEAT, unless there is a legal obligation to retain it and/or other legitimate grounds for its processing by SMILEAT prevail in accordance with applicable regulations.
  • Restriction: Under the conditions established by law, this allows data processing to be suspended, thereby preventing SMILEAT from processing the data in the future; SMILEAT will retain the data solely for the purpose of asserting or defending legal claims.
  • Right to Object: This right allows the data subject, under certain circumstances and for reasons related to their specific situation, to object to the processing of their data.SMILEAT will cease processing the data, except where required by law or for the exercise or defense of potential claims.
  • Portability: This right allows the data subject to receive their personal data and transmit it directly to another data controller in a structured, commonly used, and machine-readable format. To exercise this right, the data subject must provide a valid email address.

You may exercise your rights by any means that allows for proof of the sending and receipt of your request. The request must be addressed to SMILEAT using the contact information provided in the “Data Controller” section, with the subject line “Data Protection.” The request must include: first name, last name, a detailed description of your request, and your mailing address for notification purposes. If there are any doubts regarding your identity, you may use any procedure that verifies your identity without requiring a copy of your ID card.

If you are not satisfied with SMILEAT’s response regarding the exercise of your rights, you have the right to file a complaint with the supervisory authority, the Spanish Data Protection Agency, to seek protection of those rights.

Notwithstanding the foregoing, any person has the right to obtain confirmation as to whether or not SMILEAT is processing personal data concerning them.

Retention of Your Data

SMILEAT hereby informs you that it will process and store your data for as long as necessary in accordance with the purpose and legal basis of the processing for which it was collected, provided that you do not object or expressly revoke your consent if consent is the legal basis for the processing.

We will retain your personal data for the duration of the statutory limitation periods, in accordance with applicable laws and regulations, including the general and sector-specific regulations applicable to SMILEAT.

Once the processing of your data is no longer necessary and the statutory retention periods have expired, we will delete and/or block it in accordance with our data retention and deletion policy. 

In accordance with industry standards, SMILEAT informs you that it maintains technical and organizational measures to prevent accidental or unlawful destruction, accidental loss or alteration, unauthorized disclosure or access, and other unlawful acts or practices.

To this end, SMILEAT will implement appropriate security measures to prevent the alteration, loss, or unauthorized processing of or access to data. It will also inform anyone with access to its data of their obligations regarding security and confidentiality, as well as their duty to maintain confidentiality.