Summary
Below, we summarize the key points of our Candidature Privacy Policy. If you would like more information about a particular section, simply click on the statement in that section.
Responsible for the treatment
BASE TECHNOLOGY & INFORMATION SERVICES SLU (BASETIS)
CIF B65208183
Address: Casa Milà – La Pedrera, C/Passeig de Gràcia 92, 1o 1a, 08008 Barcelona
Data Protection Officer (DPO):
Lawyer, Julia Carreras Marin
Information we collect from you
Information provided voluntarily
Relevant personal data may include:
- Identifying data (name, surname, date of birth, address, ID card number, postal address, etc).
- Contact details: telephone numbers, email address.
- Academic data: professional training, courses or internships completed.
- Data relating to professional experience
- Data on the evaluation and assessment in the job application process.
- Information on other qualifications (e.g. foreign languages, computer skills, etc.).
- Photograph included in the CV
- Salary requirements
- Job application history.
- Web browsing data
- Other unstructured data provided by the job seeker
Why we collect this information
We process the personal data you voluntarily provide and the information we collect internally to enable us to carry out the recruitment process efficiently.
With whom do we share your personal data?
We may share your personal data with the following recipients (and where we do so, we will ensure that we have appropriate security and contractual safeguards in place to protect it):
– Third parties who support our Services- Potential Basetis customers for whom we believe the nominee may provide services;
– Any law enforcement agency or any agency or other third party to whom disclosure is required by law;
– New owners or reorganised entities in the event of a business restructuring, sale, purchase or creation of a joint venture affecting our business.
Any other third party to whom you have given your consent. We will never sell, distribute or otherwise share your personal data unless we have your consent.
Legal basis for the processing of personal data
Basetis will always ensure that it has a lawful basis for collecting and processing your personal data. These bases depend on the specific context in which we collect your data. Specifically, we collect and process your data on the basis of:
- The performance of recruitment functions for which we rely on your consent by expressly accepting our privacy policy and the voluntary submission of your application in accordance with art. 6.1 a) GDPR.
- For the performance of a contract or pre-contractual measures in which you as a candidate are interested according to art. 6.1.b) GDPR.
- And finally, we may process some of your data for legitimate purposes, in which case we will inform you.
International transfers
We do not make international transfers of your personal data.
Security
Basetis attaches great importance to the protection of your personal data against unauthorised access, unlawful processing, accidental loss, destruction and damage. We implement appropriate technical and organisational measures to safeguard such information.
Term of conservation
Your personal data will be kept for the duration of the recruitment process. In cases where your professional profile is of interest to us, it will be stored for a maximum period of up to 24 months from the receipt of your personal data, for possible future selection processes, and you may at any time revoke the consent given, whereupon your personal data will be deleted.
Where we retain your information, we will do so in compliance with applicable laws.
Your data protection rights
You may contact us at any time to review and update your personal data. You may also contact us to ask us to delete or restrict the processing of your personal data, or to ask us to transfer your personal data to a third party.
Updates to this Candidature Privacy Policy
We may update this Candidate Privacy Policy from time to time to reflect legal, technical or business changes. We encourage you to periodically review this page for the latest information on our privacy practices.
How to contact us
If you have any questions or concerns about this Candidate Privacy Policy, please contact us at dpo@basetis.com.
Candidature Privacy Policy
1. Information we collect from you
The personal information we may collect about you falls into the following broad categories:
Information you provide on a voluntary basis:
– In order to initiate a recruitment process you are asked to provide personal data on a voluntary basis.
– Registration information: When you submit an application to Basetis, you register or fill in forms and we collect information about you, including your name, address, telephone number, email address and the CV attached.
– CV data published and collected through web portals of those universities with which BASETIS has a signed agreement, and where you have given your explicit consent to be contacted to participate in selection processes.
Information we collect internally:
– Referrer: In order to start an application in Basetis, it is possible that you have been internally referred or recommended by a member of Basetis. In this case, this information is incorporated into your file as a candidate.
– Opinions: When a selection process is initiated the intervening ones in the same one have the obligation to incorporate their opinions in the card of the candidate in order to be able to be more efficient and also in order to be able to review their work.
2. Why do we process your data (purpose of processing) and on what legal basis?
The legal basis for collecting and processing your personal data as described above will depend on the specific context in which we collect it. In any case, we process your personal data in accordance with the provisions of the European Regulation 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), as well as the provisions of the LO 3/2018 of 5 December on the Protection of personal data and guarantee of digital rights and other applicable laws.
Below, we inform you of the purposes of the processing of your data:
(i) Information that you voluntarily provide in order to apply for job offers (registration information and data provided both on our website and on the websites of universities with which BASETIS has a signed agreement): The personal registration data you provide when you send us an application allows us to identify you as a candidate; to contact you in order to get to know you and assess your application; to respond to your queries; to inform you of the outcome of the selection process in the context of employment recruitment procedures, as well as to send you pre-contractual documents; and finally to notify you about new opportunities that match your profile and that may arise during the next 24 months after the end of the selection process without you having joined the BASETIS workforce, provided that we have your consent, which we obtain by accepting this privacy policy, and which you may revoke at any time by contacting us via the email address provided in section 1. 9 of this Policy.
Legal basis: Art. 6 (1) para. a and b of the GDPR
(ii) Information that we collect internally, when a selection process is initiated there are a series of data that are collected such as (referrer information and opinions generated in the process) in the case of applications received by reference: The data of who your referrer was and the comments generated in the selection process provide us with useful information in case you decide to start a new process with us in the future and also for the purposes of self-analysis and management of our work. It is therefore in the legitimate interest of BASETIS to keep this data.
Legal basis: Art. 6 (1) para. f of the GDPR
(iii) For the purposes of the technical provision of the website, in cases of applications received through the job vacancies section of the Basetis website. To the extent that you visit our website, it is necessary, for the purpose of providing the web service (and to ensure system security), that we process certain information transmitted automatically by your browser so that our website can be displayed in your browser and you can use the website. This information is automatically collected each time our website is accessed and automatically stored in so-called server log files; this information essentially comprises: IP address of the requesting computer, host name of the accessing computer, recognition data of the browser and operating system used, date and time of access, website from which the access is made (referrer URL). Our legitimate interest in this respect is that we can make our website technically available to you.
3. With whom we share your personal data
In order for us to process your data in accordance with the purposes described above and depending on the circumstances, it may be necessary to share your personal data with the following recipients (and where we do so, we will ensure that we have appropriate security and contractual safeguards in place to protect it):
– Third parties contracted by us who receive data for these purposes, as long as they comply with confidentiality and data protection requirements, such as: the Odoo software for our ERP where we store all candidate files and do the registration and monitoring of the selection process.
– Potential Basetis clients for whom we believe the candidate can provide services. Sometimes, for specific projects carried out by Basetis, it is necessary that the client approves or agrees to the specific person from Basetis who is going to carry out the functions.
– Any law enforcement or regulatory body, government agency, court or other third party to whom we believe it is necessary to disclose the information (i) to comply with applicable law or regulation, (ii) to exercise, establish or defend our legal rights, or (iii) to protect your vital interests or those of any other person;
– If any part of our business enters into a joint venture, buys another business or is sold to or merged with another business entity, your information may be disclosed or transferred to the target company or to new business partners or owners or their agents and advisors. In these circumstances, we will always inform the relevant entities that they must only use your personal data for the purposes described in this Privacy Policy.
– Any other third party to whom you have consented to the disclosure of your personal data.
We will not sell, distribute or lease your personal data unless we have your consent or are required by law to do so.
4. Transfers of data to a third country or an international organisation
We do not make international transfers of your data.
5. Security measures
We attach great importance to keeping your personal data safe and secure. Accordingly, we implement appropriate technical and organisational measures and industry standard technology to protect it from unauthorised access and unlawful processing, accidental loss, destruction and damage.
The security measures we use are designed to provide a level of security protection appropriate to the risk of processing your personal data.
6. Retention of data
Basetis will retain your personal data for no longer than is necessary to fulfill the purposes described in this Privacy Policy in particular, we will retain your data for a maximum period of 24 months from the end of the selection process without you having joined the Basetis workforce, and provided that you have given your consent.
We may also retain certain personal data for a longer period of time for legitimate operations, such as record keeping, or to enable us to perform a self-analysis of our work, or to enable us to comply with our legal, tax or accounting obligations. Whenever we retain your information, we will do so in compliance with applicable laws.
In the event that you object to our processing of certain personal data, we will keep a record of your objection to the processing of your personal data so that we can continue to respect your wishes.
We will destroy or permanently anonymise your personal data at such time as we no longer need to process it for our legitimate business needs or for any legal reason. If this is not possible (for example, because your personal data has been backed up), we will store it securely and isolate it from further processing until deletion is possible.
7. Your data protection rights
Basetis respects your privacy and data protection rights. Below is a summary of your rights with respect to the personal data that Basetis manages, and which you can exercise using the contact details listed in the section ‘How to contact us’:
– You can request access to or rectify the information supplied to Basetis, or if you wish you can request deletion of your personal data.
– You can object to the processing of your personal data, ask us to restrict the processing of your personal data or request that it be transferred to a third party.
– You have the right to opt out of receiving communications about potential new opportunities to work with us at any time.
– Similarly, if we collect and process your personal data on the lawful basis of your consent, you may withdraw your consent at any time. Withdrawing your consent will not affect the lawfulness of any processing we have carried out prior to your withdrawal, nor will it affect the processing of your personal data carried out on a lawful basis of processing independent of consent.
– You have the right to lodge a complaint with a data protection supervisory authority about our collection and processing of your personal data.
We respond to all requests we receive from individuals who wish to exercise their data protection rights in accordance with applicable data protection laws.
8. Updates to this Privacy Policy
We may update this Privacy Policy from time to time in order to adapt it to possible legal, technical or business changes. Whenever we update our Candidate Privacy Policy, we will take appropriate steps to inform you based on the significance of the changes we make. We will ensure that we obtain your consent to any material changes to the Candidate Privacy Policy where required by applicable data protection laws.
We encourage you to periodically review this page for the latest information on our privacy practices.
9. How to contact us
If you have any questions or concerns about this Privacy Policy, please contact us:
By email at the following address: dpo@basetis.com