PRIVACY POLICY ex ARTICLE 13 EU REGULATION 2016/679 (GDPR)
DATA CONTROLLER: The controller of the processing of the data collected is DISRUPTIVE CONSULTING, S.L. (hereinafter, BeDisruptive) domiciled for this purpose at Paseo de la Castellana 259C, Torre de Cristal, Planta 33 Norte, 28046, Madrid, provided with Tax Identification Number (N.I.F.) B-87700373, represented by Mrs. Beatriz López Beitia.
The data subject shall contact the Data Protection Officer through the following address [email protected]
PURPOSE OF PROCESSING: to manage the candidate’s application to the selection processes, carrying out an analysis of the applicant’s profile with the aim of choosing the best candidate for the available job positions within the company.
LEGAL BASIS OF THE PROCESSING: the explicit consent of the data subject, in accordance with Article 6.1 letter a) of Regulation 679/2016 of the European Union. The lack of consent for the processing of the data may prevent BeDisruptive from providing the requested activities and, therefore, may determine the impossibility of evaluate the Curriculum Vitae of the applicant for the purposes described above.
SPECIAL CATEGORIES OF PERSONAL DATA: according to Articles 9 and 10 of Regulation (EU) No 2016/679, data that can be classified as “Special categories of personal data “could be provided by the Data Subject, understanding as such data revealing “ethnic or racial origin, political opinions, religious or philosophical convictions, or trade union membership, and the processing of genetic data, biometric data aimed at uniquely identifying a natural person, data relating to health or data relating to the sexual life or sexual orientation of a natural person”. These data will be treated exclusively in accordance with the explicit consent given and on the basis of reasons of special public interest, complying in any case with the provisions of the applicable regulations.
PROCESSING MODALITY: The processing of the data provided is based on the principles of legality, transparency, limitation of the purpose and conservation, minimization of data, accuracy, integrity and confidentiality, and will be carried out, in any case, subject to the provisions in this regard in Regulation EU 2016/679 and Spanish Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights. In particular, the processing will be carried out using paper, computer and telematic tools, also in accordance with the provisions of Article 29 of EU Regulation 2016/679 and, in any case, with adequate means to guarantee its security and confidentiality in accordance with the provisions of Article 32 of the same EU Regulation No. 2016/679.
RECIPIENTS OR CATEGORIES OF RECIPIENTS FOR THE TRANSMISSION OF DATA: Within the framework of the above-mentioned processing purposes, the data provided may be communicated to the following recipients or categories of recipients.
The subjects included in the above categories will, in some cases, process the data as independent Data Controllers or, in other cases, as Data Processors or Authorizes Persons specifically designated for this purpose by BeDisruptive.
BeDisruptive will provide the most appropriate instructions to the Data Processors, Data Controllers and Authorised Persons to carry out any data processing, with the aim of adopting and respecting the most appropriate security measures, in order to guarantee the confidentiality, security and integrity of the data. The complete and updated list of the subjects to whom the Personal Data may be communicated or who may become aware of the same as Processors or Authorised Persons may be requested from the Data Controller.
TRANSFER OF DATA TO THIRD COUNTRIES OR INTERNATIONAL ORGANIZATIONS: There are no transfers of Personal Data to third countries or international organizations.
INFORMATION STORAGE PERIODS: Data will be stored for a period of one year;after the aforementioned period, the data will be automatically deleted, without prejudice to its subsequent conservation when necessary for compliance with certain obligations or legal provisions or requests and / or orders issued by the Public Administrations and / or Control Authorities. If you wish to continue participating in the selection processes of our company, please send us again your CV.
UPDATING OF DATA: in case of any change in your data, please inform us in writing as soon as possible, in order to keep your data duly updated.
AUTOMATED DECISION-MAKING: There is no automated decision-making process, including for profiling purposes, in accordance with Article 13.2(f) of Regulation (EU) No 679/2016.
RIGHTS OF THE DATA SUBJECT: At any time, the data subject may exercise, in accordance with Articles 15 to 22 of EU Regulation No. 2016/679, the following rights:
a) request confirmation of the existence of Personal Data of its ownership that are subject to processing;
b) obtain information on the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the Personal Data have been or will be communicated and, if possible, the retention period;
c) obtain the rectification and cancellation of the data;
d) obtain the limitation of the processing;
e) obtain the portability of the data, that is, receive them from the Controller in a structured, commonly used and readable format by an automatic device, and transmit them to another Controller without hindrance;
f) object to the processing at any time, including in the case of processing for direct marketing purposes;
(g) oppose an automated decision-making process concerning natural persons, including profiling;
h) request the Data Controller access to your Personal Data for the purpose of rectification, cancellation, limitation of its treatment or opposition to it, in addition to the right to data portability;
i) withdraw consent to the processing of your data at any time, without prejudice to the lawfulness of the processing carried out before its revocation;
(j) lodge a complaint with a supervisory authority.
For the exercise of their rights and for all matters related to the processing of the data provided, as well as to receive more detailed information about the subjects and / or categories of subjects to whom the data are communicated or who have knowledge of them as Managers or Authorized, the interested party may contact the Data Controller at the registered office of BeDisruptive, or by sending an email to [email protected]
To allow the correct management of the aforementioned application, the following must be indicated in it:
RIGHT OF CLAIM: If the interested party considers that the processing of the personal data referred to him is carried out in violation of the provisions of EU Regulation 679/2016, he has the right to file a claim with the Spanish Agency for Data Protection, in accordance with the provisions of Article 77 of the Regulation itself, or to appeal to the competent judicial body in accordance with Article 79 of Regulation EU.