Skip to main content

Processing of (personal) data by the entity in charge of the online application process

The purpose of this policy is to inform data subjects about the different processing activities carried out by this organisation through its website that affect their personal data, in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 and Organic Law 3/2018, of 5 December, on the Protection of Personal Data and guarantee of digital rights.

1. Identification and contact details of the controller

OPTARE SOLUTIONS S.A., with its registered office at PARQUE TECNOLÓGICO Y LOGÍSTICO DE VIGO, CALLE C, NAVE C-7 (36315 VIGO) PONTEVEDRA, with Tax ID B36898104, contact telephone number 986410091 and email address rgpd@optaresolutions.com
You are informed that the organisation acts as joint controller for the purposes of the GDPR, together with OPTARE 5G, S.L., with CIF B27877919 and contact email address rgpd@optaresolutions.com 

DATA PROTECTION OFFICER
SEGURIDAD Y PRIVACIDAD DE DATOS, SL, with contact telephone number 963 122 868 and email address infodpo@forlopd.es.

2. Purposes of processing your personal data

USERS/BROWSERS OF THE CONTROLLER'S WEBSITE
  • To respond to requests, complaints, and incidents submitted through our contact channels on the website.
  • To understand the user's behaviour on the website in order to detect possible cyber-attacks on our site.
  • To comply with the legal obligations that are directly applicable to us and regulate our activity.
  • To protect and exercise our rights or respond to claims of any kind.

JOB CANDIDATES OR APPLICANTS.
  • To manage your application in the selection process and to inform you about it.

WHISTLEBLOWERS/AFFECTED PERSONS (WHISTLEBLOWING CHANNEL)
  • Prevention, detection, investigation, and prosecution of infringements and enforcement of sanctions.
  • To comply with the legal obligations that are directly applicable to us.
  • To inform the competent authorities of the commission of acts or behaviours that may be contrary to regulations.
  • Processing of communications from whistleblowers.

3. Legal basis for processing

USERS/BROWSERS OF THE CONTROLLER'S WEBSITE
  • Your consent to process your data for the indicated purposes. Refusal to provide your personal data will make it impossible to process your data for the aforementioned purposes.
  • To comply with the legal obligations that apply to us. In this case, the data subject may not refuse the processing of personal data.
  • Our legitimate interest in protecting our image, business, and trajectory by preventing attacks on our website. In this case, the data subject may not refuse the processing of personal data, although they may, where applicable, exercise the rights recognised in the "rights" section of this policy.

JOB CANDIDATES OR APPLICANTS.
  • Your consent to process your data for the indicated purposes. Refusal to provide your personal data will make it impossible to process your data for the aforementioned purposes.
  • To comply with the legal obligations that apply to us. In this case, the data subject may not refuse the processing of personal data.
  • Our legitimate interest in protecting our image, business, and trajectory by preventing attacks on our website. In this case, the data subject may not refuse the processing of personal data, although they may, where applicable, exercise the rights recognised in the "rights" section of this policy.

WHISTLEBLOWERS/AFFECTED PERSONS (WHISTLEBLOWING CHANNEL).
  • Processing necessary for compliance with a legal obligation applicable to the controller.

4. Website add-ons and tools

Google reCAPTCHA
We use the Google reCAPTCHA service to detect, based on legitimate interest, whether the website is being used by bots, with the aim of protecting the portal and preventing abusive and fraudulent practices, such as sending spam. You can access our provider's privacy policy by clicking here.

Google Maps
We use Google Maps (API) with the purpose of showing you interactive maps directly on our website and allowing you to use its functions. For these purposes, you should be aware that, by using the service, Google will collect and store information about your use. We inform you that the use of Google may involve International Data Transfers not based on an adequacy decision by the European Commission or the provision of adequate safeguards, and therefore they do not have an adequate level of protection in accordance with the provisions of the GDPR. For the appropriate purposes, we inform you that this fact may entail certain risks for the protection of your personal data. Such derived risks may include the absence of an equivalent supervisory data protection authority and/or equivalent data processing protection principles and/or equivalent data protection rights for data subjects. For all these reasons, we recommend that you carefully read our provider's privacy policy beforehand by clicking here.

YouTube
Our website uses plugins from the YouTube platform with technology offered by Google. YouTube will only associate your browsing behaviour with your personal profile if you are logged into your account. You can prevent this by logging out. We recommend that you carefully read our provider's privacy policy beforehand by clicking here.

5. Data retention periods or criteria

The personal data provided will be kept for the time necessary to fulfil the purposes for which it was initially collected. Once the data is no longer necessary for the processing in question, it will be duly blocked to be made available, where applicable, to the competent Public Administrations and Bodies, Judges and Courts, or the Public Prosecutor's Office, for the statute of limitations period for actions that may arise from the relationship maintained with the client and/or the legally established retention periods.In the event that you have provided us with your CV, we will keep your data for a maximum period of two years from its receipt, at which point we will proceed to delete it, unless you have updated your data or have authorised us to keep it for a longer retention period than indicated. For the appropriate purposes, we inform you that you can revoke your consent at any time.

6. Automated decisions and profiling

The website does not make automated decisions or create profiles.

7. Recipients

During the processing period of your personal data, the organisation may transfer your data to the following recipients:
  • Judges and Courts.
  • State Security Forces and Corps.
  • Other competent public authorities or bodies, when the controller has a legal obligation to provide the personal data.
  • Where applicable, to those Data Processors who provide us with services.Your data may be shared with the following companies for the correct administrative and accounting management of the entities:
  • OPTARE 5G, S.L., with CIF B27877919 and email address rgpd@optaresolutions.com 

8. International data transfers

The organisation does not carry out any International Data Transfers. In the event that it is subsequently necessary to carry out international data transfers, the level of protection of the destination country will be verified, and the guarantees required by the regulations will be adopted.

9. Social networks

With the purpose of making you a participant in our activity and so that you can stay up to date with our news, we inform you that OPTARE SOLUTIONS S.A. has created a profile on Social Networks. All users have the opportunity to join our social networks or groups. However, you should be aware that, unless we request your data directly (for example, through marketing actions, contests, promotions, or any other valid form), your data will belong to the corresponding Social Network, so we recommend that you carefully read its terms of use and privacy policies, as well as make sure to configure your preferences regarding data processing. Below, we provide the link to the privacy policy of the different Social Networks where we have a presence, so that you can access the privacy policies at all times and configure your profile to ensure your privacy:

10. Rights

Data subjects may request more information about the processing of their personal data as well as exercise, at any time and free of charge, the rights of access, rectification, and erasure, as well as request that the processing of their personal data be limited, object to it, request its portability (whenever technically possible) or withdraw the consent given, and, where applicable, not to be subject to a decision based solely on automated processing, including profiling. To do this, you can use the forms provided by the organisation, or send a letter to the postal address or email address referenced in the header. For the appropriate purposes, we inform you that you may be asked for your ID or any other similar document, in order to prove your identity, as long as this cannot be done by other less intrusive means. In the event that you feel your rights regarding the protection of your personal data have been violated, especially when you have not obtained satisfaction in the exercise of your rights, you can file a complaint with the competent Data Protection Supervisory Authority (Spanish Data Protection Agency), through its website www.aepd.es 

11. Veracity of data

The data subject guarantees that the data provided is true, accurate, complete, and up to date; undertaking to inform of any change regarding the data provided, through the channels enabled for this purpose and indicated in point one of this policy. You will be responsible for any damage or harm, both direct and indirect, that may be caused as a result of non-compliance with this obligation. In the event that the user provides data of third parties, they declare that they have the consent of the data subjects and undertake to transfer the information contained in this clause to them, exempting the organisation from any liability derived from the lack of compliance with this obligation.

12. Modifications and updates

This privacy policy may be modified/updated based on established legal requirements or with the purpose of adapting said policy to the instructions issued by the Spanish Data Protection Agency, or as a result of changes to our website. For this reason, we advise users to periodically visit our Privacy Policy. If you have questions about this policy, you can contact OPTARE SOLUTIONS S.A. through the forms provided by the organisation, or send a letter to the postal address or email address referenced in the header.

Last updated 8th July 2025.

Processing of (personal) data by the operator of the recruitment website

General information

This recruitment website is operated by Personio SE & Co. KG, which offers a human resource and candidate management software solution (https://www.personio.com/legal-notice/). Data transmitted as part of your application will be transferred using TLS encryption and stored in a database. The sole controller of this data within the meaning of article 24 of the GDPR is the enterprise carrying out this online application process. Personio’s role is limited to operating the software and this recruitment website and, in this context, being a processor under article 28 of the GDPR. In this case, the processing by Personio is based on an agreement for the processing of orders between the controller and Personio. In addition, Personio SE & Co. KG processes further data, some of which may be personal data, to provide its services, in particular for operating this recruitment website. We will refer to this in more detail below.

The controller

The controller under data protection law is:
Personio SE & Co. KG
Seidlstraße 3
80335 München
Tel.: +49 (89) 1250 1004
Entry in the commercial register
Commercial register entry number: HRA 115934
Registration Court: Amtsgericht München
Data Protection Officer contact: privacy@personio.com

Access logs (“server logs”)

Each access to this recruitment website automatically causes general protocol data, so-called server logs, to be collected. As a rule, this data is a pseudonym and thus does not allow for inferences about the identity of an individual. Without this data, it would, in some cases, be technically impossible to deliver or display the contents of the software. In addition, processing this data is absolutely necessary under security aspects, in particular for access, input, transfer, and storage control. Furthermore, this anonymous information can be used for statistical purposes and for optimizing services and technology. In addition, the log files can be checked and analyzed retrospectively when unlawful use of the software is suspected. The legal basis for this is §25 subsection 2 Sentence 2 TDDDG. Generally, data such as the domain name of the website, the web browser and web-browser version, the operating system, the IP address, as well as the timestamp of the access to the software is collected. The scope of this log process does not exceed the common log scope of any other site on the web. These access logs are stored for a period of up to 7 days. There is no right to object to this.

Error logs

So-called error logs are generated for the purpose of identifying and fixing bugs. This is absolutely necessary to ensure we can react as quickly as possible to possible problems with displaying and implementing content (legitimate interest). As a rule, this data is a pseudonym and thus does not allow for inferences about the identity of an individual. The legal basis for this is §25 subsection 2 Sentence 2 TDDDG. When an error message occurs, general data such as the domain name of the website, the web browser and web-browser version, the operating system, the IP address, as well as the timestamp upon occurrence of the respective error message and/or specification is collected. These error logs are stored for a period of up to 7 days. There is no right to object to this.

Use of cookies

So-called cookies are used on parts of this recruitment website. They are small text files which are stored on the device with which you access this recruitment website. As a general rule, cookies serve the purpose of ensuring secure access to a website (“absolutely necessary”), implementing certain functionalities such as standard-language settings (“functional”), improving the user experience or the performance of the website (“performance”), or placing targeted advertisements (“marketing”). On this recruitment website, we generally use only cookies that are absolutely necessary, functional or performance-related, in particular for implementing certain default settings such as language, for identifying the job advertising channel, or for analyzing the performance of a job advert via which a user accessed this recruitment website. The use of cookies is absolutely necessary for providing our services and thus for the performance of the contract (article 6 (1) b) of the GDPR). Period of storage: up to 1 month or until the end of the browser session Right to object: You can determine via your browser settings whether you allow or object to the use of cookies. Please note that deactivating cookies may result in limited or completely blocked functionalities of this recruitment website.

Rights of data subjects

If Personio SE & Co. KG as the controller processes personal data, you as the data subject have certain rights under Chapter III of the EU General Data Protection Regulation (GDPR), depending on the legal basis and the purpose of the processing, in particular the right of access (article 15 of the GDPR) and the rights to rectification (article 16 of the GDPR), erasure (article 17 of the GDPR), restriction of processing (article 18 of the GDPR), and data portability (article 20 of the GDPR), as well as the right to object (article 21 of the GDPR). If the personal data is processed with your consent, you have the right to withdraw this consent under article 7 III of the GDPR. To assert your rights as a data subject in relation to the data processed for the purpose of operating this recruitment website, please refer to Personio SE & Co. KG’s Data Protection Officer (see item B).

Concluding provisions

Personio reserves the right to adjust this data privacy statement at any point in time to ensure that it is in line with the current legal requirements at all times, or in order to accommodate changes in the services offered, for example when new services are introduced. In this case, the new data privacy statement applies to any later visit of this recruitment website or any later job application.