1. Introduction

This policy explains how ENSO SPACES SL ("ENSO" or "we") processes the personal data of people who apply for its jobs, whether through our careers form, through LinkedIn or through any other channel. Any other use of the Website and the Services is covered by our general Privacy Policy.

2. Controller and contact

The data controller is ENSO SPACES SL, with tax ID B67562025 and registered address at Pl. del Doctor Letamendi 37, 7-3, 08007 Barcelona (Spain). For any question about your data as a candidate, write to us at hr@ensospaces.com.

3. What data we process

The data you give us when you apply: your full name, email, phone number, your CV and what it contains (education, experience, skills and languages) and, if you write one, your message. During the process we add the job you applied for, the status and stage of your application, the dates and notes of your interviews, the assessments of the people who interview you and the emails we exchange with you. Your name, email, phone number and CV are needed to assess your application: without them we cannot process it. The message is optional.

4. Data we do not need

We do not need a photo, special category data (such as health, ethnic origin, religion, trade union membership or sexual orientation) or information about your family situation. Please do not include it in your CV or your message; if it appears, we will not take it into account when assessing your application. If your CV includes other people’s data, such as references, make sure they agree before you send it to us.

5. Where we get your data from

From you, when you apply through our form or write to us. If you apply through LinkedIn, from the information you share with us through that platform. If someone on our team refers you, from that person, and we will tell you so when we first contact you.

6. What we use it for

To manage your application for the job you chose: reviewing your CV, assessing whether you are a fit for the role, contacting you, organizing interviews (including calendar invitations) and letting you know our decision. If you join ENSO, the data we need becomes part of your employee file, with its own privacy information. We do not use your candidate data to send you marketing communications.

7. Legal basis

We process your data to take steps, at your request, before entering into a contract when you apply (Art. 6(1)(b) GDPR), and on the basis of the consent you give us in the form (Art. 6(1)(a) GDPR). You can withdraw your consent at any time by writing to hr@ensospaces.com: this does not affect the processing carried out before, but without it we will not be able to continue with your application. Keeping your data after the process to handle possible claims is based on our legitimate interest (Art. 6(1)(f) GDPR).

8. Automated decisions

Every application is reviewed by people: the People team and those who interview you. We do not make decisions based solely on automated processing, and we do not carry out profiling that produces legal effects on you.

9. Who has access to your data

Only the People team and the people involved in your process (for example, those who interview you). We do not disclose your data to third parties unless required by law. The providers that serve us process it on our behalf under a data processing agreement: cloud hosting and storage, email delivery (Twilio SendGrid) and calendar and email (Google Workspace).

10. International transfers

Some of these providers may process data outside the European Economic Area, mainly in the United States. In those cases, the transfer relies on the EU-U.S. Data Privacy Framework, when the provider is certified, or on the standard contractual clauses approved by the European Commission.

11. How long we keep it

During the hiring process and, if you do not join us, for up to 12 months after the process closes, to answer your questions and handle possible claims. After that we delete it. If you would like us to delete it sooner, write to us. If you join us, we keep it as part of your employment relationship.

12. Security

We keep your CV in private storage that only authorized staff can access, and we apply technical and organizational measures to protect your data against unauthorized access, loss or alteration.

13. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent, by writing to hr@ensospaces.com. We will reply within one month. If you believe we have not handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos).