1. Introduction
JUST VARGAS – Talent Search & Career Solutions (hereinafter referred to as “JUST VARGAS”) is committed to protecting the privacy of its data subjects. We will be clear and transparent about the information we are collecting and what we will do with that information.
This Policy defines the following:
The principles adopted for the protection of personal data;
The personal data we collect and process;
The purposes for which the data we collect is processed;
Your rights regarding the personal information we hold;
How we maintain and protect your personal information;
How we comply with data protection rules.
2. Responsible for processing personal data
JUST VARGAS is responsible for collecting and processing the personal data of its clients and candidates, under the terms and for the purposes indicated in this document, in compliance with the applicable legal obligations in this matter. The data may be processed directly by JUST VARGAS or by entities subcontracted by it for this purpose.
3. Principles of Personal Data Protection
In the course of our business, we process Personal Data. This may include personal data that we collect through the provision of our services, our customer engagements, marketing activities, or other related and support activities. The data may be received directly from a data subject, for example in person, by post, email, telephone, or from other sources. All employees and partners must only collect personal data that is relevant and necessary to perform their functions.
JUST VARGAS is committed to complying with the data protection principles established by the GDPR, which are:
- Lawful, fair, and transparent processing; means that we must have a legitimate basis for which we are processing personal data, for example, a contractual relationship with the data subject, or the processing is necessary for compliance with a legal obligation to which we are subject. It also means that we must inform the data subject about the processing in an accessible and easily understandable way;
- Purpose; we must only collect personal data for specified, explicit and legitimate purposes and not process data beyond the purpose for which it was collected;
- Data minimization; adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed;
- Accuracy; we have an obligation to ensure that personal data is accurate and to keep personal data up to date;
- Retention limitation; we must not retain personal data for longer than is necessary for the purposes for which it was collected, although we may retain certain data for historical and statistical purposes.
- Integrity and confidentiality; Treated in a manner that guarantees their security, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, adopting appropriate technical or organizational measures;
- Lawful transfer to third countries or international organizations; we only transfer personal data to third countries or an international organization where the EU Commission has confirmed that they ensure an adequate level of protection or, otherwise, that there are appropriate safeguards in place;
- Data Subject Rights; Data Subjects have several rights that we must respond to, for example, the right to access a copy of the data we hold.
4. What personal data do we collect?
Personal data refers to any information relating to the data subject that allows him/her to be identified, such as name, contact information, professional experience, academic or other training, and information relating to the data subject’s access to our website. We may collect personal data from the data subject when he/she registers on our website, wishes to send or request information through the forms present on it, such as registration of commercial communications or request for information.
More specifically, the following categories of personal data will be collected:
- First Name
- Last Name
- Adress
- Email Adress
- Phone Number
- Professional Experience
- Academic and/or other training
- Image
- Sound
5. Purposes of data processing, why and for how long?
The data is mandatory so that we can send our communications and services, and also has the purpose of managing your possible services, as well as the applicable guarantees.
Data collected automatically and anonymously through a set of computer means are temporarily recorded in specific files and are also automatically deleted after a certain period.
The collection of this data has purely technical purposes, such as connection configuration, system security, technical network administration and optimization of our website.
The data we refer to are the following:
IP address of the requesting processor;
Date and time of access;
Volume of transmitted data;
Browser software and operating system identification data;
Geographic data;
Source or origin from which you accessed our website;
The collection of this data is necessary to monitor and prevent unauthorized use or activities that may be illegal (e.g. to maintain and ensure security in the event of an attack on our computer systems).
Your personal data will only be processed in cases where there is a lawful basis. The lawful basis will depend on the reasons why the personal data was collected and the need to use it.
We present the possible legal bases for the processing of your personal data:
Performance of a contract – Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
Legal obligation – The processing is necessary for compliance with a legal obligation to which the controller is subject.
Defense of the vital interests of the holder of personal data – The processing is necessary to defend the vital interests of the data holder or of another natural person.
Exercise of functions of public interest or authority – The processing is necessary for the performance of functions carried out in the public interest or in the exercise of public authority vested in the controller.
Legitimate interests of the company – The processing is necessary for the purposes of the legitimate interests pursued by the controller or by third parties, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.
Consent of the data subject – The data subject has given his/her consent to the processing of his/her personal data for one or more specific purposes.
Only young people aged 16 or over are allowed to give their own consent. In the case of children under this age, the consent of the children’s parents or legal guardians is required.
Personal data will not be retained for longer than necessary to fulfil the purpose for which it was collected. To determine the appropriate retention period, the amount, nature and sensitivity of the personal data and the purposes of processing were considered.
The periods during which there is a need to retain personal data due to legal obligations or to respond to complaints were considered.
Personal data will be securely deleted after the defined retention period. Over time, consideration will be given to minimizing the personal data that is being processed, and the possibility of anonymizing the data so that it cannot be associated with the data subject or identified, in which case it will be possible to use this information without being notified again.
6. Security of the data subject’s personal data
JUST VARGAS respects best practices in the field of information and personal data security and protection, having adopted a demanding program of policies and standards to ensure the confidentiality, integrity and availability of the information it processes and for which it is responsible, which is known to all JUST VARGAS employees and partners. JUST VARGAS’ general information security policy establishes a wide range of technical and organizational measures, organized into various security domains, including:
Logical security measures, such as the use of firewalls and intrusion detection systems, the existence of an information access policy and the recording of operations (login)
Physical security measures, including strict control of access to JUST VARGAS’s physical facilities by employees, partners, and visitors, as well as very restricted and permanently monitored access to JUST VARGAS’s essential technological infrastructures.
Other measures such as masking, encryption, pseudonymization and anonymization of personal data, and also a set of measures that aim to implement the principle of privacy by design and by default. Whenever JUST VARGAS uses subcontractors or third parties, they will be respectively responsible for compliance with applicable legislation for the personal data they have to transmit and will ensure that the
The sharing of information and personal data complies with the legal standards in force, the transmission is carried out securely and the subcontractors or third parties are contractually obliged to observe the duties of confidentiality and secrecy and to ensure the security of the personal data, which, for this purpose, are communicated to them, and may not use such data for any other purposes, for their own benefit or that of third parties, nor correlate it with other data that is available to them.
7. Sharing of personal data
The personal data of the data subject may be shared with other companies of the JUST VARGAS GROUP.
Data of the personal data holder may also be shared with the following third parties for the purposes described in this Privacy Policy: Government authorities, police forces and regulators; Service providers (E-mail, website managers, carriers, financial/insurance institutions, security and surveillance); Website visit analysis tools.
8. Your data protection rights
By law, the data subject has the right to:
- Request information about whether we hold personal data about you and, if so, what data that is and why we hold it.
- Request access to personal data, receiving a copy of the personal data we hold about you and verifying that we are processing it legitimately.
- Request the rectification of the personal data we hold about you, being able to rectify at any time any incomplete or inaccurate data we hold about you.
- Request the deletion of your personal data and you can delete or remove personal data at any time when a retention period has been reached or the processing of data is no longer lawful. You also have the right to ask us to delete or remove your personal data where you have exercised your right to object to processing (see below).
- Object to the processing of personal data where we rely on a legitimate interest (or those of a third party) and there is a valid reason to object. You have to use personal data for direct marketing purposes.
- Opposition to automated decision-making, including profiling.
- Request the limitation of data processing, requiring the suspension of the processing of personal data.
- Request the portability of personal data in a structured and electronic form for yourself or another entity.
- Withdraw consent. In the limited circumstances where you may have provided your consent to the collection, processing and transfer of your personal data for a specific reason, you have the right to withdraw your consent to that specific processing at any time.
If you wish to exercise any of these rights, please contact us using the means of communication indicated below.
You will not have to pay a fee to access your personal information (or to exercise any of the other rights). However, we may charge a reasonable fee if your request for access is clearly excessive or unfounded. Alternatively, we may refuse to comply with the request in such circumstances.
We may need to request specific information from you to help us confirm your identity and ensure your right to access the information (or to exercise any of the other rights). This is another appropriate security measure to ensure that personal information is not disclosed to any person who has no right to receive it.
9. COOKIES
What are cookies?
In order to provide a more personalized service, this website uses cookies to collect and store information. A cookie is a small packet of data that is stored on the equipment from which certain web pages are accessed.
This type of file cannot harm your equipment. Cookies allow a website to, among other things, store and retrieve information about the use of the website, allowing us to improve its quality and offer you a better user experience.
By browsing our website, the visitor accepts that we can place cookies on their device and access them when they visit the site in the future.
If you wish to delete any cookies that are already on your computer, please consult the help and support area of your Internet browser for instructions on how to locate the file or directory that stores cookies.
You can find more information about cookies, how to prevent them and how to delete them at www.aboutcookies.org. Please note that if you delete our cookies or disable future cookies you may not be able to access certain areas or features of our website.
This website uses these types of cookies:
Technical cookies
These cookies allow you to browse the website and use features such as sending your CV.
Website analytics cookies
This website uses Google Analytics cookies to quantify the number of visitors. These cookies are used to analyze and measure how users navigate the Internet. This information allows this website to continually improve its services and the user experience and purchase of products and services by users. For more information, you can visit the Google Analytics privacy page: https://www.google.com/analytics/learn/privacy.html
Personalization cookies
When a user browses and/or shops online, the website remembers their preferences (e.g. username, language or location). This makes the user experience in terms of navigation easier, simpler and more personal.
10. Contact Us
The data subject may contact JUST VARGAS for all matters related to the processing of their data and the exercise of the rights granted to them through the following email address: hello@justvargas.com