1. Data controller

The person responsible for the processing of your personal data is the company ECIX GROUP, SL, with registered address at Calle Lagasca, 88, 7th Floor, 28001, Madrid and NIF B-82550401 (hereinafter, "ECIX”).

ECIX is fully committed to complying with current data protection regulations and, therefore, has appointed a Data Protection Officer, whom you can contact via email privacy@ecix.tech

2. Purposes, data processed and basis for legitimacy

Purpose 1: Managing your application for an open selection process

• Description of the purpose: We will process your data to manage your application and carry out the selection process for which you have applied. This involves analyzing your professional profile based on the information contained in your CV and information generated during the selection process through interviews, group dynamics, and/or communications with you.

We may also process your contact information to communicate with you during the process, send you information about your progress, request more information about your profile, and, if applicable, make you a job offer.

• Data processed: Identification and contact information (DNI, NIE or equivalent document, name, surname, telephone number, email); academic details (official degrees, certificates, etc.); employment details (work experience, job title, etc.); and other data you decide to share with us. ECIX by sending your CV and any other CVs that may be generated during the selection process.

• Basis for legitimacy: The legal basis for processing your data is the application of pre-contractual measures in accordance with your application for the job offer.

Purpose 2: Data retention for new selection processes

• Description of the purpose: Once the selection process is complete, if the candidate is not hired, their personal data will be deleted. However, if you give your consent, ECIX will retain the data for profile assessment in new selection processes.

• Data processed: Identification and contact information (DNI, NIE or equivalent document, name, surname, telephone number, email); academic details (official degrees, certificates, etc.); employment details (work experience, job title, etc.); and other data you decide to share with us. ECIX by sending your CV and any other CVs that may be generated during the selection process.

• Basis for legitimacy: The basis for the legitimacy of the treatment is the consent of the interested party, which may be revoked at any time by writing an email to privacy@ecix.tech. 

3. Communication of your data and international transfers

Your personal data will not be disclosed to third parties unless required by the Public Administration, Judges and Courts, or other authorities in the exercise of their functions. However, we inform you that personal data may be accessible to service providers. ECIX in their capacity as data controllers, always under the instructions of ECIX.

International transfers are not anticipated. However, should they occur, they will only be carried out in compliance with the safeguards required by current data protection regulations and, specifically, in accordance with Chapter V of Regulation (EU) 2016/679, the General Data Protection Regulation.

4. Conservation of your data

Once the selection process is concluded, if the candidate is not hired, the personal data will be deleted, unless the candidate gives his or her consent for the data to be kept for processing in new selection processes. ECIXIf the candidate gives their consent, the data will be retained for a maximum period of one year.

Once personal data has been deleted, it will be blocked and made available only to the relevant authorities in the event of requests for information. Once the applicable legal statute of limitations for actions has elapsed, the personal data will be physically erased.

5. Rights

To the extent recognized in the data protection regulations applicable at any given time, you may exercise the following rights in relation to the processing of your data:

1. Right of access: If you exercise this right, you will be able to find out what type of data we are processing and the characteristics of the processing we are carrying out.
2. Right of rectification: If you exercise this right, you may request that your data be modified if it is inaccurate or untrue.
3. Right to portability: If you exercise this right, you will be able to obtain a copy of the data being processed in an interoperable format.
4. Right to restriction of data processing: If you exercise this right, you may limit the processing of your data in the cases provided for in the Law.
5. Right to object: If you exercise this right, you may object to the processing of your data.
6. Right to erasure: If you exercise this right, you may request the deletion of your data when processing is no longer necessary.
7. Right to revoke consent given, if applicable.

You can exercise these rights through any of the following channels, indicating the right to exercise and accompanying any other documentation you consider appropriate: (i) Postal address: Calle de Lagasca, 88, 7th Floor, 28001, Madrid or (ii) email: privacy@ecix.tech 

You also have the right to lodge a complaint with the supervisory authority (in Spain, the AEPD), www.aepd.es, if you believe your data protection rights have been violated. However, in the first instance, you may file a complaint with the Data Protection Officer through privacy@ecix.tech, who will resolve the claim within a maximum period of two months.