This policy explains how JOB AND SKILLED, S.L. processes the personal data it collects through this website and in the course of its business, in accordance with Regulation (EU) 2016/679 (GDPR) and with Ley Orgánica 3/2018, on the protection of personal data and the guarantee of digital rights (LOPDGDD 3/2018, Spain's data protection act).
1. Data controller
| Controller | JOB AND SKILLED, S.L. |
|---|---|
| NIF (Spanish tax ID) | B93883114 |
| Address | Carrer Mireia 16, local 6 · 08033 Barcelona |
| Data protection contact | info@jobandskilled.com |
No Data Protection Officer has been appointed, because none of the circumstances set out in article 37 of the GDPR apply.
2. What data we process and for what purpose
2.1 Business enquiries and commercial contact
- Data: first name and surname, company, telephone, email, service requested, location and description of the project.
- Purpose: to deal with the enquiry, prepare the proposal and maintain the commercial relationship.
- Legal basis: your consent (art. 6.1.a GDPR) and, where there is a contractual or pre-contractual relationship, performance of a contract (art. 6.1.b).
2.2 Applications from trades professionals
- Data: first name and surname, DNI (Spanish national ID) or NIE (foreigner's ID number), telephone, email, trade, experience, emergency contact and the documentation you provide to us (PRL training — occupational risk prevention — certificates and medical fitness assessment).
- Purpose: to manage your application, assess your profile for vacancies and, if you are taken on, to process your registration and the associated employment obligations.
- Legal basis: your consent (art. 6.1.a) for handling the application; performance of the contract (art. 6.1.b) and compliance with legal employment and social security obligations (art. 6.1.c) if you are taken on.
- Note on the DNI/NIE: we ask for it because it is required in order to register you with the Seguridad Social (the Spanish social security system) and for the coordinación de actividades empresariales (the statutory coordination of health and safety between the companies working on a site). It is not published and is not passed on for any other purpose.
2.3 Employed staff: working-time records and location
- Data: clock-in and clock-out times, the site assigned, and geolocation coordinates at the moment of clocking in or out, together with their accuracy margin.
- Purpose: to comply with the obligation to keep a daily record of working time and to verify that clocking takes place at the workplace.
- Legal basis: compliance with a legal obligation (art. 6.1.c GDPR), in relation to article 34.9 of the Estatuto de los Trabajadores (the Spanish Workers' Statute), introduced by Real Decreto-ley 8/2019 (RD-ley 8/2019, which introduced mandatory daily working-time records).
- Scope: location is not tracked continuously. The position is read only when clocking in and clocking out. Every member of staff is given prior written information about this processing before they start.
2.4 Access to the client portal and the management panel
- Data: user identifier, encrypted credentials and access logs.
- Purpose: authentication, security and traceability of operations.
- Legal basis: performance of the contract (art. 6.1.b) and legitimate interest in the security of our systems (art. 6.1.f).
3. Retention periods
| Type of data | Retention |
|---|---|
| Business enquiries that did not become client relationships | Up to 1 year from the last contact |
| Unsuccessful applications | Up to 1 year, unless you ask us to delete them sooner |
| Client and invoicing data | 6 years (art. 30 of the Código de Comercio, the Spanish Commercial Code) and 4 years for tax purposes |
| Daily working-time records | 4 years (RD-ley 8/2019) |
| Employment and PRL (occupational risk prevention) documentation | The periods required by employment and risk-prevention law |
4. Recipients and processors
We do not sell or transfer personal data for commercial purposes. The following suppliers, which are necessary in order to deliver the service, may access the data as processors under a contract compliant with article 28 of the GDPR:
- Cloud infrastructure and database provider, with servers in the European Union.
- Website hosting and content delivery provider.
- Corporate email provider.
- Employment and tax advisers, for payroll and statutory obligations.
In addition, data may be disclosed to public authorities where there is a legal obligation to do so (Seguridad Social, the Agencia Tributaria — the Spanish tax authority — and the labour inspectorate) and to principal contractors, limited strictly to the documentation required by the coordinación de actividades empresariales on the site in question.
No international transfers of data outside the European Economic Area take place. Should any become necessary in future, we will give prior notice and apply the safeguards set out in chapter V of the GDPR.
5. Automated decision-making
No automated decisions are taken and no profiling with legal effects on data subjects is carried out.
6. Your rights
You may at any time exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and your right to withdraw consent previously given, without this affecting the lawfulness of processing carried out beforehand.
To exercise them, write to info@jobandskilled.com stating the right you wish to exercise and attaching a copy of a document proving your identity. We will reply within a maximum of one month.
If you consider that the processing does not comply with the applicable rules, you may lodge a complaint with the Agencia Española de Protección de Datos (the Spanish data protection authority) (www.aepd.es).
7. Security
We apply appropriate technical and organisational measures in accordance with article 32 of the GDPR, including encryption in transit, storage of credentials using key derivation functions, role-based access control, audit logging of sensitive operations and backups. We review these measures periodically.
8. Changes to this policy
This policy may be updated to reflect changes in the law or in the services provided. The date of the last update appears at the top of the page.
9. Governing version
This translation is provided for convenience. In the event of any discrepancy between language versions, the Spanish version of this document prevails.