PRIVACY POLICY SPECIFIC TO SELF-CANDIDATIONS
The purpose of this Notice is to inform candidates about the processing of their personal data when they submit their application through the section “Work at CPS Infraestructuras Movilidad y Medio Ambiente, S.L.”, by e-mail, through employment portals, intermediaries or headhunters, or through any other channel enabled for selection processes.
This Notice is specific to the selection context and is complementary to the general Privacy Policy of the website. In case of discrepancy, the provisions of this Notice shall prevail with respect to the processing of data in the context of applications and selection processes.
- Responsible for the treatment
The data controller is CPS Infraestructuras Movilidad y Medio Ambiente, S.L. (hereinafter, “the Company”), with NIF B97500433 and address in Valencia (Spain), Paseo de las Facultades 1 (hereinafter, the “Company”).
You may contact the Company regarding privacy matters by e-mail at protecciondedatos@cps.es. For the purpose of notifications and complaints, the address will be the one indicated above.
- Data processed and origin
The Company will process the data provided by candidates in their curriculum vitae, in application forms, in communications maintained during the process and, where appropriate, in interviews or tests related to the position. This data may include, among others, identification and contact data, training, professional experience, qualifications and certifications, languages, competencies and skills, as well as information necessary to manage communications and coordinate the process.
In the event that the application is received through job portals, intermediaries or headhunters, the Company will process the data that these third parties submit as part of the process, to the extent of the information provided by the candidate on these platforms or to the intermediary.
The applicant guarantees the truthfulness, accuracy and updating of the data provided. If he/she provides data of third parties (e.g. references), he/she declares that he/she has a legitimate basis for providing such data and that he/she has informed the third party in advance of the relevant details.
- Purposes of treatment
The data will be processed for the main purpose of managing the application and developing the selection process, including profile analysis, coordination of interviews, conducting and evaluating tests related to the position, communication with the candidate and, where appropriate, the formalization of the hiring.
Additionally, the data may be processed to meet legal obligations, manage claims and allow the formulation, exercise or defense of rights and interests of the Company in the administrative or judicial sphere, when necessary.
When the Company wants to keep the candidacy for future processes, such information will be treated only during the period indicated in this Notice and with the authorization or consent that, if applicable, is specifically collected, without conditioning it to the participation in the selection process in progress when it is not necessary.
- Legal basis for processing
The processing of data to manage the application and selection process is generally based on the application of pre-contractual measures at the request of the person concerned (art. 6.1.b RGPD), as the application is a preliminary step to an eventual employment relationship.
Certain ancillary processing (for example, incident management, internal audits or defense against claims) may be based on the legitimate interest of the Company in the correct organization of the process and the defense of its rights according to art. 6.1.f of the General Data Protection Regulation 2016/679, (hereinafter GDPR), applying criteria of proportionality, minimization and adequate safeguards, and without undermining the rights and freedoms of the data subject.
The conservation of the curriculum for future selection processes will be based, where appropriate, on the consent given specifically (art. 6.1.a RGPD), which may be withdrawn at any time.
- Specially protected data
The Company does not request data relating to special categories (e.g. health data, biometrics, ideology, religion or sexual orientation), or data unnecessary for the selection process.
If, on a voluntary basis, the candidate provides health or disability information for the sole purpose of requesting reasonable accommodation of the selection process (accessibility or accommodation), the Company will limit the processing strictly to that purpose, with restricted access and enhanced safeguards, and only to the extent necessary to manage the requested accommodation.
- Recipients and suppliers
The data may be accessed by authorized personnel of the People and Culture area and by persons in charge of the area applying for the position, exclusively to the extent necessary for the management of the selection process.
The Company may use service providers acting as data processors to provide necessary services, such as application management tools, corporate email, information hosting, videoconferencing, technical testing or IT support. In such cases, the contracts required by art. 28 RGPD will be formalized and appropriate confidentiality and security measures will be required.
Likewise, the data may be communicated to competent authorities when there is a legal obligation or when it is necessary for the defense against claims, in which case the communication will be made only to the extent required by the applicable regulations.
- International data transfers
If the use of technology providers involves international transfers outside the European Economic Area, such transfers will be made only where there is a valid mechanism in place in accordance with the GDPR (e.g., standard contractual clauses or other safeguards). The applicant may request additional information on the existence of international transfers and, where applicable, on the applicable safeguards, through the privacy channel.
- Data retention
The data will be kept for the time necessary for the management of the selection process in progress. Once completed, they will be kept duly blocked only when necessary to meet legal obligations or for the formulation, exercise or defense of claims during the applicable statute of limitations.
If the candidate expressly authorizes the conservation of his or her candidacy for future processes, the Company will keep the résumé for a maximum period of 24 months, after which time it will be deleted, or the renewal of the authorization will be requested when appropriate. The candidate may withdraw this authorization at any time.
- Use of technological tools and artificial intelligence in selection
The Company may use technological tools to support the selection process and make it more efficient, including, where appropriate, automated functionalities for ranking or sorting of applications, detection of matches with job requirements and automation of operational communications.
In any case, it is guaranteed that the final decision to advance, discard or hire will be taken by a person, and that no decisions that produce legal effects on the candidate or significantly affect him/her in a similar way will be taken based exclusively on automated processing, in the terms of art. 22 RGPD.
Candidates may request human intervention, express their point of view and request a review of the result through the indicated privacy channel. The Company will apply criteria of minimization and proportionality, avoiding unnecessary or particularly intrusive data processing, and will adopt measures to reduce risks of bias or discrimination in the process.
- Candidate’s rights
The applicant may exercise the rights of access, rectification, deletion, opposition, limitation of processing and portability under the terms provided in the RGPD and the LOPDGDD (Organic Law 3/2018, of December 5, on the Protection of Personal Data and guarantee of digital rights), by request addressed to the mail protecciondedatos@cps.es or in writing to the registered office, indicating the right he/she wishes to exercise.
The Company may request proof of identity when necessary to confirm the identity of the applicant. Likewise, the applicant has the right to file a complaint with the Spanish Data Protection Agency (AEPD). If you would like to obtain more information about your rights, we suggest you visit their website https://www.agpd.es.
- Safety measures
The Company implements appropriate technical and organizational measures to ensure a level of security appropriate to the risk, with particular attention to confidentiality, access control and traceability of processing in the context of selection.
- Updates
The Company may update this Notice to adapt it to regulatory changes, criteria of competent authorities or modifications in the operation of the selection process. The version
The current application form will be available on the website and, when necessary, applicants will be informed by the usual means.