Privacy policy.

Esferize Comunicaciones, S.L., with registered office at Calle de la Secoya, 19, 3ª Planta, Puertas 13 y 14, 28044 Madrid, Spain, and email protecciondedatos@esferize.com, is the data controller for the personal data collected through the website www.esferize.com.

The personal data provided by users will be used for the following purposes:

• Responding to enquiries or requests made through the contact forms.
• Managing the contractual or commercial relationship established.
• Sending commercial communications relating to our products and services, provided that the user has given their consent.
• Analysing the use of the website in aggregate form by means of analytics cookies, subject to the user's prior consent.
• Complying with applicable legal obligations.

The legal basis for the processing of data is the user's consent, which is requested in each data collection form. Where a contractual relationship exists, the legal basis will be the performance of the contract. Processing for analytics purposes is based on the user's consent, given through the cookie management system and revocable at any time.

Personal data will be kept for the time necessary to fulfil the purpose for which it was collected and to determine any liabilities that may arise from that purpose and from the processing of the data.

Esferize Comunicaciones, S.L. will not disclose personal data to third parties, unless legally required or where necessary for the provision of the service requested.

As a general rule, data is processed on servers located within the European Economic Area (EEA). However, if the user accepts analytics cookies, the use of Google Analytics may involve a transfer of data to Google LLC in the United States. Such transfer is covered by the appropriate safeguards provided for in Articles 44 et seq. of the GDPR — the European Commission's standard contractual clauses and the EU-US Data Privacy Framework to which Google adheres. The user can avoid this transfer by rejecting analytics cookies.

Users have the right to:

• Access their personal data.
• Rectification of inaccurate data.
• Erasure of their data when, among other reasons, it is no longer necessary for the purposes for which it was collected.
• Restriction of processing in the cases provided for by the applicable legislation.
• Objection to processing on grounds relating to their particular situation.
• Portability of their data.
• Withdraw consent at any time, without affecting the lawfulness of the processing carried out prior to its withdrawal.

To exercise these rights, users may send a communication to Esferize Comunicaciones, S.L., Calle de la Secoya, 19, 3ª Planta, Puertas 13 y 14, 28044 Madrid, Spain, or to the email address protecciondedatos@esferize.com, stating the right they wish to exercise. We may request verification of your identity where there are reasonable doubts about it.

Esferize Comunicaciones, S.L. has adopted the technical and organisational measures necessary to guarantee the security of personal data and to prevent its alteration, loss, unauthorised processing or unauthorised access.

The user has the right to lodge a complaint with the Spanish Data Protection Agency (AEPD), C/ Jorge Juan, 6, 28001 Madrid, www.aepd.es, particularly where they consider that they have not obtained satisfaction in the exercise of their rights.

This information supplements the above and applies to the data you provide when submitting your application through the careers page, including your curriculum vitae (CV).

• Data controller: Esferize Comunicaciones, S.L. (NIF B83958983), Calle de la Secoya, 19, 3ª Planta, 28044 Madrid. Contact for recruitment matters: mreinoso@esferize.com.
• Purpose: to manage and assess your application in our selection processes, to communicate with you in relation to it and, if you expressly authorise it, to consider you for future processes.
• Legal basis: the implementation of pre-contractual measures taken at your request (Art. 6.1.b GDPR) and our legitimate interest in selecting staff and filling our vacancies (Art. 6.1.f GDPR). Keeping your application for future processes is based exclusively on your consent (Art. 6.1.a GDPR), which you may withdraw at any time without affecting the lawfulness of the processing carried out prior to its withdrawal.
• Special categories of data: we do not need special categories of data (health, ideology, religion, trade union membership, racial or ethnic origin, sexual orientation, etc.) or a photograph in order to assess your application. We ask you not to include them in your CV unless they are essential for the position. If you provide them voluntarily, we will understand that you consent to their processing within the selection process (Art. 9.2.a GDPR); otherwise, we will delete them.
• Retention: your data will be kept for the duration of the selection process for which you are applying. Once it has ended, the data will be deleted, unless you have consented to its retention for future processes, in which case it will be kept for a maximum of one (1) year, after which it will be deleted or you will be asked to renew your consent.
• Recipients: we do not disclose your data to third parties except where legally required. To manage applications we may rely on technology providers (email, storage and, where applicable, recruitment management tools) acting as processors in accordance with Art. 28 GDPR.
• International transfers: if any of those providers were to process data outside the European Economic Area, the transfer would be covered by the appropriate safeguards provided for in Arts. 44 et seq. of the GDPR (the European Commission's standard contractual clauses and, where applicable, the EU-US Data Privacy Framework).
• Automated decisions: we do not make decisions based solely on automated processing, including profiling, which produce legal effects concerning you or similarly significantly affect you. Applications are assessed by members of the selection team.
• Your rights: you may exercise your rights of access, rectification, erasure, objection, restriction and portability, as well as withdraw your consent, by writing to protecciondedatos@esferize.com. You may also lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es).