Global Privacy Policy

for employees, candidates and job applicants

PayRetailers Group SLU., domiciled at Av. Diagonal No. 682 Planta 1, 08034, Barcelona, Spain, in accordance with the General Data Protection Regulation (GDPR) and the applicable legislation on the protection and personal data of PayRetailers’ subsidiaries, informs you that it will process the personal data and sensitive personal data, which below, are listed, for the purposes indicated in this Policy.

Consent.

By accepting this Privacy Policy, you expressly consent to the use and processing of your personal data by PayRetailers and its affiliates, for the exclusive purposes defined in this document.

The use of your personal data provided includes storage, understood as storage in a register or in a database, by your own means or provided by third parties; and processing, understood as any automated or non-automated operation that allows the collection, storage, recording, organization, elaboration, selection, extraction, comparison, interconnection, dissociation, communication, assignment, transfer, transmission or cancellation of personal data.

Declaration

It is hereby stated that, to comply with this privacy statement, you must be of legal age and certify that the information you provide is accurate and truthful at the time you accept this privacy policy. If you require a modification, we ask you to notify us as soon as possible in accordance with the procedure established in the section on the exercise of privacy rights.

It is stated that to comply with this privacy statement you must be of legal age; nowhere on our page, platform or job boards will we intentionally collect personal data or information from minors.

What personal data will we use and how do we obtain it?

PayRetailers and/or its subsidiaries may collect your data directly, through the internal job board, for any job application that you send us or we collect by physical and/or electronic means through the use of technologies, such as mail, cookies, website and mobile applications. We may also collect your personal data indirectly through publicly accessible sources, external job boards, even social networks.

All personal and sensitive data that, as part of the personnel registration process and the selection and recruitment of candidates, will be safeguarded with the technical, administrative and physical security measures necessary to guarantee the protection of your information, will only be used for the purposes described herein.
If You are an employee:

Personal Data: 1) Identification Data, 2) Contact Data, 3) Financial, Tax, and/or Patrimonial Data, 4) Employment Data, 5) Professional and Academic Data, 6) In the case of Foreigners: Details and documentation required within the framework of immigration laws, such as citizenship, passport data, residence or work permit details, country of origin and domicile of country of origin, 7) Data on administrative procedures followed in the form of a trial and/or jurisdictional, 8) Access photograph, images captured by video surveillance cameras, if you attend or be in our offices, if applicable, 9) Photographs, videos or personal image, image and/or voice records and authorizations, 10) Personal references and family data, 12) Social security data.
Sensitive Personal Data: 1) Health Data, 2) Physical Characteristics, 3) Life and Personal Habits, 4) Psychometric Data, 5) Only in cases where the position is of a high level and depending on the legislation applicable to PayRetailers and/or its subsidiaries, may you request a criminal record.
If you are a candidate or applicant:

Personal Data: Identification data, employment data, academic data, personal data contained in your CV, data contained in immigration documents (if applicable), reason for departure, positions held, seniority, social security number, economic or financial data (related information, gross and/or net income), as well as socio-economic studies and data of third parties such as professional and/or personal references (Name, telephone, address).
Sensitive Personal Data: Depending on the position for which you are applying, the following may be collected: Psychometric data, technical tests, intelligence, reasoning, behavior, personal data related to the execution of tests as part of the documentation process for the identification of the candidate. Only in cases where the position is of a high level and depending on the applicable legislation PayRetailers and/or its affiliates, may request a criminal record.
Personal data of third parties.

In order to comply with the legal obligations acquired with you, PayRetailers and/or its subsidiaries may process personal identification and contact data of third parties, whether family and/or work references that will be provided by you, solely for the purpose of verifying your references and information given by you, for which you are obliged to inform said third parties about the processing of your personal data and the purpose.

What are the purposes of the processing?

Employees: We will use the personal data we collect from you for the following primary purposes, which are necessary to formalize the employment relationship: 1) Training and measurement of development skills, 2) For everything related to the fulfillment of payments, granting of labor benefits and other additional benefits that may be granted by PayRetailers and/or its subsidiaries or companies to which it provides, 3) To comply with fiscal, labor and judicial obligations, as well as to identify and keep a record of the employees who work in any of the offices of PayRetailers and/or its subsidiaries or companies to which it provides services, 4) To carry out operational and/or administrative activities, which include internal or external campaigns, 5) Monitoring of the activities carried out in the computer equipment assigned for analysis and evaluation of performance, 6) Updating of data in cases of emergency, as well as for the generation of employee numbers and institutional email.

The databases that are generated for the fulfillment of our obligations will be in accordance with the applicable legislation, they will only be managed by passwords and by internal personnel of the company, with the sole purpose of complying with what is described in this notice, likewise said information will always be safeguarded and handled only for the purposes described herein.

Candidate or applicant: 1) For all purposes related to selection and recruitment, 2) verify references of previous jobs, educational level, validation of information related to curriculum vitae, socioeconomic studies, internal and external job bank with authorized third parties, talent attraction programs, timely information on job offers or vacancies that arise in PayRetailers and/or its subsidiaries, as well as for the companies to which it provides services, 3) evaluation, training and measurement of development skills, make recruitment and selection decisions, carry out interviews, whether in person or remotely, 4) make evaluations and exams for hiring, evaluate the candidate’s skills and knowledge in relation to those required for the execution of the vacancy offered, 5) In the event that the candidate is a foreigner, validate his/her legal stay in the country and if he/she has authorizations to perform a job in the territory where he/she will work, 6) carry out labor investigations, as well as request personal and work references to know the candidate’s background, and evaluate his/her suitability, 7) maintain communication with the candidate during the recruitment and selection process by the means established by PayRetailers and/or its subsidiaries, 8) make a comparison between the compensation and current salary of the candidate in order to prepare an offer.

In addition to the purposes, all personal data may be used for the purpose of complying with legal obligations by PayRetailers and/or its subsidiaries.

Legal basis for processing

For the processing of personal data, PayRetailers and/or its subsidiaries start from the following legal bases:

a. Consent. Based on the consent you provide us for the processing of your personal data during your application and the selection and recruitment process.
b. Contractual and pre-contractual relationships. We process personal data to formalise the employment relationship and to comply with the respective legal obligations we have with the different authorities.

How long do we store your personal data?

We will keep your data only for the period strictly necessary for the respective purposes of the processing or for the legal period, if applicable.

Who do we share your data to?

PayRetailers shares your data with other entities of the business group that operate under the same standards, processes and/or internal policies under which its subsidiaries operate, and may also share the data for the companies for which it provides recruitment services, in order to fully comply with the services, we offer.

In addition, PayRetailers and/or its affiliates share data with processing sub-processors, such as service providers or business partners with whom PayRetailers and/or its affiliates have a legal relationship. PayRetailers and/or its subsidiaries verifies that such service providers or business partners comply with the same data protection standards as PayRetailers and/or its affiliates.

We inform you that PayRetailers and/or its subsidiaries do not transfer data to third parties, except in exceptional cases and that do not require your consent, as provided for in applicable legislation, such as those necessary or legally required to safeguard a public interest, or for the prosecution or administration of justice.

How can you exercise your privacy rights?

You have the right to request in accordance with the General Data Protection Regulation (GDPR) or the applicable legislation of the subsidiary of the country where your data was processed confirmation of the existence of a processing of personal data (information); to have access to your data, to request the availability of a copy of the personal data you have provided to us (access); the rectification of incomplete data; inaccurate or outdated (rectification); the revocation, at any time, of your consent previously given for data processing, as well as information on the possibility that you do not consent to certain data processing and the consequences of not consenting (revocation); anonymization, blocking or deletion of data that is unnecessary, excessive or processed in violation of applicable legislation on personal data, (deletion); object to the use of your personal data for specific purposes (objection); restrict the processing of your data (restriction); In the entities where it applies, the portability of your personal data to another service or product provider (portability), as well as information about the public and private entities with which we share data.

To exercise any of the rights mentioned above, you will need to send a request to the email address [email protected] which you will need to comply with the following requirements and documents:

1. Full name of the interested party.
2. Copy of the document proving your identity on both sides.
3. If the holder appears through a legal representative, he or she must also show, by the same means, the documents that prove the legal representation (simple power of attorney signed by the holder, the attorney and two witnesses, accompanied by a copy of the identifications of the attorney and the two witnesses);
4. Clear and precise description of the personal data with respect to which you seek to exercise any of the rights.

Requests will be dealt with under the terms provided for by GDPR or by the subsidiary of the country where your data was processed, through our data protection officer, who can be contacted for questions or clarifications through the email address [email protected]

Security of personal data

PayRetailers and/or its subsidiaries maintain technical and organizational security measures to prevent the loss, theft, modification and/or unauthorized access to your personal data, such as access controls, minimization of the number of people accessing data, implementation of cybersecurity tools such as firewalls, antivirus, as well as monitoring of our GDPR-based recruitment system.

You are also informed that in case you do not want your application to be kept in our system, the information will be deleted from our database.

How can you find out about changes to this privacy policy?

This privacy policy may be modified, changed or updated as a result of new legal requirements, our own needs for the products or services we offer, our privacy practices or changes in our business model or other causes.

The procedure through which notifications about changes or updates will be carried out will be through an informative notice on our website, by email or any other technological means available at the time.

Last update: July 2024