BACKGROUND
This Privacy Policy for Job Applicants governs the terms and conditions under which Hispasat carries out the processing of personal data in order to manage your application. This Privacy Policy complements the content of the Terms and Conditions of the website where these job offers are hosted. The connection and access by users implies their acceptance of our Privacy Policy and the aforementioned Terms and Conditions. In any case, the entity complies with the minimum duty of information and provides an email address through which the applicant may request additional information regarding the processing of their data and access to this extended policy, in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 and Organic Law 3/2018, of 5 December, on the Protection of Personal Data and guarantee of digital rights.
1.IDENTIFICATION AND CONTACT DETAILS OF THE CONTROLLER
HISPASAT, located at C/ Anabel Segura, 11, Edif. B- 4ª Floor Plan (28108 ALCOBENDAS) MADRID, com NIF A79201075,contact phone number 918700160 and email protecciondedatos@hispasat.com
DATA PROTECTION OFFICER
SEGURIDAD Y PRIVACIDAD DE DATOS. SL., with contact phone number 963 122 868 and email infodpo@forlopd.es
2. PURPOSES OF THE PROCESSING OF YOUR PERSONAL DATA
□ USERS/NAVIGATORS OF THE DATA CONTROLLER'S WEBSITE
We will process the personal data provided in order to:
• Address requests, complaints, and incidents submitted through our contact channels included on the website.
• Understand user behavior on the website in order to detect possible cyberattacks on our site.
• Comply with the legal obligations that are directly applicable to us and govern our activity.
• Protect and exercise our rights or respond to claims of any kind.
• Where applicable, send commercial communications related to the goods or services that make up our activity and/or news or bulletins related to our sector. Your refusal to authorize this will make it impossible for the entity to send you information.
• Where applicable, manage your participation in contests and promotions carried out by the entity. Your refusal to authorize this will make it impossible for you to participate.
• Where applicable, send satisfaction and/or quality surveys. Your refusal to authorize this will make it impossible to evaluate the service provided.
• Manage your registration for events organized by the entity. In this case, your data may be shared with the owners of the facilities where the event will be held solely for the purposes of ensuring security and access.
• Manage your registration on the entity’s web platform and generate a username and password. Your refusal to authorize this will make it impossible to complete your registration on the platform.
□ JOB APPLICANTS OR EMPLOYMENT CANDIDATES
In addition to the purposes indicated in the section "users/navigators of the website," we will process the personal data you provide in order to:
• Manage your application in the selection process and inform you about it.
• Send communications regarding new job offers we may have that match your profile, provided that you have previously authorized us to send you such information.
• Transfer your data to entities that are part of the HISPASAT GROUP for proper internal administrative functioning.
3. LEGAL BASIS FOR THE PROCESSING
□ USERS/NAVIGATORS OF THE DATA CONTROLLER'S WEBSITE
In the case of users/navigators of the data controller's website, the legal bases for the processing of your personal data are the following:
• To comply with the legal obligations that apply to us. In this case, the data subject may not refuse the processing of personal data.
• In our legitimate interest to protect our image, business, and track record by preventing attacks on our website. In this case, the data subject may not refuse the processing of personal data, although they may exercise, where applicable, the rights recognized in the “rights” section of this policy.
• On the basis of the consent you have given us to process your data for the purposes indicated. Refusal to provide your personal data will result in the impossibility of processing your data for the aforementioned purposes.
□ JOB APPLICANTS OR EMPLOYMENT CANDIDATES
• To comply with the legal obligations that apply to us. In this case, the data subject may not refuse the processing of personal data.
• In the legitimate interest of protecting the company's image, business, and track record by preventing attacks on our website and for the proper internal administrative functioning of the HISPASAT Group. In this case, the data subject may not refuse the processing of personal data, although they may exercise, where applicable, the rights recognized in the “rights” section of this policy.
• On the basis of the consent you have given us to process your data for the purposes indicated. Refusal to provide your personal data will result in the impossibility of processing your data for the aforementioned purposes.
4. WEBSITE PLUGINS AND TOOLS
• YouTube
Our website uses plugins from the YouTube platform with technology provided by Google. YouTube will only associate your browsing behavior with your personal profile if you are logged into your account. You can avoid this by logging out.
We recommend that you carefully read the privacy policy of our provider in advance by clicking here.
5. TYPES OF DATA WE PROCESS
Curriculum Vitae (CV): identifying data, personal characteristics, academic and professional data, employment details, and general information. The information contained in the CV may be verified with other supporting documents such as transcripts or similar. The request for this data will depend on the position for which the candidate has applied, the need to provide certain evidence due to contradictions, or as a selection criterion between two candidates.
6. RETENTION PERIODS OR CRITERIA FOR DATA STORAGE
The personal data provided will be kept for the time necessary to fulfill the purposes for which they were initially collected.
Once the data is no longer necessary for the relevant processing, it will be duly restricted and, where appropriate, made available to the competent Public Administrations and Authorities, Judges and Courts, or the Public Prosecutor's Office, during the limitation period of the actions that may arise from the relationship maintained with the client and/or the legally established retention periods.
In the event that you have provided us with your résumé, we will retain your data for a maximum period of two years from the date of receipt, after which it will be deleted, unless you have updated your data or authorized us to retain it for a longer period than indicated. For the appropriate purposes, we inform you that you may revoke your consent at any time.
7. AUTOMATED DECISIONS AND PROFILE BUILDING
We inform job candidates that our internal (https://empleo.hispasat.es/) tool will provide information according to the job offers to which they apply. However, we assure that there will always be a personalized evaluation by the Hispasat team.
8. RECIPIENTS
During the period of processing your personal data, the organization may transfer your data to the following recipients:
• Judges and Courts.
• State Security Forces and Corps.
• Other competent public authorities or bodies, when the data controller has the legal obligation to provide personal data.
• Where applicable, to those Data Processors who provide us with services.
• Your data may be shared with the following companies of the GROUP HISPASAT for the proper administrative management of the entities:
9. INTERNATIONAL DATA TRANSFERS
In compliance with the provisions of the European Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016, and Organic Law 3/2018, of 5 December, on the Protection of Personal Data and guarantee of digital rights, we inform you that, as a consequence of the providers employed, the entity makes the following international data transfers to recipients established outside the European Economic Area (EEA):
| Country | Purpose | Types of Data | Guarantee |
| ARGENTINA | Manage the procedures of the job application, as well as for the internal administrative purposes of the group | - Identifying data: email, first and last names, CV, profession, date of birth, phone number, country of origin. | Decision 2003/490/EC of the Commission, of 3 June 2003 |
| BRAZIL | Manage the procedures of the job application, as well as for the internal administrative purposes of the group | - Identifying data: email, first and last names, CV, profession, date of birth, phone number, country of origin. | Exceptions: consent and/or conclusion of the employment contract or execution of pre-contractual measures. (Article 49 of the GDPR) |
| COLOMBIA | Manage the procedures of the job application, as well as for the internal administrative purposes of the group | - Identifying data: email, first and last names, CV, profession, date of birth, phone number, country of origin. | Exceptions: consent and/or conclusion of the employment contract or execution of pre-contractual measures. (Article 49 of the GDPR) |
| MEXICO | Manage the procedures of the job application, as well as for the internal administrative purposes of the group | - Identifying data: email, first and last names, CV, profession, date of birth, phone number, country of origin. | Exceptions: consent and/or conclusion of the employment contract or execution of pre-contractual measures. (Article 49 of the GDPR) |
| USA | Manage the procedures of the job application, as well as for the internal administrative purposes of the group | - Identifying data: email, first and last names, CV, profession, date of birth, phone number, country of origin. | Exceptions: consent and/or conclusion of the employment contract or execution of pre-contractual measures. (Article 49 of the GDPR) |
| PERU | Manage the procedures of the job application, as well as for the internal administrative purposes of the group | - Identifying data: email, first and last names, CV, profession, date of birth, phone number, country of origin. | Exceptions: consent and/or conclusion of the employment contract or execution of pre-contractual measures. (Article 49 of the GDPR) |
| CHILE | Manage the procedures of the job application, as well as for the internal administrative purposes of the group | - Identifying data: email, first and last names, CV, profession, date of birth, phone number, country of origin. | Exceptions: consent and/or conclusion of the employment contract or execution of pre-contractual measures. (Article 49 of the GDPR) |
| ECUADOR | Manage the procedures of the job application, as well as for the internal administrative purposes of the group | - Identifying data: email, first and last names, CV, profession, date of birth, phone number, country of origin. | Exceptions: consent and/or conclusion of the employment contract or execution of pre-contractual measures. (Article 49 of the GDPR) |
| UNITED KINGDOM | Manage the procedures of the job application, as well as for the internal administrative purposes of the group | - Identifying data: email, first and last names, CV, profession, date of birth, phone number, country of origin. | Decision of 28 june 2021. |
We inform you that some of the aforementioned International Data Transfers are not based on an adequacy decision by the European Commission nor on the offering of appropriate safeguards, and therefore, they may not have an adequate level of protection in accordance with the provisions of the GDPR. For the relevant purposes, we inform you that this fact may entail certain risks for the protection of your personal data. Such derived risks may include the absence of an equivalent supervisory authority and/or data processing protection principles and/or equivalent rights of data subjects.
10. SOCIAL NETWORKS
With the purpose of involving you in our activity and so that you can be aware of our news, we inform you that HISPASAT, S.A. has created a profile on Social Networks.
All users have the opportunity to join our social networks or groups. However, you should bear in mind that, unless we directly request your data (for example, through marketing actions, contests, promotions, or any other valid form), your data will belong to the corresponding Social Network, so we recommend that you carefully read their terms and conditions and privacy policies, as well as make sure to configure your preferences regarding the processing of data.
Below, we detail the link to the privacy policy of the different Social Networks where we have presence, so that you can access the privacy policies at any time and configure your profile to guarantee your privacy:
X: https://twitter.com/es/privacy
LinkedIn: https://es.linkedin.com/legal/privacy-policy
11. RIGHTS
Data subjects may request more information about the processing of their personal data as well as exercise at any time and free of charge the rights of access, rectification, and erasure, as well as request that the processing of their personal data be restricted, object to it, request the portability of these data (whenever technically possible), or withdraw the consent given and, where applicable, not be subject to a decision based solely on automated processing, including profiling.
To do so, you may use the forms provided by the organization or send a written request to the postal address or email referenced at the heading. For the appropriate purposes, we inform you that you may be asked for your ID or any other similar document, in order to verify your identity, provided that this cannot be done by less intrusive means.
In the event that you feel your rights regarding the protection of your personal data have been violated, especially when you have not obtained satisfaction in exercising your rights, you may file a complaint with the competent Data Protection Supervisory Authority (Spanish Data Protection Agency) through its website www.aepd.es.
In compliance with the provisions of Article 21 of Law 34/2002 on information society services and electronic commerce, if you do not wish to receive more information about our services, you can unsubscribe by sending an email to protecciondedatos@hispasat.com with the subject “UNSUBSCRIBE” or by clicking on the unsubscribe section in the email.
12. ACCURACY OF THE DATA
The data subject guarantees that the data provided are true, accurate, complete, and up to date; committing to inform of any changes regarding the data provided, through the channels enabled for this purpose and indicated in point one of this policy. They will be responsible for any damage or harm, both direct and indirect, that may be caused as a consequence of non-compliance with this obligation.
In the event that the user provides data of third parties, they declare that they have the consent of the data subjects and commit to transferring the information contained in this clause to them, exempting the organization from any liability derived from the failure to comply with this obligation.
13. MODIFICATIONS AND UPDATES
This privacy policy may be modified/updated based on established legal requirements or in order to adapt said policy to the instructions issued by the Spanish Data Protection Agency, or as a result of changes on our website. For this reason, we advise users to periodically visit our Privacy Policy.
If you have any questions about this policy, you can contact HISPASAT, S.A. through the forms provided by the organization, or send a written request to the postal address or email referenced at the heading.
Last review: May 26, 2025
