Privacy Notice for Applicants

2. The Details We Process

We process the details you give us with your application: your name, email address and telephone number; your answers in the application form (language skills, sales experience, sector, place of residence or willingness to relocate, earliest start date and your short answer about your best sale); your CV and any other documents you send us; and our notes from conversations with you.

We do not need a photograph, your age or any information about your health, origin, religion or marital status. Please do not send us such information.

3. Where Your Details Come From

Form on Facebook or Instagram
The form is provided by Meta Platforms Ireland Ltd. Meta fills in your name, email address and telephone number from your account; before you submit the form, you will see all your details once more.

Email
You write to us at info@thebalearian.com, for example with your CV.

LinkedIn
You respond to our job advertisement on LinkedIn or message us there. We then receive the details you send us via LinkedIn, such as your profile and your message.

4. Purposes and Legal Bases

Recruitment process
We use your details to review your application, to speak with you and to decide whether to offer you the position. The legal basis is Art. 6(1)(b) GDPR (steps taken at your request before entering into an employment contract).

Talent pool, only with your consent
If you would like us to contact you about suitable future roles, we keep your details for that purpose. We ask for this separately: in the form through a dedicated box that is not ticked in advance, or by email. Your consent is voluntary; we will review your application either way. The legal basis is Art. 6(1)(a) GDPR. You may withdraw your consent at any time by writing to info@thebalearian.com; the withdrawal takes effect for the future.

Retention after the process
Once the process is complete, we block your details and keep them only in case of legal claims (Art. 6(1)(c) GDPR together with Art. 32 of the Spanish Data Protection Act, LOPDGDD). The periods are set out in section 7.

You are under no obligation to provide your details. Without your name, contact details and information about your experience, however, we cannot consider your application. A person reviews every application; we do not make solely automated decisions within the meaning of Art. 22 GDPR.

5. Recipients

Within our company, only the managing director and those involved in the selection will see your details.

Meta (Facebook and Instagram)
If you apply through the form, Meta Platforms Ireland Ltd. (Merrion Road, Dublin 4, Ireland) processes your details in order to provide the form and pass your details on to us. Your details may be transferred to the United States in the process (section 6).

LinkedIn
If you apply via LinkedIn, your details pass through LinkedIn Ireland Unlimited Company (Dublin, Ireland). LinkedIn's own privacy policy applies to your use of LinkedIn.

IT service providers
Our providers for email and storage act on our behalf and on our instructions.

We do not pass your details on to anyone else.

6. Transfers to the United States

If you apply through the form on Facebook or Instagram, your details may be transferred to the United States. Such transfers are safeguarded by the EU-US Data Privacy Framework.

7. How Long We Keep Your Details

We keep your details for as long as the recruitment process is ongoing.

Once the process is complete, we block the details of unsuccessful applications: we no longer use them and keep them only in case of legal claims (Art. 32 LOPDGDD). We delete them within six months of the end of the process at the latest.

If you have agreed to join our talent pool, we keep your details for up to twelve months and then delete them. If you withdraw your consent, we remove you from the talent pool, and the period in the previous paragraph applies to your details.

8. Your Rights

You have the right of access, rectification, erasure, restriction of processing, objection and data portability (Art. 15 to 21 GDPR). You may withdraw any consent at any time with effect for the future. To exercise any of these rights, simply write to info@thebalearian.com.

9. Right to Lodge a Complaint

You may lodge a complaint with a data protection supervisory authority, in particular in the EU country where you live. The authority responsible for us is the Spanish Data Protection Agency, the Agencia Española de Protección de Datos (AEPD), C/ Jorge Juan 6, 28001 Madrid, www.aepd.es.