Privacy Policy MCR International S.L.

The General Data Protection Regulation 2016/679 (the “Regulation” or “GDPR”) applicable from May 25, 2018, is a directly applicable regulation throughout the European Union and concerns individuals and the processing of personal data and the free movement of such data. It replaces the Organic Law on Data Protection (LOPD) and RD 1720/2007 and introduces changes and novelties.

In order to comply with the legal, technological, and administrative requirements established by the aforementioned Regulation, MCR International SL (hereinafter, MCR or “the company”) and its associated company TALENTO RH Soluciones (hereinafter TALENTO) have undertaken the necessary actions to update and provide you with information regarding the purposes, methods, and scope of communication and transfer of personal data that you provide to us as a candidate when you register through our Websites, websites of other companies and social networks, by email, or during an interview at our offices.

Through our Privacy Policy, we explain what we do with your personal data, regardless of whether we collect it during a process aimed at job opportunities for your profile when you visit and register on our website or when you submit a spontaneous application. We also explain what we do if we continue our relationship once you have participated in a process with MCR or TALENTO and how we use your data to provide assistance in relation to our processes or our candidates.

 

1.Who is responsible for the processing of your data?

MCR International SL c/ Raimundo Fernández Villaverde, 45, 7 a y b 28003 – Madrid rgpd@mcrinternational.com

We want to inform you that MCR acts as the data processor of the data files owned by MCR International SL to be processed for the search, evaluation, management, and selection of candidates for job offers from MCR or TALENTO and/or third-party client companies.

 

2.What data do we process?

We collect your data through the following channels:

1- Data provided by you through the use of our website.

1.1. If you apply for a specific job offer published on our website or if you submit a spontaneous application by email or in person at our offices, your data will be processed for the purpose of searching and selecting candidates for direct hiring by a third-party company, a client of MCR or Talento Soluciones, or for direct hiring by MCR or Talento.

The data may include the following: personal profile and professional CV, which may contain email address, phone number (landline and mobile), name, surname, date of birth, address, postal code, city, province, education and profession, current and past work experience.

The data capture form on the website will specify which data can be optionally included and which are the mandatory minimum data, which are strictly necessary to fulfill the processing purposes. Failure to provide the mandatory data will result in the inability to participate in selection processes.

MCR and our associated company TALENTO have implemented the necessary technical and organizational measures to ensure the security and integrity of the personal data provided, as well as to prevent its alteration, loss, unauthorized access, or processing.

If you apply for a specific job offer, your data will only be processed within the framework of the selection process for which you have applied, unless you consent to their use for future processes. If you submit a spontaneous application, we will process your data for positions that match your profile and professional experience.

The legal basis for the processing of personal data for the purposes mentioned above is the performance of a contract, in accordance with Article 6(1)(b) of the GDPR.

1.2. Data requested directly by MCR or TALENTO, derived from your registration on other websites, job portals, or social networks managed by third parties (job search engines, university job boards, business school job boards, professional associations, etc.) where you apply for job offers published by us (on behalf of our clients or on our own behalf), and which correspond to the same personal data mentioned above.

1.3. Information provided during the selection process and the telephone call or personal interview in which you participate with us, which may include the following personal data: email address, mobile phone number, landline phone number, name, surname, date of birth, address, city, province, nationality, marital status, profession, position, company, length of employment, among other data. Of course, all this information is treated with absolute confidentiality and diligence throughout the interview phase.

2- Data not consciously provided by you and derived from publicly accessible sources.

These are data obtained from publicly accessible sources (census records, telephone directories, newspapers, bulletins, media, press archives, data published in the form of lists of people belonging to professional groups, professional social networks) where data such as name, titles, profession, academic degrees, group membership, position, education, languages, photographs, and other data of interest are available. They may also come from third parties (for example, through our candidates, provided they provide us with your data as a contact person for reference purposes and with your prior consent).

3. For what purpose do we process your personal data?

We process your data for the following purposes, with the established retention periods and limitations on service provision, described below:

1- To understand your professional profile and process your data for the search, evaluation, management, and selection of candidates to participate in selection processes of MCR or third-party companies in which you may be interested, now or in the future, either directly or specifically proposed by MCR or TALENTO, and thus be able to support you in the development of your professional career by sharing your data with other organizations, with your prior consent.

To achieve this, it will be necessary to communicate your data to those companies that, on their own initiative or upon specific proposal by MCR, may be interested in evaluating your application for a specific job position. Such communication may occur from the moment you expressly give your consent by accepting this privacy policy and terms of use.

As a candidate, we understand that you guarantee that the data you provide to us are true and you are expressly responsible for the possible consequences that may arise from the falsity of such information.

If you provide personal data of third parties, you must have informed the person beforehand and obtained their consent regarding the processing that MCR or TALENTO will carry out with their personal data. You will be responsible for any damages and losses incurred by MCR or TALENTO if you fail to comply with this requirement.

In the final stage of some selection processes, MCR or TALENTO may request references from the companies where you have indicated that you have worked. In these cases, your participation in the respective selection process will be understood as express consent to MCR to request and obtain those references. Not accepting this purpose will result in us not being able to proceed with selection processes in which you initially seemed interested.

The personal data provided will be kept confidentially in our files and will only be used for the aforementioned purposes (participation in selection processes, requesting assistance or feedback in processes, requesting references) and will be archived unless you provide us with explicit written notice of your desire to be removed.

2- Requesting your feedback on our work (Candidate Satisfaction Surveys) to help us improve. Asking for your assistance in open selection processes or references of individuals or companies you know. Keeping you informed about ourown events, tracking the progress of your career, and providing other details, such as congratulations on appointments or changes in employment/position.

Not accepting this purpose means we will not be able to contact you for new opportunities or career tracking.

The personal data provided will be kept until you request their deletion, as we will assume that until that moment you are still interested in being part of MCR’s contact network.

3- Sharing data with third-party companies and international consulting networks to which we belong (more information on our website) with the information we have about your profile to offer you professional opportunities that may be of interest to you and related to the business sectors linked to your profile.

Through this purpose, MCR may, even if it involves an international transfer of data within or outside the European Economic Area (EEA), share your data with other companies interested in your application when you are participating in international processes.

If you believe that such processing may have an impact on your control over your personal information as a data subject, you can exercise your right of access and/or objection or choose to opt out voluntarily.

You should also be aware that you can limit this purpose by exercising your right of objection by sending an email to rgpd@mcrinternational.com.

The personal data provided will be kept until you request their deletion, as we will assume that until that moment you are still interested in being part of MCR’s contact network.

Under exceptional circumstances, we may use your personal data for the establishment, exercise, or defense of legal claims.

The personal data provided will be kept until you request their deletion, as we will assume that until that moment you are still interested in being part of MCR’s contact network.

4. Who is the recipient of your data?

The personal data processed will be accessed solely by authorized employees and departments of the Company for the aforementioned purposes. These employees have received appropriate operational instructions to perform the tasks assigned to them.

In the event that your application progresses in selection processes, we may share your data (with your explicit consent) with third parties (client companies that require our selection services), as well as companies belonging to the international networks to which we belong in other countries for the purposes of searching and selecting candidates.

To achieve this purpose, it will be necessary to communicate your data to those companies that, on their own initiative or upon specific proposal by MCR, may be interested in evaluating your application for a specific job position. Such communication may occur from the moment you expressly give your consent by accepting this privacy policy and terms of use.

5. What are your rights when you provide us with your data? ARCO Rights

The rights that you have regarding the processing of personal data in relation to MCR are: the right to request access to your personal data, the right to request rectification or erasure of your data, the right to request the restriction of processing, the right to object to the processing, and the right to data portability.

6. What does the right of access consist of?

You have the right to obtain confirmation from MCR as to whether or not personal data concerning you is being processed, as well as to know the purposes of the processing; the categories of data being processed; the recipients or categories of recipients to whom the data has been or will be disclosed; and, if possible, the envisaged period of storage of personal data or, if not possible, the criteria used to determine this period.

In these cases, we would provide you with a copy of the personal data being processed (CV). Additionally, when requested through electronic means, the information will be provided in a commonly used electronic format (email).

You can exercise this right annually. MCR will inform you of the actions taken in response to your request within one month (which may be extended by two months in particularly complex cases). To exercise the right of access, send an email to rgpd@mcrinternational.com.

7. What does the right to rectification consist of?

You have the right to obtain from MCR the rectification of inaccurate personal data concerning you. Furthermore, taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement. To do so, you must indicate in your request which data you are referring to and the correction we should make. When necessary, you must provide supporting documentation justifying the inaccuracy or incompleteness of the data being processed.

To exercise the right of rectification, send an email to rgpd@mcrinternational.com to rectify the incorrect data.

8. What does the “right to erasure” or “right to be forgotten” consist of?

You have the right to obtain from MCR the erasure of personal data concerning you when one of the following circumstances applies: the personal data is no longer necessary for the purposes for which it was collected or processed; you withdraw your consent and the processing has no other legal basis; you object to the processing and there are no overriding legitimate grounds for the processing; you consider that the data has been unlawfully processed.

When MCR proceeds to delete such data, and taking into account the available technology and the cost of implementation, reasonable measures will be taken, including technical measures, to inform the data controllers who are processing the personal data of your request for erasure of any links to that personal data or any other copies or replications thereof.

The above will not apply when exercising the right to freedom of expression and information; for compliance with a legal obligation requiring the processing of data, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller; for purposes of scientific or historical research or statistical purposes, to the extent that the right to erasure could render impossible or seriously impair the achievement of the objectives of such processing; for the establishment, exercise, or defense of legal claims.

To exercise the right of erasure, send an email to rgpd@mcrinternational.com.

9. What does the right to restriction of processing consist of?

You have the right to obtain from MCR the restriction of processing when one of the following conditions applies: you contest the accuracy of your personal data, for a period enabling MCR to verify the accuracy of the data; in case of unlawful processing, and you oppose the erasure of the personal data and request the restriction of its use instead; MCR no longer needs the personal data for the purposes of the processing, but you require it for the establishment, exercise, or defense of legal claims; in case you have objected to the processing, pending the verification of whether MCR’s legitimate grounds override your interests.

When you have obtained the restriction of processing pursuant to the above, MCR will inform you before lifting the restriction.

MCR will communicate any rectification or erasure of personal data or restriction of processing to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves a disproportionate effort. MCR will inform you about those recipients upon request. To exercise the right to restriction of processing, send an email to rgpd@mcrinternational.com.

10. What does the right to data portability consist of?

You have the right to receive the personal data concerning you that you have provided to MCR in a structured, commonly used, and machine-readable format, and have the right to transmit those data to another controller without hindrance from MCR, where the processing is based on consent and is carried out by automated means.

When exercising your right to data portability, you have the right to havethe personal data transmitted directly from one controller to another, where technically feasible. The right to data portability does not apply to data that MCR has inferred from data that you have provided directly through the use of services.

To exercise the right to data portability, send an email to rgpd@mcrinternational.com.

11. What does the right to object consist of?

You have the right to object to the processing of personal data concerning you at any time.

If you exercise this right, MCR will cease processing your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims.

To exercise the right to object, send an email to rgpd@mcrinternational.com.

You should also be aware that you have the right to lodge a complaint with the local supervisory authority that corresponds to you and that you can contact the Spanish Data Protection Agency to obtain additional information about your rights.