Privacy policyPrivacy policy

2. What data we process

Only the data you give us and what is strictly needed to handle your request:

• Contact form: name, phone number with country code, email address, your message and the language of the site.
• Job applications: name, phone number with country code, email address, your CV (and any data you include in it), the vacancy you apply for or whether it is an open application, and the language.
• With each submission we also store the IP address, the browser, the date and the version of this policy you accepted, so that we can prove your consent and protect the form against abuse.
• Browsing: we count visits anonymously (which page, which site you came from and in which language), without cookies, without storing your IP and without any data that identifies you. Google Analytics is only enabled if you accept it in the cookie notice.

Please do not include in your message or CV any special category data (health, beliefs, religion, etc.) that is not necessary.

3. Why we use it and on what legal basis

• To answer your enquiry or request for information and, if you ask us to, to prepare a proposal or quote. Basis: your consent when you submit the form (art. 6.1.a GDPR) and, if you request a quote, steps taken at your request before entering into a contract (art. 6.1.b GDPR).
• To handle your application in the recruitment process you apply for or, if it is an open application, in those we open while we keep it. Basis: your consent when you submit it (art. 6.1.a GDPR).
• To prove consent and keep the site secure (technical data of each submission). Basis: our legitimate interest in protecting the service and being able to show that we comply (art. 6.1.f GDPR).
• To measure how the site is used with Google Analytics in order to improve it. Basis: your consent in the cookie notice (art. 6.1.a GDPR).

We do not use your data to send you advertising, we do not build profiles and we do not take automated decisions about you.

4. How long we keep it

• Contact form messages: 12 months from when we receive them. If a contractual relationship arises from your enquiry, the necessary data is kept for that relationship and the applicable legal periods.
• Applications and CVs: 12 months from when we receive them, for this and future recruitment processes. If an application is discarded and deleted earlier, it is permanently erased, together with the CV, after 30 days.
• Technical data of each submission: the same period as the message or application it belongs to.
• Cookies: the period stated in the cookie policy.

Deletion is automatic: every day the system erases the data whose period has expired. Where the law requires it, data will be kept blocked solely to deal with possible liabilities.

5. Who we share it with

We do not disclose your data to third parties, unless required by law (for example, at the request of an authority or a court).

To provide the service we rely on providers that process data on our behalf, as processors, under a contract that meets art. 28 GDPR and only on our instructions:

• The provider hosting the website and its databases.
• The email provider through which we receive form notifications and reply to you.
• Google Ireland Limited (Google Analytics), only if you have accepted analytics cookies.

6. International transfers

Google Analytics may involve data being processed in the United States by Google LLC, which participates in the EU-U.S. Data Privacy Framework, recognised by the European Commission as ensuring an adequate level of protection (Decision of 10 July 2023). This only happens if you accept analytics cookies.

Should any other provider process data outside the European Economic Area, it will do so with the safeguards required by the GDPR (an adequacy decision or standard contractual clauses approved by the European Commission).

7. Your rights

You may at any time exercise your rights of:

• Access to your data.
• Rectification of inaccurate data.
• Erasure, when it is no longer needed, among other grounds.
• Objection to processing based on our legitimate interest.
• Restriction of processing in the cases provided for in the GDPR.
• Portability of the data you gave us.
• Withdrawal of consent, without affecting the lawfulness of prior processing. For cookies you can do this with the «Cookie preferences» button in the cookie policy, linked in the footer.

Write to info@jamena.com or by post to our registered office, marked «Data protection», stating the right you wish to exercise. If we cannot identify you from the data we hold, we may ask you to prove your identity. We will reply within one month.

If you believe we have not handled your request properly, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es, C/ Jorge Juan, 6, 28001 Madrid).

8. Mandatory data and minimum age

The fields marked in the forms are needed to deal with your request; without them we cannot handle your enquiry or application. You confirm that the data is accurate and that, if you include data about other people (for example, references in your CV), you have their permission.

You must be at least 14 years old to send us your data (art. 7 LOPDGDD).

9. Security

We apply technical and organisational measures to protect your data against loss, unauthorised access or alteration: the site only works over an encrypted connection (HTTPS), CVs are stored outside the public part of the site and can only be downloaded by authorised staff, and access to the management area is restricted, protected and logged.

10. Changes to this policy

We may update this policy to reflect changes in the law or in the site itself. The date of the last update is shown at the top of the page and, if the change is significant, we will make it clearly visible.