1. DATA CONTROLLER

Identity: BBGROUP TECHNOLOGIES S.L.

Tax ID: B56702184

Address: Calle Gran de Gracia 101, 2º, 1ª, 08012 (Barcelona)  

Email: jaume@yumatech.io

Phone: +43660724088

Hereinafter, the “Controller”.

2. PURPOSES OF DATA PROCESSING

At BBGROUP TECHNOLOGIES, we process personal data for the following purposes:

2.1 Recruitment processes

• Manage job applications.

• Evaluate professional profiles through interviews, tests, and references.

• Prepare job suitability reports.

• Present candidates to client companies.

2.2 Client management (companies)

• Provision of selection and recruitment services.

• Business relationship management.

• Invoicing and fulfillment of contractual obligations.

2.3 Candidate database

• Maintain a candidate database for future selection processes.

• Contact candidates regarding new job opportunities.

2.4 Legal compliance

• Comply with applicable legal obligations (tax, labor, administrative).

3. TYPES OF DATA PROCESSED

We process the following categories of personal data:

3.1 Identification data

• Full name

• ID/NIE number

• Address

• Phone number

• Email

3.2 Professional data

• Curriculum vitae

• Academic background

• Work experience

• Competencies and skills

3.3 Evaluation data

• Interview results

• Psychometric or technical tests

• Professional references

4. LEGAL BASIS FOR PROCESSING

Data processing is based on the following legal grounds:

4.1 Performance of a contract (Art. 6.1.b GDPR)

• Management of recruitment services with client companies.

• Candidate participation in active selection processes.

4.2 Consent of the data subject (Art. 6.1.a GDPR)

• Inclusion in the candidate database.

• Retaining the CV for future processes.

• Sending job offers.

The data subject may withdraw their consent at any time.

4.3 Compliance with legal obligations (Art. 6.1.c GDPR)

• Tax, labor, or administrative obligations.

4.4 Legitimate interest (Art. 6.1.f GDPR)

• Assessing candidate suitability.

• Improving selection processes.

• Fraud prevention.

We guarantee that this interest does not override the rights of the data subject.

5. DATA RETENTION PERIOD

Data must be preserved for the minimum period necessary to provide appropriate service, as well as to address any liability and other legal requirements.

This means we will retain your data for a maximum of 2 years from our last meaningful contact with you, or for a longer period that we believe in good faith is appropriate and permitted by law, invoking our legitimate interest.

6. DATA RECIPIENTS BBGROUP TECHNOLOGIES may share personal data related to "candidates" with the following third parties:

• Suppliers necessary to provide our services

• Our clients  

Additionally, please be informed that certain data may be shared with:

• Banks and financial institutions responsible for processing payments for contracted services or purchased products.

• Public authorities if required by law.

7. INTERNATIONAL TRANSFERS

If providers located outside the European Economic Area are used, we will ensure:

• An adequacy decision from the European Commission, or

• Standard Contractual Clauses (SCCs), or

• Other appropriate safeguards in accordance with the GDPR

8. DATA SUBJECT RIGHTS

Users may exercise the following rights:

• The right to request access to your personal data

• The right to rectification or erasure

• The right to object

• The right to restrict processing

• The right to data portability

• The right not to be subject to decisions based solely on automated processing

To exercise these rights, please send a request to jaume@yumatech.io

You also have the right to file a complaint with the Spanish Data Protection Agency (AEPD).

9. SECURITY MEASURES

BBGROUP TECHNOLOGIES S.L. has implemented the legally required security levels for personal data protection and strives to install additional technical measures and resources within its reach to prevent the loss, misuse, alteration, unauthorized access, and theft of personal data provided to BBGROUP TECHNOLOGIES S.L.

10. DATA SOURCES

Personal data may be obtained from:

• The data subject themselves

• Job platforms (LinkedIn, InfoJobs, etc.)

• Professional references

• Client companies

11. POLICY UPDATES

This policy may be updated at any time to reflect changes in law or business operations.