Back

JOB APPLICANT PRIVACY NOTICE

Privacy and the protection of personal data are a priority for ALTADIA GROUP.

This Privacy Notice explains how we process the personal data of users of our recruitment platform, including the information we collect and how we use, protect and disclose it.

At ALTADIA GROUP, we understand the importance of keeping your personal data secure and respecting your rights. This Notice therefore explains where and how we obtain information, the purposes for which it is processed, and the data protection rights you may exercise.

This Notice applies to all persons who access or use the recruitment platform services. We are committed to protecting your personal data and ensuring transparency and control over its use.

Please read this Notice carefully before continuing to use our services.

Last updated: 14 October 2025.

1. Identification of the data controllers

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (the General Data Protection Regulation or GDPR), we inform you that personal data obtained from the data subject, together with data generated in connection with the operation of our website, will be processed by the following joint controllers:

Legal name: ALTADIA GROUP CORPORATE SAU (PARENT COMPANY)
Tax Identification Number (CIF): A05348669
Address Ctra.CV-20 km.2,3 de Villarreal CP (12540) Castellón
Country Spain
Telephone 964626544
Email: talent@esmalglass-itaca.com
Website https://www.altadiagroup.com/
Legal name: ESMALGLASS SAU (SUBSIDIARY)
Tax Identification Number (CIF): A12023719
Address Ctra.CV-20 km.2,3 de Villarreal 12540 (Castellón).
Country Spain
Telephone 964 626 544
Email: talent@esmalglass-itaca.com
Website https://www.esmalglass-itaca.com
Legal name: INNOVACIONES TECNICAS APLICADAS A CERAMICAS AVANZADAS SAU (SUBSIDIARY)
Tax Identification Number (CIF): A12505293
Address Partida Rambleta s/n de Pobla Tornesa CP (12191) Castellón
Country Spain
Telephone 964 657 800
Email: talent@esmalglass-itaca.com
Website
Legal name: FRITTA, S.L.U. (SUBSIDIARY)
Tax Identification Number (CIF): B12015756
Address CV-20, Km. 8 de Onda CP (12200) Castellón
Country Spain
Telephone 964 77 76 00
Email: talent@esmalglass-itaca.com
Website https://www.fritta.com
Legal name: YOUNEXA SPAIN SLU (SUBSIDIARY)
Tax Identification Number (CIF): B48027981
Address Carretera Nacional 340, - KM 61,500 de Almassora CP (12550) Castellón
Country Spain
Telephone 964 50 44 50
Email: talent@esmalglass-itaca.com
Website www.younexa.com
Legal name: ZIRCOSIL (SPAIN) SLU (SUBSIDIARY)
Tax Identification Number (CIF): B98785587
Address Ctra Valencia-ademuz Km 13 de San Antonio De Benageber CP (46184) Valencia
Country Spain
Telephone 964 50 44 50
Email: talent@esmalglass-itaca.com
Website www.zircosil.com

Joint controllers: Where two or more controllers jointly determine the purposes and means of processing, they are joint controllers. As a general rule, joint controllership will arise between the relevant SUBSIDIARY (the entity publishing the vacancy) and the PARENT COMPANY.

Who is ALTADIA GROUP's Data Protection Officer (DPO), and how can you contact them?

The Data Protection Officer oversees ALTADIA GROUP's compliance with data protection law and helps safeguard the fundamental right to the protection of personal data. You may contact the Data Protection Officer at the following address:

DPO contact details:

dpo@altadiagroup.com

2. Purposes for which we process your personal data

ALTADIA GROUP processes personal data in order to manage and improve its recruitment processes. Personal data are collected and processed for the following purposes:

  1. User account management: To administer the accounts of users registered on the ALTADIA GROUP recruitment platform, enabling user identification and access to the available services and features. This activity is carried out solely and exclusively by the PARENT COMPANY.
  2. Creation and maintenance of the candidate database: To add the CV information provided by the candidate to ALTADIA GROUP's CV database or 'candidate pool', where job-application information (CVs, covering letters and similar documents) is stored so that the candidate may be contacted about future career opportunities. This database is managed exclusively by the PARENT COMPANY.
  3. Candidate shortlisting and selection: To manage and assess applications submitted for vacancies published by any ALTADIA GROUP SUBSIDIARY or by the PARENT COMPANY. During the shortlisting stage, personal data are used to record, organise and compare candidate profiles against the requirements of the relevant vacancies, including experience, qualifications and skills.

During the selection stage, personal data are used to assess the candidate's suitability. This may include interviews, psychometric tests and any other assessments required for the recruitment process.

This processing is carried out jointly by the SUBSIDIARY publishing the vacancy and the PARENT COMPANY.

  1. Basic professional profile analysis: To analyse the information contained in the candidate's CV and their areas of interest in order to match their professional profile with ongoing recruitment processes. This activity is carried out solely by the PARENT COMPANY.
  2. Automated CV processing (CV parsing): To process CV information using artificial intelligence technology that extracts and structures CV data in order to facilitate its review and comparison. This processing is managed exclusively by the PARENT COMPANY.
  3. Disclosure of data to other group entities: To disclose the candidate's personal data to the ALTADIA GROUP entities listed below, all of which are located within the European Economic Area (EEA), so that they may consider the candidate for their own recruitment processes, provided that the candidate has given their explicit consent.
    Such disclosure is not a condition of participating in recruitment processes managed directly by ALTADIA GROUP. The PARENT COMPANY is solely responsible for managing and overseeing this operation.

Recipient entities within the EEA:

3. Legal bases for processing and whether the provision of data is mandatory or optional

The legal bases set out below correspond to the purposes identified by the same letters in the preceding section.

  1. User account management - Performance of a contract (Article 6(1)(b) GDPR): Processing is necessary to apply the recruitment platform's terms of use. If the required data are not provided, the user account cannot be created.
  2. Creation and maintenance of the candidate database - Consent (Article 6(1)(a) GDPR): Processing is based on the consent given when the candidate completes and saves their CV information using the recruitment platform forms. The candidate may withdraw consent at any time. Withdrawal will not affect other services or the lawfulness of processing carried out before consent was withdrawn.
  3. Candidate shortlisting and selection - Steps at the candidate's request prior to entering into a contract (Article 6(1)(b) GDPR): Where a candidate participates in one or more formal and specific recruitment processes for vacancies advertised or published by any ALTADIA GROUP entity, processing is necessary to assess the application and, where appropriate, to enable an employment contract to be entered into with the relevant company.
  4. Basic professional profile analysis - Legitimate interests (Article 6(1)(f) GDPR): ALTADIA GROUP has a legitimate interest in improving the management of recruitment processes through simple, non-intrusive profiling that respects the candidate's privacy and rights.
  5. Automated CV processing (CV parsing) - Legitimate interests (Article 6(1)(f) GDPR): Processing is based on ALTADIA GROUP's legitimate interest in optimising the management and handling of CVs, making the application process faster and more efficient and making it easier for candidates to provide their CV information. This automated processing does not involve profiling or solely automated decision-making that produces legal effects concerning the candidate or similarly significantly affects them. It is carried out in a non-intrusive manner that fully respects the candidate's privacy and rights.
  6. Disclosure of data to other group entities - Consent (Article 6(1)(a) GDPR): Processing is based on the candidate's freely given, specific, informed and unambiguous consent to the disclosure of their personal data to other ALTADIA GROUP entities located within the EEA so that those entities may consider the candidate in their respective recruitment processes.

Consent is obtained through the candidate actively selecting the relevant checkbox and may be withdrawn at any time. Withdrawal will not affect the lawfulness of processing carried out before consent was withdrawn or the provision of other platform services or features.

4. Information provided by the candidate

ALTADIA GROUP may process the following categories of personal data provided by the candidate when completing the relevant recruitment platform forms:

  1. Identification data: first name, surname, Spanish National Identity Document or Foreigner Identity Number (DNI/NIE), and photograph.
  2. Contact details: postal address, email address, landline telephone number and mobile telephone number.
  3. Personal details: place and date of birth, sex and nationality.
  4. Social circumstances: marital status.
  5. Education, qualifications and skills data: education and training, qualifications, professional experience, membership of professional bodies and/or associations, occupational health and safety qualifications or fitness, professional licences and accreditations, together with information obtained from any skills or knowledge tests required to assess the candidate's suitability for the position advertised.
  6. Professional data: previous employers, positions held, contact details, and employment start and end dates.
  7. Employment-status data: whether the candidate is currently employed or seeking employment.
  8. Data relating to the position applied for: the position, the candidate's availability, working hours and type of engagement or time commitment.
  9. Browsing data: information collected through cookies and similar technologies.

5. Accuracy and updating of personal data

The candidate represents and warrants that the personal data provided, whether their own data or third-party data supplied where the candidate is authorised to act on that third party’s behalf, are true, accurate, complete and up to date. The candidate undertakes to notify ALTADIA GROUP immediately of any change to such data.

Candidates must not submit personal data or a CV belonging to a third party without proper authorisation. A candidate who breaches this obligation will be responsible for any direct or indirect loss or damage arising from that breach and will hold ALTADIA GROUP harmless in this respect. ALTADIA GROUP reserves the right to delete the relevant account and the information provided.

Fields marked with an asterisk (*) are strictly necessary to manage the application, register the user and properly provide the services offered through the recruitment platform. Failure to provide optional data will not reduce the quality of the service provided.

In accordance with the GDPR and Spanish Organic Law 3/2018 of 5 December on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD), candidates are reminded that they are responsible for keeping the information in their profile accurate, complete and up to date. Candidates should notify us of any change or update or amend their profile directly through the recruitment platform.

Important information about any additional content provided:

Information supplied through free-text fields or in files, links or documents should not contain confidential or particularly sensitive information, including special categories of personal data or other highly sensitive identifiers, such as racial or ethnic origin; political opinions; religious or philosophical beliefs; political-party or trade-union membership; physical or mental health information; biometric or genetic data; sexual orientation; criminal convictions or offences; Social Security numbers; or other personal identification numbers.

If you nevertheless provide this type of information, you do so at your own risk in relation to the possible impact on your privacy. If ALTADIA GROUP detects such information, it will be deleted from its systems and will not be taken into account in any recruitment process.

6. Other information obtained during the recruitment process

ALTADIA GROUP may also collect personal data arising from the candidate’s participation in the recruitment process, including information obtained during personal interviews.

7. Retention of personal data

ALTADIA GROUP will retain candidates’ personal data only for as long as necessary to fulfil the purposes described in the section “Purposes for which we process your personal data”, taking account of the applicable legal basis and the data protection laws in force.

Where the candidate has consented to inclusion in the candidate pool so that they may be contacted about future vacancies, personal data will be retained for a maximum period of 24 months from receipt of the CV.

If the candidate updates their information during that period, the retention period will restart from the date of the latest update.

At the end of the applicable retention period, the personal data will be erased and, where required by applicable Spanish law, placed under restricted access (“blocked”) solely for the period necessary to address potential legal liabilities or claims and to make the data available to the competent authorities.

If the candidate is hired, their data will become part of ALTADIA GROUP's personnel records and will be processed for the purposes and under the conditions applicable to the employment relationship.

8. Who has access to the data collected when your application is reviewed?

Candidates' CV data will be treated in strict confidence. Access is limited to the persons responsible for the departments concerned with the application, such as hiring managers and other relevant managers, and only to the extent necessary for the recruitment process.

9. Recipients and other parties to whom personal data may be disclosed

  1. ARCA24 recruitment management platform (service provider acting as a data processor for ALTADIA GROUP).
  2. Where necessary, ALTADIA GROUP may engage recruitment consultancies. Such providers are subject to a data processing agreement compliant with the GDPR, and ALTADIA GROUP verifies that they provide appropriate compliance guarantees.
  3. Other ALTADIA GROUP entities identified in this Notice, where the candidate has authorised the disclosure.
  4. ALTADIA GROUP has a legitimate interest in transmitting personal data within the corporate group for internal administrative purposes and to optimise organisational resources, including by centralising administration, management, purchasing, human resources and production or service-delivery functions.
  5. IT consultancy services (service providers acting as data processors for ALTADIA GROUP).
  6. Backup services (service providers acting as data processors for ALTADIA GROUP).

10. International transfers of personal data

ALTADIA GROUP does not transfer personal data outside the European Economic Area (EEA), except to group entities located in countries for which the European Commission has adopted an adequacy decision. Such a decision recognises an adequate level of data protection in accordance with Article 45 GDPR.

Any such transfer will take place only where the candidate has given explicit consent for their personal data to be considered in recruitment processes managed by the relevant entity. Transfers will not be carried out routinely or on a large scale, but only where a specific recruitment need is linked to the candidate's suitability for a particular vacancy.

ALTADIA GROUP therefore does not transfer personal data to countries that are not covered by an adequacy decision or to entities that do not provide appropriate safeguards in accordance with the GDPR.

11. Data subject rights

Users may contact ALTADIA GROUP and exercise their data protection rights in accordance with the requirements laid down by applicable data protection law.

In all activities involving your privacy, ALTADIA GROUP seeks to comply with the applicable legislation, which grants data subjects the rights summarised below:

Your rights What does this mean?
Right to be informed You have the right to receive clear, concise, transparent, intelligible and easily accessible information about how we use your personal data and about your rights. This information is provided in this Privacy Notice, including in the section “Purposes for which we process your personal data”.
Right of access You have the right to obtain confirmation as to whether we process personal data concerning you and, where that is the case, to access those personal data, subject to the limitations laid down by law.
Where a request is manifestly unfounded or excessive, in particular because of its repetitive character, we may charge a reasonable fee or refuse to act on the request, as permitted by the GDPR.
To exercise this right, contact us using any of the methods set out below.
Right to rectification You have the right to obtain the rectification of inaccurate personal data concerning you and to have incomplete personal data completed.
To exercise this right, contact us using any of the methods set out below. If you have an account, you may also be able to correct your data directly by updating your profile.
Right to erasure (“right to be forgotten”) In the circumstances provided for by law, you have the right to obtain the erasure of personal data concerning you. This is not an absolute right, and ALTADIA GROUP may have a legal basis or compelling legitimate grounds for retaining certain data.
To request the erasure of your personal data, contact us using any of the methods set out below.
Right to withdraw consent at any time where processing is based on consent Where you have given consent for any of the purposes described in this Notice, you may withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing based on consent before it was withdrawn.
The processing activities based on consent are identified in Section 3 of this Privacy Notice.
To withdraw your consent, contact us using any of the methods set out below.
Right to object to processing based on legitimate interests You may object at any time, on grounds relating to your particular situation, to the processing of your personal data where that processing is based on legitimate interests. The processing activities based on legitimate interests are identified in Section 3 of this Privacy Notice.
To exercise this right, contact us using any of the methods set out below.
Right to lodge a complaint with a supervisory authority If you consider that your rights have not been properly addressed or that the processing of your personal data infringes applicable data protection law, you have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD). Further information is available at https://www.aepd.es. Postal address: Edificio Cuzco IV, Paseo de la Castellana, 141, 9th floor, 28046 Madrid, Spain. Telephone: 900 293 183.
You are welcome to contact us using any of the methods set out below before lodging a complaint with the competent supervisory authority.
Right to data portability Where processing is based on consent or on a contract and is carried out by automated means, you have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format, and to transmit those data to another controller. The relevant legal bases are identified in Section 3 of this Privacy Notice.
For further information, contact us using any of the methods set out below.
Right to restriction of processing You have the right to request restriction of the processing of your personal data. Where processing is restricted, we may store the data but may not otherwise process them except as permitted by law.
This right may be exercised in the circumstances defined by the GDPR, including where:
you contest the accuracy of the personal data, for a period enabling the controller to verify their accuracy;
the processing is unlawful and you oppose erasure of the personal data and request restriction of their use instead;
the controller no longer needs the personal data for the purposes of processing, but you require them for the establishment, exercise or defence of legal claims; or
you have objected to processing under Article 21(1) GDPR, pending verification of whether the controller’s legitimate grounds override your grounds.
To exercise this right, contact us using any of the methods set out below.
Disabling cookies You may disable cookies at any time. Internet browsers are generally configured to accept cookies by default, but you can change your browser settings to reject or disable them.
Many cookies are used to improve the usability or functionality of websites. Disabling them may prevent you from using all or part of the services available through our website and may cause usability or session-related issues.
You can use your browser settings to restrict or block cookies placed by our websites or by other websites or applications. Doing so may prevent certain parts of the website from functioning correctly.

How can you exercise your data protection rights?

To exercise your rights, send a written request to any of the postal or email addresses specified in Section 1 of this Notice and include “GDPR” in the subject line. Your request must identify the right you wish to exercise. If you act through a legal or voluntary representative, you must also provide evidence of the representative’s authority and an identification document for that representative. You may use one of the following options:

12. Personal data relating to minors

The Service is not available to persons under 18 years of age. If you are under 18, please do not use the services available through our website.

ALTADIA GROUP may request additional information or documentation in order to verify the age of a data subject, taking account of the technology reasonably available.

13. Security measures applied to the processing of personal data

ALTADIA GROUP implements and applies appropriate technical and organisational security measures to ensure a level of security appropriate to the risk.

On the basis of an objective assessment, ALTADIA GROUP has identified, analysed and evaluated risks of varying likelihood and severity to the rights and freedoms of natural persons. It has accordingly implemented effective safeguards and security measures designed to eliminate or mitigate the risks identified. In particular, appropriate technical and organisational measures are applied to mitigate the risks of accidental or unlawful destruction, loss or alteration of personal data transmitted, stored or otherwise processed, and of unauthorised disclosure of or access to such data.

ALTADIA GROUP also ensures that its employees, contractors and third parties authorised to process personal data comply with their duties of professional secrecy and confidentiality.

14. Changes to this Privacy Notice

ALTADIA GROUP reserves the right to amend or update this Privacy Notice in order to reflect legislative or case-law developments, changes in industry practice, or technical, operational or corporate requirements.

Users will be informed in advance of any amendment that materially affects the processing of their personal data, in order to ensure transparency and enable them to exercise their rights.

Continued use of ALTADIA GROUP services and platforms after an amended version has been published will constitute acceptance of the terms and conditions set out in the updated Privacy Notice.

ALTADIA GROUP also reserves the right to modify, suspend or discontinue all or part of the services offered, with or without prior notice to the user. ALTADIA GROUP will not be liable to the user or any third party for the lawful exercise of this right to modify, suspend or discontinue the services.