Privacy Policy
Last updated: 20 August 2026
Jamiaati, S.L. respects and protects your privacy. This Privacy Policy explains how we collect, use, store, and protect personal data when you visit our website, contact us, submit a staffing request, apply for a job, or otherwise interact with us.
We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and other applicable data protection legislation.
1. Data Controller
Jamiaati, S.L. is the data controller responsible for the processing of personal data described in this Privacy Policy.
Jamiaati, S.L. CIF: B75582932 Website: www.jamiaati.com Email: gdpr@jamiaati.com
Questions regarding our processing of personal data or requests to exercise your data protection rights may be sent to the email address above.
2. What Personal Data Do We Process?
The personal data we process depends on how you interact with us.
We may process, among other things:
- Name
- Telephone number
- Email address
- Address and contact details
- Company name and position
- Information submitted through contact or staffing request forms
- CV and cover letter
- Education, work experience, and professional skills
- Certificates, qualifications, and other credentials
- Availability and employment preferences
- Information provided during recruitment or staffing processes
- Communications between you and Jamiaati
- Technical information generated when using our website, such as IP address, device information, and browser information
We ask that you do not provide sensitive personal data unless it is specifically requested and necessary for the relevant purpose.
3. When Companies and Employers Contact Us
When you represent a company and submit a staffing request or otherwise contact Jamiaati, we may process information such as:
- Name
- Company
- Position
- Telephone number
- Email address
- Information regarding the company's staffing or recruitment requirements
- The content of your request and subsequent communications
Purpose
The information is used to:
- Receive and respond to your request
- Contact you
- Assess your company's staffing requirements
- Provide quotations or proposals for staffing and recruitment services
- Present relevant candidates
- Administer and perform agreements
- Follow up on our cooperation
Legal Basis
Depending on the circumstances, processing is based on our legitimate interests or the need to take steps prior to entering into or performing a contract.
Our legitimate interests include communicating with existing and potential customers and operating and developing our business.
4. When You Apply for a Job or Register as a Candidate
When you apply for a position through Jamiaati, submit an unsolicited application, or otherwise wish to be considered for staffing or recruitment opportunities, we may process information such as:
- Name and contact details
- CV and cover letter
- Work experience
- Education
- References
- Professional skills
- Certificates and qualifications
- Language skills
- Availability
- Salary or compensation expectations
- Information you provide during the recruitment process
- Notes from interviews and other assessments
Purpose
Personal data may be used to:
- Administer your application
- Assess your suitability for an assignment or employment
- Contact you regarding available positions
- Match your profile with customers' staffing requirements
- Conduct interviews and other parts of the recruitment process
- Verify relevant qualifications and references
- Present you to potential employers or clients when relevant to the recruitment process
- Administer potential employment or consultancy assignments
Legal Basis
Depending on the circumstances, processing may be based on the necessity to take steps prior to entering into a potential contract, our legitimate interest in conducting recruitment and staffing activities, or, where required, your consent.
Where processing is based on consent, you have the right to withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
5. Presentation of Candidates to Clients
A central part of our business is helping employers find suitable personnel.
When you are being considered for a specific position or assignment, relevant personal data may therefore be provided to the employer or client seeking personnel.
We limit the information shared to what is relevant to the particular recruitment or staffing process.
This may include:
- CV
- Work experience
- Education
- Professional skills
- Certificates and qualifications
- Availability
- Other information relevant to the position
6. References
If you provide contact information for a reference, you are responsible for ensuring that the reference person is aware that their information has been provided to us.
We use reference information to conduct relevant reference checks as part of a recruitment process.
7. Contacting Us
If you contact us by email, telephone, web form, or other communication channels, we may process your contact details and the content of your communication.
The information is processed so that we can respond to your enquiry, administer the matter, and follow up on the communication.
The legal basis is normally legitimate interest or, where the communication relates to a contract, the necessity to enter into or perform that contract.
8. Customers, Suppliers and Business Partners
We may process contact information relating to individuals working for our customers, potential customers, suppliers, and business partners.
This may include names, positions, telephone numbers, email addresses, and information regarding the business relationship.
Processing is carried out to administer business relationships, communicate, provide offers, manage agreements, and develop our business.
The legal basis is normally our legitimate interest in operating and developing our business or the performance of a contract.
9. Invoicing, Accounting and Legal Obligations
Where necessary for invoicing, accounting, taxation, or other legal obligations, we may process personal data for the period required by applicable law.
The legal basis in such cases is normally compliance with a legal obligation.
10. Marketing and Business Contacts
We may use contact information relating to existing or potential business customers to provide relevant information about our services, including staffing, recruitment, training, consultancy, and other professional services.
Such processing may be based on our legitimate interest in marketing and developing our services.
You have the right to object at any time to the processing of your personal data for direct marketing purposes. If you object, we will no longer use your personal data for such marketing.
11. Website, Cookies and Technical Information
When you visit www.jamiaati.com, certain technical information may be processed, including:
- IP address
- Browser type
- Device
- Pages visited
- Date and time of visit
- Technical information required for the operation and security of the website
The website may use cookies and similar technologies.
Cookies that are necessary for the operation of the website may be used without consent where permitted by law.
For non-essential cookies, such as certain analytics or marketing cookies, consent will be obtained where required by applicable law.
Further information may be provided in our Cookie Policy or through the website's cookie settings.
12. Where Do We Obtain Personal Data?
Personal data may be obtained:
- Directly from you
- From an employer or client
- From a reference person
- From publicly available professional sources
- From recruitment platforms or job websites
- From business partners where there is a lawful basis for the transfer
If we receive personal data from someone other than you, we process the information in accordance with applicable GDPR requirements.
13. Who May Have Access to Personal Data?
Where necessary, personal data may be shared with:
- Companies seeking personnel that we assist in a recruitment or staffing process
- IT system providers
- Web hosting providers
- Email service providers
- Recruitment and CRM systems
- Accounting and financial service providers
- Legal advisers and other professional advisers
- Public authorities where we are legally required to provide information
Service providers processing personal data on our behalf must process the information according to our instructions and applicable data protection legislation.
We do not sell your personal data.
14. Transfers Outside the EU/EEA
We aim to ensure that personal data is processed within the EU/EEA.
However, some of our IT or service providers may process personal data, or make it accessible, outside the EU/EEA.
Where personal data is transferred to a country outside the EU/EEA, we ensure that an appropriate transfer mechanism under the GDPR is in place, such as an adequacy decision or the European Commission's Standard Contractual Clauses, where required.
15. How Long Do We Keep Personal Data?
We do not retain personal data for longer than necessary for the purposes for which it was collected.
Staffing and Customer Enquiries
Information is retained for as long as necessary to process and follow up on the enquiry and thereafter for as long as there is a relevant business need or legal obligation to retain it.
Candidates and Job Applicants
Information relating to a specific recruitment process is retained during the recruitment process and for a reasonable period thereafter for follow-up purposes and to handle potential legal claims.
If we wish to retain your candidate profile for future recruitment opportunities, we will do so only for as long as there is a valid legal basis for processing.
Customers and Contracts
Information necessary for customer relationships and agreements may be retained throughout the contractual relationship and thereafter for as long as necessary for follow-up, legal claims, or statutory obligations.
Accounting Records
Information subject to accounting legislation is retained for the period required under applicable law.
When personal data is no longer required, it will be deleted or anonymised.
16. Security
We implement appropriate technical and organisational security measures to protect personal data against:
- Unauthorised access
- Unauthorised use
- Loss
- Alteration
- Destruction
- Unauthorised disclosure
Access to personal data is limited to individuals and service providers who require the information to perform their duties or provide their services.
17. Your Rights
Under the GDPR, you have several rights regarding your personal data.
Depending on the circumstances, you may have the right to:
Request Access
You may request information about the personal data we process about you and obtain a copy of that information.
Request Rectification
If your personal data is inaccurate or incomplete, you may request that it be corrected.
Request Erasure
Under certain circumstances, you may request the deletion of your personal data.
The right to erasure is not absolute. We may need to retain certain information to comply with legal obligations or handle legal claims.
Request Restriction
Under certain circumstances, you may request that the processing of your personal data be restricted.
Object to Processing
Where processing is based on legitimate interests, you have the right to object to the processing.
We will then assess whether there are compelling legitimate grounds for continuing the processing.
You always have the right to object to direct marketing.
Data Portability
Where the requirements of the GDPR are met, you may have the right to receive certain personal data in a structured, commonly used, and machine-readable format.
Withdraw Consent
Where processing is based on your consent, you may withdraw your consent at any time.
Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
18. How to Exercise Your Rights
Please contact us at:
gdpr@jamiaati.com
Please indicate that your request concerns personal data or GDPR.
To ensure that personal data is not disclosed to the wrong person, we may need to verify your identity before processing certain types of requests.
19. Complaints to the Spanish Data Protection Agency
If you believe that Jamiaati processes your personal data incorrectly or in violation of applicable data protection legislation, you have the right to lodge a complaint with the Agencia Española de Protección de Datos (AEPD), the Spanish supervisory authority responsible for data protection.
Information about submitting a complaint is available from the AEPD.
20. Automated Decision-Making and Profiling
Jamiaati does not make decisions that produce legal effects or similarly significantly affect you solely through automated processing unless we specifically inform you about such processing and there is a lawful basis for it.
Digital tools may be used to assist in administering, searching, and matching candidate profiles, but recruitment decisions will not be made solely through automated processing where the GDPR requires human assessment.
21. Changes to This Privacy Policy
We may update this Privacy Policy if our business activities, systems, or applicable legislation change.
The latest version will always be published on www.jamiaati.com.
The date of the latest update is shown at the top of this page.
22. Contact
If you have questions about this Privacy Policy, our processing of personal data, or wish to exercise any of your rights, please contact us.