Saltar e ir al contenido principal

Procesamiento de los datos (personales) por parte de la entidad encargada del procedimiento de candidatura de empleo en línea

Privacy policy

In the following Privacy Policy, you will find a differentiated detail on the processing of personal data that is carried out through the website and the App. Due to its nature, it is expressly informed that the data processing carried out through the Website is carried out on behalf of HEYTRADE TECH, S.L. C/Serrano 88, 2°, 28006, Madrid (hereinafter HEYTRADE), and the data collected through the App is data relating to the investment contracting process in which HEYTRADE acts as agent for BEKA FINANCE, SOCIEDAD DE VALORES, S. A. C/ Marqués de Villamagna nº 3, 28001 Madrid (hereinafter, BEKA) in which BEKA will be Data Controller and HEYTRADE will act as Data Processor.

1. Personal Data Protection Delegate

The main function of the Data Protection Delegate (DPD) is to advise and supervise compliance with current legislation on the protection of personal data, as well as to serve as a liaison between the data controller and the Spanish Data Protection Agency.

  • For questions concerning HEYTRADE processing, please contact the DPD at the following e-mail address: dpo@heytrade.com.
  • For questions regarding BEKA’s processing, please contact the DPD at lopd.sv@bekafinance.com.

 

2. Processing of data obtained through the Web site

2.1. Who is responsible for the processing of your data that are made through the Web site?

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 and with the rest of the applicable legislation in Spain regarding the protection of personal data, we hereby inform you that the personal data provided when completing and sending the forms published on the Website will be processed by HEYTRADE as data controller.

2.2. For what purpose and on what basis do we process the data obtained through the Web site?

  • To respond to queries for information about HEYTRADE. Legal basis of legitimacy: the express consent you provide by ticking the acceptance box on the web form (Art.6.1 a) RGPD).
  • For the management of resumes of job candidates. Legal basis of legitimacy: the express consent you provide by ticking the acceptance box on the web form (Art.6.1 a) RGPD).
  • For sending the newsletter. Legal basis of legitimacy: the express consent provided by ticking the acceptance box on the web form (Art.6.1 a) RGPD).

2.3. To whom will we communicate your personal data as a web user?

  • To external technology service providers, such as maintenance services and IT services, legal services, and consulting services, who will process your data strictly in accordance with HEYTRADE’s instructions.
  • Where appropriate, to third parties such as bodies, agencies and institutions of the General State Administration, regional and local administrations; jurisdictional bodies, and State Security Forces and Corps.

2.4. How long will we keep your data as a user of the Web?

  • Personal data obtained through the contact form or request for information will be kept only for the time necessary to attend and follow up on your request.
  • Personal data relating to job applicants will be retained for a period of one year from the date of completion of the selection process. However, in the event that the candidate is selected, his or her curricular data will be kept for the purpose of managing the employment relationship.
  • Personal data processed for the purpose of sending communications will be processed until the user opposes or withdraws consent to continue receiving them.

 

3. Processing of data obtained through the App

3.1. Who is responsible for the processing of your data through the App?

In this case HEYTRADE, as agent, acts on behalf of BEKA, so BEKA will be responsible for the processing of the data and HEYTRADE in this process acts as Data Processor.

3.2. What data is processed as a user of the App?

HEYTRADE, in the name and on behalf of BEKA will process data of an identifying nature, socio-economic data, solvency and risk data, fraud and, if so chosen, may also process biometric data, derived from the established procedure of identity verification of natural persons through the video-identification system that is provided by a service provider specialized in this type of solutions.

The data that are subject to processing are obtained through the following means, if applicable: (i) those that the User provides at the time of registration, specifically the email and user, as well as the telephone number – if applicable, (ii) the information generated from their use and interaction with the App such as metadata, comments, suggestions, complaints, telephone conversations, queries, requests or contracting of any product, of any transaction or operation, etc., (iii) forms for obtaining information, (iv) from third party databases for money laundering and fraud prevention purposes, (v) from various public sources and (vi) from public agency records.

The personal information that is mandatory for each form is identified as such. The refusal to provide such information will prevent communication to the user and, where appropriate, the impossibility of providing the requested information and/or contracting.

3.3 What is the purpose and legitimacy of the processing of your data as a user of the App?

As detailed above, HEYTRADE will be in charge of the processing of the data related to the fulfillment of legal obligations and the provision of investment services under the responsibility of BEKA. In the case of contracting these services, you will be informed in more detail about the processing of your personal data in the Custody and Administration Agreement of financial instruments, as well as in the General Conditions of the contract for the provision of the service of reception and transmission of orders.

  • Provision of the service: managing and maintaining your registration on the Platform. The basis that legitimizes this treatment is the execution of the contract (art.6.1 b) RGPD).
  • Compliance with legal obligations: HEYTRADE will process personal information that is necessary to comply with the legal requirements demanded by the regulations indicated, as a guideline, the Law on the Prevention and Fight against Money Laundering and Terrorist Financing, MIFiD regulations or tax regulations that will involve prior assessment of whether the product is suitable for the needs of this investor and various communications of data to both national and international authorities (art.6.1 c) RGPD).
  • Recording of telephone and electronic communications: Also in compliance with the applicable regulations, it may record telephone conversations or electronic communications that are held both for the purpose of providing information on the investment services provided and during the use of the same (art.6.1 c) RGPD).
  • Sending communications in compliance with the regulation: Communications will be carried out in compliance with MIFID regulations with the aim of improving the quality of the information made available to the client(art.6.1 c) RGPD).
  • Sending of commercial communications: BEKA may, on the basis of Law 34/2002 of Services of the Information Society and Electronic Commerce, send commercial communications about products and services similar to those contracted. In the event that you do not wish to receive such communications, you may oppose to such treatment by sending an e-mail to the address privacy@heytrade.com. This opposition can be exercised at the time of recruitment as through the mechanism contained in each communication you receive.

3.4. To whom will we communicate your personal data as an App user?

Your data may be communicated:

  • To those third parties, public bodies and institutions of the General State Administration, regional and local administrations, the National Securities Market Commission, the Tax Agency, SEPBLAC, including the jurisdictional bodies to which it is legally obliged to provide them.
  • Distributors of the investment instruments and investment platforms and the SGIIC and the investment depositary.
  • Likewise, in order to carry out all the purposes described above, HEYTRADE (as agent of BEKA) may count on the collaboration of third party service providers that may have access to personal data as a consequence of the execution of the contracted services such as technological services necessary for the App, as well as electronic identification. In any case, HEYTRADE follows strict criteria for the selection of such third parties in order to comply with its data protection obligations and signs with them the corresponding data protection contract, where these third parties are obliged to comply with their data protection obligations, and specifically, to comply with the legal, technical and organizational measures, to process personal data for the agreed purposes, and the prohibition of processing such personal data for other purposes or transfer to third parties.

No international data transfers are foreseen.

3.5. About the conservation of data as a user of the App

The personal data of customers will be retained for as long as the contractual relationship with them is maintained. In this sense, HEYTRADE, in the name and on behalf of BEKA, will keep the personal data duly blocked once the contractual relationship is terminated, for the period of limitation of the actions that may arise from the relationship maintained with the interested parties, specifically, 10 years. Except for your email, which will be kept until you object to the processing of this for sending commercial communications.

 

4. Processing of biometric data

Biometric data will not be used for purposes other than verification of your identity. Biometrics is a facial identification tool that helps us to prevent fraud, increases the reliability of operations and helps us to ensure that the person is the holder of the ID that is being shared with us. The basis of the legitimacy of the processing of biometric data is the consent of the person who wants to open an account (art.6.1.a) of the RGPD), since when the contracting occurs, the user accepts to open the account with biometric data.

  • Opening an account with biometric data is a quick process that can be completed in just a few minutes.

We store the biometric data (photos and video) to verify your identity.

 

5. Information about cookies

We inform you that we use cookies to facilitate your navigation on the website and the App, to know how you interact and even send you advertising based on your browsing habits.

The acceptance of some of these cookies may involve the transfer of data to third countries necessary for the operation of the services of our suppliers. You can learn more about this in our Cookie Policy.

If you want to know more detail about the cookies we use, their purpose and other information of interest, see our Cookies Policy.

 

6. What are your data protection rights?

The interested parties have the right to access, rectify, delete, oppose, limit the processing, request the portability of their personal data and not to be subject to automated individual decisions in the terms specified in the applicable regulations on data protection, by means of a communication addressed to privacy@heytrade.com or to the postal address indicated in the first section, proving their identity and specifying the right they wish to exercise. In the event that the exercise of such rights is related to processing carried out by HEYTRADE in the name and on behalf of BEKA, HEYTRADE will transfer to the latter to respond to any request received on its behalf or you can exercise them directly to BEKA through the address info@bekafinance.com.

We inform you that in the event that you consider that any of your rights relating to the protection of your data have been violated, you may file a complaint with the Spanish Data Protection Agency www.aepd.es.

 

7. Commitments of the User

The user undertakes to inform HEYTRADE of any changes to the information provided. In order to make such communication, you may contact the account privacy@heytrade.com.

Procesamiento de los datos (personales) por parte del operador del sitio web de selección de personal

Información general

Este sitio web de reclutamiento lo gestiona Personio SE & Co. KG, que ofrece una solución de software de gestión de recursos humanos y candidatos (https://www.personio.com/legal-notice/). Data facilitado como parte de la candidatura se transferirán mediante cifrado TLS y se almacenarán en una base de datos. El único responsable del tratamiento de estos datos en virtud del artículo 24 del RGPD es la empresa que lleva a cabo este proceso de candidatura en línea. El rol de Personio se limita a gestionar el software y este sitio web de reclutamiento, y, en este contexto, ejerce como responsable del tratamiento en virtud del artículo 28 del RGPD. En este caso, el tratamiento por parte de Personio se basa en un acuerdo para el procesamiento de órdenes entre el responsable del tratamiento y Personio. Además, Personio SE & Co. KG trata otros datos, algunos de los cuales pueden ser datos personales, para proporcionar sus servicios y, en particular, para gestionar este sitio web de reclutamiento. Analizaremos esto con más detalle a continuación.

El responsable del tratamiento

El responsable del tratamiento según la ley de protección de datos:
Personio SE & Co. KG
Seidlstraße 3
80335 München
Tel.: +49 (89) 1250 1004
Entrada en el registro comercial
Número de entrada en el registro comercial: HRA 115934
Tribunal de registro: Amtsgericht München
Contacto del agente de protección de datos: privacy@personio.com

Registros de acceso (“registros del servidor”)

Cada acceso a este sitio web de reclutamiento activa automáticamente la recopilación de datos de protocolo generales, los llamados registros del servidor. Por norma general, estos datos son pseudónimos y, por tanto, no permiten inferir la identidad de una persona. Sin estos datos, en algunos casos, sería técnicamente imposible transmitir o mostrar el contenido del software. Por otro lado, el tratamiento de los datos es absolutamente necesario por motivos de seguridad. En particular, para controlar el acceso, la introducción, la transferencia y el almacenamiento. Además, esta información anónima se puede utilizar con fines estadísticos y para optimizar los servicios y la tecnología. Asimismo, los archivos de registro se pueden comprobar y analizar de forma retrospectiva cuando existan sospechas de un uso ilegítimo del software. Base legal: § 25, subsección 2, apartado 2 de la TDDDG (la ley alemana de protección de datos en telecomunicaciones y servicios digitales). En general, se recopilan datos como el nombre de dominio del sitio web, el navegador web y la versión del navegador web, el sistema operativo, la dirección IP y la marca de tiempo del acceso al software. El ámbito de este proceso de registro no excede el ámbito de registro común de cualquier otro sitio de la web. Estos registros de acceso se guardan durante un periodo máximo de 7 días. No existe el derecho a oponerse a ello.

Registros de errores

Los llamados registros de errores se generan para identificar errores y corregirlos. Es un procedimiento absolutamente necesario para poder reaccionar con la mayor agilidad posible a los problemas relativos a la visualización y la implementación del contenido (interés legítimo). Por norma general, estos datos son pseudónimos y, por tanto, no permiten inferir la identidad de una persona. Base legal: § 25, subsección 2, apartado 2 de la TDDDG (la ley alemana de protección de datos en telecomunicaciones y servicios digitales). Cuando se genera un mensaje de error, se recopilan datos generales como el nombre de dominio del sitio web, el navegador web y la versión del navegador web, el sistema operativo, la dirección IP, la marca de tiempo del mensaje de error generado o la especificación. Estos registros de errores se guardan durante un periodo máximo de 7 días. No existe el derecho a oponerse a ello.

Uso de cookies

Las llamadas cookies se usan en ciertas partes de este sitio web de reclutamiento. Son pequeños archivos de texto que se almacenan en el dispositivo desde el que accedes al sitio web de reclutamiento. Por norma general, las cookies sirven para garantizar el acceso al sitio web (“absolutamente necesario”), implementar ciertas funcionalidades como los ajustes de idioma estándar (“funcional”), mejorar la experiencia de usuario o el rendimiento del sitio web (“rendimiento”) o colocar anuncios segmentados (“marketing”). En este sitio web de reclutamiento, en general, solo utilizamos las cookies absolutamente necesarias, funcionales o de rendimiento. En particular, para implementar ajustes predeterminados como el idioma, para identificar el canal de anuncio de los empleos, o para analizar el rendimiento de un anuncio de un empleo a través del que un usuario ha accedido a este sitio web de reclutamiento. El uso de cookies es absolutamente necesario para proporcionar nuestros servicios y, por tanto, para el cumplimiento del contrato (artículo 6 (1) b) del RGPD). Periodo de almacenamiento: hasta 1 mes o hasta el fin de la sesión en el navegador Derecho de oposición: puedes determinar en los ajustes del navegador si permites el uso de cookies o te opones a él. Desactivar las cookies puede ocasionar la limitación o el bloqueo completo de las funcionalidades de este sitio web de reclutamiento.

Derechos de los interesados

Si Personio SE & Co. KG, como responsable del tratamiento, trata datos personales, tú, como parte interesada en relación con los datos, ostentas ciertos derechos en virtud del capítulo III del Reglamento General de Protección de Datos (RGPD)de la UE, dependiendo de la base legal y el propósito del tratamiento, en particular, el derecho de acceso (artículo 15 del RGPD) y los derechos de rectificación (artículo 16 del RGPD), supresión (artículo 17 del RGPD), limitación del tratamiento (artículo 18 del RGPD) y portabilidad de datos (artículo 20 del RGPD), así como el derecho de oposición (artículo 21 del RGPD). Si los datos personales se tratan con tu consentimiento, tienes derecho a retirar este consentimiento en virtud del artículo 7 III del RGPD. Para ejercer tus derechos como parte interesada en relación con los datos que se tratan con el fin de gestionar este sitio web de reclutamiento, dirígete al agente de protección de datos de Personio SE & Co. KG (véase el elemento B).

Disposiciones finales

Personio se reserva el derecho a ajustar esta declaración de privacidad de datos en cualquier momento para garantizar que cumpla siempre los requisitos legales vigentes o para aplicar cambios en los servicios ofrecidos (por ejemplo, cuando se introduzcan servicios nuevos). En este caso, se aplica la declaración de privacidad de datos nueva a cualquier visita al sitio web de reclutamiento posterior o a cualquier candidatura de empleo posterior.