Privacy Policy

Status: February 20, 2025

We are very pleased about your interest in our company and our services. Protecting your privacy is of great importance to us. Below, we inform you about the processing of your personal data when using our website https://ayensagroup.com and our services.

1. Controller (Art. 4(7) GDPR)

• Name of the Company: Ayensagroup SL

• Business Address: Finca Ses Dornades, Poligono 8, Parcela 237, 07669 Calonge, Illes Balears, Spain

• E-mail: joel@ayensagroup.com

We are the controller within the meaning of the EU General Data Protection Regulation (GDPR) and decide on the purposes and means of processing your personal data.

2. Data Collected and Purposes of Processing

  • Visiting the Website

    • Server log files: When you visit our website, information is automatically transmitted by the browser you use to our server (e.g., IP address, date and time of access, name and URL of the retrieved file, the browser used, and possibly your operating system). These data are technically necessary to display our website to you and to ensure the stability and security of our systems.

      • Legal basis: Art. 6(1)(f) GDPR (legitimate interest in ensuring the smooth operation of our website and IT security).

  • Contact via E-Mail

    • Contact: If you contact us by e-mail (at joel@ayensagroup.com), we process your e-mail address as well as the information contained therein (e.g., name, request, attachments) for the purpose of handling your inquiry.

    • Legal basis: Art. 6(1)(b) GDPR (fulfillment of a contract or pre-contractual measures) or Art. 6(1)(f) GDPR (our legitimate interest in effectively handling your inquiry).

  • Application and Recruitment Data: We provide IT recruitment services (placement of permanent or freelance professionals in the field of CRM or software integration in the DACH region).

    • Data collected:

      • Contact details (name, e-mail, phone number)

      • Résumé/CV and other job-related information (qualifications, references, work samples, etc.)

      • Other information you voluntarily provide (e.g., salary expectations, availability)

    • Purpose of processing:

      • Placement in positions at our clients (companies in the DACH region)

      • Assessment of your suitability and qualifications

      • Contacting you in the context of the application process

      • Forwarding your data to potential employers or project providers (only with your consent)

    • Legal bases:

      • Art. 6(1)(b) GDPR (implementation of pre-contractual measures at the request of the data subject)

      • Art. 6(1)(a) GDPR (consent for transferring data to our clients or for longer-term storage in our talent pool)

      • Art. 6(1)(f) GDPR (legitimate interest in presenting suitable candidates to our clients, insofar as consent is not required)

  • Newsletter and Marketing (if offered)

    • If we offer a newsletter or other marketing services in the future, we will request your separate consent and inform you about the content, frequency, and your rights of withdrawal.

3. Disclosure of Data

  • Service providers (processors): We occasionally use external service providers (e.g., hosting providers, software vendors) who process your data on our behalf and according to our instructions. These service providers are contractually obligated under Art. 28 GDPR to treat your data confidentially.

  • Disclosure to clients / potential employers: In the context of our recruitment services, we only disclose your application data to the recruiting companies with your prior consent.

  • Disclosure for legal reasons: We only disclose personal data to third parties if there is a legal obligation to do so or if it is necessary for the establishment, exercise, or defense of legal claims and there is no reason to assume you have an overriding interest in the non-disclosure of your data (Art. 6(1)(c) or (f) GDPR).

4. Storage Period and Deletion

We only store your personal data for as long as necessary to fulfill the respective purposes. Afterwards, your data will be deleted or blocked, unless statutory retention periods (e.g., tax or commercial law obligations) preclude this. Specifically:

  • Applicant data: Stored as part of a specific job placement and deleted after the application process is completed, provided there is no other legal basis for longer retention (e.g., consent to be included in a talent pool).

  • Contract and billing data: May be retained for up to ten years after the end of a contract to comply with statutory retention obligations.

5. Data Security

We implement appropriate technical and organizational security measures to protect your data against unauthorized access, manipulation, loss, or unauthorized disclosure. These measures include, for example:

  • Encrypted transmission (HTTPS)

  • Access and authorization concepts for our employees

  • Regular data backups

  • Up-to-date firewall and antivirus systems

6. Your Rights as a Data Subject

Under the GDPR, you have the following rights:

  1. Right of Access (Art. 15 GDPR): You have the right to request information about the personal data we hold about you.

  2. Right to Rectification (Art. 16 GDPR): You can request correction of inaccurate data or completion of incomplete data.

  3. Right to Erasure (Art. 17 GDPR): You have the right to request the immediate deletion of your data if there is no legal basis or retention obligation preventing it.

  4. Right to Restriction of Processing (Art. 18 GDPR): You can request restriction of the processing of your data if one of the conditions in Art. 18 GDPR is met.

  5. Right to Data Portability (Art. 20 GDPR): You have the right to receive the data you provided in a structured, commonly used, and machine-readable format or have it transferred to a third party.

  6. Right to Object (Art. 21 GDPR): For reasons arising from your particular situation, you may object at any time to the processing of your data, if such processing is based on our legitimate interests.

  7. Withdrawal of Consent (Art. 7(3) GDPR): You have the right to revoke any consent given at any time with effect for the future.

  8. Right to Lodge a Complaint (Art. 77 GDPR): If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority. Usually, this is the authority in your Member State, your place of residence or work, or at our company’s registered address.

7. Contact for Data Protection Inquiries

For any data protection-related questions or to exercise your rights, please contact:

Ayensagroup SL

Finca See Dornades, Poligono 8, Parcela 237

07669 Calonge, Illes Balears, Spain

E-mail: joel@ayensagroup.com

Please provide clear identification of your person for written inquiries so that we can attribute your request without any doubt.

8. Changes to This Privacy Policy

We reserve the right to adjust this Privacy Policy as needed to always comply with current legal requirements or to reflect changes in our services and processes. The version published on our website at the time of your visit applies.

Thank you for your trust and for your interest in our services.