Privacy notice for candidates

Last updated: October 2026

In compliance with the principle of transparency and the duty to inform established by current EU and Spanish data protection legislation, CGC SOLUTIONS, S.L. informs people taking part in its recruitment processes about the circumstances and conditions under which their data are processed, and about the rights available to them. This information forms part of our Privacy policy.

1. Who is the controller of your data?

• Controller: CGC SOLUTIONS, S.L.
• Tax ID (CIF): B75461095
• Registered address: Calle Gobelas 35, Edificio HQ, 1st floor, 28023 Moncloa – Aravaca (Madrid), Spain
• Telephone: +34 623 919 587
• Data Protection Officer: gdpr@cgcsolutions.es

2. What personal data do we process?

We will process the data you share with us as part of the recruitment process or an unsolicited application. In general, we will process your identification data, contact details, Curriculum Vitae and data relating to your professional and/or academic experience.

3. For what purposes will we process your personal data?

• Managing candidates' registration and participation in recruitment processes.
• Assessing professional profiles and sending communications related to those processes by electronic means (email, WhatsApp), telephone or other equivalent means.
• Inviting you to job interviews and assessing your application.
• Where applicable, adding the candidate's profile to the Talent Community for consideration in future processes, where express consent has been given.

4. What is the legal basis for processing your data?

• Taking pre-contractual steps at the request of the data subject.
• Compliance with legal obligations applicable to the Controller.
• The data subject's consent to add the candidate's profile to the Talent Community for consideration in future processes.

5. How long will we keep your personal data?

Personal data will be kept until the end of the recruitment process and, if we have your authorisation, for a maximum of twelve (12) months. Once these periods have elapsed, the data will remain duly blocked for the legally established limitation periods.

6. What rights does the data subject have?

• To access their personal data.
• To request the rectification of their data if they are inaccurate.
• To request the erasure of their data when they are no longer necessary for the purposes for which they were collected, once the legal retention periods have elapsed, or when you withdraw the consent given for specific processing.
• To withdraw any consent given.
• Under the conditions set out in the General Data Protection Regulation, data subjects may request the restriction of processing of their data or its portability.
• In certain circumstances and for reasons relating to their particular situation, data subjects may object to the processing of their data.
• Not to be subject to automated decisions (including profiling).
• To lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) if you consider that the processing of your data does not comply with current legislation.

To exercise these rights, you must send a request to the email address gdpr@cgcsolutions.es or to the postal address Calle Gobelas 35, Edificio HQ, 1st floor, 28023 Moncloa – Aravaca (Madrid), Spain, providing adequate proof of identity. In case of reasonable doubt about the identity of the applicant, CGC SOLUTIONS, S.L. may request additional information.

For all other information on recipients, international transfers and security measures, please see the full Privacy policy .