Privacy Policy
Version 1.0
This policy explains how we handle personal data when you visit www.all-european-careers.com, contact us, work with us as a client, or work with us as a candidate or contractor. We keep it short where we can and specific where it matters.
1. Who we are
This website is run by All European Careers Spain SL ("All European Careers", "we", "us"), C. de Manuel Galiana i Uriarte, 5, bajo C, 03100 Alicante, Spain, NIF B02930345, registered in the Registro Mercantil de Alicante, Tomo 4338, Folio 113, Hoja A-172286.
All European Careers Spain SL and its sister company BE Consultancy Group BV, De Vrièrestraat 54/2, 2000 Antwerpen, Belgium, enterprise number BE 0811.467.950, are part of All European Careers SL.
The EU General Data Protection Regulation (GDPR), the Spanish Organic Law 3/2018 on Data Protection (LOPDGDD) and, for Be Consultancy Group BV, the Belgian Data Protection Act of 30 July 2018 govern how we handle your data.
Privacy contact: gdpr@all-european-careers.com. Use it for any question, request or complaint about your data.
2. Who is responsible for your data
| Whose data | Who is responsible (controller) |
|---|---|
| Visitors to this website | All European Careers Spain SL |
| Clients and other business contacts | All European Careers Spain SL and Be Consultancy Group BV, jointly |
| Candidates and contractors | All European Careers Spain SL and Be Consultancy Group BV, jointly |
All European Careers Spain SL and Be Consultancy Group BV share one candidate and client database and decide together how it is used. That makes us joint controllers under Article 26 GDPR. Be Consultancy Group BV operates the shared database. Either company may sign a contract with a client, candidate or contractor; the contract says which one. You can exercise your rights with either company, through either privacy contact, and we coordinate the answer between us. On request, we send you the essence of our arrangement.
3. Visiting this website
Hosting and security. Our hosting provider Cloudflare records technical data when you visit: IP address, browser type, pages requested, date and time. We use it only to keep the site secure and running (legitimate interest, Art. 6(1)(f) GDPR).
Visitor statistics. We use Cloudflare Web Analytics to understand how the site is used: which pages are visited, which websites refer visitors, and visitors' countries and device types. It sets no cookies, stores nothing on your device and does not track you across sites. We only see aggregated statistics, never individual visitors (legitimate interest).
Cookies. We set no tracking, analytics or advertising cookies, so you will not see a cookie banner. Cloudflare may set a strictly necessary security cookie to protect the site against bots and attacks; it does not identify you and needs no consent.
Emails and calls. If you email or call us, we receive what you share: usually your name, company, email address, phone number and message. We use it to answer you (steps at your request, Art. 6(1)(b)) and keep it for 12 months after our last contact, unless it leads to an agreement (section 4) or a candidate record (section 5).
Jobs and applications. The "Jobs" links on this site open our recruitment system, run by Be Consultancy Group BV. When you apply or register there, the Candidate Agreement described in section 5 applies.
4. Clients and business contacts
What we collect: your name, job title, company, work email address, work phone number, LinkedIn profile address, the vacancies your company has published, our correspondence and meeting notes, signed terms, and the details we need for contracts and invoicing.
Where it comes from: you; your company's website and published vacancies; the job board where a vacancy was posted; business-contact data providers; and our own records.
| What we do | Why (legal basis) |
|---|---|
| Contact you about candidates who fit a vacancy your company has published | Our legitimate interest in offering our service, and yours in filling a live role (Art. 6(1)(f)). Where the law requires your prior agreement, as Spanish law does for commercial emails, we ask for it first. |
| Manage introductions, agreements, interviews and offers | Our agreement with your company (Art. 6(1)(b)) |
| Invoicing, accounting and tax | Legal obligation (Art. 6(1)(c)) |
| Keep a suppression list when you opt out | Legitimate interest and legal obligation |
Opting out. Every message from us has a simple way to stop further contact. We then add you to a suppression list that we check before every email, call or LinkedIn message.
Candidate profiles you receive are confidential and subject to our terms. Once you hold a candidate's identified profile, your company is a controller of that data in its own right.
5. Candidates and contractors
If you apply for a job, ask us to represent you, or work with us as a contractor, you accept our Candidate Agreement, which includes a detailed Candidate Privacy Notice. It explains what data we collect, how our AI-assisted matching works and why a recruiter always makes the decisions, how your anonymised profile is protected, how long we keep your data and how to use your rights. You can read it at be-consultancy-group.com/privacy.
In short:
- Free for candidates, always. Hiring companies pay our fee.
- Anonymised first. Until a company has signed our terms for you, it sees only an anonymised profile. We never approach your current or past employers, or any company on your block-list.
- You're told every time. Before we release your full profile to a company, we send you the company name and the role. Reply STOP and we don't send it.
- People decide, not machines. AI tools help us read CVs and propose matches, and a recruiter reviews and decides every time.
For contractors we contract through All European Careers Spain SL, we also keep contract, timesheet, invoicing and payroll records for 6 years after the contract ends, as Spanish commercial and tax law requires.
6. Who receives your data
We share personal data only as described in this policy. Service providers act only on our instructions, under data processing agreements:
| Provider | What for | Where |
|---|---|---|
| Zoho (Recruit, CRM, Forms, Sign, Mail, WorkDrive and related apps) | Our candidate and client database, forms, e-signature, email and file storage | EU |
| Anthropic | AI-assisted CV reading, match proposals and drafting, always reviewed by a recruiter | Ireland (contracting entity); processing in the USA |
| Microsoft Teams, WhatsApp, Wispr and VoipStudio | Interview recording and transcription, only with the candidate's consent | EU, USA, UK |
| Microsoft 365 | Email, calendar and documents | EU |
| Cloudflare | Hosting this website, security and visitor statistics | USA |
Others, when relevant: hiring companies (as described in section 5), payroll or umbrella partners for contract placements, our lawyers, accountants, auditors and insurers, and public authorities where the law requires it.
Our team: team members in Spain and Sri Lanka may access data to support our work.
7. International transfers
We store data in the European Economic Area. Some providers, and some team members, are outside it: currently in the USA (AI processing, website hosting and dictation), the United Kingdom (telephony) and Sri Lanka (team access). For every such transfer we rely on a lawful safeguard: an EU adequacy decision (including the EU-US Data Privacy Framework for certified providers) or the European Commission's Standard Contractual Clauses with a transfer risk assessment. You can ask us for a copy.
8. How long we keep data
| Data | Kept for |
|---|---|
| Website visitor statistics | Aggregated only; no personal data is kept |
| Emails and calls that lead to nothing further | 12 months after our last contact |
| Business contacts we approached who did not engage | 12 months after our last message |
| Client contacts | While we work together, plus 2 years |
| Contracts, invoices, timesheets and payroll records (All European Careers Spain SL) | 6 years after the contract ends, as Spanish law requires |
| Candidate data | As set out in the Candidate Agreement (usually 12 months after the last meaningful contact) |
| Suppression list after you opt out or ask for erasure | A minimal record, so that we do not contact you again |
Where a legal claim or investigation is under way, we may keep the relevant data until it is closed.
9. Your rights
You can, at any time and free of charge:
- access your data and get a copy of it;
- correct anything inaccurate or incomplete;
- erase your data, except what the law requires us to keep;
- restrict processing while a question about it is being resolved;
- object to processing based on our legitimate interest, including direct marketing;
- take your data with you (portability), for the data you gave us;
- withdraw consent where consent is the basis, with no effect on what was done before.
Write to gdpr@all-european-careers.com. We may need to confirm your identity. We respond within one month; if a request is complex we may take up to two more months and tell you why.
Complaints. You can complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es), to the Belgian Data Protection Authority (www.dataprotectionauthority.be), or to the authority of the country where you live. We'd appreciate the chance to resolve your concern first.
10. How we keep data safe
Access to personal data is limited to the people who need it for their work. Our providers encrypt data in transit and at rest, and candidate profiles are shared through expiring links, never as attachments. We keep no candidate data in shared spreadsheets or personal drives.
11. Children
Our services are for professionals. We do not knowingly process data of anyone under 18.
12. Changes to this policy
We may update this policy when our services or the law change. Each version carries a number and a date. If a change materially affects how we use your data, we tell you before it takes effect.
13. Contact
All European Careers Spain SL, C. de Manuel Galiana i Uriarte, 5, bajo C, 03100 Alicante, Spain · NIF B02930345 · gdpr@all-european-careers.com