Privacy policy for the Hellotickets employer branding and recruitment
Updated: 31-07-2025
1. Purpose of this Privacy Policy
This policy governs the processing of personal data provided by candidates who participate in our recruitment processes through the portal https://jobs.hellotickets.com/, managed via the Teamtailor platform.
At Hellotickets, we are committed to processing your personal data lawfully, fairly, and transparently, in compliance with the General Data Protection Regulation (GDPR) and other applicable regulations. Our priority is to ensure the confidentiality and security of the information you provide in the context of your application.
This policy informs you about what data we collect, for what purposes we use it, how we store it, and what rights you have regarding your personal data when using this recruitment platform.
2. What is considered personal data?
Personal data is any information that allows you to be identified directly or indirectly as a natural person. In the context of the selection process, this includes your name, email address, phone number, résumé, image, professional profile, form responses, interview results, as well as any additional information you provide during the process.
Sensitive data may also be processed, such as opinions or cultural or political information, if derived from interview or form content. Such data will always be managed with the utmost respect for data protection regulations.
3. Who is responsible for processing your data?
The data controller is Hello Ticket, S.L, with its notification address at Tomás Bretón 52 (Area coworking), Madrid, and Tax ID (NIF) B87643680.
4. Applicable laws and regulations
The processing of personal data by Hello Ticket, S.L complies with:
- Regulation (EU) 2016/679 of the European Parliament and Council, of April 27, 2016 (General Data Protection Regulation – GDPR).
- Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).
- Law 34/2002, of July 11, on Services of the Information Society and Electronic Commerce (LSSICE), when applicable.
5. Principles applicable to personal data processing
At Hellotickets, we apply the following principles in compliance with Article 5 of the GDPR to all data processing via the career page (https://jobs.hellotickets.com):
- Lawfulness, fairness, and transparency: Data will be processed lawfully, fairly, and transparently.
- Purpose limitation: Data will be collected for specific, explicit, and legitimate purposes and not further processed in a way incompatible with those purposes.
- Data minimization: We will process only the data strictly necessary for the intended purposes.
- Accuracy: We will keep data updated and take reasonable steps to promptly delete or correct inaccurate data.
- Storage limitation: Data will be retained only as long as necessary for the purpose of processing.
- Integrity and confidentiality: We will ensure adequate security through technical and organizational measures to prevent unauthorized access or unlawful processing.
- Accountability: We will adopt appropriate measures to demonstrate compliance with all the above principles.
6. What personal data do we collect and for what purpose?
The data we collect via Teamtailor includes the information you provide when applying for a vacancy, such as:
- Identifying data: name, surname, email, phone.
- Curriculum information: education, work experience, technical skills, languages.
- Form responses: screening questions, references, motivations.
- Personal image, if attached in your CV or Teamtailor profile.
- Data obtained from interviews or assessments.
The purpose of processing is to manage your application for vacancies at Hellotickets, evaluate your professional profile, conduct selection processes, and keep you informed about future opportunities that may match your profile.
Additionally, we process your data to comply with our legal and contractual labor obligations and non-discrimination requirements, as well as to ensure fair and traceable processes.
7. What is the legal basis for processing your data?
Your personal data is processed on the following legal bases:
- Execution of pre-contractual measures (Art. 6.1.b GDPR): necessary to evaluate your application and carry out the selection process.
- Explicit consent (Art. 6.1.a GDPR): for storing your CV for future processes or if you provide non-required data such as an image.
- Legitimate interest (Art. 6.1.f GDPR): to ensure an effective, secure, and traceable selection process, and to manage referrals in a structured manner.
- Art. 9.2.a GDPR: if you voluntarily provide sensitive data (political opinions, union membership, sexual orientation, etc.), it will only be processed after obtaining your explicit consent.
8. How long will we retain your data?
Your personal data will be retained for the duration of the selection process for which you submitted your application.
If you have given consent for future opportunities, we will keep your CV for a maximum of 6 months after the process ends.
After that period, data will be securely deleted unless there is a legal obligation to retain it longer or you exercise your right to deletion earlier.
9. Who will your data be shared with?
Your personal data will not be shared with third parties unless required by law, for your vital interests, or under agreements with data processors providing services related to recruitment.
We specifically use Teamtailor as our ATS (Applicant Tracking System) for receiving and managing applications. Teamtailor acts as a processor and has appropriate contractual clauses to ensure GDPR compliance.
Part of the process may involve international data transfers if your application is handled by Hellotickets personnel outside the European Economic Area. Such transfers are based on adequate safeguards in accordance with Article 46 GDPR (e.g., standard contractual clauses).
10. What are your rights when providing your data?
As a data subject, you have the right to:
- Request access to your personal data.
- Request the correction of inaccurate or incomplete data.
- Request the deletion of your data when no longer needed or upon withdrawing consent.
- Request the restriction of processing in certain circumstances.
- Object to processing based on legitimate interest.
- Request the portability of your data to another controller when processing is based on consent or pre-contractual relations.
- Withdraw your consent at any time.
To exercise these rights, contact us at privacy@hellotickets.com, attaching a copy of your ID.
You also have the right to file a complaint with the Spanish Data Protection Agency (www.aepd.es) if you believe processing does not comply with the law.
11. Data retention
Personal data provided through https://jobs.hellotickets.com/ will be kept for the duration of the selection process.
If you consent to be considered for future vacancies, your data will be kept for an additional 6 months. After that period or upon consent withdrawal, data will be securely deleted or anonymized.
You may request the deletion of your data at any time via the channels indicated in this policy.
12. Information security
At Hellotickets, we implement appropriate technical and organizational measures to ensure the security, confidentiality, integrity, and availability of personal data processed in the Teamtailor platform.
These measures include:
- Secure authentication protocols and role-based access control.
- Data encryption in transit and at rest.
- Regular backups and business continuity policies.
- Access logs and traceability of changes in applications.
However, Users should be aware that absolute security in IT systems cannot be guaranteed, and there are inherent risks to browsing and transmitting data over the Internet.
13. Candidate rights
As a data subject, you can exercise the following rights under data protection regulations:
- Right of access: know which data we process and for what purposes.
- Right of rectification: request modification of inaccurate or incomplete data.
- Right of erasure: request deletion when data is no longer needed or upon consent withdrawal.
- Right to object: oppose processing in certain cases, such as automated decisions.
- Right to restrict processing: request suspension of processing in specific circumstances.
- Right to data portability: receive the personal data you provided in a structured format and transfer it to another controller.
To exercise these rights, contact us at privacy@hellotickets.com, attaching a copy of your ID.
If you believe your rights have not been properly addressed, you may file a complaint with the Spanish Data Protection Agency.
14. Policy modifications
Hellotickets reserves the right to modify this privacy policy to adapt it to legislative or case-law changes, as well as to changes in the operation of its recruitment platform or the Teamtailor tool.
Modifications will be duly notified through the career page (https://jobs.hellotickets.com) or direct communication in case of substantial changes affecting candidate rights.
