Saltar al contenido

Privacy Policy

1. Data Controller

In compliance with current regulations on personal data protection, we inform you that the controller of your data is:

  • Controller: FERNANDO PEÑA TORRE
  • Tax ID (C.I.F.): 79050303Q
  • Registered Office: C\ ALMAGRO 11 - 28010 MADRID (MADRID), Spain
  • DPO Contact Email: dpo@basquekide.es

2. Basic Information on Data Protection

Following current regulations on data protection, we inform you about the basic aspects of data processing in the different areas of our platform:

A. Privacy Policy for service contracting

Layer Basic Information
Controller FERNANDO PEÑA TORRE
Purpose To manage the service contracted by the data subject.
Legal Basis Contract execution / contracting of the service.
Recipients No data will be transferred to third parties, unless legally obligated.
Rights Right to request access to personal data, right to request rectification or erasure, right to request restriction of processing, right to object to processing, right to data portability.

Additional and detailed information:

  • You may consult the additional and detailed information on Data Protection at our registered office.
  • Unless you communicate the contrary, we will understand that your data has not been modified, that you agree to notify us of any variation, and that you maintain your consent to use it for the aforementioned purposes.
  • The receipt of data through this form, without having freely, affirmatively, and voluntarily consented to the processing and storage of it, will result in its immediate deletion without any further action.

B. Privacy Policy for Contact

Layer Basic Information
Controller FERNANDO PEÑA TORRE
Purpose To manage the request/information received through the form.
Legal Basis Consent of the data subject.
Recipients No data will be transferred to third parties, unless legally obligated.
Rights Right to request access to personal data, right to request rectification or erasure, right to request restriction of processing, right to object to processing, right to data portability.

Additional and detailed information:

  • The data subject may withdraw the consent previously granted for the processing of their personal data whenever they deem it appropriate.
  • The withdrawal of consent will not be retroactive, and any processing previously carried out under that consent remains lawful.
  • You may consult the additional and detailed information on Data Protection at our registered office.
  • Unless you communicate the contrary, we will understand that your data has not been modified, that you agree to notify us of any variation, and that you maintain your consent to use it for the aforementioned purposes.
  • The receipt of data through this form, without having freely, affirmatively, and voluntarily consented to the processing and storage of it, will result in its immediate deletion without any further action.

3. Use of Google & Microsoft APIs, Data Transfer, and Sharing

FastJob uses the gmail.send (Google API) and Mail.Send (Microsoft Graph API) permissions to send emails on your behalf.

Google and Microsoft Data Sharing and Disclosure:

No sharing or transfer: FastJob does not share, sell, rent, trade, transfer, or disclose your Google or Microsoft user data (including OAuth authentication tokens, email address, or profile information) to any third parties or external applications under any circumstances, with the sole exceptions of Microsoft Clarity (Microsoft Corporation), acting as a data processor for the behavioral analytics described in section 4 after you grant the Analytics cookie category; Google Analytics 4 (Google Ireland Ltd.), acting as a data processor for web analytics after that same consent; and Meta Pixel/Conversions API (Meta Platforms Ireland Ltd.), acting as a data processor for advertising measurement only after you grant the Advertising cookie category. None of these third parties receives Google or Microsoft API tokens.

Exclusive use: This data is stored securely and is used solely and exclusively to automate sending your emails (resumes/CVs) from your own account to the destination addresses you select. No data is transferred to advertising networks, data brokers, or advertising intermediaries.

FastJob's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4. Service Data and Integrated Platforms

To ensure the correct functioning of our platform, we process and store the following specific data:

  • Identity Data (OAuth): We collect the name, email address, and profile picture obtained through Google or Microsoft OAuth to create and manage your user account.
  • CV Content and Secure Storage (DigitalOcean): Resume PDF files uploaded to our platform are stored privately and securely on DigitalOcean Spaces servers. For distribution to companies, we generate unique download links (UUIDs) that have a limited validity time (5 minutes) to prevent unauthorized public access to your personal documents.
  • Sending Logs: We record sending activity, recipient companies, timestamps, and sending status to provide the service and manage your credit consumption.
  • Billing Data (Stripe): We process payments through Stripe. We only store Stripe customer identifiers and transaction status; we do not store any credit card or debit card data on our own servers.
  • Behavioral Analytics (Microsoft Clarity): On all pages — public and private, including the dashboard, payment, and admin areas — and for both anonymous visitors and authenticated users who have accepted the Analytics cookie category, we use Microsoft Clarity (Microsoft Corporation) for session recordings and heatmaps. Clarity loads only after your consent and may then set its first-party cookies (_clck, _clsk). Authenticated sessions record your visible account context (email, credits, sending activity, CV filenames, purchase history) and continue the same session across login, linked to your internal user key. You may withdraw consent at any time via the cookie-settings panel, which removes Clarity cookies.
  • Web Analytics (Google Analytics 4): If you accept the Analytics category, we use Google Analytics 4 (Google Ireland Ltd.) to measure page views, interactions, traffic sources and usage events. GA4 stays inactive until you grant the Analytics cookie category: it receives no data at all, not even cookieless signals. Once granted, it sets its first-party cookies _ga and _ga_<id>, and _gcl_au for advertising. Consenting authenticated users are linked to their internal user key (never their email). GA4 data is retained for 14 months. When you delete your account we request erasure of the data associated with your key.
  • Advertising Measurement (Meta Pixel and, when enabled, Conversions API): Only if you accept the Advertising category do we use Meta Pixel and, when enabled, the Conversions API (Meta Platforms Ireland Ltd.) to measure campaign performance on Facebook and Instagram. Meta sets _fbp and _fbc only with that consent; without it the pixel is not even loaded. We never send Meta your email address or phone number (Advanced Matching disabled); the only signals are an encrypted internal identifier, your browser IP and user-agent. Google Ads uses conversions imported from GA4 and the _gcl_au cookie, also only with Advertising consent.
  • Recipient actions (companies): When a company opens a CV link or unsubscribes, we record the first download, download count and unsubscribe date in our database under legitimate interest, to understand deliverability and honour the opt-out. Those pages load no analytics or advertising tooling, and no Google, Meta or Clarity identifier is assigned to recipients.
Cookie Owner Purpose Category
sessionid, csrftokenFastJobSession and securityEssential
_clck, _clskMicrosoftRecordings and heatmapsAnalytics
_ga, _ga_<id>GoogleWeb analytics (14 months)Analytics
_gcl_auGoogleGoogle Ads conversionsAdvertising
_fbp, _fbcMetaCampaign measurementAdvertising

5. Opt-out System and Global Blacklist

We respect the right of recipients not to receive unwanted emails. When a company uses the "Unsubscribe" link included in the automated emails, they are added to a global blacklist. This means no FastJob user will be able to send emails to that specific address again, ensuring compliance with the privacy preferences of the recipients across the entire platform.

6. Data Retention and Account Deletion

Upon deleting your account, we immediately delete your resume files and your Google or Microsoft OAuth access tokens. We also request Google Analytics 4 erasure for the data associated with your internal user key (processed asynchronously). Microsoft Clarity offers no per-user deletion API: recordings linked to your key become unavailable once its retention window elapses, a limitation documented and accepted by our DPO. Meta holds no personal data beyond advertising cookies, which are removed on withdrawal or expire. Consent records are kept de-identified (no link to your account) as proof of consent. For legal and tax compliance reasons, we will retain records of financial transactions and Stripe invoices for the period required by competent tax regulations.

7. Contact for GDPR Rights

You can exercise your rights of access, rectification, erasure, restriction, objection, and portability of your personal data by sending an email directly to our Data Protection Officer (DPO) at dpo@basquekide.es.

Contact and Support: www.basquekide.es | dpo@basquekide.es