Privacy Policy — SPECTRUM DOMUS

In compliance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 (LOPDGDD)

1.1 Data Controller

• Controller: Oksana Kochkina

• Tax Identification Number (NIF): Y1221798Y

• Trade Name: SPECTRUM DOMUS

• Address: Manilva, Málaga, Spain

• Email: [email protected]

• Website: www.spectrumdomus.com

2.2 Data We Collect and Purposes SPECTRUM DOMUS collects and processes the following personal data:

A) Candidates:

• Name and surnames — identification on the platform

• Photo — profile presentation

• Email and phone (WhatsApp) — contact by employers

• Date of birth, nationality — profile verification

• Province of residence — geographic segmentation

• Specialization, experience, languages — professional presentation

• Documentation status — information for employers

• Descriptive text and video presentation — candidate presentation

• Professional test result — quality indicator

B) Employers:

• Name and surnames — identification on the platform

• Email and phone — account management and contact

• Province — geographic segmentation

• Payment data — processed through a secure payment service (we do not store bank data) • History of consulted profiles — management of the contracted plan.

C) Agency form:

• Name, email, phone, and type of service — processing of the request

2.3 Legal Basis for Processing

• Execution of a contract: processing necessary to provide the requested service.

• Consent of the data subject: expressly collected in the registration form.

• Legitimate interest: communications regarding the contracted service.

• Legal obligation: retention of fiscal and accounting data.

2.4 Data Retention Data will be retained for as long as necessary to provide the service and, once the relationship has ended, for the legally established periods:

• Fiscal and accounting data: 6 years (Commercial Code)

• Active candidate data: as long as the profile is published

• Employer data: duration of the contracted plan + 1 year

• Agency requests: 5 years

2.5 Data Sharing with Third Parties SPECTRUM DOMUS does not share personal data with third parties except in the following cases:

• Stripe: for secure payment processing.

• Collaborating administrative agency: only the data included in the agency form request, with the user's express consent.

• Competent authorities: when required by legal obligation. We do not carry out international data transfers outside the European Economic Area (EEA).

2.6 Data Subject Rights The user may exercise the following rights at any time:

• Access: to know what data we process about you.

• Rectification: to correct inaccurate or incomplete data.

• Erasure: to request the deletion of your data.

• Objection: to object to the processing of your data.

• Portability: to receive your data in a structured format.

• Restriction: to request the restriction of processing.

To exercise these rights, send an email to [email protected] with the subject line 'Ejercicio de derechos RGPD' (Exercise of GDPR rights), indicating the right you wish to exercise and attaching a copy of your identity document.

You have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) if you believe that the processing does not comply with current regulations.

2.7 SecuritySPECTRUM DOMUS applies appropriate technical and organizational measures to guarantee the security of personal data, including SSL encryption, restricted data access, and secure authentication systems.