What data you give us when you apply for a vacancy, request staff or write to us, what we use it for, how long we keep it and how to ask us to delete it.
Document details
Controller
Fervi Empleo ETT
Tax ID (CIF)
B90309758
Contact
informatica@ferviempleoett.es
Updated
14/09/2026
This translation is provided for information only. In the event of any discrepancy between versions, the Spanish text prevails.
For any question about your data, write to that address. You don't need to use any form or explain why you're asking.
02What data we process and why
We only ask for what is needed for each purpose. We don't need health data, political opinions, religion or other special categories: we recommend you don't include them in your CV unless they're relevant to a specific role and you decide to provide them.
Applications for vacancies
Data
Full name, phone, email, province and town, any message you write to us and your CV if you attach one. The team adds its notes on the process: calls, interviews, availability.
Purpose
Assessing your application, contacting you and, while we keep it, considering you for other vacancies that match your profile.
Legal basis
Your consent, given when you submit the application (Art. 6(1)(a) GDPR), and steps prior to a possible contract that you request by applying (Art. 6(1)(b) GDPR).
Retention
12 months from submission. The application and CV are then deleted. If we hire you, they become part of your employment file.
CVs sent by email
Data
Whatever you include in the email and the CV.
Purpose
The same as an application through the website.
Legal basis
Your consent when you send it (Art. 6(1)(a) GDPR).
Retention
12 months from receipt.
Companies requesting staff
Data
Name of the contact person, company, phone, email and whatever you tell us about the staffing need.
Purpose
Responding to the request, preparing a proposal and, if we reach an agreement, providing the service.
Legal basis
Pre-contractual steps requested by the company (Art. 6(1)(b) GDPR) and, for the contact person's details, our legitimate interest in dealing with the company they represent (Art. 6(1)(f) GDPR).
Retention
As long as needed to deal with the request. If there is a contract, for the duration of the relationship and then the statutory retention periods for commercial and tax records, up to six years.
Whistleblowing channel
Data
The contents of the report: your identity if you choose the confidential route (none if anonymous), the facts, any documents you provide and the details of the people mentioned.
Purpose
Receiving, processing and investigating reports of possible breaches.
Legal basis
Legal obligation (Art. 6(1)(c) GDPR and Art. 30 of Spanish Law 2/2023).
IP address, browser, page requested and time, in the server's technical logs.
Purpose
Serving the website, detecting faults and stopping mass submissions or unauthorised access attempts.
Legal basis
Our legitimate interest in keeping the website and data secure (Art. 6(1)(f) GDPR).
Retention
A few days at most. We don't use them to identify you or build profiles.
Visit statistics, only if you accept
Data
Pages you view, time on site, device type and browser, approximate location (city or country) and a random identifier stored in a cookie. Google Analytics 4 does not store IP addresses.
Purpose
Knowing how many people visit the website and which content is useful to them, so we can improve it.
Legal basis
Your consent in the cookie banner (Art. 6(1)(a) GDPR and Art. 22(2) LSSI). You can withdraw it from “Cookie settings” at the foot of every page. Details in the cookie policy.
Retention
As configured in Google Analytics, 14 months at most. Cookies expire after 2 years or when you withdraw consent.
The employee and employer portals linked from the website run on the e-OER platform. What is processed there (registrations, contracts, employment documents) is part of your relationship with Fervi, and you are informed about it when you sign up.
03Who else may access it
Your data is not sold or shared for advertising purposes. Only the following have access:
Client companies. As a temporary employment agency, when we put you forward for a role at a user company we share the details needed to assess your placement. If we hire you for that role, they also receive the information required for the assignment.
Public authorities and courts, when required by law: the Labour Inspectorate, Social Security, the Tax Agency or public employment services, among others.
Service providers working on our behalf, under data processing agreements: website hosting (Vercel Inc.), database and files (Supabase Inc.), the portals platform (e-OER), visit statistics if you accept them (Google Ireland Limited), email and our advisers. They may only use the data to provide their service to us.
04Where it is stored
The database, CVs and whistleblowing channel documents are stored on servers in the European Union, in Frankfurt (Germany). The code that receives the forms also runs there.
Vercel and Supabase are companies based in the United States. If they ever needed to access data from outside the European Economic Area, for example to provide technical support, that transfer would be covered by the standard contractual clauses approved by the European Commission and, where the company is certified, by the EU–US Data Privacy Framework.
Fonts and animations are served from our own server. The only third-party service the website loads is Google Analytics, and only after you accept it; Google may process that data in the United States under the EU–US Data Privacy Framework.
05Your rights
Access: find out whether we process your data and get a copy.
Rectification: correct any data that is inaccurate or incomplete.
Erasure: have it deleted when it is no longer needed or you withdraw your consent.
Objection: have us stop processing it where we rely on legitimate interest.
Restriction: have us keep it without using it while a complaint is resolved.
Portability: receive it in a format you can take to another company.
Withdraw your consent at any time, without affecting what we did with it before.
To exercise them, write to informatica@ferviempleoett.es or by post to Av. de Francia, 34, bajo, 46023 Valencia, stating which right you wish to exercise. If we have reasonable doubts about your identity we will ask for something to verify it; you don't need to send a copy of your ID up front.
We will reply within one month at most. If the request is complex, this period may be extended by two further months and we will let you know.
If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency at aepd.es.
06How we protect it
The whole website is encrypted (HTTPS).
CVs and channel documents are stored in private storage with no public address. The team opens them via links that expire after one minute.
Only Fervi staff with a username and password can access the management dashboard, and each person sees only what their role requires.
Whistleblowing reports are only visible to the person responsible for the system, and every access is logged.
07Minors
The minimum working age in Spain is 16, so we do not accept applications from anyone younger. If we receive one, we delete it.
08Automated decisions
We do not make automated decisions about you or build profiles from your data. Every application is reviewed by a member of the team.
09Changes to this policy
If we change how we handle your data, we will update this page and its date. If the change affects something you gave us consent for, we will ask for it again.
