Privacy Policy – LeedTech Services

Effective Date: October 4,2025

1. Introduction & Purpose

Welcome to LeedTech Services. We value your privacy and are fully committed to protecting your personal data. This Privacy Policy explains how we collect, use, share, and safeguard your information when you visit or interact with leedtechservices.com or apply for job opportunities through our platform. This policy is established in accordance with the General Data Protection Regulation (GDPR) and Spain’s data protection law (LOPDGDD), along with all other applicable European data protection standards. Because LeedTech Services operates in Spain and recruits skilled professionals from Asia and beyond, we ensure that all international applicants receive the same level of privacy protection and legal transparency as those residing within the European Union.

2. Controller & Contact Information

Data Controller: LeedTech Services
Address: 43 Al Fahidi St, United Arab Emirates
Email: info@leedtechservices.com
If applicable: Data Protection Officer (DPO) or representative in Spain: leedtech & +971522213905

You may contact us at any time for privacy concerns, data access, or data rights.

3. What Personal Data We Collect

We collect and process specific categories of personal data based on how you interact with our website and recruitment services:

Identification & Contact Data:
Includes your full name, email address, phone number, and physical address, collected when you register, apply for a job, or contact us.
Recruitment Data:
Details such as your CV, education, professional certifications, trade experience, and work history.
Technical & Usage Data:
Information automatically collected through your device, including IP address, browser type, operating system, pages visited, time spent, and cookies or similar tracking technologies.
Documents & Legal Data:
Work permits, residence cards, NIE/NIF (or equivalent), Social Security number, Health & Safety certificates, and insurance documentation, required for legal employment verification.
Optional / User-Provided Information:
Any additional comments, messages, or uploaded files such as CVs, recommendation letters, or certificates that you voluntarily share with us.

We only collect data necessary to deliver our recruitment and placement services. LeedTech does not collect or process sensitive personal data (such as health information, religion, or political opinions) unless explicitly required by law and only with your prior consent.

4. Legal Bases for Processing

We process your personal data under several lawful bases permitted by GDPR:

Contractual necessity: To carry out recruitment, hiring, and placement services you request.
Legitimate interests: To improve our services, ensure secure operations, prevent fraud, and manage our business (provided these interests do not override your rights).
Consent: When you opt into optional services like marketing communications or consent to non-essential cookies.
Legal obligations: Compliance with legal and regulatory requirements (e.g., labor laws, tax, social security).

We will inform you which basis applies whenever we request your data.

5. How We Use Your Data

We use your personal information for the following purposes:

To process your job application and match you with open positions.
To communicate with you regarding your application status, interviews, or related inquiries.
To perform verification and document validation (residence, permits, certifications).
To provide you with administrative, tax, relocation, and compliance support.
To improve our website, user experience, and service via analytics and internal research.
To enforce our Terms & Conditions, detect fraud, and maintain security.
To comply with legal obligations required by Spanish, EU, or Portuguese authorities.

We do not use your data for automated decision-making or profiling unless explicitly disclosed and consented.

6. Cookies & Tracking Technologies

We use cookies and similar technologies to improve your experience and analyze website performance.
These fall into categories:

Essential / Strictly necessary cookies: Required for basic site functionality (form submissions, login).
Performance & Analytics cookies: To understand usage patterns and optimize our services.
Functional / Preference cookies: To remember preferences (language, layout).
Marketing / Advertising cookies (if applicable): To present relevant offers or job suggestions.

Under Spanish regulations, we must obtain explicit consent before placing non-essential cookies. You will see a cookie banner when you first visit. You can accept or reject these cookies.

You can also manage or disable them via browser settings, but note that disabling some cookies may affect site functionality.

7. Data Sharing & Disclosure

We may share your personal data under the following circumstances:

With service providers (e.g. hosting, email, analytics, recruitment platforms) who assist us, they will act as data processors and are required to follow contractual confidentiality.
With project clients or employers, but only the minimum necessary (CVs, certificates) as part of recruitment placements.
With legal or regulatory authorities when required by law or court order.
In the event of a business transfer or merger, your data might be transferred to the successor entity, subject to confidentiality and legal safeguards.

Any international transfers outside the EU will be protected by appropriate safeguards (e.g. Standard Contractual Clauses) and notified you.

8. Data Retention Period

We will retain your personal data as long as needed for the purposes originally collected or as required by law, whichever is longer. Typical retention includes:

Recruitment records: Upto [e.g. 5 years] after application or last contact (for defense of any claims or audits).
Compliance & legal data: As required by Spanish/EU labor, tax, or record-keeping laws.
Analytics / aggregates: Once anonymized, data may be retained indefinitely.

After retention periods expire, data is securely deleted or anonymized.

9. Your Rights Under GDPR

You have the following rights, which you can exercise at any time by contacting us:

Right of access – request a copy of your personal data.
Right of rectification – correct inaccurate or incomplete data.
Right of erasure (right to be forgotten) – in certain cases, request deletion of your data.
Right to restrict processing – in certain situations, limit how we use your data.
Right to data portability – receive your data in a structured, machine-readable format.
Right to object – object to processing based on legitimate interests or direct marketing.
Right to withdraw consent – for processing based on consent, you can withdraw it anytime.
Right to lodge a complaint with your local supervisory authority (in Spain, the Agencia Española de Protección de Datos – AEPD).

We will respond to your requests in accordance with GDPR timeframes (usually 1 month).

10. Security Measures

We use appropriate technical and organizational measures to protect your data from unauthorized access, alteration, disclosure, or destruction. Measures include:

Encryption of data in transit (SSL/TLS)
Secure servers and restricted access
Access controls, authentication, role-based privileges
Regular audits, backups, and security reviews
Incident response protocols in case of breach

11. Data Breach Notification

In the event of a personal data breach, we will:

Notify the supervisory authority (AEPD) within 72 hours if required by law.
Communicate affected individuals if the breach is likely to result in high risk to rights and freedoms.
Document the incident, impacts, and remedial measures taken.

12. Minors & Children

Our site and services are not intended for children under 16 years of age. We do not knowingly collect personal data from minors. If we become aware such data was collected, we will take steps to delete it.

13. Changes to This Privacy Policy

We may update this policy occasionally to reflect changes in law, business practices, or technology. When we make changes, we will post the updated version here with a new “Effective Date”. We encourage you to review this page periodically. Continued use of our site after changes indicates your acceptance.

14. Other Provisions

Links to Third-Party Sites: Our site may link to external websites with separate privacy practices. We are not responsible for their content or practices.
Legal Jurisdiction: This Privacy Policy is governed by Spanish law. Any disputes shall be subject to the jurisdiction of Spanish courts.
Language & Readability: We strive to present this Privacy Policy in clear, understandable language in English, and may provide translations for Spanish, Portuguese, or other users. In case of conflict, the Spanish version shall prevail.