Candidate privacy notice

PRIVACY NOTICE — HOOPYTECH TALENT
Version: talent-2026-11-04-v1

This addendum describes the processing of applicant and professional data within Hoopytech Talent and supplements the general website privacy policy. The controller is Hoopytech AI & Big Data Boutique, S.L., tax ID B21802327, Calle Peñíscola 15A, bajo, local 4, 12003 Castellón, Spain. Privacy contact: hola@hoopytech.com.

Applications and the talent network
We process the information you submit: identity and contact details, CV, professional experience, technologies, specialties, languages, location, availability, work preferences and desired commercial terms. We record the opportunity or general registration source, campaign tags, the accepted notice version, language and date, and email verification. We use this information to review applications, contact you and manage professional opportunities. Registration does not subscribe you to advertising. Please avoid unnecessary sensitive information or third-party data in your CV.

Legal basis and purpose
Voluntary network membership relies on consent, which you may withdraw. Handling a specific application and steps towards a collaboration you request may rely on pre-contractual measures. An actual professional relationship is managed under its contract and applicable legal obligations. People review profiles and make selection decisions; we do not make selection decisions based solely on automated processing.

Interviews, recording and transcription
We may propose recording or transcribing an interview to prepare a summary and record relevant professional experience, notes and points to clarify. Before starting, we will explain the scope, tools, recipients and retention involved and request specific consent for that application, separately from registration. Recording does not begin without this consent. You may decline or withdraw it and request an alternative without recording. Withdrawal does not affect the lawfulness of earlier processing. Assisted summaries are reviewed by a person. They are not used to infer emotions, personality or sensitive characteristics. Any transcription or assistance providers will be identified before use.

Internal tools and recipients
Authorized Hoopytech staff access profiles in HR Assistant. Call Helper supports interview preparation, notes, transcriptions and summaries subject to the relevant consent. Upon profile validation, professional and economic information needed for collaboration planning is synchronized with Team Cost Planner; placement enables management of assignments and their terms. Registration alone does not generate invoices. Google Workspace sends verification emails and communications. If an opportunity requires presenting your profile to a client, we will first inform you of the recipient and scope. External processors and any international transfers must have appropriate safeguards.

Retention and erasure
Unverified registrations expire after 24 hours and are removed by the periodic task, including attached CVs. Verified profiles are reviewed after 365 days without contact. The team checks whether the profile remains current and determines whether to update or erase it; this review does not constitute automatic deletion. You may request removal earlier. Erasure is propagated to internal tools and pending tasks are tracked to completion. Where economic history exists, only data necessary for accounting, tax or legal claims are retained, restricted from other use, until the applicable retention end date. This is recorded as legal retention, not full erasure. The retention end date is determined by the obligations applicable to each professional relationship. Backups have restricted access and their own retention cycle; restored data must have erasure requests reapplied.

Rights and contact
You may request access, rectification, erasure, restriction and portability, object where applicable, and withdraw consent by contacting hola@hoopytech.com. Only information necessary to verify identity will be requested. You may complain to the Spanish Data Protection Agency, www.aepd.es.