{"id":17281,"date":"2021-09-02T09:27:53","date_gmt":"2021-09-02T08:27:53","guid":{"rendered":"https:\/\/www.rosello-mallol.com\/?p=17281"},"modified":"2022-02-28T13:39:32","modified_gmt":"2022-02-28T12:39:32","slug":"do-i-have-to-answer-to-cvs-to-comply-with-the-gdpr","status":"publish","type":"post","link":"https:\/\/www.rosello-mallol.com\/en\/do-i-have-to-answer-to-cvs-to-comply-with-the-gdpr\/","title":{"rendered":"Do I have to answer to CVs to comply with the GDPR?"},"content":{"rendered":"\n<p>One of the most common doubts in companies to comply with the GDPR is <strong>to answer to CVs or not<\/strong>. Sometimes, companies organize selection processes but, many others, candidates send their CVs without there even being a selection process open, through generic emails that can appear in the different communication channels of the company, such as their website.<\/p>\n\n\n\n<p>In these already somewhat confusing circumstances, at the end of August, the <strong><a href=\"https:\/\/www.xataka.com\/pro\/mandar-curriculo-que-no-te-contesten-tiene-multa-proteccion-datos-2-000-euros-no-informar-su-tratamiento-derechos-al-candidato\" target=\"_blank\" rel=\"noreferrer noopener\">news<\/a><\/strong> was published in different media that <strong>not responding to the sending of a CV<\/strong> informing of the company\u2019s Privacy Policy could be punished by the AEPD.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>What are the circumstances of the penalised case?<\/strong><\/h2>\n\n\n\n<p>Indeed, the AEPD <strong><a href=\"https:\/\/www.aepd.es\/es\/documento\/ps-00237-2021.pdf\" target=\"_blank\" rel=\"noreferrer noopener\">imposed<\/a><\/strong> a fine of \u20ac 2,000 on a company for not responding to the sending of a CV by a candidate via WhatsApp, but as always, it is necessary to understand the circumstances of the case to fully understand what the AEPD establishes.<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>The penalised company had an open selection process on its website, providing candidates with different means of sending their CVs.<\/li><\/ul>\n\n\n\n<ul class=\"wp-block-list\"><li>On the website of the aforementioned company, where the job offer was available, in no case was information provided on the Privacy Policy in relation to the data that the candidates send, nor was it reported once the CV had been submitted by the candidate by any of the available means.<\/li><\/ul>\n\n\n\n<ul class=\"wp-block-list\"><li>Additionally, the company did not comply with the prior request of the AEPD or present allegations at any time when it had the right to do so.<\/li><\/ul>\n\n\n\n<ul class=\"wp-block-list\"><li>In these circumstances, the AEPD imposes a \u20ac 2,000 fine on the company for breach of the duty of transparency and information to the data subject.<\/li><\/ul>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Should I then answer to CVs that you send me?<\/strong><\/h2>\n\n\n\n<p>The answer is plain and simple: <strong>NO<\/strong>. As long as a prerequisite and essential requirement is fulfilled: <strong>to inform of the company\u2019s Privacy Policy<\/strong> in relation to the data collected <strong><span style=\"text-decoration: underline;\">at the time it is requested<\/span><\/strong>. If you report this fact at the time of data collection (the CV, in this case), under the terms of Art. 13 of the GDPR, you do not have to issue any type of acknowledgment of receipt, as that information has already been provided and the candidate already knows what you will do with his or her data.<\/p>\n\n\n\n<p>This case reminds me of how common it is to include the <strong>company&#8217;s Privacy Policy<\/strong> <strong>at the bottom of emails<\/strong>, when this information should be provided when the data is collected and not when you already have it.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>If you collect a CV in a selection process or are simply sent it, remember that\u2026.<\/strong><\/h3>\n\n\n\n<ol class=\"wp-block-list\"><li>You must update the company\u2019s Privacy Policy to include this fact. On many occasions, the Privacy Policies published on company websites are limited to informing of the conditions for processing the data collected only by that means (the website). You report the conditions for processing all the data handled by the company in this Policy, along with that of any CVs, even if you do not receive them via that means.<\/li><\/ol>\n\n\n\n<ol class=\"wp-block-list\" start=\"2\"><li>Always collaborate with the AEPD. In addition to being a legal obligation, ghosting the AEPD is not usually a good strategy. In this specific case, I am unaware of the circumstances that led this company not to answer, but as I said, the AEPD usually values \u200b\u200bthe level of collaboration of the inspected companies. In some cases, the inspection can even end with a \u201csimple\u201d warning .<\/li><\/ol>\n\n\n\n<p>If you have questions about data protection in relation to your selection processes, please <strong><a href=\"https:\/\/www.rosello-mallol.com\/en\/contact\/\" target=\"_blank\" rel=\"noreferrer noopener\">contact us<\/a><\/strong>!<\/p>\n\n\n\n<div class=\"wp-block-contact-form-7-contact-form-selector\">\n<div class=\"wpcf7 no-js\" id=\"wpcf7-f13645-o1\" lang=\"en-US\" dir=\"ltr\" data-wpcf7-id=\"13645\">\n<div class=\"screen-reader-response\"><p role=\"status\" aria-live=\"polite\" aria-atomic=\"true\"><\/p> <ul><\/ul><\/div>\n<form action=\"\/en\/wp-json\/wp\/v2\/posts\/17281#wpcf7-f13645-o1\" method=\"post\" class=\"wpcf7-form init\" aria-label=\"Contact form\" novalidate=\"novalidate\" data-status=\"init\">\n<fieldset class=\"hidden-fields-container\"><input type=\"hidden\" name=\"_wpcf7\" value=\"13645\" \/><input type=\"hidden\" name=\"_wpcf7_version\" value=\"6.1.6\" \/><input type=\"hidden\" name=\"_wpcf7_locale\" value=\"en_US\" \/><input type=\"hidden\" name=\"_wpcf7_unit_tag\" value=\"wpcf7-f13645-o1\" \/><input type=\"hidden\" name=\"_wpcf7_container_post\" value=\"0\" \/><input type=\"hidden\" name=\"_wpcf7_posted_data_hash\" value=\"\" \/><input type=\"hidden\" name=\"_wpcf7_recaptcha_response\" value=\"\" \/>\n<\/fieldset>\n<p><label> Name (required) <span class=\"wpcf7-form-control-wrap\" data-name=\"your-name\"><input size=\"40\" maxlength=\"400\" class=\"wpcf7-form-control wpcf7-text wpcf7-validates-as-required uk-input\" aria-required=\"true\" aria-invalid=\"false\" value=\"\" type=\"text\" name=\"your-name\" \/><\/span> <\/label>\n<\/p>\n<p><label> Email (required) <span class=\"wpcf7-form-control-wrap\" data-name=\"your-email\"><input size=\"40\" maxlength=\"400\" class=\"wpcf7-form-control wpcf7-email wpcf7-validates-as-required wpcf7-text wpcf7-validates-as-email uk-input\" aria-required=\"true\" aria-invalid=\"false\" value=\"\" type=\"email\" name=\"your-email\" \/><\/span> <\/label>\n<\/p>\n<p><label> Contact phone (telephone contact) <span class=\"wpcf7-form-control-wrap\" data-name=\"telefon\"><input size=\"40\" maxlength=\"400\" class=\"wpcf7-form-control wpcf7-text uk-input\" aria-invalid=\"false\" value=\"\" type=\"text\" name=\"telefon\" \/><\/span> <\/label>\n<\/p>\n<p><label> Message <span class=\"wpcf7-form-control-wrap\" data-name=\"your-message\"><textarea cols=\"40\" rows=\"5\" maxlength=\"2000\" class=\"wpcf7-form-control wpcf7-textarea uk-textarea\" aria-invalid=\"false\" name=\"your-message\"><\/textarea><\/span> <\/label>\n<\/p>\n<p><span class=\"wpcf7-form-control-wrap\" data-name=\"aceptacion-RGPD\"><span class=\"wpcf7-form-control wpcf7-acceptance\"><span class=\"wpcf7-list-item\"><label><input type=\"checkbox\" name=\"aceptacion-RGPD\" value=\"1\" aria-invalid=\"false\" \/><span class=\"wpcf7-list-item-label\">I read and accept the <a href=\"https:\/\/www.rosello-mallol.com\/en\/policy-privacy\/\" target=\"_blank\">Privacy Policy<\/a><\/span><\/label><\/span><\/span><\/span><br \/>\n<label><br \/>\n<span class=\"wpcf7-form-control-wrap\" data-name=\"acceptance-360\"><span class=\"wpcf7-form-control wpcf7-acceptance optional\"><span class=\"wpcf7-list-item\"><label><input type=\"checkbox\" name=\"acceptance-360\" value=\"1\" aria-invalid=\"false\" \/><span class=\"wpcf7-list-item-label\">I agree to receive the newsletter.<\/span><\/label><\/span><\/span><\/span><br \/>\n<input class=\"wpcf7-form-control wpcf7-submit has-spinner uk-button uk-button-primary\" type=\"submit\" value=\"Send\" \/><\/label>\n<\/p><p style=\"display: none !important;\" class=\"akismet-fields-container\" data-prefix=\"_wpcf7_ak_\"><label>&#916;<textarea name=\"_wpcf7_ak_hp_textarea\" cols=\"45\" rows=\"8\" maxlength=\"100\"><\/textarea><\/label><input type=\"hidden\" id=\"ak_js_1\" name=\"_wpcf7_ak_js\" value=\"200\"\/><script>\ndocument.getElementById( \"ak_js_1\" ).setAttribute( \"value\", ( new Date() ).getTime() );\n<\/script>\n<\/p><div class=\"wpcf7-response-output\" aria-hidden=\"true\"><\/div>\n<\/form>\n<\/div>\n<\/div>\n\n\n\n<h6 class=\"wp-block-heading\">Information on data protection<\/h6>\n\n\n\n<p><small><strong>Company name<\/strong><br>LEGAL IT GLOBAL 2017, SLP<br><\/small><small><strong>Purpose<br><\/strong><\/small><small>Providing the service.<br><\/small><small>Sending the newsletter.<br><\/small><small><strong>Legal basis<br><\/strong>Compliance with the service provision.<br>Consent.<br><\/small><small><strong>Recipients<\/strong><br>Your data will not be shared with any third party, except service providers with which we have signed a valid service agreement.<\/small><br><small><strong>Rights<\/strong><br>You may access, rectify or delete your data and exercise the rights indicated in our Privacy Policy.<\/small><br><small><strong>Further information<\/strong><br>See the&nbsp;<a href=\"https:\/\/www.rosello-mallol.com\/en\/policy-privacy\/\" target=\"_blank\" rel=\"noreferrer noopener\">Privacy Policy<\/a>.<\/small><\/p>\n","protected":false},"excerpt":{"rendered":"<p>One of the most common doubts in companies to comply with the GDPR is to answer to CVs or not. Sometimes, companies organize selection processes but, many others, candidates send their CVs without there even being a selection process open, through generic emails that can appear in the different communication channels of the company, such [&hellip;]<\/p>\n","protected":false},"author":12,"featured_media":17272,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"content-type":"","_joinchat":[],"footnotes":""},"categories":[246],"tags":[921,917,395,483,920,394],"class_list":["post-17281","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized","tag-comply","tag-fine","tag-gdpr-2","tag-privacy-policy","tag-respond","tag-rgpd-es-en"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v25.3 (Yoast SEO v27.7) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Do I have to answer to CVs to comply with the GDPR? | Rosell\u00f3 Mallol<\/title>\n<meta name=\"description\" content=\"Do I have to answer to CVs to comply with the GDPR? This is one of the most common doubts in companies. I&#039;ll explain it here!\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.rosello-mallol.com\/en\/do-i-have-to-answer-to-cvs-to-comply-with-the-gdpr\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Do I have to answer to CVs to comply with the GDPR?\" \/>\n<meta property=\"og:description\" content=\"One of the most common doubts in companies to comply with the GDPR is to answer to CVs or not. Sometimes, companies organize selection processes but, many\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.rosello-mallol.com\/en\/do-i-have-to-answer-to-cvs-to-comply-with-the-gdpr\/\" \/>\n<meta property=\"og:site_name\" content=\"Rosell\u00f3 Mallol\" \/>\n<meta property=\"article:published_time\" content=\"2021-09-02T08:27:53+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2022-02-28T12:39:32+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.rosello-mallol.com\/wp-content\/uploads\/job-3681036_1280.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1280\" \/>\n\t<meta property=\"og:image:height\" content=\"856\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Marketing\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@vic_rosello\" \/>\n<meta name=\"twitter:site\" content=\"@vic_rosello\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Marketing\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Do I have to answer to CVs to comply with the GDPR? | Rosell\u00f3 Mallol","description":"Do I have to answer to CVs to comply with the GDPR? This is one of the most common doubts in companies. I'll explain it here!","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.rosello-mallol.com\/en\/do-i-have-to-answer-to-cvs-to-comply-with-the-gdpr\/","og_locale":"en_US","og_type":"article","og_title":"Do I have to answer to CVs to comply with the GDPR?","og_description":"One of the most common doubts in companies to comply with the GDPR is to answer to CVs or not. Sometimes, companies organize selection processes but, many","og_url":"https:\/\/www.rosello-mallol.com\/en\/do-i-have-to-answer-to-cvs-to-comply-with-the-gdpr\/","og_site_name":"Rosell\u00f3 Mallol","article_published_time":"2021-09-02T08:27:53+00:00","article_modified_time":"2022-02-28T12:39:32+00:00","og_image":[{"width":1280,"height":856,"url":"https:\/\/www.rosello-mallol.com\/wp-content\/uploads\/job-3681036_1280.jpg","type":"image\/jpeg"}],"author":"Marketing","twitter_card":"summary_large_image","twitter_creator":"@vic_rosello","twitter_site":"@vic_rosello","twitter_misc":{"Written by":"Marketing","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.rosello-mallol.com\/en\/do-i-have-to-answer-to-cvs-to-comply-with-the-gdpr\/#article","isPartOf":{"@id":"https:\/\/www.rosello-mallol.com\/en\/do-i-have-to-answer-to-cvs-to-comply-with-the-gdpr\/"},"author":{"name":"Marketing","@id":"https:\/\/www.rosello-mallol.com\/en\/#\/schema\/person\/54fe3a9119386ad1ec22a0f09bc21147"},"headline":"Do I have to answer to CVs to comply with the GDPR?","datePublished":"2021-09-02T08:27:53+00:00","dateModified":"2022-02-28T12:39:32+00:00","mainEntityOfPage":{"@id":"https:\/\/www.rosello-mallol.com\/en\/do-i-have-to-answer-to-cvs-to-comply-with-the-gdpr\/"},"wordCount":676,"publisher":{"@id":"https:\/\/www.rosello-mallol.com\/en\/#organization"},"image":{"@id":"https:\/\/www.rosello-mallol.com\/en\/do-i-have-to-answer-to-cvs-to-comply-with-the-gdpr\/#primaryimage"},"thumbnailUrl":"https:\/\/www.rosello-mallol.com\/wp-content\/uploads\/job-3681036_1280.jpg","keywords":["Comply","Fine","gdpr","privacy policy","Respond","RGPD"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.rosello-mallol.com\/en\/do-i-have-to-answer-to-cvs-to-comply-with-the-gdpr\/","url":"https:\/\/www.rosello-mallol.com\/en\/do-i-have-to-answer-to-cvs-to-comply-with-the-gdpr\/","name":"Do I have to answer to CVs to comply with the GDPR? | Rosell\u00f3 Mallol","isPartOf":{"@id":"https:\/\/www.rosello-mallol.com\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.rosello-mallol.com\/en\/do-i-have-to-answer-to-cvs-to-comply-with-the-gdpr\/#primaryimage"},"image":{"@id":"https:\/\/www.rosello-mallol.com\/en\/do-i-have-to-answer-to-cvs-to-comply-with-the-gdpr\/#primaryimage"},"thumbnailUrl":"https:\/\/www.rosello-mallol.com\/wp-content\/uploads\/job-3681036_1280.jpg","datePublished":"2021-09-02T08:27:53+00:00","dateModified":"2022-02-28T12:39:32+00:00","description":"Do I have to answer to CVs to comply with the GDPR? This is one of the most common doubts in companies. I'll explain it here!","breadcrumb":{"@id":"https:\/\/www.rosello-mallol.com\/en\/do-i-have-to-answer-to-cvs-to-comply-with-the-gdpr\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.rosello-mallol.com\/en\/do-i-have-to-answer-to-cvs-to-comply-with-the-gdpr\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.rosello-mallol.com\/en\/do-i-have-to-answer-to-cvs-to-comply-with-the-gdpr\/#primaryimage","url":"https:\/\/www.rosello-mallol.com\/wp-content\/uploads\/job-3681036_1280.jpg","contentUrl":"https:\/\/www.rosello-mallol.com\/wp-content\/uploads\/job-3681036_1280.jpg","width":1280,"height":856,"caption":"Answer to CVs"},{"@type":"BreadcrumbList","@id":"https:\/\/www.rosello-mallol.com\/en\/do-i-have-to-answer-to-cvs-to-comply-with-the-gdpr\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Inici","item":"https:\/\/www.rosello-mallol.com\/en\/"},{"@type":"ListItem","position":2,"name":"Do I have to answer to CVs to comply with the GDPR?"}]},{"@type":"WebSite","@id":"https:\/\/www.rosello-mallol.com\/en\/#website","url":"https:\/\/www.rosello-mallol.com\/en\/","name":"Rosell\u00f3 Mallol","description":"Despatx advocats experts en TIC i Protecci\u00f3 de dades","publisher":{"@id":"https:\/\/www.rosello-mallol.com\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.rosello-mallol.com\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.rosello-mallol.com\/en\/#organization","name":"Rosell\u00f3 Mallol - Advocats especialistes en dret digital","url":"https:\/\/www.rosello-mallol.com\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.rosello-mallol.com\/en\/#\/schema\/logo\/image\/","url":"https:\/\/www.rosello-mallol.com\/wp-content\/uploads\/logo-definitiu-web.png","contentUrl":"https:\/\/www.rosello-mallol.com\/wp-content\/uploads\/logo-definitiu-web.png","width":4000,"height":736,"caption":"Rosell\u00f3 Mallol - Advocats especialistes en dret digital"},"image":{"@id":"https:\/\/www.rosello-mallol.com\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/vic_rosello","https:\/\/www.instagram.com\/rosellomallol\/","https:\/\/www.linkedin.com\/in\/victorrosello\/","https:\/\/www.youtube.com\/channel\/UCxcqAdksWzsEaZ5UYoFJd0Q\/featured"]},{"@type":"Person","@id":"https:\/\/www.rosello-mallol.com\/en\/#\/schema\/person\/54fe3a9119386ad1ec22a0f09bc21147","name":"Marketing","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/337d1590ee4f05238bd6449f6d1442bd1df14a6fdeceb5aaa29f47c8a4598d96?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/337d1590ee4f05238bd6449f6d1442bd1df14a6fdeceb5aaa29f47c8a4598d96?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/337d1590ee4f05238bd6449f6d1442bd1df14a6fdeceb5aaa29f47c8a4598d96?s=96&d=mm&r=g","caption":"Marketing"},"url":"https:\/\/www.rosello-mallol.com\/en\/author\/marketing\/"}]}},"jetpack_featured_media_url":"https:\/\/www.rosello-mallol.com\/wp-content\/uploads\/job-3681036_1280.jpg","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/www.rosello-mallol.com\/en\/wp-json\/wp\/v2\/posts\/17281","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.rosello-mallol.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.rosello-mallol.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.rosello-mallol.com\/en\/wp-json\/wp\/v2\/users\/12"}],"replies":[{"embeddable":true,"href":"https:\/\/www.rosello-mallol.com\/en\/wp-json\/wp\/v2\/comments?post=17281"}],"version-history":[{"count":0,"href":"https:\/\/www.rosello-mallol.com\/en\/wp-json\/wp\/v2\/posts\/17281\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.rosello-mallol.com\/en\/wp-json\/wp\/v2\/media\/17272"}],"wp:attachment":[{"href":"https:\/\/www.rosello-mallol.com\/en\/wp-json\/wp\/v2\/media?parent=17281"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.rosello-mallol.com\/en\/wp-json\/wp\/v2\/categories?post=17281"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.rosello-mallol.com\/en\/wp-json\/wp\/v2\/tags?post=17281"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}