Portal de empleo de CaixaBank

The processing tasks that we will carry out with your data are various, and they answer to different purposes and legal basis:

6.1. Necessary processing for the execution of a contract or adoption of pre-contractual measures.

6.2. Processing based on consent.

6.3. Processing based on the legitimate interest of CaixaBank.

In addition to the processing that we specify below, we may carry out specific processing not mentioned in this policy. We will provide you with the detailed information on such processing when we handle the specific request.

6.1. Necessary processing for the execution of a contract or adoption of pre-contractual measures

The legal basis for this data processing is the fact that it is necessary to manage the contract that you have entered into with CaixaBank or to adopt, if necessary, pre-contractual measures, in accordance with the provisions of Article 6.1.b) of the General Data Protection Regulation (GDPR).

You can consult, in relation to each of the processing activities indicated here, the following information: (i) the description of the purpose; (ii) the types of data processed; (iii) if applicable, information on the use of profiles or algorithms or AI systems; (iv) other relevant information on the processing; and (v) the identity of the person responsible for the processing.

6.1.a. Creation, management and maintenance of your account

Purpose: the purpose of this processing is the creation, management and maintenance of your account on the «CaixaBank Careers» web portal.

Types of data processed: the types of data we will process in the context of this processing are::

• Identification and contact details.
• Data on your education and employment experience.
• Data about your key skills and abilities.
• Data on geographical availability and areas of interest.

Other relevant information: below, you will find other relevant information on this processing:

• Storage period: we will process your data while your accounts remains active in the «CaixaBank Careers» web portal. If you do not log into your account during a one-year period, we will cancel it due to its inactivity, blocking your data accordingly for an additional period of three (3) years in line with the limitation period for offences considered in Article 72 of the LOPDGDD. At the end of this term, the data will be erased.

Data controller: the controller responsible for this data processing is CaixaBank.

6.1.b. Management of the selection process

Purpose: the purpose of this processing is the management of the selection process that you are participating is having registered on the «CaixaBank Careers», web portal.

Types of data processed: the types of data we will process in the context of this processing are:

• Identification and contact details.
• Data on your education and employment experience.
• Data about your key skills and abilities.
• Data on geographical availability and areas of interest.
• Data on disabilities or special sensitivity.
• Data on selection processes.
• Data on communications maintained.
• Social media or Internet data.

Use of algorithms or AI systems that involve profiling: when CaixaBank publishes a vacancy, we will create a profile that we will use to classify your potential suitability to fill this vacancy.

• Purpose of the profile: the profile prepared helps CaixaBank to maximise the accuracy and effectiveness of the selection processes that are published, identifying the most suitable candidates to cover the corresponding vacancies.
• Consequences: the use of the profile prepared complements the information available to CaixaBank in relation to the candidate in the selection processes that take place. The outcome is one more piece of data that is taken into account in the decision-making process during the selection process, which, in any case, is led by the People Area at the Company. Not having the result only means that the available information for the purpose of this processing is smaller.
• Logic: the candidate's profile is prepared based on data present in (i) your CV, when you have sent it to us; and (ii) your work activity, if you are an employee of the Company. This data is subject to mathematical identification and matching formulas, which are not considered artificial intelligence, to consider the suitability of the candidate for the position in question. If the candidate does not submit their CV, this profiling will not be performed.

Other relevant information: below, you will find other relevant information on this processing:

• Social media data: if you provide us with details of your LinkedIn account, we may consult it and supplement your candidacy with the information shared via that social network. Providing LinkedIn account data is wholly voluntary and, if you provide them to us, we will understand that you are authorising us to use your data to this end. 
• Diversity and inclusion: CaixaBank, in line with the current legislation and in line with its staunch social commitment, actively promotes the creation of diversified, transversal and inclusive teams. In this context, it may be necessary for us to process, as strictly necessary, your disability or special sensitivity data. This processing is made pursuant to the provisions of Article 42 of Legislative Royal Decree 1/2013, of 29 November, approving the Consolidated Text of the General Law on the rights of people with disabilities and their social inclusion. In this case, the data will be processed pursuant to the provisions of Article 9.2.b of the GDPR, in order to comply with the requirements set out in employment law and social security and protection regulations.
• Storage period: we will process your personal data while the selection process for which you have registered remains open and, once ended, for a period of (1) month more in order to correctly perform the other processing activities. Once this period has elapsed, we will conserve your data blocked accordingly for an additional period of three (3) years in line with the limitation period for offences considered in Article 72 of the LOPDGDD. At the end of this term, the data will be erased.

Data controller: the controller responsible for this data processing is CaixaBank.

6.1.c. Management of the onboarding process

Purpose: the purpose of this processing is the performance, if you are the successful candidate, of the activities required to conclude the onboarding process. If you are already a CaixaBank employee, remember that you can access information on data processing to this end in the private area of the corporate Intranet.

Types of data processed: the types of data we will process in the context of this processing are:

• Identification and contact details.
• Data on your education and employment experience.
• Data about your key skills and abilities.
• Data on geographical availability and areas of interest.
• Data on disabilities or special sensitivity.
• Data related to administrative rulings or criminal offences related to your professional activity.
• Details of communications with the data subject.
• Data of your condition as a customer.
• Data obtained from other processing operations provided for in this Policy.

Other relevant information: below, you will find other relevant information on this processing:

• Highest Ethical Standards: data related to administrative rulings and/or criminal offences related to your professional activity and the data about your condition as a customer will only be processed if you are the candidate chosen by CaixaBank. This processing is performed, where applicable, before signing the Highest Ethical Standards questionnaire, as part of our obligations to apply proper procedures to guarantee (i) highest ethical standards in the recruitment of our staff and, (ii) where applicable, the integrity of the people participating in the distribution of insurance. These obligations aqre set out in the legislation in force, such as Law 10/2010, of 28 April, on anti-money laundering and counter terrorist financing and Directive (EU) 2016/97, of the European Parliament and of the Council, of 20 January 2016, on the distribution of insurance, transposed into the Spanish legal system by Royal Decree-Law 3/2020, of 4 February.
• Diversity and inclusion: CaixaBank, in line with the current legislation and in line with its staunch social commitment, actively promotes the creation of diversified, transversal and inclusive teams. In this context, it may be necessary for us to process, as strictly necessary, your disability or special sensitivity data. This processing is made pursuant to the provisions of Article 42 of Legislative Royal Decree 1/2013, of 29 November, approving the Consolidated Text of the General Law on the rights of people with disabilities and their social inclusion. In this case, the data will be processed pursuant to the provisions of Article 9.2.b of the GDPR, in order to comply with the requirements set out in employment law and social security and protection regulations.
• Storage period: we will process your personal data while the process for your onboarding and formalisation of the working relationship remains ongoing. Once this period has come to an end, your data will be stored insofar as they are needed to formalise the working relationship and, where applicable, to guarantee the correct subsequent delivery of the working relationship. You can find further information in the Company´s Staff Privacy Policy, which is available in the private area of the corporate Intranet. At the end of this term, the data will be erased.

Data controller: the controller responsible for this data processing is CaixaBank.

6.2. Processing based on consent

The legal basis for this processing is your consent, according to the provisions of Article 6.1.a) of the GDPR.

We may have requested your consent through various channels, for example, when you register on the «CaixaBank Careers» web portal. If, for any reason, we have never requested your consent, such processing will not apply to you.

You can consult, in relation to each of the processing activities indicated here, the following information: (i) the description of the purpose; (ii) details of the data processed; (iii) if applicable, information on the use of profiles or algorithms or AI systems; (iv) other relevant information on the processing; and (v) the identity of the person responsible for the processing.

6.2.a. Sending you by e-mail any new vacancies that are in line with your preferences

Purpose: the purpose of this processing is to manage CaixaBank´s sending, by e-mail, of any new vacancies that, published on the «CaixaBank Careers» web portal, adapt to your preferences. These preferences will be those that you indicated when setting up your account, more specifically, in the «Employment alerts» section of the «Options» heading.

Data processed: the data we will process in the context of this processing are:

• Personal and contact details: full name; contact email information; communication language.

Other relevant information: below, you will find other relevant information on this processing:

• Storage period: we will only process your personal data in the event that you have expressly and proactively requested the sending of this type of information to you via email and you have given us your consent. Your consent will remain valid unless you withdraw it or you deactivate the alert and, in any case, for a period of one (1) year from the last time you logged into your account on the «CaixaBank Careers» web portal. If you close your account on said portal, but forget to revoke your consent, we will do so automatically. At the end of this term, the data will be erased.

Data controller: the controller responsible for this data processing is CaixaBank.

6.2.b. Sending you by e-mail any new vacancies that are in line with your skills, experience and professional career

Purpose: the purpose of this processing is to manage CaixaBank´s sending, by e-mail, of any new vacancies that, published on the «CaixaBank Careers» web portal that we believe adapt to your skills, experience and professional career.

Data processed: the data we will process in the context of this processing are:

• Personal and contact details: full name; contact email information; communication language.
• Data on your education and employment experience: internal and external work experience; internal and external training (including languages); internal and external qualifications.
• Data on geographical availability and areas of interest: data on geographical availability; interest in areas at CaixaBank.

Other relevant information: below, you will find other relevant information on this processing:

• Storage period: we will only process your personal data in the event that you have expressly and proactively requested the sending of this type of information to you via email and you have given us your consent. Your consent will remain valid unless you withdraw it or you deactivate the alert and, in any case, for a period of one (1) year from the last time you logged into your account on the «CaixaBank Careers» web portal. If you close your account on said portal, but forget to revoke your consent, we will do so automatically. At the end of this term, the data will be erased.

Data controller: the controller responsible for this data processing is CaixaBank.

6.3. Processing based on the legitimate interest of CaixaBank

The legal basis for such processing is the fulfilment of the legitimate interests of CaixaBank or of a third party, provided that on those interests do not prevail over your own interests, or your fundamental rights and freedoms, in accordance with the provisions of Article 6.1.f) of the GDPR.

The performance of such processing will involve that we will have carried out a weighting between your rights and our legitimate interest in which will have concluded that the latter prevails. Otherwise, we would not carry out the processing. You can consult the analysis of the legitimate interest of data processing by sending your query to the email address delegado.proteccion.datos@caixabank.com.

Furthermore, remember you have the right to oppose the processing based on the existence of a legitimate interest. You can do so easily and for free via the channels indicated in section 4.

You can consult, in relation to each of the processing activities indicated here, the following information: (i) the description of the purpose; (ii) the types of data processed; (iii) if applicable, information on the use of profiles or algorithms or AI systems; (iv) other relevant information on the processing; and (v) the identity of the person responsible for the processing.

6.3.a. Sending of surveys

Purpose: the purpose of this processing is to send surveys to people that have created a profile on the «CaixaBank Careers» web portal and/or that, regardless of the result, participate in selection processes to ascertain their satisfaction with the selection process and in order to improve, where applicable, internal processes.

Legitimate Interest: CaixaBank's legal basis for performing this processing is to ascertain the degree of satisfaction with the selection process of people that have created a profile in the «CaixaBank Careers»web portal and/or that, regardless of the result, participate in the selection processes organised by the Company.

Types of data processed: the types of data that we process for this purpose, whose content is detailed in section 5, are:

• Identification and contact details.
• Data on selection processes.
• Data obtained in the selection processes in which you have participated, including interviews held.

Other relevant information: below, you will find other relevant information on this processing:

• Right to object to processing: you have right to oppose the processing based on the existence of a legitimate interest. You can do so easily and for free via the channels indicated in section 4.

Data controller: the controller responsible for this data processing is CaixaBank.

6.3.b. Drafting reports and scorecards

Purpose: the purpose of this processing is to prepare scorecards and internal reports that allow individuals in the People Area to make informed, data-based decisions related to the management of candidates and People at the Company.

Legitimate Interest: CaixaBank’s legal basis for carrying out this processing is to make informed decisions based on the analysis of data, allowing for the optimisation and to ensure the efficiency of the management of the internal and external selection process, offering greater knowledge of the management and activities of the company in this field.

Types of data processed: the data that we will process for this purpose are those that have been pre-identified in each of the processing operations, applying, where possible, anonymisation or pseudonymisation techniques in order to guarantee that these processing operations have no impact on the rights of the data subjects, and that the result of the processing operations are reports with statistical or aggregate information, or mathematical or algorithmic formulas.

Other relevant information: below, you will find other relevant information on this processing:

• Right to object to processing: you have the right to oppose the processing based on the existence of a legitimate interest. You can do so easily and for free via the channels indicated in section 4.
• Ancillary data processing: data processing to create statistical reports and scorecards is not intended for the processing of data in relation to individuals. This data processing is necessary, but ancillary, to the main purpose, which is to draw up statistical reports and scorecards. To this end, processing is performed using, insofar as possible, anonymisation techniques and, failing that, pseudonymisation and the minimisation of information. This processing does not have any individual effect or consequence on the data subjects.

Data controller: the controller responsible for this data processing is CaixaBank.

6.3.c. Preparing and developing models

Purpose: the purpose of this processing to create and develop mathematical models that allow efficient and high-quality calculations and measurements to be taken, as well as the advanced analysis of information related to different processes at CaixaBank's People Area in relation to internal and external selection.

Legitimate Interest: CaixaBank's legitimate interest in performing this processing is to optimise People management activity, thus increasing the efficiency of internal processes to speed up and simplify resource management.

Types of data processed: the data that we will process for this purpose are those that have been pre-identified in each of the processing operations, applying, where possible, anonymisation or pseudonymisation techniques in order to guarantee that these processing operations have no impact on the rights of the data subjects, and that the result of the processing operations are mathematical or algorithmic formulas.

Other relevant information: below, you will find other relevant information on this processing:

• Right to object to processing: you have right to oppose the processing based on the existence of a legitimate interest. You can do so easily and for free via the channels indicated in section 4.
• Ancillary data processing: data processing to create models is not intended for the processing of data in relation to individuals. This data processing is necessary, but ancillary, to the main purpose, which is to draw up algorithmic or mathematical formulas. To this end, processing is performed using, insofar as possible, anonymisation techniques and, failing that, pseudonymisation and the minimisation of information. This processing does not have any individual effect or consequence on the data subjects.

Data controller: the controller responsible for this data processing is CaixaBank.