Privacy Policy

Last updated: 2026-09-29

This policy explains how trabajo.org processes personal data when you use the portal, create an account, save jobs, apply to jobs, create alerts, or access existing Premium services.

Controller

Data controller: BEBEE PLATFORM SL (Tax ID ESB84471838) / trabajo.org, Calle de la Virgen de los Peligros 11, 28013 Madrid (Spain). Contact: info@trabajo.org.

For earlier Premium contracts, BEBEE PLATFORM SL manages access, cancellation, support, and requests about earlier charges or receipts. Contact: info@trabajo.org.

Data We Process

We may process account data such as email, name, country, language, Google identifier when you use Google Sign-In, saved jobs, alerts, applications, preferences, account activity, cookies, IP address, user agent, and technical security data. For earlier Premium contracts, Stripe processed payment data and may report subscription status.

Purposes

We use data to provide the service, authenticate users, maintain sessions, save jobs, create alerts, record applications or external clicks, manage Premium, prevent fraud, improve the experience, and comply with legal obligations.

Legal Basis

We process data to perform the requested service, based on consent where required, based on legitimate interests in security, improvement and abuse prevention, and to comply with legal obligations.

Recipients And Processors

We do not sell personal data. To provide the service we use providers that process data on our behalf, as processors, under Article 28 GDPR:

• Amazon Web Services: hosting, databases, storage, content delivery and email sending. The service's main infrastructure is in the AWS Europe (Ireland) region, in the European Union.
• OpenAI Ireland Ltd.: artificial intelligence assistance in handling support messages (see the following sections).

Stripe may process data relating to earlier Premium contracts. Google processes data when you use Google Sign-In and, only with your consent, as an advertising provider. When these providers act as independent controllers, they also apply their own privacy policies. We also use email, analytics, authentication, and external job providers.

International Transfers

For support assistance, the processor is OpenAI Ireland Ltd., under the data processing addendum (DPA) entered into with OpenAI. To provide that service, OpenAI may process the data through other entities of its group and sub-processors located outside the European Economic Area (EEA), in particular in the United States. Those transfers rely on the standard contractual clauses adopted by the European Commission (Implementing Decision (EU) 2021/914) or, where one exists, on an adequacy decision of the European Commission under Article 45 GDPR. You can ask for information about these safeguards or for a copy of them by writing to info@trabajo.org.

The website is served through the Amazon Web Services content delivery network, which handles each visit from the location closest to you, including outside the EEA; in that case it processes technical connection data (such as the IP address) under the safeguards of its data processing addendum. When Google or Stripe act as independent controllers, any transfers they make are governed by their own policies and safeguards.

AI-assisted support

To handle messages sent to info@trabajo.org, we may use OpenAI artificial intelligence models to classify and summarize the necessary text of the request and prepare replies. We limit the data sent to what is needed for that task. Account deletion and job removal requests may be handled through automated procedures that verify control of the account or authority to represent the company, the requested scope and the outcome before confirming completion. The model's classification does not by itself authorize deletion. Uncertain identity or scope, incidents and cases requiring an additional decision are referred to a responsible person. You can request human assistance at info@trabajo.org.

Automated processing in support. We do not take decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you. The model classifies each message (for example, unsubscribe request, deletion, access to your data, job removal, complaint or general question) and drafts a reply which, for general questions and complaints, is sent automatically after automated checks; legal, billing and security matters are always reviewed by a person before we reply. The classification has no effect on your data by itself: no action on your data requested from support (account deletion, unsubscribing from alerts, data export or job removal) is carried out unless you confirm it with the link we send you by email. The only exception is an account deletion you requested in writing from your own mailbox, when email authentication confirms it: in that case a responsible person reviews the request and may confirm it on your behalf. At any time you can ask for human intervention, express your point of view or contest a reply or action by writing to info@trabajo.org.

Retention

We keep data while your account or alert remains active and for the periods needed for security, audit, legal obligations, claims, or abuse prevention. Support messages are anonymised 12 months after the last activity; those concerning data access or erasure requests, unsubscribe requests, job removals, billing, complaints and security, after 3 years. Original emails are deleted after 12 months and data export files after 8 days.

If an email address returns a permanent bounce (it does not exist or permanently rejects email), we keep it on a suppression list for 2 years from when we record it, so that we do not write to it again. Temporary bounces are deleted after 2 days and the technical record of each bounce after 90 days.

When you unsubscribe or ask us to delete your account, we keep indefinitely a cryptographic fingerprint (SHA-256) of your address, not the address itself, solely so that we do not write to you again and so that it cannot be signed up again automatically.

Your Rights And How To Complain

You have the rights of access, rectification, erasure, objection, restriction of processing and portability, and the right not to be subject to decisions based solely on automated processing; you can exercise them by writing to info@trabajo.org. Where processing is based on your consent, you can withdraw it at any time, without affecting the lawfulness of processing before the withdrawal. You can also manage alerts, preferences, and sessions from your account when available.

We will reply within one month of receiving your request. If the request is complex or there are many requests, this period may be extended by two further months; in that case we will tell you within the first month, with the reasons. If we do not act on your request, we will explain why within that same period and inform you of your right to lodge a complaint with a supervisory authority and to seek a judicial remedy.

If you consider that the processing of your data does not comply with the law, you have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD), C/ Jorge Juan 6, 28001 Madrid (Spain), www.aepd.es, the competent supervisory authority because the controller, BEBEE PLATFORM SL, is established in Spain. If you live or work in another Member State of the European Economic Area, or the alleged infringement took place there, you can also complain to the supervisory authority of that State. Before complaining, you can write to us at info@trabajo.org to try to resolve it.

Cookies

Necessary cookies are used for sessions, security, preferences, and requested features. Analytics and advertising remain disabled until you consent through the privacy manager. You may reject or withdraw consent without losing basic access to the portal. See the Cookie Policy.

Advertising

BEBEE PLATFORM SL operates trabajo.org. When consent and internal eligibility controls allow it, Google may act as the advertising provider and process technical data under its own policies. We do not make ad requests without advertising consent.