Privacy Policy · Política de Privacidad

2.1. Introduction

This Privacy Policy describes how másLabor Iberia (“másLabor Iberia” or the “Company”) processes personal data of users of the Website, candidates, workers, representatives of client companies, suppliers, collaborators, and other professional contacts.

másLabor Iberia is committed to processing personal data in a lawful, fair, and transparent manner, limited to what is necessary for the purposes for which it is processed, ensuring its accuracy, and applying appropriate security measures, in accordance with:

Regulation (EU) 2016/679, General Data Protection Regulation (“GDPR”)
Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights (“LOPDGDD”)
Applicable national and European data protection regulations

2.2. Data Controller

Controller: másLabor Iberia, the European operating brand of Mid-Atlantic Solutions, LLC.
Parent organization: Mid-Atlantic Solutions, LLC, 915 E High Street, Suite 301, Charlottesville, VA 22902, USA.
Contact email (privacy): info@masiberia.criticaldev.site
Spanish entity NIF/CIF and registered address: Pending registration of the Spanish subsidiary; will be added once formalized.
Data Protection Officer: Not currently designated.

Depending on the specific processing activity, másLabor Iberia may act as data controller, joint controller, or data processor, as determined by the nature of the relationship and contractual arrangements.

2.3. Categories of Data Subjects

másLabor Iberia may process personal data relating to:

Users of the Website
Individuals contacting the Company via forms, email, or other means
Candidates participating in recruitment, evaluation, or placement processes
Workers or potential workers involved in Employment Agency or ETT processes (once those services are operational)
Representatives or employees of client companies
Suppliers, advisors, and collaborators

2.4. Categories of Personal Data

Depending on the relationship and services involved, másLabor Iberia may process:

Identification data: name, surname, ID/passport, nationality, date of birth
Contact data: address, email, telephone
Professional data: CV, experience, education, skills, languages
Evaluation data: interviews, assessments, internal notes
Employment data: role, assignments, employment history
Administrative / immigration data: permits, documentation, records
Financial data (where applicable): banking details for contractual purposes
Technical data: IP address, browsing data, cookies

Special categories of personal data will only be processed where strictly necessary and legally permitted.

2.5. Purpose of Processing

Personal data may be processed for the following purposes:

Managing inquiries and communications
Managing recruitment, evaluation, and placement processes
Assessing suitability for roles
Coordinating employment, administrative, and immigration processes
Managing relationships with clients and suppliers
Preparing proposals and contracts
Complying with legal and regulatory obligations
Maintaining Website security and functionality
Internal reporting, analysis, and service improvement

2.6. Legal Basis for Processing

Processing is based on:

Consent of the data subject (GDPR Art. 6(1)(a))
Pre-contractual or contractual necessity (GDPR Art. 6(1)(b))
Compliance with legal obligations (GDPR Art. 6(1)(c))
Legitimate interests, provided they do not override the rights of the data subject (GDPR Art. 6(1)(f))

2.7. Disclosure of Data

Personal data may be disclosed, where necessary, to:

Client companies
Companies within the másLabor group (including U.S. and Mexico entities)
Service providers (IT, hosting, CRM, etc.) under written data processing agreements
Legal, tax, and labor advisors
Public authorities and regulatory bodies, where required by law

másLabor Iberia does not sell personal data to third parties.

2.8. International Data Transfers

Due to the cross-border nature of operations, personal data may be transferred outside the European Economic Area (EEA), including to the United States and Mexico. Where such transfers occur, appropriate safeguards will be implemented, including:

Standard Contractual Clauses (SCCs)
EU-U.S. Data Privacy Framework (where applicable)
Additional contractual and organizational measures

2.9. Data Retention

Personal data will be retained for as long as necessary to fulfill the purposes described, and thereafter for legally required periods. Retention periods will vary depending on contractual relationships, legal obligations, and business needs. Inquiry data is typically retained for up to two years from the last contact unless a longer retention period is required by law or business need.

2.10. Data Subject Rights

Under GDPR and LOPDGDD, data subjects may exercise the following rights:

Access
Rectification
Erasure (the “right to be forgotten”)
Objection
Restriction of processing
Data portability
Withdrawal of consent at any time, where processing is based on consent

Requests may be submitted to info@masiberia.criticaldev.site. Data subjects may also lodge complaints with the Spanish Data Protection Authority (Agencia Española de Protección de Datos, AEPD: www.aepd.es).

2.11. Automated Decision-Making

másLabor Iberia does not make decisions solely based on automated processing that produce legal effects, except where permitted by law.

2.12. Accuracy of Data

Data subjects are responsible for ensuring that the data provided is accurate and up to date.

2.13. Security Measures

másLabor Iberia applies appropriate technical and organizational measures to ensure the security and integrity of personal data, including against unauthorized access, loss, alteration, or disclosure.

2.14. Minors

The Website is not intended for minors, unless expressly permitted under applicable law.

2.15. Updates

This Privacy Policy may be updated from time to time. The current version will always be available on the Website.

Contact

For any questions regarding this Privacy Policy: info@masiberia.criticaldev.site.

Last updated: April 29, 2026.