Your data, and what
we do with it.

01 Who we are

The controller responsible for your personal data is [WorkSet legal entity name], registered at [registered address] (“WorkSet”, “we”, “us”). We operate the technician application platform at apply.workset.eu.

For any question about this notice or your personal data, contact our data protection contact at [privacy@workset.eu]. Where a Data Protection Officer is appointed, their contact details are: [DPO name and contact].

02 What this notice covers

This notice applies to personal data we process when you:

• complete the technician application and registration forms;
• take a technical assessment or a language assessment, including any audio recording made during them;
• are reviewed by our team and put forward to a client for a position;
• communicate with us by email or other channels.

It does not cover the separate privacy practices of the client companies you may be introduced to, who act as independent controllers of the data you share with them directly.

03 The data we collect

3.1 — Data you give us

When you apply and register, you provide:

• Identity & contact: full name, email address, phone number and whether WhatsApp is available on it.
• Location & coverage: your country and city of residence, and the nearby cities you are willing to cover.
• Right to work: whether you are a resident or hold a work permit for a country, and the permit’s expiry date where relevant.
• Languages: the languages you speak and your level in each.
• Professional profile: your specializations, experience level, certifications, the engagement types and service levels you can take, and availability notes.

Some of this information — for example a work permit or nationality — may indirectly reveal sensitive details. We only ask for what we need to confirm you can legally work where a position is located, and we handle it with corresponding care.

3.2 — Assessment data

• Technical assessment: your written answers and the resulting evaluation (a score and structured feedback per question).
• Language assessment: your responses and evaluation, which may include an audio recording of your spoken answers (see section 06).

3.3 — Data collected automatically

• Technical & usage data: your IP address and basic device/browser information, used to keep the service secure and to prevent abuse.
• Diagnostic data: limited error and performance information that helps us keep the platform working.

04 Why we use your data & the legal bases

Under the GDPR we must have a lawful basis for each purpose. Ours are:

Where we rely on consent (for example, to make an audio recording), you can withdraw it at any time without affecting anything done before you withdrew it. Where we rely on legitimate interests, we have weighed them against your rights and you can object (see section 10).

05 Automated assessments & decision-making

To evaluate a large number of applicants fairly and quickly, your technical and language assessments are scored by an automated system that compares your answers against the requirements of the role and level you applied for.

The logic, in plain terms: each answer is evaluated for technical accuracy, completeness and practical reasoning; those produce a per-question score and an overall result, which indicates whether you progress to the next stage. The result does not use any hidden characteristic about you — only the substance of your answers.

Significance and consequences: the outcome affects whether your application moves forward. Because that is a significant effect, under Article 22 GDPR you have the right not to be subject to a decision based solely on automated processing. In practice this means:

• a member of our team reviews outcomes before any final decision on your candidacy;
• you can request human review of an automated assessment result;
• you can express your point of view and contest the outcome.

To ask for a human review, contact us at [privacy@workset.eu].

06 Recordings & audio

Some assessments or interviews — in particular a spoken language assessment or an interview with our team — may be recorded (audio, and where applicable video). When that is the case:

• we tell you clearly before the recording starts;
• we ask for your explicit consent (Art. 6(1)(a)), which is the legal basis for the recording;
• we use the recording only to evaluate the assessment and to review the outcome if asked;
• we do not use it for any purpose you were not told about, and we do not sell it;
• you can withdraw consent and ask us to delete the recording, subject to any legal reason we must keep it.

A recording may incidentally capture sensitive characteristics (for example, from your voice). We do not analyse recordings for such characteristics; they are used only to assess the skills the assessment is designed to measure.

07 Who we share your data with

We share your personal data only where necessary, with:

• Client companies: when you are put forward for a position, we share the professional information a client needs to consider you. Clients act as independent controllers for what they then do with it.
• Service providers (processors) who act only on our instructions:
  • an AI assessment provider that scores assessment answers;
  • an email delivery provider for service messages;
  • hosting and infrastructure providers;
  • an error-monitoring provider that helps us keep the service reliable;
  • a geolocation data source used to suggest nearby cities.
• Authorities where we are legally required to, or to establish, exercise or defend legal claims.

We do not sell your personal data or use it for third-party advertising. A current list of our processors is available on request.

08 International transfers

Some of our service providers may process your data outside the European Economic Area (for example, an AI assessment provider based in [country]). Where that happens, we rely on a transfer mechanism recognised under the GDPR — an adequacy decision, or Standard Contractual Clauses with additional safeguards where needed ([confirm mechanism per processor]). You can ask us for a copy of the relevant safeguards.

09 How long we keep your data

We keep your personal data for as long as it is needed for the purposes above, and then delete or anonymise it. In outline:

When you ask us to delete your data, we anonymise the personal information we hold while preserving the minimum records we are legally required to keep. A later application is treated as a new registration.

10 Your rights

Under the GDPR you have the right to:

To use any right, email [privacy@workset.eu]. We respond within one month and do not charge for it. You also have the right to complain to a supervisory authority (see section 15).

11 How we keep it secure

We use appropriate technical and organisational measures to protect your data, including restricted access on a need-to-know basis, protection of data in transit and at rest, and data minimisation — we ask only for what a purpose genuinely needs. No system is perfectly secure, but we work to keep the risk low and to respond quickly if something goes wrong.

12 Cookies & sessions

The platform uses strictly necessary storage to keep you signed in during a session and to keep the service secure. We do not use advertising or cross-site tracking cookies. [Confirm final cookie inventory before launch.]

13 Children

Our service is intended for adults applying for professional field-service work. It is not directed at, and we do not knowingly collect data from, anyone under 18. If you believe a minor has provided us data, contact us and we will delete it.

14 Changes to this notice

We may update this notice as our service or the law changes. When we do, we revise the version and date at the top of this page, and for significant changes we take reasonable steps to let you know.

15 Contact & complaints

For any privacy question or to exercise a right, contact [privacy@workset.eu] or write to [registered address].

If you are not satisfied with our response, you have the right to lodge a complaint with a data protection supervisory authority — in particular the one in your country of residence or where the issue arose (for example, [relevant supervisory authority, e.g. the Spanish AEPD]).