Privacy Policy - Shakers

Last update: May 2025

Basic information on Data Protection
Data Controller	SHAKERS GLOBAL SOLUTIONS S.L.
Data Protection Contact	Calle Velázquez 135, 1 Dcha 28006 - Madrid (MADRID) dpd@shakersworks.com
Websites and Applications	https://www.shakersworks.com/ Shakers iOS and Android App Including all your subdomains or sections.
Purposes and legal basis	We will use your personal data, among other purposes, to manage your registration as a user, manage the provision of contracted services, answer your queries and, if you wish, to send you our personalized communications. On the other hand, we are entitled to process your data for different reasons. Mainly, the basis of legitimacy lies in the execution of the contract of services that you conclude with us. On other occasions, data processing may be based on our legitimate interest as a company or on the consent you have given us. If you would like to know more about all the purposes for which we process your data or the bases of legitimacy for them, we explain them below.



Recipients	We will share your personal data with service providers who assist or support us, or those with whom we have a legal obligation.
User rights	You have the right to access, rectify, delete, oppose, request limitation or portability or not to be subject to automated individual decisions of your personal data, as explained in detail below.
Additional Information	You can consult additional information about the Web Site at: Terms of Service Legal Notice Cookies Policy

Introduction

In accordance with Regulation (EU) 2016/679 of the Parliament and of the Council of April 2016 on the protection of natural persons with regard to the processing of your personal data and the Organic Law 3/2018 of 5 December on the Protection of Personal Data and Guarantee of Digital Rights, Shakers informs you of the following:

This document contains information about how we collect, process and protect your data, and how we guarantee your rights in relation to its use and access.

In Shakers we consider of vital importance to protect your right to privacy and the protection of your personal data, and therefore we want to ensure that you feel safe at all times.

In our business, we process and collect your data in a lawful, fair and transparent manner, for specified, explicit and legitimate purposes. Shakers will not process your data for purposes incompatible with those purposes.

In addition, they will be adequate, relevant and limited in relation to the purposes for which they are used, accurate, will be kept as long as necessary, and Shakers will take appropriate technical or organizational measures to ensure their security.

Please read this document carefully to learn more about our Privacy Policy.

Identity and contact details of the Data Protection Officer

Name and identity: Seifti Software, S.L.

TAX ID: B16923038

Address and Postal Code: Paseo castellana, 200 - piso 7, 28046 Madrid

Contact information: dpd@shakersworks.com

Personal data that we process and where they come from

On the occasion of your relationship with us and the activities carried out, the following categories of personal data may be processed:

Category of data	Additional information
Identifying data, such as name, surname, nationality or photograph of the user.	Identifying data will be provided by the interested party through the use of the website. This data is used to create your user profile and give you access to use the platform.
Contact data, such as email, telephone or address.	Contact data is used to establish a communicative relationship with the user, authenticate your profile, send you usage statistics or surveys.
Geolocation data, such as region or web addresses.	The geolocation data allow us to offer you appropriate services according to your geographical location, prevent possible fraud and also serve for the development of internal use statistics, always with an appropriate basis of legitimacy.
Navigation data, such as unique ID, IP address, language or cookies.	Navigation data is collected automatically through navigation. If you want to know more about what we collect and for what purposes, please see our cookie policy.
Financial data, such as data for invoicing purposes	Financial data is used to manage billing, payments and collections of contracted and rendered services, as well as to comply with legal obligations related to fraud prevention.
Preference and opinion data, such as data obtained from surveys, personality and motivation tests, preferences or comments.	The preferences and opinions data allow us to improve the quality of the products and services we offer to our users, in addition to the complete configuration of the user's profile, thanks to the information provided by them through the different channels. The data received by Shakers for subscription and interaction on the blog are used to manage the subscription to the blog, as well as to receive, publish and, where appropriate, moderate the comments posted.
Employment data, such as CV, work history, position or projects carried out.	Employment data are necessary for the personnel selection processes of both Shakers and the entities participating in the application when selecting the most compatible profiles for each offer.

As part of the service, Shakers allows both freelancers and companies to connect with each other through the chat channel enabled as well as to access limited information from other freelancers,

The aforementioned personal data will be provided by the data subject. We also obtain data from third parties who provide us with their services.

As a user, you guarantee that the personal data provided to Shakers are true and accurate, and you agree to communicate any changes to them if necessary.

Purposes of the processing of your personal data

Shakers will process your data for specific, explicit and legitimate purposes in accordance with any information provided. Depending on the different products or services you use at any given time, we will need to treat some data or others, for example, when registering on our website or hiring any of our services.

Shakers will take into account the principle of data minimization, and will collect and process the data that are necessary and relevant for the purposes set out below.

In line with the above, our basis of legitimacy will depend on the type of information and may be, among others, the provision of the contracted service, your consent or legitimate interest (the specificbasis of legitimacy for each purpose is detailed below).

Purpose	Description
Statistical purposes andusability and quality analysis to improve our services.	The database is analyzed to generate statistics of interest to the industry, but no specific data of any data subject is used for this purpose. Personal data will be used to carry out statistics, always applying the necessary measures to prevent them from being specific or identifying users, such as anonymization. We will treat your browsing data for analytical and statistical purposes, i.e. to understand how users interact with our Platform and with the actions we can carry out on other websites and apps and thus be able to introduce improvements.
Sending commercial communications	As long as you have given us your consent, we will treat your data for promotional and advertising purposes about our services.
Sending of commercial communications related to products or services already purchased	It is possible that commercial or advertising communications may be sent to the customer related to products already contracted, provided that you have a contractual relationship with us and they are related products.
Fulfillment of legal obligations	It may be necessary for us to process your data in order to manage and comply with the corresponding legal requirements.
Formalization and execution of the contract	Personal data will be processed in order to manage and execute the contractual relationship to which you are a party.
Management of registration and access to the platform	We need your personal data to provide you with the service of using the platform once you want to formalize your relationship with us. In addition, we will process your credentials to identify you, authenticate your identity and give you access, as well as to ensure that there is no unauthorized access.
Attention to requests or requests made through Customer Service or support channels.	We only process personal data that is strictly necessary to manage or resolve your request or inquiry. These will be used to contact you, check your query and respond to it.
Blog Subscriptions	The data received by Shakers for subscription and interaction on the blog is used to manage the subscription to the blog.
Security and fraud prevention	Personal data may be processed to ensure the security of the website and prevent fraud, such as detecting and preventing illegal activities and monitoring suspicious activities.
Human Resources Management	We may process employment data for the management of applications and recruitment for both the recruitment processes of Shakers and the entities participating in the application.
Communication with users	We may use the contact data to send non-commercial communications regarding the platform, user profile, press releases, particular actions or performance, among others. The Shakers team may contact you to answer questions about our services, assist you in your job search or for the complete configuration of your user profile.
Registration and/or management of attendance to events and trainings.	Register and/or manage the attendance of the Interested Party to events and trainings managed by Shakers.
Management of contractual relationships between freelancers and companies	Shakers will manage the data necessary to establish the appropriate contractual relationship between freelancers and companies participating in the application with which business transactions are carried out.
Headhunting	We collect data available from public sources in order to identify potential candidates that could be suitable for specific projects of our clients.

Basis of legitimacy of the processing of your personal data

The bases of legitimacy that allow us to process your personal data in accordance with the legislation in force are those listed below:

Purpose	Legitimation
Statistical purposes andusability and quality analysis for the improvement of our services.	The processing is based on the legitimate interest of the data controller.
Sending of commercial communications	The treatment is based on the express consent of the person concerned.
Commercial communications related to products or services already contracted.	The processing is based on the legitimate interest of the data controller, in accordance with article 21 of the LSSI, which authorizes it when there is a prior contractual relationship, and the provider has lawfully obtained the contact details of the recipient and will use them to send commercial communications relating to products or services of its own company that are similar to those that were initially contracted with the customer.
Fulfillment of legal obligations	Processing necessary to comply with the legal obligations arising from the current legislation applicable to the responsible.
Formalization and execution of the contract	Processing necessary for the execution of a contract to which the data subject is a party.
Management of registration and access to the platform	The data processing is necessary for the correct execution of the contract.
Attention to requests or requests made through the Customer Service or support channels.	The data processing is necessary for the correct execution of the contract.
Subscriptions to the Blog	The processing is based on the express consent of the data subject.
Security and fraud prevention	The processing is based on the legitimate interest of the data controller and compliance with the legal obligations arising from the legislation in force applicable to the data controller.
Human Resources Management	The processing is based on the consent of the data subject, in the execution of a contract and in compliance with the legal obligations arising from the legislation in force applicable to the controller.
Communication with users	Processing necessary for the performance of a contract to which the data subject is a party.
Registration and/or management of attendance to events and trainings.	The processing is based on the consent of the data subject, and on the execution of a contract.
Management of contractual relations between freelancers and companies.	Processing necessary for the performance of a contract to which the data subject is a party.
Headhunting	The processing is based on the legitimate interest of the data controller.

In relation to the sending of commercial communications and in accordance with Law 34/2002 of Services of the Information Society and Electronic Commerce (LSSI), Shakers will not send advertising or promotional communications by email or other means of electronic communication equivalent that had not been previously requested or expressly authorized by the recipients thereof.

However, the provisions of the preceding paragraph shall not apply when we have a contractual relationship with you, provided that we have lawfully obtained your contact details and we will use them to send you commercial communications regarding Shakers products or services that are similar to those that were initially contracted by you.

In any case, Shakers makes available to interested parties the possibility of opposing the processing of your data for promotional purposes through a simple and free procedure, both at the time of data collection and in each of the commercial communications addressed to them.

Recipients of personal data

In relation to the recipients of personal data, we inform you that Shakers takes the necessary measures to ensure compliance with the principles of data protection and privacy with third parties with which it maintains your relationships, and that its main purpose is to comply with the duty of care in such activities.

The communication of personal data to third parties is subject to adequate data protection measures and based on an appropriate legal basis. Shakers ensures that third parties with whom it shares personal data comply with applicable data protection laws and regulations and implement appropriate data protection and security measures to ensure the privacy and security of personal data.

In order to fulfill the purposes stated in this Privacy Policy, it is necessary that, on certain occasions, third parties provide us with support in the services we offer.

Among these third parties, depending on their nature, we can find:

Public authorities, regulators or governmental bodies: personal data may be communicated to these subjects when such communication is necessary to comply with legal obligations, local regulations or regulatory requirements.

In particular, Shakers may share your personal data with administrative or judicial authorities that, in the legitimate exercise of their powers, request such information. This includes the Tax Administration, Social Security, banking and financial institutions, State Security Forces and Corps, and Supervisory and Control Authorities, among others.

Service Providers: These are companies that provide services to Shakers and that may have access to the personal data necessary to provide such services, such as providers of web hosting services, online payment services, email delivery services or customer support services. Shakers will ensure that it chooses providers that offer appropriate safeguards, and to determine the responsibilities in relation to personal data. Some of the service providers we work with are:

Infrastructure and cloud service providers.

Development and automation tools.

Analysis and monitoring platforms.

Business and operational management solutions.

Forms and data collection platforms.

Marketing and advertising service providers.
Associated companies and collaborators: Associated companies and collaborators may have access to personal data necessary to carry out joint activities, provided they have an adequate basis of legitimacy.
Financial institutions: Financial institutions that may require access to personal data to process transactions, payments and other financial services.

Period of conservation of your personal data

The personal data provided by the user will be kept for the time strictly necessary to fulfill the purposes for which they were collected, unless a longer retention period is required or permitted by law.

In general, they will be kept for as long as there is a contractual relationship with the user and for a limited period of time since the last interaction with the company.

Personal data will be deleted or anonymized when they are no longer necessary or relevant for the purposes for which they were collected and are not subject to any legal obligation of retention, and Shakers will always take into account the principle of limitation of the retention period.

Your data protection rights

Shakers recognizes and guarantees the exercise, free of charge in the cases established in the current legislation, at any time and in an effective and accessible manner of the following rights:

Access. You have the right to access your data, as well as to know whether or not your personal data are being processed. In this sense, you can obtain a copy of your personal data, although the exercise of this right may not adversely affect the rights of other persons and their right to data protection.
Rectification. You have the right as a data subject to obtain, without undue delay, the rectification of inaccurate data or to complete incomplete data.
Restriction. You have the right to obtain the limitation of the processing of your data, provided that is given any of the following circumstances:

You contest the accuracy of the data, for a period of time that allows us to verify its accuracy.
When you prefer the limitation to the deletion of the data.
When your data are not processed and must be deleted, but are needed to make a claim or respond to a request.
When you have objected to the processing, but we are verifying the legitimate reasons of the same.

Opposition. You have the right to object at any time, for reasons related to your particular situation, to the legitimate processing of your personal data.
Deletion. You have the right to have your data deleted , without undue delay, provided that there is a justified cause for it.
Data portability. You have the right as a data subject to receive your personal data in a structured, commonly used and machine-readable format, provided that this is technically possible. This right may not adversely affect the rights and freedoms of others.
Not to be subject to automated decisions. You have the right as a data subject not to be subject to decisions taken as a result of automated processing, including profiling, which may result in significant effects on you.

In addition, in the event that the processing of personal data by Shakers is based on consent, in accordance with Article 7 of the RPGD, you have the right to withdraw such consent at any time, without affecting the lawfulness of the processing based on consent prior to its withdrawal, being as easy to grant consent as to withdraw it.

However, as stated by the Spanish Data Protection Agency, this right will not be applicable when this is necessary for the conclusion of a contract between you and the data controller, or when the processing of your data is based on your previously given consent.

In addition, Shakers informs you that, under the provisions of Article 77 of the General Data Protection Regulation (GDPR), you have the right as a data subject to file a complaint with the Spanish Data Protection Agency, if you consider that the processing of personal data by us infringes this Regulation.

You can find more information about your rights at the following link.

How to exercise your rights

Any interested party wishing to exercise any of the rights described above may do so at the following e-mail address of our data protection officer: dpd@shakersworks.com.

The Spanish Data Protection Agency provides you with updated information so that you are fully aware of your data protection rights at all times.

Existence of automated decisions or profiling and information on the use of artificial intelligence.

Shakers has developed a method of matchmaking with artificial intelligence that manages to assign the best affinities between freelancer profiles and business projects.

On this point, we inform you that according to Article 22 of the GDPR, every data subject shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects on him or her or significantly affects him or her in a similar way.

Therefore, such situations are only permitted where they are necessary for the conclusion or performance of a contract between the data subject and a controller, where authorized by Union law, or where it is based on the data subject's explicit consent.

The use by Shakers of the artificial intelligence described above does not have any negative consequences for the data subject, since the main purpose is to provide the best candidates for specific offers offered by the entities participating in our application.

Shakers, in accordance with the GDPR and the guidelines on this matter, complies with the requirements imposed by the same, with the principles of lawfulness, fairness and transparency, and therefore intends through this policy to comply with its duty of information, as well as providing meaningful information on the logic applied, its relevance and the expected consequences of this processing for the data subject.

In compliance with the principle of information and transparency of articles 13 and 14 RGPD, the following information on the logic applied to the processing is exposed:

The matchmaking process is carried out through the analysis of the base variables necessary to calculate a base match percentage and ensure that the minimum technical requirements will always be met in order to apply for a project such as the freelancer's technical knowledge, experience in past projects and the project requirements demanded, in addition to precision variables based on the resulting compatibility between project and freelancer resulting from personality and motivation tests.

This analysis does not have any negative consequence for the interested party, since Shakers does not make any decision based on the result of the analysis. The match percentage serves as a reference to evaluate which projects may be interesting as a freelancer and which candidates are more optimal for the project as a client.

For more information about our match process you can consult the following link.

In addition to applying the principles of purpose limitation and data minimization, Shakers makes sure to adopt and implement other appropriate technical measures to guarantee the right to privacy and data protection, as well as appropriate technical and organizational measures for such purposes.

Therefore, and without prejudice to the principles applicable to the processing of personal data referred to above, Shakers also ensures compliance with the bases or conditions of legitimacy of the processing, as well as attention to requests for the exercise of rights in data protection when personal data are used for profiling, considering particularly in the increased risks arising from a treatment involving an assessment of personal aspects in order to create or use personal profiles of the data subjects.

Security measures applied to personal data

From Shakers we are committed to implement and maintain appropriate technical and organizational security measures to protect personal data against destruction, loss, alteration, unauthorized disclosure or unauthorized access.

As part of that commitment, Shakers has implemented a series of technical and organizational measures to ensure the security of personal data and the continued protection of its information systems. As an ISO 27001 certified company, Shakers follows industry best practices to maintain the confidentiality, integrity and availability of information in compliance with applicable data protection regulations.

Among the measures adopted (without this list being exhaustive) are access controls to prevent unauthorized physical or digital access to personal data. This includes strict access management policies, role-based authorization and multi-factor authentication. In addition, security monitoring tools and logging mechanisms allow data access to be tracked and reviewed. To protect sensitive information, encryption is applied both in transit and at rest, and strict procedures are followed in the transmission and storage of personal data. In addition, training and awareness training is provided to our staff regarding personal data protection and information security.

Shakers has also put in place measures to protect data integrity, such as regular security audits, malware detection systems and structured backup processes to ensure business continuity. It also has incident response procedures in place to identify, assess and mitigate security breaches, minimizing the risk to personal data.

In addition, Shakers conducts periodic assessments of its security controls to ensure that measures remain effective and adapt to emerging risks. Through internal policies and training programs, it fosters a culture of security and compliance, ensuring that employees apply data protection principles in their daily operations.

However, it is important to keep in mind that no security measure is completely foolproof and no system can guarantee absolute security of personal data.

Therefore, we cannot guarantee that personal data is completely secure and we disclaim any liability for any security breach that may occur, without prejudice to complying with our legal obligations regarding data breaches.

Minors

Shakers will not process data of minors. As the data controller, Shakers will make reasonable efforts to verify that the user is of legal age, taking into account available technology.

International data transfers

In this regard and with the intention of complying with the principle of transparency, we wish to inform you under Article 45 and 46 RGPD, that in the event that Shakers makes transfers of personal data that are processed or will be processed after transfer to a third country or international organization, it will comply with and implement the guarantees contained in the legislation in force for the adequacy of the same to the rights of data subjects, provided that they are made.

Changes and updates to our Privacy Policy

In Shakers may update and modify our Privacy Policy at any time and when we deem appropriate to accurately reflect our privacy practices.

In this regard, we recommend that you consult this Privacy Policy frequently, so you can be aware of any changes or modifications.

If you have any questions about our Privacy Policy, you can contact us at: dpd@shakersworks.com.

Information about Cookies

Briefly, we also want to inform you that we use cookies to facilitate your navigation on the Platform and to know how you interact with Us. Please read our Cookie Policy to learn more about the cookies we use, their purpose and other information of interest.