Privacy Notice
This Privacy Notice (the “Notice”, the “Privacy Notice”) applies to the processing of personal data by SiteGround Spain S.L., a company registered and existing under the laws of the Kingdom of Spain (CIF: B87194171), with registered address: Calle de Prim 19, 28004 Madrid, Spain, and SiteGround Hosting EOOD, a company, registered and established under the laws of the Republic of Bulgaria (UIC: 204181297), with registered address at 6 Olimpiyska St., fl. 7, 1766 Sofia, Bulgaria (together hereinafter referred to as “SiteGround”, “we”, “us” and “our”) in their capacity as controllers of personal data as further described below.
The Notice explains our data privacy practices in regard to the processing of personal data of individuals (“data subjects”, “you”, “your”) who visit the website https://careers.siteground.com (the “Site”), and/or apply for a job via the Site or through a third-party job applicants platform accessible via the Site.
I. Data Controllers
Depending on the processing activities the controller of your data shall be defined as follows:
For visitors of the Site – SiteGround Spain S.L. and SiteGround Hosting EOOD;
For job applicants applying for an open position based in Bulgaria – SiteGround Hosting EOOD;
For job applicants applying for an open position based in Spain – SiteGround Spain S.L.
With respect to the processing of personal data of Site visitors SiteGround Spain S.L. and SiteGround Hosting EOOD act as joint controllers.
With respect to the processing of personal data of job applicants each SiteGround company (as indicated above) acts as an independent data controller.
II. Categories of data subjects and types of personal data
For the purposes of this Notice, the individuals whose personal data is subject to processing and the types of their personal data processed by us, may be categorised as follows:
Website visitors
Definition: Individuals who visit the Site.
Types of personal data:
Contact information – We may collect personal data such as name and email address when you comment and/or discuss topics on the Site.
Personal data, contained in log files – When you visit the Site we may process information such as your IP address, referral URL, exit URL, browser software, operating system, date/time and/or clickstream data.
Personal data collected through website analytics tools – We may collect information about your use of the Site, such as number of visits, pages visited, popularity of certain content. Analytics tools use tracking technologies (such as cookies) to recognise your device and compile information about you. They collect information such as what pages you visit and how much time you spend on these pages, your IP address, what operating system and web browser you use, and what site you visited prior to visiting the Site.
Job applicants
Definition: Individuals who apply for a job or participate in our recruitment process.
Types of personal data:
Identification data – full name, photograph, nationality, date of birth;
Contact details – address, telephone number, email address;
Background information – such as education, qualifications, professional experience, employment history – current and/or former employer(s), position(s), work experience, skills, etc.;
Personal information contained in your resume or CV, URLs to your accounts in platforms such as LinkedIn and/or GitHub, social media account username(s), cover letter, application forms, recommendations and any other documentation provided by you to us;
Other personal information collected and processed in the recruitment process and contained in the internal recruitment documentation, such as interview history, questionnaires, notes, assessment and test results (if any).
Please note that SiteGround does not request to receive from you any sensitive personal data (e.g. data on racial or ethnic origin, political opinions, religious or philosophical beliefs, union and/or political membership, health status or sexual orientation), so we kindly ask you not to submit such information in your application.
Participants in events/campaigns
Definition: Individuals, who participate in raffles, surveys, campaigns and/or register to attend webinars and other events (co)organised and/or sponsored by us.
Types of personal data:
Contact details – We may process participant’s data such as first and last name, email address, address, phone number, social media username, etc.
Other types of personal data – We may process your image and voice, if the event is being recorded. In case the events take place on the Site, we may process the types of personal data described in item 1 (Website visitors) above.
III. Sources of data collection
Generally, we collect the personal data directly from you – when interacting with the Site and/or in connection with the application and recruitment process. If you do not provide us with your personal data in relation to the recruitment process, SiteGround will not be able to review your application and go further with the recruitment.
We may also collect personal data regarding you from third parties, such as former employers, referees, professional social networks such as LinkedIn, third parties that organise career and recruitment initiatives, in which SiteGround participates, etc.
IV. Purposes and legal basis for personal data processing
Your personal data is processed for the following purposes:
to manage the recruitment process, incl. processing and assessing your application for the job offered, to communicate with you during the recruitment process, incl. but not limited to scheduling and conducting interviews, providing you with requested information, preparing a job offer for the position, discussing the position and/or other job opportunities. In such cases the legal basis for the data processing is taking steps at your request as a job applicant prior to potentially entering into a contract with you and compliance with a legal obligation.
to contact you in case of an alternative career opportunity. In such cases the legal basis for data processing is your consent.
to maintain and secure the Site, network and information systems, to address any queries, to defend against claims and protect the rights, property or safety of SiteGround, to discuss topics in the career blog and communicate with us. In such cases the legal basis for the data processing is our legitimate interest.
to fulfil our legal obligations, to comply with orders/requests or other documents issued by competent authorities, as well as with the applicable legislation. In such cases the legal basis for the data processing is the compliance with a legal obligation to which we are subject.
to administer and manage any events (co)organised by us. In such cases the legal basis for data processing is your consent.
for other purposes which may not fall under the scope of the above-mentioned purposes we will obtain your consent.
It is also important to note that our recruitment processes are not based on automated decision-making.
V. Sharing of your personal data
Subject to applicable law, we may share personal information as follows:
Internally. Your personal data may be disclosed to the SiteGround personnel involved in the recruiting and hiring processes only to the extent and volume necessary for reviewing, assessing and processing your application and conducting the recruitment procedure.
Within the SiteGround Group of companies. We may share your personal data with companies part of the SiteGround Group, for the purposes of recruiting or evaluating job applicants and/or candidates, as well as other legitimate business purposes.
With service providers and other contractors. We may share your personal data with consultants, auditors, independent contractors, such as recruitment agencies, intermediaries, service providers engaged to assist us in performing our activities (such as collecting and administering job applications, recruitment, talent acquisition, etc.).
With public authorities and other third parties. We may disclose your personal data to comply with legal obligations, regulations, or to respond to court orders, enforceable requests and/or competent authority requirements, where we are legally compelled to do so. We also may share your personal data when there are threats to the safety of other persons, violations of SiteGround policies, and/or when it is necessary to defend against claims and protect the rights, interests, property or safety of SiteGround, other persons and/or the public as required and/or permitted by law.
In case of a corporate reorganisation. We may share your information to relevant third parties in the event of, or as part of the due diligence for, any prospective or completed business reorganisation, such as merger, acquisition, transfer, or other disposition of all or part of our business, assets or shares, or in the unlikely event that SiteGround goes out of business or enters bankruptcy. If any such event occurs, we will notify you via the Site of any changes concerning the processing of your personal data (if any).
Under your instructions. We may share your personal data with third parties with your explicit consent or at your direction. We will not, however, sell, rent, share or otherwise disclose personal data for commercial purposes in any way that is contrary to the commitments made in this Notice.
VI. International data transfers
In the course of performing our activities we may transfer personal data to third countries (including but not limited to the UK, USA, etc.) where we and/or the third parties, specified in Section V above, use data centers, facilities and/or maintain data processing operations.
When transferring personal data outside the EU/EEA we will use the appropriate transfer mechanisms to ensure that the transfer is in compliance with applicable data protection legislation. Such mechanism shall be transferring the personal data: (i) to a recipient in a country for which the European Commission has decided to provide adequate level of data protection; or (ii) to a recipient that has executed the Standard contractual clauses approved by the European Commission.
In all cases we will ensure that we have provided appropriate and proportional technical and organisational data protection and cybersecurity risk mitigation measures, as well as we have performed the appropriate risk assessments when transferring your personal data outside the EU/EEA.
VII. Security measures
We implement and maintain adequate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. The security measures include measures to provide encrypted transmission of personal data; to help ensure ongoing confidentiality, integrity, availability and resilience of our systems; and are subject to regular testing of effectiveness. We may improve, update or modify the security measures provided that such updates and modifications do not result in the degradation of the overall security provided by SiteGround.
VIII. Data retention
If your job application at SiteGround is successful and you accept our offer, we will retain the personal data we have about you, in order to process it in the context of your employment/contractual relationship with the relevant SiteGround company. The periods for which your data will be held will be communicated with you in a separate privacy notice, which will be given to you at the time of execution of a contract with the relevant SiteGround company.
In the event that we have not proposed a job offer to you, or our proposed job offer is rejected by you, we will keep your personal data for 6 months as of the completion date of the recruitment process.
Upon your explicit consent, SiteGround Hosting EOOD (Bulgaria) may keep your data for up to 2 years as of the initial provision of your data for the purposes of contacting you in case of new open job positions which fit to your profile and may be of interest to you.
Additionally, internal selection data could be kept for a longer period in compliance with applicable local anti-discrimination legislation.
Information collected on the Site will only be retained for as long as necessary to fulfil the purpose for which it was collected.
IX. Your rights
You are entitled to the following rights in relation to your personal data:
Right to be informed: You have the right to be informed about the collection and use of your personal data.
Right to access: You have the right to view and request copies of your personal data.
Right to rectification: You have the right to request inaccurate, incomplete or outdated information to be updated or corrected.
Right to erasure (“to be forgotten”): Under certain circumstances, you have the right to request your personal data to be deleted.
Right to data portability: You have the right to ask for your data to be transferred to another controller or provided to them (if technically feasible) in a machine-readable electronic format.
Right to restrict processing: Under certain conditions, you have the right to request the restriction of the processing of your personal data.
Right to withdraw consent: You have the right to withdraw your given consent to the processing of your personal data, where we rely on your consent as a legal basis for processing;
Right to object: Under certain conditions you have the right to object to the processing of your personal data (e.g. where we are relying on our legitimate interests as a legal basis for processing);
Right to object to automated processing: You have the right to object to decisions being made with your data solely based on automated decision making or profiling.
Right to remain non-discriminated: SiteGround shall not discriminate against you because you exercised any of your rights.
You can exercise any of your rights by submitting a request to the email address specified in the “Contact information” Section of this Notice. We will review and address your request(s) within one month as of the date of receipt. Please note that if your request is particularly complex or you have made a number of requests, it may take us longer than a month to respond to you. In this case, we will notify you and keep you updated. Please note that we may ask you to provide us with additional information necessary to verify your identity prior to our response. However, in certain circumstances such as to comply with the applicable legislation, we may be unable to honour your request, for which you will be duly notified.
X. Data protection authorities
You have the right to direct questions or lodge a complaint about the processing of your personal data at any time with the competent supervisory authority for data protection:
Bulgaria
Personal Data Protection Commission (Комисия за защита на личните данни)
Address: 2, Tsvetan Lazarov Blvd., 1592 Sofia, Republic of Bulgaria
Email: kzld@cpdp.bg
Website: https://www.cpdp.bg/
Spain
Spanish Data Protection Authority (Agencia Española de Protección de Datos)
Address: C/Jorge Juan, 6, 28001 Madrid, Spain
Telephone: +34 901 100 099; +34 91 266 35 17
Website: https://www.aepd.es/es
XI. Contact information
If you wish to exercise any of your rights described above or if you have any data processing related questions, requests and/or concerns, please contact the respective SiteGround company, which is responsible for the processing of your personal data as described in this Notice by sending an email to the respective data controller:
For SiteGround Hosting EOOD – privacy_bg_careers@siteground.com;
For SiteGround Spain S.L. – privacy_es_careers@siteground.com.
XII. Changes to the Privacy Notice
This Notice will not form part of any potential contract and we may change it from time to time. Any changes to this Notice will be announced on the Site.
Latest revision: October 3, 2023