Privacy Policy & GDPR

The controller is whoever provides the service under the trade name Nevajobs. The platform is at https://www.nevajobs.eu and https://nevajobs.eu.

For privacy, data rights or any request, email info@nevajobs.eu.

The identifying details of that activity are the same as in the legal notice: NIF 74941275F, address Calle Peñoes, 20, 1.º B, 18196 Sierra Nevada (Granada), España. The natural person on that tax file is Alejandro Martín del Valle.

If you use Nevajobs on behalf of a company, you are responsible for informing candidates and staff where required by applicable law.

Depending on how you use Nevajobs, we may process:

• Account data: name, email, password (encrypted), role (candidate or employer), language and country preferences. • Google sign-in: Google ID, name, email and profile photo provided by Google when you authorise access. • Candidate profile: CV, experience, languages, availability, preferred resorts, badges and professional data you choose to publish. • Employer data: trading name, job listings and billing/credit purchase data handled by Stripe. • Usage data: pages visited, applications, contact unlocks, technical logs, approximate IP address and security events. • Communications: messages sent via contact or support forms. • Billing data processed by Stripe: address, VAT ID if provided, and customer identifier.

• Intro video: the recording, the language and the moderation result. If it is approved, the catalog stations where you are featured for the current winter season.

Registered employers, from their dashboard, can see the professional profile, the CV (without contact details), the intro video and certifications without an unlock. The search radar in that dashboard is not a public page: it only shows people who said they are at the resort and can start now, at the stations where that employer has published jobs. Email, phone and chat stay hidden until a paid unlock, except what the candidate chooses to show publicly on their profile.

We use your data to:

• Create and manage your account and profile. • Publish jobs, manage applications and connect candidates with employers. • Process employer payments for unlock credits and credit packs via Stripe. • Compute compatibility scores (match) with a rules engine on labour data from the profile and job; details at https://www.nevajobs.eu/legal/match. • For the current winter season (1 November–30 April; May–October approval counts toward the season that starts in November), show an approved intro video as a highlight at catalog stations. A registered employer's radar only includes people who said they are at the resort and can start now, at stations where that employer has published jobs. That highlight is visibility: it does not change the match score. • Provide auxiliary AI features (CV parsing, text screening, offer generation/translation, profile and intro coaches, video moderation, explaining a score already computed) using AI providers (Google Vertex AI / Gemini) on content you submit. • Send service notifications (applications, alerts, account status) and, if enabled, push job alerts. • Improve security, prevent fraud, moderate content, diagnose errors and ensure platform integrity (including optional technical telemetry via Sentry when configured). • Analyse platform usage only if you accept analytics cookies (Google Analytics 4). • Comply with legal, tax and accounting obligations.

We do not sell your personal data to third parties or use it for third-party advertising without your consent.

Nevajobs computes a compatibility score (“match”) between jobs and profiles with a rules engine on labour data you provide (role, languages, resort, availability, housing, experience, qualifications, etc.). Product thresholds may prioritise or hide profiles in recommended lists or alerts; they are not an automated hiring decision by Nevajobs.

The score is not based on video analysis, accent, apparent age, photography or biometric traits. Intro video may be shown to employers for human review, outside the numeric formula.

Full explanation, variables, blockers, data correction and complaints: https://www.nevajobs.eu/legal/match

Auxiliary AI (Vertex AI / Gemini) may parse CVs, draft text or explain a score already computed, on content you submit.

Separately, an auxiliary screening score from 0 to 100 may be shown to the employer. It can use the application text and a short extract of the intro transcript. It does not hire or reject anyone. Intro-video moderation is automatic: it approves or rejects publication and, if approved, the season highlight. You can request a human review from the rejected-intro notice in your profile; the request is recorded and we reply by email. These features run only if you have accepted the current terms.

The season highlight from an approved intro video is visibility at the station and on registered employers' radar. It is not part of the score formula.

Intro-video quality feedback (e.g. an indicative 0–100 note and tips) is coaching for the candidate only. It is not part of the match formula, is not identification biometrics, and does not decide hiring. It may be used internally for visibility rewards (e.g. featured placement) without showing employers a hiring score.

We process personal data on the following grounds:

• Contract performance: providing the Nevajobs service you signed up for (account, profiles, applications, unlocks). • Legitimate interest: platform security, service improvement, fraud prevention and legal defence, balanced against your rights. • Consent: non-essential cookies and optional marketing communications. Creating an account does not accept analytics or marketing cookies. • Express acceptance of the terms: auxiliary application screening score (0–100, shown to the employer) and automatic intro-video moderation. • Legal obligation: tax, accounting, billing or regulatory requirements.

• Express acceptance of terms: intro-video quality coaching feedback (indicative, for you only; not part of the match).

Nevajobs may email seasonal-sector companies (hotels, ski schools, rental shops, resorts) to present the hiring service where there is a professional legitimate interest and the message is relevant to their business.

This sits in a grey area between Spain’s LSSI (Art. 21 on commercial electronic communications) and the GDPR / LOPDGDD (legitimate interest in professional contact data). The Spanish DPA (AEPD) is strict on unsolicited commercial email.

Risk-reduction measures we apply: • Prefer publicly listed generic company inboxes (info@, hr@, bookings@, jobs@…). • Never use consumer personal emails (@gmail, @hotmail, etc.). • We do not buy contact lists. • Every message identifies the sender (Nevajobs team · info@nevajobs.eu) and includes an immediate unsubscribe (opt-out). • Modest volumes; no aggressive mass sends.

You may object or unsubscribe anytime via the email link or info@nevajobs.eu. We honour opt-outs immediately.

We may share data with service providers acting as data processors under contract and only on our instructions, including:

• Google / Firebase (authentication, database and cloud storage). • Google Vertex AI / Gemini (AI processing for the service features described in this policy). • Stripe (payment processing and billing — Nevajobs does not store full card numbers). • Google Meet (1:1 video interviews between employer and candidate in chat; not recorded by default). • Vercel (website hosting and delivery). • Sentry (error and performance monitoring, when enabled).

These providers must apply appropriate security measures. You can review their privacy policies on the official Google, Stripe, Vercel and Sentry websites.

Registered employers only access a candidate's full contact details (email, phone and chat) after an authorised paid unlock. Profile, contact-free CV, intro video and certifications may be visible without an unlock.

If a recruitment agency publishes the listing, the recipient of the candidate's data is that agency. As a further category of recipients, so is the client the agency designates for that vacancy, even if that client is not named in the ad. Showing the profile to the publisher is part of performing the service. Any later disclosure to the client is made by the agency as its own controller.

The candidate radar is available only to employer accounts, inside their dashboard. We do not publish an open directory of candidates.

Google (Firebase Authentication, Firestore, Cloud Storage, Vertex AI and Google Meet for 1:1 video calls), Stripe, Vercel and Sentry act as processors under each provider's standard data-processing agreement, including the standard contractual clauses that agreement incorporates where data leaves the EEA. There is no separate bespoke contract. The texts are https://cloud.google.com/terms/data-processing-addendum · https://stripe.com/legal/dpa · https://vercel.com/legal/dpa · https://sentry.io/legal/dpa.

Some providers (e.g. Google, Stripe or Vercel) may process data outside the European Economic Area. Where this occurs, we rely on appropriate safeguards such as Standard Contractual Clauses approved by the European Commission, the EU-US Data Privacy Framework where applicable, or adequacy decisions to ensure a level of protection equivalent to EU requirements.

We keep personal data only as long as necessary for the purposes described:

• Active accounts: for the duration of the contractual relationship while you maintain your account. • Billing and payment records: as required by applicable tax and commercial law (typically up to 6 years). • When you close the account: profile, CV, intro video, photo and proof documents are deleted at that time. Stripe invoices and payment records are kept for the tax period. • Inactive accounts: 24 months after the last activity an automatic process deletes the account, profile, CV, intro video, photo and proof documents. Stripe invoices are not deleted. • Security logs: 12 months.

You may request deletion at any time, subject to legal retention obligations.

Under the GDPR you have the right to:

• Access your personal data and obtain a copy. • Rectify inaccurate or incomplete data. • Erase your data («right to be forgotten»), where applicable. • Restrict or object to certain processing. • Data portability, where processing is based on consent or contract. • Withdraw consent at any time for processing based on consent. • Not be subject to decisions based solely on automated processing with significant legal effects, except where permitted by law. • Lodge a complaint with your local supervisory authority.

In Spain, the competent authority is the Spanish Data Protection Agency (AEPD): www.aepd.es

To exercise these rights, email info@nevajobs.eu. We will respond within one month, extendable as permitted by law.

On assisted matching: Nevajobs does not take automated hiring decisions. The score may prioritise or hide profiles in recommendations. Explanation, correction and complaints: https://www.nevajobs.eu/legal/match

You can download a JSON copy of your data from Account settings («Download my data»). You can also exercise these rights by writing to info@nevajobs.eu. We will respond within one month, extendable as allowed by law.

We apply technical and organisational measures to protect your data, including HTTPS encryption in transit, access controls, database security rules and PCI DSS-compliant payment handling through Stripe. No method of transmission over the Internet is 100% secure; we continuously work to improve our safeguards.

Nevajobs is intended for users aged 18 and over. We do not knowingly collect data from children under 18. If you believe a minor has provided us with personal data, contact us at info@nevajobs.eu so we can delete it.

We may update this Privacy Policy to reflect legal or service changes. We will publish the revised version at https://www.nevajobs.eu/legal/privacy with an updated date. For material changes we may notify you by email or through a prominent notice on the platform.

For privacy and data-protection requests: info@nevajobs.eu