English · Español

Privacy Policy

Last updated: July 2026

1. Data Controller

Kronjop Global Technologies SL (CIF B21959697)
Paseo de la Castellana 259c, 28046 Madrid, Spain
Privacy email: [email protected] · Phone: +34 919 46 41 47

2. Controller and Processor: Our Dual Role

Kronjop acts as data controller for the data of website visitors, client and prospect contact persons, and job applicants.

For the data of employees that client companies manage inside the platform (time records, absences, employment documents), Kronjop acts as data processor on behalf of the client company, which is the controller. That processing is governed by the data processing agreement under art. 28 GDPR we sign with each client. If you are an employee of a company using Kronjop, please address your rights requests to your employer; we will help them respond.

3. Data We Process

• Identification and contact data: name, email, phone, company and role.
• Service usage data: account and platform activity data needed to provide and bill the service.
• Technical metadata: the platform collects the IP address, user-agent and timestamps associated with certain actions to ensure the security of the service and the validity and traceability of document deliveries (for example, payslip delivery or document signing), on the basis of contract performance and compliance with legal obligations.
• Applicant data: what you provide when applying for a job (name, email, LinkedIn or portfolio link, and your message).
• Browsing data: collected through cookies with your consent, as described in our cookie policy.
• Employment data processed on behalf of clients: time records, absences and documents of client companies' employees (as processor, see section 2).

4. Purposes and Legal Bases

• Providing the service and managing your account — performance of the contract (art. 6.1.b GDPR).
• Handling enquiries received through the website (contact, trial, advisory requests) — pre-contractual measures at your request (art. 6.1.b) and your consent (art. 6.1.a).
• Sending commercial communications about our services — to clients, about services similar to those contracted, under legitimate interest (art. 6.1.f GDPR and art. 21.2 of Spanish Law 34/2002), with an opt-out in every message; to anyone else, only with your consent.
• Managing job applications — pre-contractual measures at the applicant's request (art. 6.1.b). We keep applications for the duration of the process and at most one year, unless you ask us to delete them earlier.
• Complying with legal obligations (tax, commercial, labor) — art. 6.1.c GDPR.
• Measurement and advertising through cookies — your consent (art. 6.1.a), manageable in the cookie policy.

Fields marked as required in our forms are necessary to handle your request; without them we cannot process it.

5. Data Retention

We keep personal data for the duration of the contractual or commercial relationship and, afterwards, blocked for the limitation periods of applicable legal liabilities. As a reference: time records are kept for four years (Spanish Workers' Statute) and billing documentation for the applicable tax and commercial periods. Lead data that does not become client data is kept while there is mutual interest and deleted when no longer necessary or upon your request.

6. Recipients and International Transfers

We never sell personal data. We share it only with: (a) providers needed to deliver the service (hosting, CRM, email, analytics), acting as processors or sub-processors under art. 28 GDPR contracts; and (b) competent authorities where legally required.

Platform data is hosted in the European Union. Some website tools (Google, Meta) may involve transfers outside the EEA under the EU-U.S. Data Privacy Framework or Standard Contractual Clauses approved by the European Commission.

7. Automated Decision-Making

We do not make decisions based solely on automated processing that produce legal effects on you or similarly significantly affect you. The platform's AI features operate under human supervision.

8. Minors

Our services are aimed at companies and professionals. They are not directed at children under 14 and we do not knowingly collect their data.

9. Your Rights

You can exercise your rights of access, rectification, erasure, restriction of processing, portability and objection, and withdraw your consent at any time without affecting the lawfulness of prior processing. Write to [email protected] stating the right you wish to exercise; we may ask for additional information to confirm your identity and will reply within one month at most. You may also lodge a complaint with the Spanish Data Protection Agency (aepd.es).

10. Data Security

We implement technical and organizational measures appropriate to the risk: encryption in transit and at rest, access controls, activity logging and regular security audits. In the event of a breach posing a high risk to your rights, we will notify you in accordance with arts. 33 and 34 GDPR.

11. Changes to This Policy

Any update to this policy will be published on this page. If a change is substantial and affects processing based on your consent, we will inform you before applying it.

12. Contact

For privacy-related inquiries: [email protected]