Welcome to G&M Fashion Career’s Privacy Policy!
Last updated: 11 August 2026
G&M Fashion Career is committed to protecting your privacy and handling your personal data transparently, securely and in accordance with applicable data protection laws, including Regulation (EU) 2016/679 (the General Data Protection Regulation or “GDPR”) and Spanish Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD).
This Privacy Policy explains how we collect, use, disclose and protect personal data relating to candidates, prospective candidates, clients, prospective clients, website visitors and other individuals with whom we interact.
1. Who We Are
The data controller responsible for the processing described in this Privacy Policy is:
G&M Fashion Career S.L.
Trading as G&M Fashion Career
Registered address: Carrer de Còrsega 284, 1-1, 08870 Barcelona (España)
NIF/CIF: B67112623
Barcelona, Spain
Email: info@gm-fashioncareer.com
In this Privacy Policy, “G&M Fashion Career”, “G&M”, “we”, “us” and “our” refer to the entity identified above.
2. Personal Data We Collect
Depending on our relationship with you, we may collect and process the following categories of personal data.
Candidates and prospective candidates This may include:
name and contact details;
CV, résumé and professional biography;
employment history, job titles and responsibilities;
education, qualifications and professional certifications;
skills, experience and areas of expertise;
compensation expectations and other employment preferences;
geographic location, mobility and availability;
languages spoken;
LinkedIn profile and other publicly available professional information;
information provided during interviews and other communications with us;references and professional recommendations;
information relevant to assessing suitability for a particular position;
records of opportunities discussed with you and recruitment processes in which you participate; and
correspondence and other communications with G&M.
We ask candidates not to provide personal information that is unnecessary for recruitment purposes.
Clients and prospective clients We may process:
name and professional contact information;
employer, position and department;
information concerning recruitment requirements and assignments;
contractual and commercial information;
billing and payment information;
correspondence and meeting records; and
information necessary to manage our professional relationship.
Website visitors and other contacts We may process information such as:
contact information submitted through our website;
communications and enquiries;
IP address and device/browser information;
cookie and similar technology information; and
website usage information where permitted by applicable law.
3. Where We Obtain Personal Data
We may obtain personal data directly from you or from other appropriate sources.
In particular, because G&M provides executive search and recruitment services, we may identify and contact professionals who have not previously applied for a position or registered with us.
We may obtain professional information about prospective candidates from sources including:
LinkedIn and other professional networking platforms;
company and employer websites;
publicly available professional profiles and publications;
professional directories;
industry events and networks;
referrals and recommendations;
clients;
professional contacts; and
other lawful publicly available sources.
We may also receive information from referees, former employers or other third parties where appropriate. Where we obtain your personal data from a source other than you, we will provide the information required under Article 14 GDPR within the applicable timeframe, unless an exemption applies.
4. How and Why We Use Personal Data
We process personal data only where we have a lawful basis for doing so. Depending on the circumstances, our processing activities and legal bases may include:
Candidate sourcing and initial contact
We may identify professionals who could be suitable for current or future opportunities and contact them based on our legitimate interests in providing executive search and recruitment services.
Assessing candidates and matching them with opportunities
We process professional information to understand candidates’ experience, preferences and potential suitability for relevant positions. Depending on the circumstances, this processing may be based on our legitimate interests, steps taken at your request in connection with a potential engagement, or another applicable legal basis.
Managing recruitment processes
We process information to communicate with candidates, arrange interviews, discuss opportunities, facilitate introductions and manage recruitment assignments.
Sharing candidate information with clients
Where our practice requires your approval before presenting your identifiable profile to a client, we will obtain that approval before doing so. Where consent is relied upon as the legal basis, you may withdraw it at any time without affecting processing already carried out lawfully.
Maintaining professional relationships and our candidate network
We may retain appropriate professional information so that we can maintain relationships with candidates and identify relevant future opportunities, based on our legitimate interests where applicable.
Providing services to clients
We process client information to enter into and perform recruitment and executive-search engagements and manage our professional relationships.
Business administration
We process information for invoicing, accounting, legal, compliance, record-keeping and business-management purposes on the basis of contractual necessity, legal obligations and/or our legitimate interests.
Website operation and security
We process technical information where necessary to operate, secure and improve our website and services.
Cookies and similar technologies
Strictly necessary technologies may be used where required for the operation of our website. Where consent is legally required for analytics, functionality, advertising or other non-essential technologies, we will request consent before using them.
Where processing is based on our legitimate interests, we consider whether those interests are compatible with your interests, rights and freedoms and implement appropriate safeguards.
5. Special Categories of Personal Data
We do not generally seek to collect special categories of personal data unless they are relevant and necessary for a legitimate purpose.
Special-category data includes information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs or trade-union membership, as well as genetic data, biometric data used for unique identification, health information and information concerning a person’s sex life or sexual orientation.
Where we process special-category personal data, we will do so only where an applicable condition under Article 9 GDPR is satisfied, for example where:
you have provided explicit consent;
processing is necessary in connection with applicable employment, social security or social protection law, subject to appropriate safeguards;
the information has manifestly been made public by you; or
another condition permitted by applicable law applies.
We will not request or use special-category information where it is unnecessary for the relevant recruitment or business purpose.
6. Sharing Personal Data
We may disclose personal data, where appropriate, to:
clients and prospective employers in connection with recruitment assignments;
service providers supporting our recruitment and business operations;
applicant tracking and customer relationship management providers;
cloud hosting, email and IT service providers;
professional advisers, including lawyers, accountants and consultants;
public authorities, courts, regulators or law-enforcement bodies where legally required; and
other parties where you have instructed or authorized us to make the disclosure.
Service providers acting as processors are required to process personal data only on documented instructions and to implement appropriate security and confidentiality measures. We do not sell personal data.
Recruitment technology
G&M uses recruitment and applicant-tracking technology to manage candidate and client information. Provider: Recruitly
Before publication, this section should identify the actual provider used by G&M and accurately describe its role, relevant hosting arrangements and international data-transfer safeguards.
7. International Transfers
Because G&M operates in an international recruitment market and works with clients, candidates and service providers in different countries, personal data may in some circumstances be transferred outside the European Economic Area (EEA). Where personal data is transferred to a country outside the EEA, we will ensure that the transfer is made in accordance with Chapter V GDPR.
Depending on the circumstances, safeguards may include:
a European Commission adequacy decision;
European Commission Standard Contractual Clauses (SCCs);
another legally recognized transfer mechanism; or
where specifically permitted by the GDPR, an applicable derogation.
Where required, we will also assess whether supplementary measures are necessary to provide an appropriate level of protection.
Where we propose to present your profile to an international client, we will provide appropriate information about the proposed disclosure in accordance with our recruitment process. You may contact us for further information about the safeguards applicable to international transfers of your personal data.
8. How Long We Keep Personal Data
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including to satisfy legal, accounting and regulatory requirements and to establish, exercise or defend legal claims.
For candidate information, our normal retention period is: TWO YEARS from the candidate’s last meaningful interaction with G&M, unless:
the relationship remains active;
the candidate asks us to retain their information for future opportunities;
a longer period is necessary in connection with an active recruitment process;
we are legally required to retain particular information; or
another lawful reason justifies a different retention period.
For client and commercial records, our normal retention period is: SEVEN YEARS where necessary for contractual, accounting, tax, legal or compliance purposes. When personal data is no longer required, we will securely delete or anonymize it.
9. References and Professional Verification
Where appropriate for a recruitment process, we may verify professional information or obtain references. We will conduct reference or background verification only where it is relevant to the position or recruitment process and in accordance with applicable law. Where required, we will inform you and/or obtain your authorization before contacting referees, former employers or other relevant third parties. We encourage candidates to provide referee information only where they are authorized to do so.
10. Automated Decision-Making and Profiling
G&M does not make recruitment decisions concerning candidates solely through automated processing, including profiling, where that processing produces legal effects or similarly significantly affects the individual.
Technology may assist our consultants in organizing, searching or assessing professional information, but recruitment assessments and recommendations involve human judgment.
If our use of automated decision-making materially changes, we will update this Privacy Policy and provide any information required by applicable law.
11. Your Data Protection Rights
Subject to the conditions and limitations established by applicable law, you may have the right to:
Access your personal data and obtain information about how it is processed;
Rectify inaccurate or incomplete personal data;
Erase your personal data in certain circumstances;
Restrict processing in certain circumstances;
Object to processing based on legitimate interests;
Data portability where the legal requirements are satisfied;
Withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal; and
Not be subject to certain solely automated decisions producing legal or similarly significant effects.
To exercise your rights, contact:
Email: info@gm-fashioncareer.com
Postal address: Carrer de Còrsega 284, 1-1, 08870 Barcelona (España)
We may request information reasonably necessary to verify your identity before processing a request.
We will respond without undue delay and, in any event, within one month of receiving your request. Where permitted by the GDPR, this period may be extended by up to two additional months, taking into account the complexity and number of requests. If an extension is necessary, we will inform you within the initial one-month period.
You also have the right to lodge a complaint with the Agencia Española de Protección de Datos (AEPD), the Spanish data protection supervisory authority, or another competent supervisory authority where applicable.
12. Security
We implement appropriate technical and organizational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access.
These measures may include, where appropriate:
access controls;
authentication measures;
secure systems and infrastructure;
confidentiality obligations;
data minimization;
backups and business-continuity measures;
security monitoring;
and appropriate contractual safeguards with service providers.
No method of transmission or storage can guarantee absolute security, but we regularly consider the safeguards appropriate to the nature and risks of the personal data we process.
Personal data breaches: If a personal data breach occurs, we will assess its potential impact and take appropriate remedial action. We will notify the competent supervisory authority and/or affected individuals where required by applicable data protection law.
13. Cookies and Similar Technologies
Our website may use cookies and similar technologies. Cookies that are strictly necessary for the operation, security or functionality of the website may be used without consent where permitted by law. For cookies and similar technologies that require consent, we will request your consent before placing or activating them. Where applicable, our cookie consent interface will allow users to accept, reject or configure non-essential cookies.
Detailed information about the cookies and similar technologies used on our website, including their provider, purpose and duration, should be available in our Cookie Policy:https://www.gm-fashioncareer.com/privacy You can change or withdraw your cookie preferences through the cookie settings available on our website.
14. Children’s Privacy
Our recruitment and executive-search services are intended for professionals and are not directed toward children. We do not knowingly seek to collect personal data from children through our recruitment services except where legally appropriate and necessary in a specific context. If you believe that we have received a child’s personal data inappropriately, please contact us.
15. Third-Party Websites
Our website may contain links to websites, platforms or services operated by third parties. We are not responsible for the privacy practices of independent third parties. We recommend reviewing their privacy information before providing personal data to them.
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our activities, technologies, legal requirements or data-protection practices. Where changes are material, we will take appropriate steps to inform affected individuals where required. The “Last updated” date at the top of this Privacy Policy identifies the most recent revision.
17. Contact Us
If you have questions about this Privacy Policy, how we process your personal data, or wish to exercise your data-protection rights, please contact:
G&M Fashion Career S.L.
Trading as G&M Fashion Career
Registered address: Carrer de Còrsega 284, 1-1, 08870 Barcelona (España)
NIF/CIF: B67112623
Barcelona, Spain
Email: info@gm-fashioncareer.com
You may also lodge a complaint with:
Agencia Española de Protección de Datos (AEPD)
C/ Jorge Juan, 6
28001 Madrid
Spain
www.aepd.es
© 2026 G&M Fashion Career. All rights reserved.