Candidate privacy notice
Version: 29 October 2026.
Who manages this service
The Spanish Chamber of Commerce in Japan (SpCCJ), Embassy of Spain, 3F, 1-3-29 Roppongi, Minato-ku, Tokyo 106-0032, Japan, is responsible for this service. Contact SpCCJ Secretariat at info@spanishchamber.or.jp with privacy enquiries or requests.
Your account and profile
We use your name, sign-in email, protected credentials, verification information and activity dates to manage and secure your account. Your profile contains the professional information you enter: introduction, desired role, skills, city or country, sector, experience, languages, availability, contact email and optional LinkedIn link. Your contact email may differ from your sign-in email. We do not accept CVs or file uploads. Do not include identity documents, your home address, sensitive data or information about other people.
Creating an account does not share your profile, make you a Chamber member or apply for a particular job. To apply for a job, follow that listing’s instructions.
Who can see your information
Secretariat and authorised administrators can manage private and shared profiles. Once you verify your email, you may choose to share your profile with authorised representatives and delegates of active corporate memberships. Each user must accept confidentiality and professional-opportunity-only conditions, prohibiting sale, third-party disclosure and commercial campaigns.
Initial corporate access is limited to recipients whose receipt and processing of the information in Japan or Spain have been confirmed by the Chamber. This is an authorised-recipient control, not IP geoblocking. Before extending access to other countries, we will review the applicable requirements and provide the relevant information and consent options.
Authorised companies receive the professional and contact fields you share and may contact you through the stated email or LinkedIn link. They do not receive your password, your private sign-in email when different from your contact email, or internal verification information. Profiles are not public and are not available to other candidates or individual members.
Sharing, withdrawal and deletion
Sharing lasts three calendar months from your latest explicit confirmation. Signing in does not renew it. You can edit, save privately, hide or delete your profile. Saving privately or hiding stops new corporate consultations while retaining the profile for you and the administration. Deleting the profile removes it from the active service but retains your sign-in account. You may also ask Secretariat to delete your account.
Periodic maintenance removes candidate-only accounts and their profiles after more than six calendar months without access. Accounts linked to memberships, administrative permissions, other roles or additional content require separate review. Verification links expire after 24 hours; expiry does not delete the account.
Withdrawing a profile cannot automatically recover information already consulted or copied by a company. Secretariat can help address withdrawal or deletion requests with recipients.
Disclosure evidence and requests
For three calendar years from each delivery, we retain minimal evidence: candidate identification, recipient company and user, date, information categories, recipient approval, and references to consent and accepted conditions. This does not copy your professional text, CV or contact details. It is stored separately from the profile with restricted administrative access, including after profile or account deletion.
You can request access, correction, withdrawal or deletion through Secretariat. We verify ownership using your account or registered email and review cases where access has been lost manually; we do not request identity documents by default. The private operational request register is retained for 120 days after closure. If an older backup remains recoverable, a request remains pending or another obligation applies, we review and document the necessary additional retention. This register is separate from corporate disclosure evidence.
Hosting, backups and communications
Accounts and profiles are stored in WordPress on Onamae.com’s RS plan. The provider describes data centres in Japan and automatic backups retained for 14 days. The Chamber also makes weekly backups and removes those older than 90 days. Active-service deletion does not immediately erase older backups. Before reopening a restored service, Secretariat reapplies subsequent deletions and withdrawals.
Microsoft 365 provides service email; OneDrive stores the operational request register. Our account’s reported data location for Exchange, OneDrive and SharePoint is Japan. This does not mean that all support or subcontractors operate exclusively there. Providers also retain technical records for security and operation, subject to their settings and terms.
Verification and recovery messages contain temporary links, not your password or professional profile. Registration does not subscribe you to newsletters or job alerts. Any future subscription will be optional and separate.
Form confirmations
Creating an account: I have read the candidate privacy notice and agree to the account processing and retention periods explained. Creating an account does not share my profile or subscribe me to newsletters.
Sharing or renewing: I confirm my information is current and agree to share my profile and contact details with authorised member-company users receiving and processing it in Japan or Spain for three calendar months, and to retain evidence of each delivery for three years. I can withdraw or delete my profile.