Privacy policy

Data Controller: MAIDSCO S.L. (Maids & Co — Household Employment Agency), tax ID B88922885, represented by Isabella de Medina Velletri.

• Registered address: Calle Marqués del Riscal, 2, 3º int., 28010 Madrid, Spain
• Email: [email protected]Copy
• Phone: +34 679 66 50 82
• Data protection contact: [email protected] (subject “Protección de datos”)

MAIDSCO S.L. is a placement agency authorised by the Spanish National Employment System (SNE no. 1300000318). Under Law 3/2023 on Employment, our services are entirely free of charge for candidates: we will never ask you for any payment.

Your account: your mobile phone number (verified with a single-use code we send you by WhatsApp), your preferred language, the dates on which you sign in, how you first reached this website (for example, the advert or the page you landed on), the screens of the questionnaire you go through and when, and the version of the terms and of this policy you accepted, and when. The account is managed with an identity provider (see section 4).

Your pre-application (questionnaire): name, city and area, age, nationality, whether you hold authorisation to work in Spain, the type of work you are looking for and when you are available, your areas of experience and years of experience, whether you have references, languages and the longest time you have stayed with one family. This is what you declare about yourself. It is stored separately from the candidate record the agency creates after interviewing you, and it never overwrites that record. You can edit it at any time; we keep the previous versions.

Your applications to offers: which offers you have applied to, when, and where you came from (for example, the advert that brought you to the offer).

Your email (optional): the email you give us in the questionnaire or in your account, or “I don't have an email” if you tell us so (so we don't ask again). If we already had an email of yours linked to your phone number (because you gave it to the agency, put it in your CV, subscribed to job alerts or you gave it to our team), we add it to your account and ask you whether it is still yours before using it. We use it only to let you know about your applications (for example, if a family wants to interview you). You can change or remove it at any time in My account (tap your email at the top, then “Remove my email”), or by writing to us (see section 6).

Curriculum vitae (optional): the file you upload, or the data you enter to build one, and the data extracted from it (see section 10).

During the selection process (via WhatsApp, phone or interview): full name, work experience, training, languages, availability and preferred schedule, area where you are looking for work, salary expectations, whether you hold authorisation to work in Spain, professional references and, if you send them, supporting documents (identity, work authorisation, qualifications) and a photograph. We only ask for documents when they are needed for a specific hiring.

Legal requirements of the role: to comply with immigration and labour law, we need to know whether you are of working age and hold authorisation to work in Spain. We ask this in the same way of every candidate.

Health-related information: we do not ask for it. If you choose to tell us about a condition or disability so that we can take it into account (for example, tasks you cannot perform), we record it only with your explicit consent (Art. 9.2.a GDPR) and you may withdraw it at any time.

Your interviews. Some interviews, not all, are recorded — usually the ones we hold by video call, with our team or with a family — and our team may review them later (image and voice). We do it to look after the quality of the process, prepare your profile, train our team and clear up any incident. Only our team sees the recordings: we never show them to families.

To review them we use automatic tools that turn the conversation into text and prepare a summary. With that we write your profile (your experience, what you can do and how we saw you in the interview), which our team reviews before showing it to a family. We do not use your image or your voice to analyse emotions or physical traits. From images of the interview we may prepare your profile photo with an automatic tool; if you do not like it, tell us and we will change it.

Voice notes you send us by WhatsApp or in the chat are also turned into text automatically.

If you would rather an interview was not recorded, or you want us to delete a recording, write to us (section 6).

Presentation image: if you provide a photograph, we may use automated tools to prepare a professional presentation image from it. You can ask us to use your original photo or no image at all.

Collected automatically: anonymized IP address, pages visited, time on page, scroll depth, browser and device type, referral source (via Google Analytics 4, only with your consent); how you move around the pages (taps, scrolling and pages viewed), for heatmaps and recordings of visits, without what you type (via Microsoft Clarity, only with your consent); language preference (stored in your browser via localStorage).

We do not ask about your marital status, family situation, religion or sexual orientation. If you share any of these with us, we will not use it to assess your application.

Account retention. If 24 months go by without any activity in your account (signing in, editing your pre-application, applying to an offer), we delete the account together with your pre-application, applications and CV. You can ask us to delete them earlier at any time (see section 6). If the agency has interviewed you and created your candidate record, that record follows the retention periods above.

Providing your phone number is a contractual requirement necessary to create your account and process your job application. Without it, we cannot process your candidacy.

Potential employers: when we propose you for an offer, the family or person offering the position receives your professional profile (experience, availability, languages, references, the agency’s assessment and, if you recorded one, your presentation video), solely to decide whether to interview you. The employer undertakes to use this data for that purpose only. Your pre-application is not sent to employers as such: the team creates your candidate record first.

Providers processing data on our behalf (data processors, under Art. 28 GDPR agreements). We name the ones that handle your data on this site and in your account:

• Messaging: Meta Platforms Ireland (WhatsApp Business), for the verification code, the messages the team sends you and the reminders about an unfinished application.
• Account and sign-in: Clerk, our identity provider. It stores your phone number and your session data and checks the single-use code. Clerk is a US company; data is processed in the European Union or in the United States under its data processing agreement, with the safeguards described in section 5.
• Infrastructure, file storage and AI model execution: Cloudflare. It runs our services, stores the files you upload (CV) in European Union storage, and runs on its own servers the open model that sorts your offer recommendations and prepares the draft of your CV. The developer of that model (DeepSeek) receives no data: the model is executed entirely by Cloudflare. It also provides the video call of the interview room and its recording.
• Audio transcription: Deepgram turns the audio of interviews and voice notes into text (United States).
• Automatic reading of CV files: Anthropic (Claude model), a US provider. It receives the file you upload only to extract the data into your CV form.
• Web hosting and database: Vercel (this website) and Neon (database, hosted in the European Union).
• Web analytics: Google (Google Analytics) and Microsoft (Microsoft Clarity: heatmaps and recordings of visits, without what you type), only with your consent.
• Profile photo: Google provides an image tool to prepare the profile photo.
• Other providers of artificial-intelligence and automatic transcription services used by the team in the selection process (see section 9).

The full list of providers is available on request at [email protected].

Public authorities: when required by law (for example, the periodic reporting that placement agencies must submit to the public employment services).

Your main database and the files you upload are stored in the European Union. Some of the providers in section 4 (Clerk, Cloudflare, Deepgram, Anthropic, Google, Meta, Microsoft, Vercel) are US companies or have servers in the United States, so part of the processing may involve an international transfer.

Transfers rely on the adequacy decision for the EU-US Data Privacy Framework where the provider is certified and, otherwise, on the Standard Contractual Clauses approved by the European Commission, together with the additional measures agreed with each provider (for example, European processing regions and no use of your data to train their models). You may request a copy of these safeguards at [email protected].

Under GDPR and LOPDGDD you have the right to: access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), portability (Art. 20), objection (Art. 21), and withdrawal of consent (Art. 7.3) at any time without affecting prior lawfulness. You also have the right not to be subject to a decision based solely on automated processing and to request human review (Art. 22; see section 9).

From your account: you can see and correct your pre-application and your CV at any time.

By email: write to [email protected]Copy with the subject “Protección de datos”, stating the phone number of your account and what you are asking for. To delete your account, ask for “erasure of my account”: we will delete the account, your pre-application, your applications and your CV. If the agency has already created your candidate record, tell us whether you also want it deleted.

We will respond within one month (Art. 12.3 GDPR). We may ask you to confirm your identity, for example from the phone number registered in your account.

You may lodge a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es · C/ Jorge Juan, 6, 28001 Madrid · +34 912 663 517.

We implement appropriate technical and organizational measures including HTTPS encryption, access controls, regular security reviews, and data minimization. Access to your account is protected by a single-use code sent to your phone; we never ask you for a password by WhatsApp or email.

We use automated systems and artificial intelligence to help the team in the selection process. Here we explain which ones, what data they use and what consequences they have, in accordance with Articles 13.2.f, 14.2.g and 22 GDPR and Regulation (EU) 2024/1689 on Artificial Intelligence.

To answer you sooner, we use automatic systems that compare your profile with each offer's requirements and with our selection criteria, sort applications and suggest profiles to families. In some cases, if your profile does not meet those requirements, your application may be put on hold without a person reviewing it first. You can always ask for a person from our team to review it, explain your case and disagree with the result: write to [email protected] with the subject "Review of my application".

Offer recommendations. In your account we suggest offers sorted according to what you tell us: the work you are looking for, whether you want it live-in or live-out and in which areas, your experience, your languages, your driving licence and whether you hold work authorisation. We do not suggest offers that do not fit that (for example, another area or another role, or a position that requires work authorisation if you told us you do not have it). An artificial-intelligence model helps to sort them and to explain why they fit. The recommendations do not decide anything about you: if no open offer fits right now, we tell you so, and every published offer is still on the website for you to apply to any of them.

WhatsApp messages about your applications. When you apply through this website we do not send you any WhatsApp message: you see the confirmation on the website itself and in your account. The team may write to you on WhatsApp to tell you that you have been shortlisted or that your profile does not fit an offer right now. In addition, if you start your application and leave it unfinished, we may send you an automatic WhatsApp reminder, two at most, with a link to pick up where you left off. We do so on the basis of our legitimate interest in enabling you to complete the application you started (Art. 6.1.f GDPR). You can stop these reminders from the message itself (“No more reminders”) or by writing to [email protected]. If you reply, or if you write directly to the agency’s WhatsApp line, an automated assistant based on artificial intelligence, not a person, may answer first; the team follows these conversations and steps in when needed.

What you see. In your account, your applications appear as “Applied” until the position is closed.

Assessment of candidates for offers. Once the team has interviewed you and created your candidate record, we use automated tools to compare your professional profile with the requirements of each offer. The offer’s essential requirements must be met; the remaining criteria are weighed as a whole. Their output may mean that you are not proposed for a specific offer, that you are proposed for other, more suitable offers, or that your application to an offer is archived. None of these decisions prevents you from applying again or affects your relationship with other employers.

Human review and how to contest (Art. 22.3 GDPR). You have the right to have a person review your case, to express your point of view and to contest any result of these systems or any decision the team makes about your application. To do so, write to [email protected]Copy with the subject “Review of my application”. A member of the team, not the system, will review your case, explain the main reasons, change it if appropriate and reply within one month at most. You may also request information about the logic applied in your case (Art. 15.1.h GDPR).

What we do not do. These systems do not analyse your face or voice to infer emotions or personal characteristics.

Some texts about you (for example, the profile summary the employer receives) are drafted with the help of artificial intelligence from what you have told us and are reviewed by the team before being used. They may still contain errors: you can ask to see and correct them at any time (Arts. 15 and 16 GDPR).

It is optional. In your account you can upload a CV file or build one from the data you have already given us (questionnaire).

If you upload a file: it is stored in European Union storage (Cloudflare). An artificial-intelligence model (Anthropic Claude) reads it to extract your data (experience, training, languages, availability) into your CV form. You review and correct the result before saving it; the automatic extraction may contain errors. The file is used for nothing else.

Use and legal basis. We use the CV for the same purposes as your pre-application: to assess your profile and propose you for offers. The basis is your consent, which you give when you upload or build it and can withdraw at any time. You can delete the CV or ask us to delete it at [email protected]; otherwise it is kept with your account (section 3).

See our Cookies Policy.

We may update this policy to reflect changes in our practices or legal requirements. The “Last updated” date at the top indicates the latest revision.