Privacy Policy
Last updated: April 2026
Table of Contents
- 1. Who we are
- 2. What data we collect
- 3. Purposes and legal basis for processing
- 4. Use of artificial intelligence in matching
- 5. Cookies
- 6. Who we share your data with
- 7. International transfers
- 8. How long we keep your data
- 9. What rights you have over your data
- 10. Data security
- 11. Minors
- 12. Changes to this policy
- 13. Contact
1. Who we are
The controller responsible for processing your personal data is:
[Aplyk España, S.L.]
Tax ID (CIF): [PENDING — to be completed]
Registered address: [PENDING — to be completed, Spain]
Privacy contact email: info@aplyk.com
Website: https://aplyk.com
Aplyk is a technology platform that uses artificial intelligence to connect companies with verified professionals to fill temporary work shifts quickly and efficiently. Aplyk acts as a technology intermediary (marketplace) and is not a temporary staffing agency (ETT) or the employer of the professionals who use the platform.
This policy applies to the data we process through aplyk.com, empresas.aplyk.com, candidatos.aplyk.com, and our mobile apps.
2. What data we collect
If you are a professional (candidate/worker)
- Identification data: first and last name, national ID/passport or equivalent document, date of birth, photograph.
- Contact data: phone number, email, address.
- Work-related data: CV, experience, availability, ratings and performance reviews.
- Identity and right-to-work verification documentation, processed through our verification provider (Didit).
- Location data during clock-in/clock-out (GPS) while you are on an active shift.
- Bank details, only in occasional cases where Aplyk pays bonuses or incentives directly to the professional. Aplyk does not pay wages or payroll: pay for shifts is paid directly by the hiring company.
- App usage data and communications with support.
If you are a company (client)
- Contact person data: name, job title, email, phone number.
- Company data: legal name, tax ID, address, sector.
- Billing and payment data.
- History of shifts posted, ratings given, and communications with support.
Data collected automatically
- IP address, browser type, device, and operating system.
- Browsing and usage data for the website and app, via cookies and similar technologies (see section 5).
3. Purposes and legal basis for processing
| Purpose | Legal basis |
|---|---|
| Create and manage your account, and provide the intermediation service between companies and professionals | Performance of a contract (Art. 6(1)(b) GDPR) |
| Verify identity and right to work | Compliance with a legal obligation / performance of a contract |
| AI-assisted matching between shifts and professionals | Performance of a contract and legitimate interest |
| Record clock-ins via geolocation during a shift | Performance of a contract |
| Invoice and collect Aplyk’s commission from the company, and manage occasional bonuses to professionals | Performance of a contract / legal obligation |
| Support communications | Performance of a contract |
| Marketing (newsletter, updates) | Consent, revocable at any time |
| Fraud prevention and platform security | Legitimate interest |
| Analytics and service improvement | Legitimate interest / consent (non-essential cookies) |
4. Use of artificial intelligence in matching
Aplyk uses an AI-assisted matching system that suggests and ranks candidates for shifts posted by companies, based on criteria such as availability, location, experience, and past ratings.
This process supports the final decision, which is still made by the hiring company or by the professional themselves when accepting or declining a shift; it does not constitute a fully automated decision with legal effects taken without human involvement within the meaning of Article 22 of the GDPR. You may ask us at any time for information about the general logic applied in the matching process.
5. Cookies
We use our own and third-party cookies for:
- Essential cookies: necessary for the site to function and for login (e.g., keeping your session active).
- Preference cookies: remember your language or other display settings.
- Analytics cookies: help us understand how the site is used so we can improve it.
- Marketing cookies (if applicable): used to measure the effectiveness of campaigns.
You can manage or withdraw your consent to non-essential cookies at any time from the site’s cookie settings panel or from your browser settings. For more detail, see our Cookie Policy.
6. Who we share your data with
We do not sell your personal data. We share it only when necessary to provide the service, with:
- Companies and professionals, with each other, to the extent necessary to manage a shift (e.g., a professional’s name and rating visible to the hiring company, and vice versa).
- Identity verification providers (e.g., Didit), to confirm identity and right to work.
- Payment and billing providers, to process payments and payouts.
- Technology infrastructure providers (cloud hosting, email delivery, support), under data-processing agreements in line with Art. 28 GDPR.
- Public authorities, where there is a legal obligation to do so.
7. International transfers
Aplyk operates in Spain and in the United Kingdom. Where it is necessary to transfer data between the two countries, or to providers located outside the European Economic Area, we do so using appropriate safeguards under the GDPR and UK data protection law (UK GDPR), such as standard contractual clauses or applicable adequacy decisions.
8. How long we keep your data
- Your profile data is kept for as long as you maintain an active Aplyk account.
- After account closure, we retain certain data for the periods required by tax, labour, and anti-fraud regulations (generally up to 6 years in Spain for tax/accounting records).
- Shift clock-in geolocation data is kept for as long as needed to substantiate the shift worked and its invoicing.
- You can request early deletion of your data under the terms of section 9, unless we are legally required to retain it.
9. What rights you have over your data
Under the GDPR and Spanish Organic Law 3/2018 (LOPDGDD), you have the right to:
- Access your personal data.
- Rectify inaccurate data.
- Erase your data when it is no longer necessary.
- Restrict or object to processing in certain cases.
- Portability: receive your data in a structured format and transfer it to another provider.
- Withdraw your consent at any time, where processing is based on it, without affecting the lawfulness of prior processing.
You can exercise these rights by writing to info@aplyk.com. If you believe we have not properly handled your request, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) (www.aepd.es) or, if you reside in the United Kingdom, with the Information Commissioner’s Office (ICO) (www.ico.org.uk).
10. Data security
We apply appropriate technical and organisational measures (encryption in transit, access controls, backups) to protect your data against unauthorised access, loss, or alteration. That said, no system is completely infallible; should a security breach occur that poses a risk to your rights, we will notify you in accordance with applicable law.
11. Minors
Aplyk’s services are intended for people over 16 years of age (or the minimum legal working age applicable in each jurisdiction). We do not knowingly collect data from anyone below that age.
12. Changes to this policy
We may update this policy to reflect changes in the law or in our service. We will publish any material changes on this page along with the date of the last update.
13. Contact
If you have any questions about this policy or how we process your data, write to us at info@aplyk.com.
Have questions about your privacy?
You can contact our team at any time to exercise your rights or resolve any questions.