HR Privacy Notice



(creation date: 16.05.2023)

This Privacy Notice was created by W.Y., S.A. (hereinafter referred to as “WYgroup”, “we”, “us”, and “our”) to inform you as to how we look after your personal data with regards to Human Resources (HR) activities and should be read in conjunction with our General Privacy Notice.


Data Controller

WYgroup is the Data Controller of your personal information.

WYgroup manages its own HR operations and of its subsidiaries (please visit, including processing personal information about the employees and job applicants.

Our registered office is Av. Marginal, Edifício Parque Oceano, 4º andar, 2780-322 Oeiras – Portugal. We are registered in Portugal under company number 508561752. We have appointed a Data Protection Officer, registered in the Portuguese data protection authority – Comissão Nacional de Proteção de Dados ( We provide details of how to contact us at the bottom of this HR Privacy Notice.


In this Privacy Notice:

The Basics

Personal information we collect about you

WYgroup will process your personal information based on:

How we collect personal information about you

We collect personal information about you when you register a general interest (spontaneous application) or apply for a specific role at WYgroup. Some of the information we collect about you is required to make an assessment of your application to WYgroup and contact you as you progress through the recruitment process (for example your telephone number, email address, and CV). If you do not provide this information, we will be unable to assess your application or contact you to invite you for an interview or make you an offer.

We may collect information about you from third parties (including but not limited to, recruitment consultants or agencies and previous employers) and from the public internet where you have made this information publicly available, or from professional and recruiting networks on the internet (for example, LinkedIn or Indeed) and contact you about suitable roles.

Types of information we may collect about you

We may also collect and process sensitive personal information about you whenever necessary – or when this information is provided on a voluntary basis (for example, information you provide to us on your CV).

How we use information about you

We may process the personal information that we collect about you for the following purposes:

Who we share information about you with

We may share personal information about you with:

Where we process information about you

In doing the above, we may need to transfer personal information about you to other companies in the WYgroup (please visit or third parties located (or whose servers may be located) in countries outside of the country where you have applied, including countries outside of the European Economic Area (EEA).

If we send personal information about you to a country that is not in the EEA, we will make sure that there is a legal basis for such transfer and that your personal information is adequately protected as required by applicable law (for example, by using standard agreements approved by relevant authorities and by requiring the use of other appropriate technical and organisational measures to protect your personal information).

Please contact our Data Protection Officer at if you would like to find out more about the way we comply with our legal obligations in relation to international data transfers.

How long we keep information about you

We will keep your information for as long as it is necessary for the recruitment process and in accordance with our Data Retention Policy – a copy is available on request by sending an email to

If you are successful at the end of a recruitment process, we will keep your information for the duration of your employment, should you wish to apply for other roles within WYgroup and its companies. If we aren’t able to offer you a role, we will keep your information for 5 years to contact you about future roles that may interest you, but only where we have collected your consent to do so – you can withdraw your consent at any time by sending an email to Every 5 years, we will send you an email alert about retention period expiration. If you don’t respond, your personal data will be deleted.

We will anonymise your information in accordance with our retention policy and may retain those anonymised records to monitor the effectiveness of our recruitment process. For example, we may create reports to understand what nationalities have applied for roles with WYgroup in the last 12 months – you will not be identifiable in these reports.


Your rights

If we don’t take action based on any of the above requests, we will inform you of the reasons why.

Changes to this Privacy Notice

This privacy notice gets updated from time to time, so we encourage you to check it regularly.

How to contact us

If you have any further questions about this privacy notice or how we process your information, please contact our Data Protection Officer at or by sending a registered letter to the following address:

DPO WYgroup
Av. Marginal, Edifício Parque Oceano, 4º andar
2780-322 Oeiras – Portugal