Spendesk · Privacy & Data

Spendesk privacy & data

Read from Spendesk's own page on 2026-11-10. 23 statements quoted word for word; anything the page does not say is shown as unstated, never guessed. APIs.io verifies none of it.

Role

value: both
Spendesk, as independent Data Controller
Read from Spendesk's own page on 2026-11-10

Data categories

category: contact
Last name, first name, phone number, email address, CV
Read from Spendesk's own page on 2026-11-10
category: device
Cookie ID, IP address, browsing information
Read from Spendesk's own page on 2026-11-10
category: behavioral
Browsing data, cookie ID or other tracker(s), device ID(s) (IP address, IDFA, ADID, etc.), session
Read from Spendesk's own page on 2026-11-10
category: communication
Video and audio recording of calls for the purposes of improving Services, training and monitoring Spendesk staff performance
Read from Spendesk's own page on 2026-11-10
category: financial
Last name, first name, company, position, financial transactions
Read from Spendesk's own page on 2026-11-10

Purposes

purpose: Recruitment process monitoring
Monitoring of the recruitment process
Read from Spendesk's own page on 2026-11-10
purpose: Marketing relationship management
Management of the marketing relationship: invitation to events, newsletters, recategorisation as a prospect
Read from Spendesk's own page on 2026-11-10
purpose: Commercial prospection
Commercial prospection
Read from Spendesk's own page on 2026-11-10

Retention

scope: Recruitment candidatesperiod: two (2) years
If consent, up to two (2) years after the end of recruitment
Read from Spendesk's own page on 2026-11-10
scope: Marketing contacts and prospectsperiod: three (3) years
Up to three (3) years after the last contact
Read from Spendesk's own page on 2026-11-10
scope: Call recordingsperiod: six (6) months
Up to six (6) months after the date of the recording
Read from Spendesk's own page on 2026-11-10
scope: Login logsperiod: three hundred and sixty-five (365) days
Up to three hundred and sixty-five (365) days after collection of the login logs
Read from Spendesk's own page on 2026-11-10

Residency

region: European Union
The Personal Data processed by Spendesk is hosted on secure servers within the European Union.
Read from Spendesk's own page on 2026-11-10

International transfers

mechanism: adequacy
transfer to a country designated as adequate by the European Commission
Read from Spendesk's own page on 2026-11-10
mechanism: SCC
signature of the European Commission's Standard Contractual Clauses
Read from Spendesk's own page on 2026-11-10

Subprocessors

url: https://www.spendesk.com/legals/subprocessors/
you can find the list of Data Processors involved in the provision of the Services on the following page: https://www.spendesk.com/legals/subprocessors/
Read from Spendesk's own page on 2026-11-10

Data processing agreement

available: true
Details of the Processing carried out by Spendesk as Data Processor are available in Appendix A of the Data Processing Agreement concluded with the Customer
Read from Spendesk's own page on 2026-11-10

Deletion

route: Contact the DPO by email or post to exercise erasure rights
you have at any time a right of access, rectification, restriction, erasure and deletion of Personal Data concerning you
Read from Spendesk's own page on 2026-11-10

Data subject rights

right: access
a right of access, rectification, restriction, erasure and deletion of Personal Data concerning you
Read from Spendesk's own page on 2026-11-10
right: objection
as well as a right to object and a right to portability
Read from Spendesk's own page on 2026-11-10
right: complaint to supervisory authority
You may refer the matter to the French supervisory authority - National Commission for Information Technology and Civil Liberties (CNIL)
Read from Spendesk's own page on 2026-11-10

Sale or sharing

stance: conditional
members authorise Spendesk to use their data for the purposes of commercial prospecting and advertising targeting
Read from Spendesk's own page on 2026-11-10

Document

Download YAML · schema: API Commons Privacy & Data 0.1.0 · transcribed by claude-haiku-5-5, checked verbatim against the fetched page