Spendesk · Privacy & Data
Spendesk privacy & data
Read from Spendesk's own page on 2026-11-10. 23 statements quoted word for word; anything the page does not say is shown as unstated, never guessed. APIs.io verifies none of it.
Role
Data categories
category: contact
Last name, first name, phone number, email address, CVRead from Spendesk's own page on 2026-11-10
category: device
Cookie ID, IP address, browsing informationRead from Spendesk's own page on 2026-11-10
category: behavioral
Browsing data, cookie ID or other tracker(s), device ID(s) (IP address, IDFA, ADID, etc.), sessionRead from Spendesk's own page on 2026-11-10
category: communication
Video and audio recording of calls for the purposes of improving Services, training and monitoring Spendesk staff performanceRead from Spendesk's own page on 2026-11-10
category: financial
Last name, first name, company, position, financial transactionsRead from Spendesk's own page on 2026-11-10
Purposes
purpose: Recruitment process monitoring
Monitoring of the recruitment processRead from Spendesk's own page on 2026-11-10
purpose: Marketing relationship management
Management of the marketing relationship: invitation to events, newsletters, recategorisation as a prospectRead from Spendesk's own page on 2026-11-10
Retention
scope: Recruitment candidatesperiod: two (2) years
If consent, up to two (2) years after the end of recruitmentRead from Spendesk's own page on 2026-11-10
scope: Marketing contacts and prospectsperiod: three (3) years
Up to three (3) years after the last contactRead from Spendesk's own page on 2026-11-10
scope: Call recordingsperiod: six (6) months
Up to six (6) months after the date of the recordingRead from Spendesk's own page on 2026-11-10
scope: Login logsperiod: three hundred and sixty-five (365) days
Up to three hundred and sixty-five (365) days after collection of the login logsRead from Spendesk's own page on 2026-11-10
Residency
region: European Union
The Personal Data processed by Spendesk is hosted on secure servers within the European Union.Read from Spendesk's own page on 2026-11-10
International transfers
mechanism: adequacy
transfer to a country designated as adequate by the European CommissionRead from Spendesk's own page on 2026-11-10
mechanism: SCC
signature of the European Commission's Standard Contractual ClausesRead from Spendesk's own page on 2026-11-10
Subprocessors
url: https://www.spendesk.com/legals/subprocessors/
you can find the list of Data Processors involved in the provision of the Services on the following page: https://www.spendesk.com/legals/subprocessors/Read from Spendesk's own page on 2026-11-10
Data processing agreement
available: true
Details of the Processing carried out by Spendesk as Data Processor are available in Appendix A of the Data Processing Agreement concluded with the CustomerRead from Spendesk's own page on 2026-11-10
Deletion
route: Contact the DPO by email or post to exercise erasure rights
you have at any time a right of access, rectification, restriction, erasure and deletion of Personal Data concerning youRead from Spendesk's own page on 2026-11-10
Data subject rights
right: access
a right of access, rectification, restriction, erasure and deletion of Personal Data concerning youRead from Spendesk's own page on 2026-11-10
right: objection
as well as a right to object and a right to portabilityRead from Spendesk's own page on 2026-11-10
right: complaint to supervisory authority
You may refer the matter to the French supervisory authority - National Commission for Information Technology and Civil Liberties (CNIL)Read from Spendesk's own page on 2026-11-10
Sale or sharing
stance: conditional
members authorise Spendesk to use their data for the purposes of commercial prospecting and advertising targetingRead from Spendesk's own page on 2026-11-10
Document
Download YAML · schema: API Commons Privacy & Data 0.1.0 · transcribed by claude-haiku-5-5, checked verbatim against the fetched page