Controller
The data controller is JIMSONWEED, S.L., NIF B70690334, with registered office at Calle Corrida 8, 5th floor, door B, 33206 Gijón, Asturias, Spain. Questions and rights requests can be sent to seeds@jimsonweed.studio.
Jimsonweed Studios has not designated a Data Protection Officer. If that changes, this policy will identify the DPO and their direct contact channel.
Data and purposes
Respond to a request and take requested pre-contractual steps; legitimate interest in maintaining professional correspondence.
For the relationship and applicable limitation periods.Review a voluntarily submitted professional profile, match it to work and manage applications; consent and requested pre-contractual steps.
Up to 24 months after the last meaningful interaction, unless renewed, withdrawn or legally required.Review interest, discuss suitability, manage an application and prepare enrolment; consent and requested pre-contractual steps.
Up to 24 months after the last meaningful interaction, unless an enrolment relationship begins.Authenticate authorised people, provide candidate or team access and preserve security and auditability; contract, requested access and legitimate security interests.
While access is active, then blocked or retained only for security and legal accountability.Send communications a person requested or separately agreed to receive. Operational messages related to an active account, application or programme are handled separately from promotional campaigns.
Until consent is withdrawn, the relationship ends or the address is suppressed.Protect forms, accounts and infrastructure, investigate incidents and preserve an auditable operational record; legitimate interest and legal obligations.
Short-lived anti-spam attempts: up to 48 hours. Technical security records: only as long as necessary for investigation and continuity.Understand which public pages are useful and maintain service quality without cookies or advertising profiles; legitimate interest in operating and improving the website.
Page-view records: up to 13 months. The daily visitor identifier cannot be reused across days.Data categories and sources
Depending on the route used, we may process identity and contact details, professional profile information, links, work preferences, availability and expected rate; Education background, motivation and programme preference; application status and correspondence; account, session, security and audit records. When aggregate analytics is enabled, a public path, referrer hostname, broad device class, approximate country or region supplied by the edge, and a one-day keyed visitor identifier may also be recorded. Raw IP addresses, full referrer URLs and browser user-agent strings are not stored for analytics.
Most information comes directly from the person. Authorised administrators may add verified professional or operational information, and imported historical information is not treated as current consent.
Recipients, processors and transfers
Access is limited by role. Data may be processed by infrastructure, hosting, database, backup, security and communication providers acting under Jimsonweed Studios instructions. Data is not sold. It is disclosed where required by law or necessary to establish, exercise or defend legal claims.
The production system is hosted on Jimsonweed Studios infrastructure in Spain. Playing an externally hosted showreel connects the visitor directly to YouTube, Vimeo or Wistia; their own terms and international-transfer safeguards may then apply. External communication delivery remains disabled until its provider and safeguards have been reviewed.
Rights and withdrawal
You may request access, correction, erasure, restriction, portability or objection where applicable, and you may withdraw consent at any time without affecting earlier lawful processing. Write to seeds@jimsonweed.studio and identify the relationship or submission concerned. We may request proportionate information to verify identity.
You may also lodge a complaint with the Spanish Data Protection Agency (AEPD) ↗.
Security, minors and changes
JSW Online uses restricted access, secure sessions, role-based permissions, audit records, protected intake forms, encrypted transport and verified database backups. No system is risk-free, so controls are reviewed as the portal expands.
Professional recruitment and the current Education routes are intended for adults. A minor should not submit personal data without the involvement and authorisation of a parent or legal guardian.
Policy version: 2026-08-06. Effective date: 4 August 2026. Material changes will be identified here and, where required, renewed consent will be requested.