MENU
MENU
Last updated: October 24, 2026
We appreciate your interest in our company and your visit to our website. The protection of your personal data is very important to us. This Privacy Policy explains what personal data we collect, how we use it, and what rights you have under the EU General Data Protection Regulation (GDPR) and applicable data protection laws.
1. Controller
Schneiders Ventures S.L.
Calle de los Dragos 3, 11
35508 Costa Teguise, Las Palmas, Spain
Phone: +34 828 708599
Email: hey[at]schneiders.es
Website: www.schneiders.es
Authorized representative: Jens C. Schneiders & Loretta R. Schneiders
Supervisory authority:
Agencia Española de Protección de Datos (AEPD)
C/ Jorge Juan 6, 28001 Madrid, Spain
www.aepd.es
2. General principles of data processing
We process personal data only where this is necessary:
- to operate and ensure the security and functionality of our website (Art. 6(1)(f) GDPR),
- to fulfil or prepare a contract with you (Art. 6(1)(b) GDPR),
- to comply with legal obligations (Art. 6(1)(c) GDPR), or
- based on your explicit consent (Art. 6(1)(a) GDPR).
We only share your data with third parties when this is legally permitted or required for the purposes stated. All service providers acting on our behalf do so under data processing agreements (Art. 28 GDPR).
3. Hosting, delivery and server log files (Cloudflare)
Our website is provided via Cloudflare Pages by Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. On our behalf, Cloudflare processes the data required to deliver and secure the website and to fend off attacks (e.g. IP address, access time, browser type, operating system, referring URL).
Legal basis: legitimate interest in the secure and stable operation of our website (Art. 6(1)(f) GDPR). A data processing agreement under Art. 28 GDPR has been concluded with Cloudflare. Any data transfer to the USA is safeguarded by EU Standard Contractual Clauses (SCCs) and, where applicable, the EU–US Data Privacy Framework (DPF). Log data are only kept for as long as required for operation and security.
4. Cookies and consent management
Our website uses cookies and similar technologies.
- Essential cookies are necessary for the operation of the site and are set without consent (Art. 6(1)(f) GDPR; § 25(2) TTDSG).
- Analytics and marketing cookies are used only with your consent (Art. 6(1)(a) GDPR; § 25(1) TTDSG).
You can grant, withdraw or modify your consent at any time via the “Cookie Settings” link in the footer of our website. Without your consent, no non-essential cookies will be set.
5. Contact and CRM management (HubSpot)
When you contact us via form or email, we use HubSpot (HubSpot Ireland Limited, 2nd Floor, 30 North Wall Quay, Dublin 1, Ireland) to manage and respond to inquiries.
Data processed: name, email address, company, content of your message, communication history, and metadata (time/date). Purpose: responding to inquiries, maintaining customer communication, and managing CRM data.
Legal bases:
- performance or initiation of a contract (Art. 6(1)(b) GDPR),
- legitimate interest in efficient communication and organization (Art. 6(1)(f) GDPR),
- consent for marketing or newsletters (Art. 6(1)(a) GDPR).
A data processing agreement has been signed with HubSpot. Data transfers to the USA are protected by SCCs and/or the EU–US Data Privacy Framework (DPF). Data are deleted once the purpose has been fulfilled, unless statutory retention obligations apply.
6. Mandate Check (AI-assisted matching of job descriptions)
At schneiders.es/en/mandate-check we offer a tool that allows companies, executive search consultants and recruiters to check how well a job or mandate description matches the professional profiles of Jens Schneiders and Loretta Schneiders.
Data processed: the job description you paste, upload or retrieve via a link, the resulting assessment, technical connection data (IP address) and – only if you send a request – your name, company, email address and message. Uploaded files (PDF, Word, text) are read in your browser; only the extracted text is transmitted to us, not the file. The PDF report is generated locally by your browser.
Process and recipients:
- Analysis: the job description is transmitted via our server (Cloudflare, see section 3) to the AI service Claude provided by Anthropic Ireland, Limited, Dublin, Ireland. Claude extracts the requirements and compares them with the CVs; we then calculate the percentages ourselves using fixed rules. Anthropic processes the data as a processor under its Data Processing Addendum, states that it does not use the data to train its models and generally deletes inputs and outputs within 30 days. Processing by Anthropic, PBC in the USA is possible and is based on EU Standard Contractual Clauses.
- Report to us: we send ourselves the job description and the result as an email report to hey[at]schneiders.es, using Resend (Resend, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA). The transfer to the USA is based on the EU–US Data Privacy Framework, supplemented by EU Standard Contractual Clauses.
- Request: if you request a short profile and availability after the check, we transmit your details together with the job description and the result to HubSpot (see section 5).
- Caching and abuse prevention: the assessment is cached by Cloudflare for up to 7 days so that the same text returns the same result. To prevent abuse, we count checks per connection for one hour, storing only a non-reversible hash of the IP address.
Purposes and legal bases: carrying out the assessment you requested (Art. 6(1)(b) GDPR, pre-contractual steps at your request; otherwise Art. 6(1)(f) GDPR); report to us to keep the tool traceable, improve it and understand demand (Art. 6(1)(f) GDPR); handling your request based on your consent (Art. 6(1)(a) GDPR) and to initiate a contract (Art. 6(1)(b) GDPR). You can withdraw your consent at any time with effect for the future.
Notes: please do not include personal data of third parties (e.g. names or contact details of contact persons) in the job description. The result is an automated assessment without legal effect on you; no automated decision within the meaning of Art. 22 GDPR takes place. We delete reports and requests once they are no longer needed for the purposes stated and no statutory retention obligations apply.
7. Web analytics with Google Analytics (IP anonymization)
We use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
With your consent, Google uses cookies to analyze website usage (pages visited, time spent, device type, interactions). We use the “anonymizeIP” feature to ensure your IP address is shortened within the EU before transmission to Google servers.
Legal basis: your consent (Art. 6(1)(a) GDPR in conjunction with § 25 TTDSG). Without consent, no tracking takes place.
Data are usually processed within the EU; in exceptional cases, data may be transferred to Google LLC servers in the USA, safeguarded by SCCs and/or the DPF.
Retention period: up to 14 months.
You can withdraw your consent via the cookie panel or by installing the browser add-on: https://tools.google.com/dlpage/gaoptout
Further information: https://policies.google.com/privacy?hl=en
8. Data retention and deletion
We store personal data only as long as necessary for the purposes stated or as required by law. After the retention period expires, data will be deleted or anonymized.
9. International data transfers
Where personal data are transferred outside the EU/EEA, this occurs only:
- under an adequacy decision by the European Commission (e.g., USA – DPF), or
- based on Standard Contractual Clauses (Art. 46 GDPR).
We also implement appropriate technical and organizational safeguards (encryption, access control, etc.) to ensure adequate data protection.
10. Your rights
Under the GDPR, you have the following rights regarding your personal data:
- Right of access (Art. 15 GDPR)
- Right of rectification (Art. 16 GDPR)
- Right of erasure (“right to be forgotten”, Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR)
- Right to data portability (Art. 20 GDPR)
- Right to object to processing (Art. 21 GDPR)
- Right to withdraw consent at any time (Art. 7(3) GDPR)
To exercise your rights, please contact us at hey[at]schneiders.es
You also have the right to lodge a complaint with a supervisory authority, particularly the AEPD (Spain) or the authority in your country of residence.
11. Data security
We apply appropriate technical and organizational security measures in accordance with Art. 32 GDPR (SSL/TLS encryption, access control, backups) to protect your data against unauthorized access or loss.
12. Changes to this Privacy Policy
We may update this Privacy Policy when required by legal or technical changes. The current version will always be available on our website.
Last updated: October 24, 2026