1Identity and Address of the Data Controller
Talento Startup, S.A.P.I. de C.V. (hereinafter, “LaPieza”), with address at Córdoba 95, Roma Norte, Mexico City, Mexico, postal code 06700, is the legal entity responsible for the processing of personal data that you provide to us through the platform https://lapieza.io or by any other means. For any matter related to the processing of your personal data, you can contact us through email: [email protected].
2Personal Data We Collect
LaPieza collects the following categories of personal data for the purposes described in this Notice:
2.1 Identification data
Full name, email address, CURP and/or RFC (when applicable), profile photo (optional).
2.2 Work and professional data
Professional experience history, education level and academic training, skills, competencies and certifications, salary aspirations, curriculum vitae.
2.3 Contact data
Phone number, city and state of residence.
2.4 Technical and navigation data
IP address, device type and browser, navigation data and behavior within the Platform.
2.5 Sensitive data
Do not include health information, identity documents or other sensitive data in contact messages or briefs. Providing sensitive data voluntarily does not replace the specific consent or other legal basis required for its processing.
2.6 Contact requests and briefs
Name, email, telephone and country code, company, role or user category, and the needs or message you choose to share. Only fields in the form you use are requested.
3Processing Purposes
3.1 Primary purposes (necessary for the legal relationship)
- Respond to your contact request or hiring brief, route it to the relevant team and follow up about that request. This does not automatically subscribe you to unrelated marketing.
- Create and manage the User’s account on the Platform.
- Facilitate recruitment and personnel selection processes between candidates and employing companies.
- Allow employing companies to access the candidate’s profile for hiring purposes.
- Perform automated matching between candidate profiles and available vacancies using artificial intelligence algorithms.
- Carry out AI-assisted interview processes and generate evaluation reports for employing companies.
- Facilitate face-to-face networking among LaPieza community users through community matching functionality.
- Comply with legal obligations and requirements from competent authorities.
3.2 Secondary purposes (not necessary, but you can object to)
If the User does not want their data to be processed for secondary purposes, they may express this at any time by sending an email to [email protected] with the subject “Opposition to secondary purposes”.
- Sending communications about new functionalities, featured vacancies, events and LaPieza news.
- Preparation of statistics and aggregate usage reports to improve the Platform.
- Marketing, advertising and commercial prospecting activities of LaPieza and its commercial partners.
4Personal Data Transfers
Personal data may be shared with the recipients below for the indicated purposes under articles 35 and 36 of the current LFPDPPP. A recipient being a client or partner does not itself create a consent exemption; consent must be obtained where required.
- Employing companies (LaPieza clients): to facilitate recruitment and selection processes for which the User has applied or shown interest.
- Commercial partners and strategic alliances: with whom LaPieza has agreements to expand job opportunities or services available to the User, always under confidentiality obligations equivalent to those of this Notice.
- Government and judicial authorities: when required by legal provision or resolution of a competent authority.
Processing may take place in Mexico and abroad, including the United States. The contact integration uses Google Cloud infrastructure in the United States when enabled. Depending on the service and deployment, hosting, authentication, analytics (including PostHog), email and messaging providers process data to operate the service. A brief may be routed through a configured team messaging service or your email application. Providers processing on our behalf are distinct from recipients, such as employers, processing for their own recruitment purposes. Such employers may be outside Mexico. Contact [email protected] for information about providers, destinations and applicable safeguards.
5Automated Processing and AI Decisions
LaPieza informs that it uses automated systems and artificial intelligence that may produce effects on the User’s profile, including:
- Classification and prioritization of the candidate’s profile within selection processes.
- Suggestion of vacancies and matching with employing companies.
- Generation of evaluation reports derived from AI-assisted interviews.
- Suggestion of contacts for networking within the LaPieza community.
The User has the right to request information about the logic applied in these automated processes by sending a request to [email protected]. Final hiring decisions always rest with the employing company and not with LaPieza.
6ARCO Rights and How to Exercise Them
The User, or their duly accredited legal representative, may exercise the following rights at any time:
- Access: know what personal data we have about you, what we use it for and the conditions of processing.
- Rectification: request correction of your data when it is inaccurate, incomplete or outdated.
- Cancellation: request deletion of your data when you consider it is not necessary for processing purposes, or that processing does not comply with LFPDPPP.
- Opposition: oppose the processing of your data for specific purposes, particularly the secondary ones described in section 3.2.
6.1 Procedure to exercise ARCO rights
To exercise any of the above rights, the User must send a request to [email protected] with the following elements:
- Full name of the holder.
- Email address registered on the Platform.
- Clear description of the right you wish to exercise and the data on which the request falls.
- Copy of valid official identification.
LaPieza will respond within a maximum period of 20 business days counted from receipt of the complete request. If it proceeds, the response will be made effective within the following 15 business days. These terms may be extended once for an equal period, when justified by the circumstances of the case.
7Revocation of Consent
The User may revoke at any time the consent granted for the processing of their personal data, provided there is no legal obligation that requires its conservation. To do so, they must follow the same procedure described in section 6.1. LaPieza will make the revocation effective within a maximum period of 15 business days. Revocation of consent may imply the impossibility of continuing to use some or all of the Platform’s services.
8Use of Cookies and Tracking Technologies
LaPieza uses cookies and browser storage for sessions, preferences and security. Where enabled, PostHog also collects usage analytics and error diagnostics and can record interactions through session replay; these are not all strictly necessary technologies. Diagnostic data can include visited pages, device and browser information, identifiers and interactions. Inputs are configured to be masked in replay, but diagnostic data is not necessarily anonymous. Cloudflare supports security and delivery; loading external fonts from Adobe also sends technical request data to that provider. Browser controls can restrict or delete cookies and storage, although some functions may stop working. For details or to object to optional processing, contact [email protected]. This notice is information, not a blanket consent to every tracking purpose.
9Security Measures
LaPieza has implemented administrative, technical and physical security measures to protect users’ personal data against damage, loss, alteration, destruction, use, access or unauthorized processing, in accordance with the provisions of LFPDPPP and its Regulation. In the event of a security breach that significantly affects the patrimonial or moral rights of Users, LaPieza will notify immediately through the means enabled on the Platform and by email.
9.1Retention
Data is retained for the purposes described here and any applicable legal or contractual retention obligations; when no longer necessary it must be blocked and deleted as applicable. Contact [email protected] to request cancellation or information about the period applicable to your record.
10Modifications to the Privacy Notice
LaPieza reserves the right to modify this Privacy Notice at any time to adapt to legislative, jurisprudential novelties, industry practices or business needs. Any modification will be notified through the Platform and/or by email to the address registered by the User, with at least 5 calendar days in advance of its entry into force.
11Personal Data Protection Authority
Under the current Mexican LFPDPPP, the competent federal authority for personal data held by private parties is the Secretaría Anticorrupción y Buen Gobierno. If you consider your rights have been infringed, you may use the applicable rights-protection or complaint procedure before that authority. Its official website and the current law are linked below.