Privacy notice

1 · Who is responsible for your data

Talentapy, S.A.P.I. de C.V., which operates commercially under the Ventasy brand, with its address in Monterrey, Nuevo León, Mexico, is responsible for processing the personal data it collects through this site and through its recruitment operations.

You can contact us at any time about this notice or about your personal data at privacidad@ventasy.com. Any other matter is handled at contacto@ventasy.com. Requests concerning personal data are handled by the Personal Data Department, and the controller’s full address is provided to anyone who requests it through that channel.

This notice is governed by the Federal Law on the Protection of Personal Data Held by Private Parties (Ley Federal de Protección de Datos Personales en Posesión de los Particulares) in force in Mexico.

2 · Who this notice applies to

We process personal data from four groups of people, with different rules for each:

• Candidates: people who create their sales profile, apply for a role or are contacted by us as part of a search.
• Clients and prospects: people who work at companies that request a quote, a job brief or a selection process.
• Employment references: people a candidate points us to so we can validate their track record.
• Site visitors: anyone who browses ventasy.com without identifying themselves.

3 · What data we collect from candidates

When you create your sales profile, apply for a role or take part in a process, we may collect:

• Identification and contact: full name, email address and phone number.
• Professional background: companies, roles, tenure, type of selling, markets served, account size, sales cycle, results against quota and compensation expectations.
• Your CV and any document you choose to share with us.
• Luks Prisma Sales Profile results: sales intensity, preferred role and the environment where you perform best.
• Interview notes taken by our team, including our assessment of your fit with a role.
• Feedback from employment references you authorized us to contact.
• Your process preferences, such as a request to keep your search confidential.

4 · What data we collect from clients and prospects

When you request a quote, send a job brief or write to us through the contact form, we collect:

• Professional identification and contact details: name, email, phone, company and job title.
• Role details: position, city, what the company sells, type of selling, sales cycle and hiring urgency.
• The content of the messages, emails and calls we exchange during the process.
• Billing and tax compliance data, once the business relationship is formalized.

A company’s data is not personal data, but the data of the people who work there is. This notice protects those people.

5 · Data we don’t ask for: sensitive and third-party data

We do not request sensitive personal data. We do not ask about health, racial or ethnic origin, religious, philosophical or moral beliefs, union membership, political opinions, genetic information or sexual orientation. Nor do we administer medical exams or clinical psychometric tests.

A CV sometimes includes data we don’t ask for: a photo, age, marital status, dependents. If it appears, we don’t use it as an assessment criterion and we ask you to leave it out. The Luks Prisma Sales Profile measures sales style, not health or clinical personality.

If you share another person’s data with us, such as an employment reference or a colleague at your company, you confirm that you have informed them of this notice and have their consent. When we contact references, we tell them where we obtained their data in the first contact.

6 · What we use your data for: necessary purposes

These purposes are necessary for the relationship. Without them we cannot provide the service.

• Candidates · Assess your sales profile, interview you and determine your fit with open roles.
• Candidates · Administer and score the Luks Prisma Sales Profile.
• Candidates · Present your candidacy to a client company, only with your prior consent for that specific process.
• Candidates · Contact the employment references you authorize.
• Candidates · Coordinate interviews, keep you updated and support you all the way to the hire.
• Clients · Handle job briefs, provide quotes and carry out the contracted search process.
• Clients · Present shortlists and coordinate the interview schedule.
• Clients · Invoice, collect payment and comply with tax and contractual obligations.
• Everyone · Respond to contact requests and handle the exercise of ARCO rights.
• Everyone · Comply with legal requests from a competent authority.

7 · Additional purposes you can opt out of

Additionally, and only if you do not object, we use your data to:

• Let you know about open roles that match your profile, even if you didn’t apply for them.
• Invite you to future processes and keep you in our sales talent database.
• Send you content about the sales talent market, compensation and sales practices.
• Produce aggregated, anonymized statistics about the market that cannot identify you.
• Improve our service and the experience of this site.

You can object to these purposes now or at any time by writing to privacidad@ventasy.com with the subject line "Finalidades adicionales" (additional purposes). Your objection does not affect selection processes in progress or the provision of the contracted service.

8 · How we obtain your consent

When you submit a form on this site after having been able to read this notice, we understand that you consent to the processing described for the necessary purposes.

We ask for your express consent, in writing or by verifiable electronic means, at two specific moments:

• Before administering the Luks Prisma Sales Profile and before sharing its results with a client company.
• Before presenting your candidacy, your CV or your assessment to each client company. Consent is given process by process: accepting one does not authorize the next.

We never send your profile to a company without telling you which one it is and without your acceptance.

9 · Sales assessment and use of technology

The Luks Prisma Sales Profile is a read on how you sell: sales intensity, preferred role and the environment where you perform best. It is not a clinical test or a psychological diagnosis, and its result alone does not determine whether you advance in a process.

We use artificial intelligence tools for support tasks: organizing information, drafting profile summaries and preparing shortlist comparisons. No decision about your candidacy is made in an automated way: the assessment, the shortlist and the recommendation are always decided by a person on our team, and the hiring decision belongs to the client company.

The providers of these tools process the information as processors, under contractual confidentiality obligations and without authorization to use it to train their models.

10 · Who we share your data with

We distinguish two cases. A transfer is the delivery of data to a third party that makes its own decisions about it. A remission (remisión) is the delivery of data to a provider that only processes it following our instructions.

Transfers:

• Client companies, when we present your candidacy within a process you expressly accepted. They receive your profile, your CV and, where applicable, your sales assessment.
• Competent authorities, when there is a duly grounded and reasoned request.
• Legal and accounting advisors, when indispensable to defend a right or fulfill an obligation.

Remissions. We rely on technology providers that process data on our behalf. Several operate servers outside Mexico, mainly in the United States and the European Union, and all are subject to contractual confidentiality and security obligations:

Ventasy does not sell, rent or trade personal data.

11 · How long we keep your data

We keep your data for as long as the purpose for which it was collected remains.

If you are a candidate, your profile stays in our talent database until you request its cancellation. We work with sales roles that open on a recurring basis, and keeping your profile is what allows us to contact you again when one that matches you comes up. We review the database every two years and remove the profiles with which we have had no contact or response during that period.

If you are a client, we keep the relationship data for as long as it lasts and for the period required by the applicable tax and commercial obligations, which is currently five years from the last transaction.

Once that period ends or we receive your cancellation request, we block the data, making it inaccessible for any use, and then delete it from our systems and our backups.

12 · Your ARCO rights and how to exercise them

You have four rights over your personal data:

• Access: know what data we hold about you and how we use it.
• Rectification: correct any of it that is incomplete or out of date.
• Cancellation: ask us to delete it from our databases.
• Opposition: ask us to stop using it for a specific purpose.

Send your request to privacidad@ventasy.com with: your full name, a way to contact you, a clear description of the right you are exercising and the data involved, and a copy of an official ID proving your identity. If you are acting on someone else’s behalf, attach the corresponding power of attorney or letter of authorization.

We respond within a maximum of twenty business days from the date we receive the request. If it is granted, we carry it out within the fifteen business days following that response. We may ask you for additional information once, within five business days of your request; if you do not respond within ten days, the request is deemed not submitted.

Exercising these rights is free of charge. We could only charge you for shipping costs or for reproduction in copies or other formats.

Cancellation and opposition do not apply when the law requires us to keep the data, when they would obstruct an investigation or when the data is necessary to fulfill an obligation arising from a legal relationship in force with you.

13 · Withdrawing your consent

You can withdraw the consent you gave us at any time, and also limit the use or disclosure of your data, through the same procedure described in the previous section.

Withdrawal is not retroactive: it does not cover processing carried out before we received it, nor does it bind client companies to which your candidacy had already been presented with your authorization. If you want a client company to delete your information, we can tell you whom to contact.

14 · Cookies and tracking technologies

This site uses cookies and similar technologies to work, to understand how it is browsed and to measure the performance of our campaigns and our content.

• Necessary cookies: they keep the site running and protect the forms against automated submissions with Google reCAPTCHA Enterprise, subject to Google’s privacy policy and terms of service. They cannot be disabled.
• Analytics cookies: Google Analytics, Google Tag Manager, PostHog and Vercel’s metrics. They tell us which pages are visited, from where and on what device.

You can set your browser to block or delete cookies. The site keeps working without them, although we lose the ability to measure how it is used.

We do not use cookies to make decisions about your candidacy or to build individual advertising profiles.

15 · Confidentiality of your search

We know that many of the best sales candidates are employed. If you tell us your search is confidential, we do not contact your current employer, we do not share your profile with companies in your corporate group without telling you first, and we do not present your candidacy without your explicit authorization for each process.

Our team is bound by confidentiality obligations that remain in effect even after their relationship with the firm ends.

16 · Information security

We apply administrative, technical and physical measures to protect your data against loss, misuse, unauthorized access, alteration or destruction: individual access controls, encryption in transit, strong authentication in the tools where the information lives, and confidentiality agreements with providers and with every person on the team.

No system is infallible. If a breach occurs that significantly affects your property or moral rights, we will inform you without delay through the contact details we have on record, so you can take action.

17 · Minors

This site and our services are intended for people over eighteen. We do not knowingly collect data from minors. If we find that a profile belongs to a minor, we delete it.

18 · Authority and remedies

If you believe your right to personal data protection has been violated, or that in responding to your request we acted contrary to the law, you can go to the Secretaría Anticorrupción y Buen Gobierno (Ministry of Anti-Corruption and Good Governance), the competent authority on the matter since the 2025 reform.

We would appreciate it if you wrote to us first: most cases are resolved directly and faster.

19 · Changes to this notice

This notice may change due to legal changes, new processing practices or adjustments to our service. The current version is always published on this page, with the date of its last update at the top.

When the change is significant, such as a new purpose or a new recipient of transfers, we will let you know through the contact details we have on record before applying it.