Legal document
Privacy Policy
Last updated: 26 July 2026
You'll be trusting us with your passport, certificates and work history. This document explains exactly what we do with that, who we share it with, and how you can have it all deleted.
01Who handles your data
The controller of your personal data is EXL Business Consulting LLC, operating under the trade name Maximo Diesel.
| Field | Details |
|---|---|
| Controller | EXL Business Consulting LLC |
| Address | [to be confirmed] |
| Data officer / contact | [to be confirmed] |
This policy observes Brazil's General Data Protection Law (Law No. 13.709/2018), the European Union's General Data Protection Regulation (GDPR) and Colombian data protection law (Law 1581/2012).
02What data we collect
| Category | Examples |
|---|---|
| Identification | Name, date of birth, nationality, national ID or equivalent document |
| Contact | Phone, email, city and state of residence |
| Professional | Experience, previous employers, machines and brands, technical certificates, competency evaluation |
| Documentary | Passport, employment record, supporting documents, certificates required by the visa process |
| Family | Marital status and dependants, where relevant to family reunification |
We do not collect browsing data for advertising. This site uses no tracking cookies, no ad pixels and no profiling tools.
03Sensitive data
The work visa process requires documents that the law classifies as sensitive personal data, in particular the criminal record certificate and, where required, the medical certificate.
These documents are handled under the following rules:
- They are requested only when required by the consular authority or the immigration procedure, never in advance.
- They are used exclusively to process your case, with your express consent.
- They are not used for any form of discriminatory screening beyond what the destination country's law requires.
- They are deleted once the process concludes or when you withdraw consent, save where retention is legally required.
04Why we process your data
| Purpose | Legal basis |
|---|---|
| Assess your profile and present it to employers | Pre-contractual steps taken at your request |
| Process the work authorisation and visa | Consent and compliance with a legal or regulatory obligation |
| Communicating with you during the process | Consent and legitimate interest |
| Follow-up after hiring | Performance of a contract and legitimate interest |
05Who we share it with
We share your data only with those who need it for your process to happen:
- The employing company in the destination country, to assess the application and issue the job offer.
- The lawyer engaged by the employer (or immigration agent) responsible for the migration procedure.
- Competent public authorities: consulates, immigration and labour bodies.
- Service providers that are strictly operational, such as sworn translators and communication and storage platforms, bound by confidentiality.
We do not sell, rent or transfer your data to third parties for marketing, advertising or building commercial databases. Your phone number and your messaging consent data are never shared with third parties or affiliates under any circumstances.
06International transfer
By the nature of the service, your data necessarily crosses borders: it is collected in Brazil or Colombia, handled by the company in the United States and transmitted to the employer and authorities in Spain.
This transfer is essential to carrying out the process you request and occurs with your consent, limited to what is strictly necessary and subject to confidentiality commitments with each recipient.
07How long we keep it
| Situation | Period |
|---|---|
| Candidate not selected | Up to 12 months, unless you request deletion sooner |
| Process underway | For the duration of the process |
| Candidate placed | For the duration of the engagement and any applicable legal retention period |
| Sensitive documents | Deleted once the purpose is fulfilled |
08Your rights
At any time and free of charge, you may:
- Confirm whether we process your data and access that data.
- Correct incomplete, inaccurate or outdated data.
- Request deletion of data processed on the basis of consent.
- Withdraw consent at any time, understanding that this may make continuing the process impossible.
- Request portability and information about who we share your data with.
- Object to processing and lodge a complaint with the competent authority (ANPD in Brazil, AEPD in Spain, SIC in Colombia).
To exercise any of these rights, write to our contact address. We respond within 15 days.
09Security
We apply technical and organisational measures to protect your data, including restricted access to those involved in your process, storage in a controlled environment and formal confidentiality commitments from our team and providers.
No system is entirely immune. In the event of an incident posing a significant risk to your rights, we will notify you and the competent authority within the legal deadlines.
10Messages and phone
We use your number for communication about the process via SMS, phone calls and email.
- Frequency varies according to the progress of your process.
- Message and data rates from your carrier may apply.
- Reply STOP to cancel or HELP for support, at any time.
- Consent data and phone numbers are not shared with third parties or affiliates for marketing purposes.
11Minors
Our process is intended for professionals aged 18 and over. We do not knowingly collect data from minors. If we identify improper collection, the data will be deleted.
12Changes and contact
This policy may be updated. The version in force is always the one published on this page, with the date shown at the top.
| gustavo.l@dhmexport.com | |
| Address | [to be confirmed] |