Privacy policy and terms of use

The controller of the personal data is Engineering Hub (hereinafter, “the Association”).

Contact email: engineeringhub.bcn@gmail.com.

Personal data may be obtained:

• Directly from you during the registration process or through your subsequent use of the platform.
• Through the company or organisation you belong to, when it provides us with the data needed to manage your association with the Association.
• Automatically while you use the platform, including certain technical information needed to ensure its operation and security and to prevent unauthorised access.

Depending on your relationship with the Association and the features you use, we may process, among others:

• First and last name.
• Email address.
• Contact information.
• Company or organisation you belong to.
• Position or role within the organisation, when provided.
• Profile photo, where applicable.
• Information related to the user account.
• Information related to assigned permissions and access.
• Technical information needed for the operation and security of the platform.
• Any other information you choose to provide voluntarily.

The data collected will be limited to what is necessary for the corresponding purposes.

Partners’ personal data may be processed to:

• Manage user registration, identification and authentication.
• Verify the user’s association with a partner company or organisation.
• Manage the permissions and access available within the platform.
• Provide access to the Engineering Hub Barcelona member directory where applicable.
• Provide access to the CVs and professional information of members who have authorised this disclosure.
• Allow viewing other Partner users linked to the same company or organisation.
• Manage the relationship between the Association and partner companies or organisations.
• Facilitate communications related to the Association’s activities, collaborations, professional opportunities and other initiatives.
• Ensure the security of the platform and prevent unauthorised access and fraudulent use or use contrary to these terms.
• Produce internal statistics on platform usage, anonymised whenever possible.

The processing of the data needed to create, maintain and manage a Partner account is based on managing the existing relationship between the Association, the Partner user and, where applicable, the organisation they belong to.

Certain processing related to security, fraud prevention or protection of the platform may be based on the Association’s legitimate interest in ensuring the safe and appropriate use of its systems.

When a specific processing activity requires the user’s consent, it will be requested specifically.

Partners’ access to CVs or certain professional information of members will be limited to cases in which the corresponding member has authorised the disclosure of this information to sponsoring or partner companies.

Partner users’ data will be kept for as long as:

• the account remains active;
• there is an association with the partner company or organisation;
• it is needed to manage the relationship with the Association.

When this relationship ends or deletion of the account is requested, the data will be deleted, blocked or anonymised as appropriate, without prejudice to any retention periods that may be required to comply with legal obligations or to address possible liabilities.

Certain Partner accounts may have access to the Association’s member directory.

This directory may contain members’ professional or academic information, such as:

• first and last name;
• profile photo;
• studies or degree;
• academic year;
• professional interests;
• experience;
• LinkedIn profile;
• awards or achievements;
• CV, when the user has authorised access to it.

The information available may vary depending on the Partner’s permissions and the members’ privacy preferences or consents.

Authorised Partners may view the CVs of members who have expressly authorised this disclosure.

Access to CVs and other professional data is primarily intended to facilitate:

• internship opportunities;
• recruitment processes;
• job opportunities;
• professional collaborations;
• activities related to talent acquisition.

The availability of a CV on the platform does not mean that it is public or freely available information.

The Partner may only use this data for professional purposes compatible with those that justified the access.

The Partner user undertakes to make responsible, legitimate and professional use of the platform and of the data they have access to.

In particular, they undertake to:

• Use members’ information only for legitimate professional purposes.
• Respect the confidentiality of the information consulted.
• Limit access to the information to the people in their organisation who genuinely need it for the corresponding purpose.
• Take reasonable measures to prevent unauthorised access to the information.
• Inform the Association if they detect unauthorised access, a possible security breach or misuse of their account.
• Keep the information associated with their account and organisation up to date as far as possible.

The following are expressly prohibited:

• Mass collection of information from the directory.
• Scraping, automated crawling or other similar mechanisms intended to extract data from the platform.
• Creating parallel databases from the member directory.
• Mass downloading of CVs.
• Selling, marketing or transferring to third parties the data obtained through the platform.
• Publishing members’ CVs or personal information on websites, public databases or other platforms without an appropriate legal basis.
• Using the information for purposes other than the professional or collaboration purposes for which access was granted.
• Sharing access credentials with unauthorised people.
• Accessing or attempting to access information belonging to other companies, organisations or users for which there is no permission.
• Attempting to circumvent the technical or security measures implemented by the Association.
• Using the platform in a way that may harm the Association, its members or third parties.

Partner users may view certain information about other Partner accounts associated with the same company or organisation.

The purpose of this feature is to facilitate access management and the relationship between the organisation and Engineering Hub Barcelona.

Partners may not view users associated with other organisations unless there is express authorisation or a specific feature that allows it.

Partner accounts are personal and non-transferable.

Each user is responsible for:

• keeping their credentials confidential;
• not sharing their password with third parties;
• using only their own account;
• reporting any possible compromise or unauthorised use of the account.

Having several people from the same company who need access to the platform does not justify sharing a single account. Each person must have their own access when necessary.

Engineering Hub Barcelona may limit, suspend or revoke a Partner user’s access when:

• they no longer belong to the associated company or organisation;
• the relationship between the company and the Association ends;
• there are reasonable indications of misuse of the platform;
• credentials are shared with unauthorised people;
• mass data extraction takes place;
• CVs or personal data are used for unauthorised purposes;
• it is necessary to protect the security of the platform or its members;
• these terms are breached.

Where possible and appropriate in the circumstances, the Association may inform the user or the organisation of the reason for the suspension.

Partners’ personal data will not be sold to third parties.

Technology providers needed for the operation of the platform may have access to certain information, such as providers of:

• hosting;
• databases;
• authentication;
• storage;
• email;
• technology infrastructure.

These providers may only process the information to the extent necessary to provide the corresponding service and in accordance with the applicable regulations.

Data may also be disclosed when there is a legal obligation to do so.

Engineering Hub Barcelona will adopt reasonable technical and organisational measures to ensure a level of security appropriate to the data processed.

These measures may include:

• authentication systems;
• permission-based access controls;
• restrictions on access to CVs;
• private document storage;
• security or access logs when necessary;
• other measures intended to prevent unauthorised access.

No system can guarantee absolute security, but the Association will apply measures proportionate to the risks associated with processing the information.

The Partner user is responsible for the use they make of the information accessible through their account.

Once certain information has been legitimately used to start a recruitment process or a direct professional relationship with a member, the corresponding company or organisation may acquire its own data protection responsibilities regarding the subsequent processing of that information.

Engineering Hub Barcelona will not be responsible for independent processing subsequently carried out by a company when that company acts as the controller of the data.

The platform, its design, code, structure, brand and Engineering Hub Barcelona’s own content are protected, where applicable, by the applicable intellectual and industrial property regulations.

Access as a Partner does not grant any ownership rights over these elements.

Copying, reproducing, modifying or substantially redistributing the platform or its content is not permitted, except where expressly authorised by the Association.

This limitation does not affect the legitimate use of members’ CVs or professional information in accordance with these terms.

Engineering Hub Barcelona will endeavour to keep the platform accessible and functional, but does not guarantee uninterrupted availability.

The Association may modify, suspend or update features when necessary for technical, security or maintenance reasons or for the evolution of the service.

The user may exercise, where applicable, the rights of:

• access;
• rectification;
• erasure;
• restriction of processing;
• objection;
• portability.

When processing is based on consent, that consent may be withdrawn at any time, without affecting the lawfulness of processing carried out beforehand.

To exercise these rights, a request can be sent to engineeringhub.bcn@gmail.com with the subject “Data Protection”.

The user also has the right to lodge a complaint with the competent data protection authority if they believe the processing of their personal data does not comply with the applicable regulations.

Engineering Hub Barcelona may update these terms when necessary to adapt them to:

• changes in the platform’s features;
• new security measures;
• changes in the relationship with Partners;
• regulatory changes.

When the changes are substantial, users will be informed through appropriate means.

By creating or using a Partner account, the user declares that they have read and accepted this Privacy Policy and Terms of Use for Partners.

This acceptance does not replace the specific consents that may be required for certain processing of personal data.