CV Processing Consent
Last updated: December 2025
1. Purpose of CV Processing
When you upload a curriculum vitae (CV) to TalentBoard Barcelona (the "Platform"), your CV is processed for the sole purpose of enabling professional visibility and facilitating connections between talents and companies registered on the Platform. The processing of your CV allows the Platform to display your professional profile, qualifications and experience to companies that may be interested in your background, and to support professional matching and recruitment-related exchanges initiated through the Platform. CV processing is strictly limited to professional and recruitment-related purposes. Your CV is not used to make automated hiring decisions, does not produce legal or similarly significant effects, and does not constitute a guarantee of employment, recruitment, or contractual engagement. No processing of your CV is carried out for advertising, commercial prospecting, or unrelated purposes unless you have provided a separate and explicit consent for such use.
2. Legal Basis for CV Processing
The processing of your CV is primarily based on your explicit consent, in accordance with Article 6(1)(a) of the General Data Protection Regulation (GDPR). This consent is collected at the time you upload your CV and activate its visibility on the Platform. In addition, CV processing may also rely on Article 6(1)(b) of the GDPR, insofar as such processing is necessary for the performance of the service you have expressly requested, namely the professional matching and visibility services provided by the Platform. Providing your CV and consenting to its processing are entirely voluntary. However, without such consent, your CV cannot be processed, displayed, or made accessible to companies, and certain core features of the Platform may not be available to you. You may withdraw your consent at any time, under the conditions described in this document, without affecting the lawfulness of processing carried out prior to the withdrawal.
3. Data Extracted From Your CV
When you upload your CV, the Platform processes the information you voluntarily provide within the document. This may include, depending on the content of your CV:
- identification data such as your name and contact details;
- educational background, diplomas and certifications;
- professional experience and employment history;
- skills, competencies and areas of expertise;
- languages spoken;
- any other professional information you choose to include. The Platform may structure or organize this information in order to display it clearly within your profile and facilitate search and matching by companies. You remain solely responsible for the content of your CV. You are advised not to include sensitive personal data within your CV, such as data relating to health, political opinions, religious beliefs, or any other special category of data within the meaning of Article 9 of the GDPR. If such information is included voluntarily, it is processed solely at your initiative and under your responsibility.
4. How Your CV Is Processed
Your CV is stored securely within the Platform's technical infrastructure and linked to your personal account. The processing operations applied to your CV may include storage, display, formatting, indexing and consultation, strictly for the purposes described above. Your CV is not processed for automated decision-making, profiling producing legal effects, or algorithmic hiring decisions. Any matching or visibility mechanisms implemented by the Platform are designed solely to facilitate access and discovery by companies and do not replace human judgment. Companies registered on the Platform may view your CV only when you have chosen to make your profile visible. Access to CVs is limited to the Platform environment and subject to the Conditions Générales d'Utilisation, which prohibit any unauthorized extraction, reuse or external exploitation of CV data. Access to CVs by the Platform's internal team is strictly limited to authorized personnel and only where necessary for operational, support, security or compliance purposes.
5. Who Can Access Your CV
Your CV is accessible only to a limited and clearly defined set of recipients, strictly within the scope of the Platform's professional matching purpose. Access to your CV is restricted to:
- yourself, through your personal account;
- registered companies on the Platform, only when you have explicitly chosen to make your profile visible;
- authorized members of the Platform's operational team, solely where access is necessary for technical maintenance, user support, security monitoring, compliance obligations or dispute handling. Companies accessing your CV do so under their own responsibility and are bound by the Platform's Conditions Générales d'Utilisation, which strictly prohibit the extraction, reuse, resale, enrichment, or external exploitation of CV data outside the Platform. The Platform does not grant public access to CVs, does not index CVs on search engines, and does not share CVs with third parties unrelated to the professional matching service without your explicit consent.
6. CV Retention Period
Your CV is retained for as long as your account remains active and your profile is visible on the Platform. You may delete or replace your CV at any time through your account settings. In such case, the deleted CV will no longer be accessible to companies and will be permanently removed from the Platform's active systems within a reasonable technical delay. If your account is deleted, your CV and associated personal data will be erased in accordance with the data retention periods defined in the Platform's Privacy Policy, unless a longer retention period is required by applicable legal or regulatory obligations. In the event of prolonged inactivity, your CV may be archived or deleted in accordance with the retention rules described in the Privacy Policy, following prior notification where required.
7. Your Rights Regarding Your CV
You retain full control over your CV at all times. In accordance with the GDPR, you have the right to:
- upload, update or replace your CV at any time;
- delete your CV without justification;
- request access to the personal data extracted from your CV;
- request rectification of inaccurate or incomplete information;
- request the erasure of your CV and related data, subject to applicable legal obligations;
- request the restriction of processing in certain circumstances. Exercising these rights does not affect the lawfulness of processing carried out prior to your request. Requests relating to your CV and its processing may be submitted via your personal account or by contacting the Platform at the address indicated below.
8. Withdrawal of Consent and Contact
You may withdraw your consent to the processing of your CV at any time, without providing any justification. Withdrawal of consent can be effected by:
- deleting your CV from your account;
- disabling the visibility of your profile;
- requesting account deletion. Upon withdrawal of consent, your CV will no longer be processed or accessible to companies, and will be deleted in accordance with the applicable retention rules. For any questions regarding CV processing, the exercise of your rights, or the interpretation of this consent document, you may contact the Platform at: Email: privacy@talentboard-barcelona.com or Email: contact@frenchtechbarcelona.com
9. No Automated Decision-Making or Profiling
The processing of your CV does not involve automated decision-making within the meaning of Article 22 of the GDPR. Your CV is not subject to automated evaluations producing legal effects or similarly significant impacts on you, such as automatic hiring decisions, automated rejection, or ranking that would determine access to employment opportunities without human intervention. Any visibility, search or matching mechanisms implemented on the Platform are intended solely to facilitate discovery by companies and do not replace human review, judgment or decision-making by recruiters.
10. Data Security and Confidentiality Measures
The Platform implements appropriate technical and organizational measures to ensure the confidentiality, integrity and security of your CV and related personal data. These measures include, in particular:
- secure hosting environments with access controls;
- encryption of data in transit using industry-standard protocols;
- restricted access to CV data limited to authorized personnel;
- monitoring and logging of access to CVs to detect abnormal or unauthorized behavior. Despite these measures, no system can guarantee absolute security. The Platform commits to acting diligently and in compliance with applicable data protection standards to mitigate risks and respond promptly to any security incidents.
11. Responsibility of Companies Accessing CVs
Companies accessing your CV do so under their own responsibility and act as independent data controllers with respect to any processing they carry out outside the Platform. Once a company accesses your CV through the Platform, it is solely responsible for ensuring that any further use, storage or processing of your data complies with applicable data protection laws. The Platform cannot be held responsible for the use of your CV by companies outside the technical environment of the Platform, particularly in the event of unauthorized copying, storage or external processing, provided that the Platform has complied with its own legal and contractual obligations. Any misuse of CV data by a company may result in the suspension or termination of its access to the Platform and may give rise to legal action.
12. Changes to This CV Processing Consent
This CV Processing Consent may be updated from time to time to reflect changes in legal requirements, technical operations or the services offered by the Platform. Any material changes affecting the processing of your CV will be communicated to you in an appropriate manner. Continued use of the Platform after such changes constitutes acknowledgment of the updated version. The version in force is the one published at the time of your CV upload or update.
13. Applicable Law and Supervisory Authority
This CV Processing Consent is governed by the laws applicable in Spain and by the General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679). In the event of a dispute relating to the processing of your CV or the exercise of your data protection rights, you are encouraged to first contact the Platform in order to seek an amicable resolution. Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a competent supervisory authority. In particular, you may contact:
- In Spain Agencia Española de Protección de Datos (AEPD) Website: www.aepd.es
- In France (if you reside in France) Commission Nationale de l'Informatique et des Libertés (CNIL) Website: www.cnil.fr This provision does not affect your right to seek judicial remedies before the competent courts, in accordance with applicable law.