Privacy Policy

Last updated: December 2025

1. General Information

TalentBoard Barcelona (hereinafter "Platform") is responsible for processing the personal data of talents and companies that register on its service. We are committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR) in force since May 25, 2018. By using our Platform, you accept the conditions described in this privacy policy.

2. Data Controller

Data Controller: The entity operating the TalentBoard Barcelona Platform at the time in question, currently La French Tech Barcelona. NIF: G67389114 Address: Avenida Diagonal, 456, 6ª Planta – 08006 Barcelona, Spain Email: contact@frenchtechbarcelona.com Data Protection Officer (DPO): Lucas Sala DPO Email: {contactEmail}

3. Legal Basis for Processing

For talents who register:

For talents who register:

  • Main legal basis: Explicit consent of the user (Article 6.1.a of GDPR)
  • Secondary legal basis: Legitimate interest in professional networking (Article 6.1.f of GDPR) Purpose: enable matching with registered companies, facilitate professional networking, offer relevant job opportunities, improve the service.

For companies accessing the talent database:

For companies accessing the talent database:

  • Main legal basis: Explicit consent of talents to share their data (Article 6.1.a of GDPR) Purpose: consultation of talent profiles for professional opportunities, direct recruitment, networking with qualified candidates.

Important: consent must be explicit because talents are in a context involving a potential imbalance between candidates and recruiters. We cannot simply use legitimate interest without prior consent.

4. Data Collected

For talents:

For talents:

  • Identity (name, first name)
  • Email address
  • Phone number
  • CV / complete professional profile
  • Detailed professional experience
  • Education and degrees
  • Identified skills
  • Profile photo (if provided)
  • LinkedIn profile or other professional networks (if provided)
  • History of interactions with companies
  • Geographic location data (if applicable)
  • Job search preferences

For companies:

For companies:

  • Identity of the person responsible for recruitment
  • Company name and complete contact details
  • Industry sector and field of expertise
  • Professional email
  • Search and profile consultation history
  • Connection data (logs, IP addresses, timestamps)
  • Interactions with talents

5. Data Sharing Between Talents and Companies

CRITICAL TRANSPARENCY: the personal data of talents registered on the Platform, including CV, skills, and contact information, will be viewable and accessible to companies registered on the Platform. This data sharing constitutes an essential purpose of the service.

You explicitly consent to sharing your data with companies in our community when you check the corresponding box during registration. Without this consent, your profile will not be visible to recruiters.

Each talent retains the right to:

Each talent retains the right to:

  • request access to their data;
  • request rectification of their data;
  • request deletion of their profile;
  • request withdrawal of their consent at any time.

In case of withdrawal of consent, your profile will be deleted from the Platform and companies will no longer be able to consult it.

The terms of use of the Platform and the respective responsibilities of Users are detailed in the Terms of Service.

6. Data Recipients

Personal data may be accessible to the following recipients:

  • companies registered on the Platform (access to CV and complete profile);
  • administrative team of the Platform (limited access for management and support);
  • data is mainly hosted within the European Union. Certain technical providers, including Vercel, may result in data transfers to the United States, covered by contractual guarantees compliant with GDPR (Standard Contractual Clauses);
  • legal authorities in case of legal obligation or official request;
  • event or communication partners (only with additional consent).

7. Data Retention Period

For talents:

For talents:

  • during active registration: profile kept as long as the talent wishes;
  • after account deletion: complete deletion of personal data within 30 days (except legal obligation);
  • non-users for 24 months: inactive talents without connection for 24 months will receive an email inviting them to renew their consent. Otherwise, the account will be deactivated and data archived then deleted after two additional months;
  • maximum archiving: 24 months except legal obligation.

For companies:

For companies:

  • data kept during the subscription period;
  • complete deletion six months after account termination.

For connection logs and interactions:

For connection logs and interactions:

  • maximum retention of 12 months for security and compliance purposes.

8. Data Security

We implement the following security measures to protect your personal data:

  • data hosting in the European Union via Vercel with GDPR contractual guarantees (Standard Contractual Clauses);
  • encryption of data in transit (HTTPS/TLS) and at rest;
  • restricted access control to data (only authorized personnel);
  • regular security audits;
  • backup and recovery policy in case of disaster;
  • secure authentication (encrypted passwords).

9. User Rights

Each data subject has the following rights, to be exercised by writing to contact@frenchtechbarcelona.com:

Each data subject has the following rights, to be exercised by writing to contact@frenchtechbarcelona.com:

  • right of access;
  • right of rectification;
  • right to erasure (right to be forgotten);
  • right to restriction of processing;
  • right to data portability;
  • right to object, particularly to marketing;
  • right to withdraw consent at any time.

Exercise procedures:

Exercise procedures: Requests must be sent by email to contact@frenchtechbarcelona.com, accompanied by a copy of an identity document. A response will be provided within 30 days, extendable to 60 days in case of complexity.

10. Account Deletion

You can request deletion of your account at any time via your personal space or by email to contact@frenchtechbarcelona.com. Complete data erasure will be carried out within 30 days, except legal obligations.

11. Complaints to the Supervisory Authority

You have the right to file a complaint with the competent supervisory authority.

In Spain:

In Spain:

  • Authority: Agencia Española de Protección de Datos (AEPD)
  • Website: www.aepd.es
  • Email: info@aepd.es

In France (if you reside in France):

In France (if you reside in France):

  • Authority: Commission Nationale de l'Informatique et des Libertés (CNIL)
  • Website: www.cnil.fr
  • Email: plaintes@cnil.fr
  • Address: 3 Place de Fontenoy, 75007 Paris, France

12. International Data Transfers

Personal data may be transferred to the United States (notably via Vercel). These transfers are covered by contractual guarantees compliant with GDPR (Standard Contractual Clauses). You can request additional information on these protection mechanisms.

13. Policy Modifications

This policy may be modified at any time. Modifications will be displayed on this page with the update date. By continuing to use the Platform after modification, you accept the new version. Significant changes will be subject to notification.

14. Contact

For any questions regarding this privacy policy or the processing of personal data:

  • Email: contact@frenchtechbarcelona.com
  • Address: Avenida Diagonal, 456, 6ª Planta – 08006 Barcelona, Spain
  • DPO: Lucas Sala - contact@frenchtechbarcelona.com