CompassHubPrivacy policy
Last updated: 28/09/2026 · Version compasshub-2026-09-28-v1
1. Data controller
- Controller: SMART CONSULTING SOLUTIONS SL
- Tax ID (NIF): B02645075
- Registered address: Plaça Barcelona, 11, 08172 Sant Cugat del Vallès (Barcelona)
- Privacy contact: neuronix@neuronix.es
CompassHub is a project of SMART CONSULTING SOLUTIONS SL.
2. What data we process
When you register with CompassHub, you provide the following data:
| Category | Data |
|---|---|
| Identification and contact | Name, email address, phone number and the country you are registering from (Spain or another country). |
| Professional profile | CV (PDF, DOC or DOCX, maximum 10 MB) or a link to your LinkedIn profile. Roles or positions of interest (free text). |
| Job search | Difficulties you face when looking for work (form options and, if you choose, a free text of up to 300 characters). |
| Work preferences | The gross annual salary from which you would consider a change, and whether you want to see job offers that do not state a salary. Work arrangements (on-site, hybrid, remote). Cities of interest for on-site or hybrid work. Scope of remote work (Spain, Europe, any country or specific countries). |
| Registration and consent | Date and version of the consent accepted, the language you registered in and the change history of your record. |
| Internal management | Status of your application and notes added by the team about contact with you. |
All form fields are required to complete registration, except those that only appear depending on your previous answers. Without them we cannot process it.
We ask you not to include in your CV or in free-text fields any special categories of data (health, political opinions, religion, ethnic origin, etc.) or data about other people that is not necessary for your job search.
In addition, our hosting and email providers process technical data needed to provide and protect the service, such as IP addresses and access or error logs.
3. Where the data comes from
In general, the data is provided directly by the data subject through the registration form.
Our team may also create a record manually when the person has given their consent by another means (for example, in a previous recruitment process with Neuronix). In that case, a reference to that consent is recorded.
4. What we use it for
- To manage your place on the CompassHub waiting list.
- To review your profile and contact you, by email or phone, about career opportunities that may match your preferences.
- To send you the emails the service requires: registration confirmation and confirmation of any changes you request to your record.
- To let you know when the platform is available.
- To keep the service secure and to handle your requests to exercise your rights.
5. Legal basis
- Purposes 1 to 4: your consent (Article 6(1)(a) GDPR), which you give by ticking the box on the form. You may withdraw it at any time; withdrawal does not affect processing carried out before it.
- Purpose 5: our legitimate interest in protecting the service (Article 6(1)(f) GDPR) and compliance with legal obligations (Article 6(1)(c) GDPR) relating to data protection.
6. Automated decision-making
We do not make decisions based solely on automated processing, nor do we carry out profiling that produces legal or similarly significant effects. The team reviews registrations manually.
If we use automated tools in the future (for example, to categorise professional interests or suggest job offers), we will update this policy before enabling them.
7. Who has access to your data
Internal team: only authorised members of SMART CONSULTING SOLUTIONS SL have access, through a dashboard protected by username and password. When a new person registers, members who have this option enabled receive an email alert with that person's name, email address, country of origin and, if provided, their LinkedIn link.
Processors: we work with providers that process data on our behalf and in accordance with our instructions:
| Provider | Service | Data location |
|---|---|---|
| Supabase, Inc. | Database, private CV storage and team access | EU, Ireland (eu-west-1) |
| Vercel, Inc. | Website hosting and server execution | EU, Dublin (Ireland) for server execution; the content delivery network is global |
| Resend (Plus Five Five, Inc.) | Sending emails | EU, Ireland (eu-west-1) |
Employers: we do not currently share your data or your CV with companies.
We do not disclose data to third parties unless required by law.
8. International transfers
Although the data is hosted in the EU, the providers above are companies headquartered in the United States and may access it from outside the European Economic Area (for example, for support). In that case, transfers are covered by:
- the EU-US Data Privacy Framework, if the provider is certified, or
- the standard contractual clauses approved by the European Commission.
You can request more information about these safeguards at neuronix@neuronix.es.
9. How long we keep it
| Data | Period |
|---|---|
| Candidate record, CV, notes and change history | Until you withdraw your consent or ask to be removed, and for a maximum of 24 months from your last update or contact. Before that period ends, we will ask you whether you wish to keep your registration. |
| Original copy of each form submission | 90 days from receipt. |
| Unconfirmed change requests | The link expires after 24 hours; the request and the attached CV are deleted afterwards. |
| CVs uploaded without completing registration | Deleted after 24 hours. |
Once the period has expired, the data may be kept blocked only for as long as necessary to deal with any potential legal liabilities, and will then be erased.
10. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability, and withdraw your consent, by writing to neuronix@neuronix.es.
Please state which right you wish to exercise. If we have doubts about your identity, we may ask you for additional information to verify it. We will respond within one month, which may be extended in the cases provided for in the GDPR.
If you believe we have not handled your rights properly, you can lodge a complaint with the Spanish Data Protection Agency (AEPD) (www.aepd.es).
11. Security
- CVs are kept in private storage, with no public access.
- Only the authorised team can view them, through temporary download links (valid for 60 seconds).
- Communications with the website are encrypted with HTTPS.
- If someone submits the form with an email address that is already registered, the changes are not applied until they are confirmed through a link sent to that address.
- The dashboard logs the changes the team makes to each record.
12. Minors
CompassHub is intended for people aged 18 or over. If we detect data belonging to a minor, we will delete it.
13. Cookies
Please see our Cookie policy.
14. Changes to this policy
We may update this policy when the service or the law changes. We will publish the new version with its date.
If the change affects purposes or recipients that require your consent, we will ask for it again before applying the change.