Privacy policy

• Owner: Surf Engineering, S.L.
• Trade name: InduFreelance (indufreelance.com)
• CIF (tax ID): B64217631
• Registered address: C/ Portugal 29, local 1, 08027 Barcelona (Spain)
• Contact email: comunicacion@surfensl.com

No Data Protection Officer has been appointed. For any privacy matter, write to comunicacion@surfensl.com.

• From your ecosystem Account: the name and email you sign in with. InduFreelance does not issue its own credentials or store your password.
• Professional profile: category, country and area, mobility, remote work, headline, photo, languages, skills, work experience (position, dates, company or workplace), qualifications with their documents and portfolio with its files.
• Activity on the platform: availability, collaboration requests, messages and attachments, collaborations, ratings, network of colleagues, community posts and support tickets.
• From companies: company and representative details, subscribed plan and billing details where applicable.
• Technical data: IP address, date and time, and access and audit logs of relevant actions. For links you share, the date of each visit is recorded and, if the visitor is signed in to the platform, their profile.

• Providing the service —account, profile, search, messaging, collaborations, support—: performance of the contract formed by the Terms and conditions.
• Verifying work experience: sending your work experience to the company where it took place for confirmation, and recording its answer. Performance of the contract, at your request, and the legitimate interest of platform users in the work history they see being verifiable.
• Publishing your CV or sharing links: consent. You decide, part by part, and you can withdraw it by unpublishing or revoking the link.
• Using your professional profile in another product in the ecosystem: consent, which you are asked for when activating that product (section 5).
• Proposals to companies: if you tick the “Proposals from the InduFreelance team” box in your Privacy Centre, Surf Engineering, S.L., owner of InduFreelance, adds your CV to its technician recruitment database (SurfRecruiter) and may send it to companies looking for profiles like yours to put you forward for their projects. Only your CV —never your phone number or your email— and the legal basis is your consent.
• Security and abuse prevention —access logs, auditing, limits against automated use—: legitimate interest.
• Sector statistics using aggregated and anonymised data: legitimate interest. InduFreelance does not sell personal data.
• Complying with legal obligations —invoicing, record keeping, official requests—: legal obligation.

• The public: only what you publish. Your CV if you publish it at your address, and the projects you mark as public.
• Companies with search access: your professional profile, your skills, your area, your availability and the count of your verified work experience. The level of detail they see depends on their plan.
• The company you attribute a work experience to: receives your name, position and dates, so it can confirm it.
• Anyone who receives one of your links: whatever that link contains, while it is valid.
• Your phone number, email and website are only shared if you decide to share them in a conversation.

Your technical profile, work history, qualifications, portfolio and CV are stored as a professional profile in the InduChain ecosystem, owned by Surf Engineering, S.L., the same owner as InduFreelance. The reason is that a technician is the same person with the same work history in any product of the ecosystem, and it makes no sense to ask them to type it in twice or for the verifications they already received not to count.

• Each product keeps separately what it may use from your profile, and only gets it if you authorise it when activating the product.
• Profiles that already existed on InduFreelance were migrated with access granted to InduFreelance and to no other product.
• When you close your profile on a product, that product loses access. If you ask for your data to be deleted and another product is still using the same profile, you are told which one: what you declared remains there.
• You can withdraw that permission at any time by unticking the box in the Privacy Centre; when you do, or when you close your profile on InduFreelance, your CV is no longer sent and is deleted from Surf Engineering's recruitment database within one hour at most.

When you ask a company to confirm a work experience, an email is sent to the address you provide, with your name, the position, the dates and any message you write. That email does not give anyone authority to answer: it leads to a page where they must sign in with a company account.

Service emails are also sent (invitations, notifications and support emails). No third-party advertising is sent.

We do not disclose personal data to third parties unless legally required or you authorise it, such as sending your CV to companies as described in section 3. We do work with providers that process it on our behalf, under a data processing agreement in accordance with Article 28 of the GDPR:

• infrastructure and hosting provider where the platform runs;
• outgoing email provider, for notifications and invitations;
• payment gateway, for companies that subscribe to a paid plan.

Apart from them, pages do not request anything from third parties: there is no analytics, advertising or tracking, and fonts are served from this same site, so opening a page does not reveal your visit to anyone else (see the Cookie policy).

If any provider processes data outside the European Economic Area, the transfer is covered by an adequacy decision or by the Standard Contractual Clauses approved by the European Commission, with any additional safeguards required.

• While your profile is active. Afterwards, for the legal periods needed to meet any liabilities (for example, accounting records).
• If you close your profile and ask for deletion, what was declared about you is deleted: technical profile, languages, skills, qualifications, portfolio with its files, photo and availability.
• Your work experience history, verifications already answered by companies and past conversations are kept, because they support facts relating to other people and companies. They can no longer be reached from your identity on the platform.
• Audit and security logs are kept for as long as necessary for their purpose.

You can exercise your rights of access, rectification, erasure, objection, restriction and portability, and withdraw any consent you have given at any time.

• From the application: in the Privacy Centre you can view and revoke your consents, download your data, see your activity history and close your profile.
• By email: by writing to comunicacion@surfensl.com. We may ask you to prove your identity if it is unclear.

If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

We do not make decisions with legal effects based solely on automated processing. The search engine ranks results, but the decision about who to work with is always made by a person.

The platform is not intended for minors.

The platform is served over HTTPS and applies reasonable technical and organisational measures: profile-based access control, private files served only to authorised users, revocable links and an audit log of sensitive actions.

If what we do with data changes, this page changes too, with its date. When the change is significant, notice will be given by reasonable means before it applies.