Legal

Privacy Policy – Spain Internship / The Student Mobility SLU

Effective Date: 21 February 2019 (updated as of 2025) | Version: v3.1

1. Data Controller & Contact Details

Controller: The Student Mobility SLU (CIF: B90331588)
Legal Entity: Sociedad de Responsabilidad Limitada Unipersonal, incorporated in Seville in 2017; Notary Pablo Gutiérrez-Alviz; Registered Seville Mercantile Registry, Volume 6429, Book 0, Folio 208, Sheet SE‑115065.

Addresses:

  • Av. Flota de Indias, 16, 41011 Sevilla, Spain
  • Calle Pelay Correa, 83, Local 1, 41010 Sevilla, Spain

Phone: +34 854 64 85 44

2. Scope of This Policy

This Privacy Policy outlines how we collect, process, and protect your personal data when you use our websites (spain-internship.com, piktalent.com), apply for services, or interact with us. It covers:

  • Processing purposes, legal bases, and data disclosures
  • International transfers and retention periods
  • Your rights under GDPR and Spanish law

3. Processing Overview

PurposeLegal BasisRecipientsTransfersRetention Period
Responding to enquiries via web or phoneLegitimate interestIT/hosting providersTo US under SCCsUntil request resolution
Blog subscriptions & marketingConsentMarketing service providersTo US under SCCsUntil unsubscribe or after extended inactivity
Candidate selection & offersConsent / ContractHost firms, academia, service providersTo US under SCCsUntil request for removal or after extended inactivity
Platform operations & accountsContract / Legitimate interestPartner institutions, ITTo US under SCCsAccount duration + legal retention

4. Data We Collect

Directly from you: Name, contact info, date of birth, education, skills, CV, preferences, visa details, and payment information.

Automatically: IP address, browser/device info, cookies (see our Cookie Policy), and analytics data.

From third parties: Data from educational institutions, references, and public profiles such as LinkedIn.

5. Purpose of Processing

We use your data to:

  • Provide and manage internship services
  • Facilitate placements and documentation
  • Communicate program updates and offers (marketing with consent)
  • Improve our services
  • Comply with legal obligations under GDPR and Spain's Organic Law on Data Protection and Digital Rights (LOPDGDD)

6. Legal Basis for Processing

We rely on the following legal grounds:

  • Consent — for marketing and certain profile uses
  • Contract necessity — for service delivery
  • Legal obligations — compliance with GDPR and Spanish law
  • Legitimate interest — website functionality, fraud prevention, and internal operations

7. International Data Transfers

Transfers to countries outside the EEA (e.g., the United States) are safeguarded via EU Standard Contractual Clauses (SCCs) and individually assessed for compliance with applicable data protection standards.

8. Cookies

We use cookies for essential functions, analytics, preferences, and advertising. Please see our full Cookie Policy for details on the types of cookies used and how to manage them.

9. AI and Emerging Regulations

The EU is simplifying GDPR to reduce administrative burdens for SMEs, particularly around record-keeping obligations. The AEPD (Spain's data protection authority) is enforcing guidance under the AI Act starting August 2025, including bans on real-time biometric surveillance in public spaces. EU rulings have clarified that data subjects must demonstrate actual harm to claim GDPR compensation, though "loss of control" may be recognised in certain cases.

10. Minors' Data Protection

From 2025, Spain raises the age of data protection consent from 14 to 16 years. Our services require parental or guardian consent for participants under the applicable age threshold.

11. Data Security

We use industry-standard security measures to protect your personal data. While absolute security cannot be guaranteed, we employ technical and organisational safeguards designed to minimise risk.

12. Data Retention

  • Service-related data: Retained during service and for applicable legal periods thereafter.
  • Marketing data: Retained until consent is withdrawn or after an extended period of inactivity.
  • Accounts & financial data: Retained for tax and legal compliance as required by local law.

13. Your Rights Under GDPR and Spanish Law

You have the right to:

  • Access, correct, or delete your personal data
  • Restrict or object to processing
  • Request data portability
  • Withdraw consent at any time
  • Lodge a complaint with the AEPD (Spain's data protection authority)

Requests can be submitted to info@spain-internship.com.

14. Third-Party Links

We are not responsible for the privacy practices of external websites linked from our platforms. We encourage you to review their privacy policies whenever you leave our site.

15. Policy Updates

We may revise this policy periodically. You will be notified of material changes via email or a prominent notice on our website. Continued use of our services after such notification implies acceptance of the updated policy.

16. Contact Us

The Student Mobility SLU – Spain Internship
Av. Flota de Indias, 16, 41011 Sevilla, Spain
Calle Pelay Correa, 83, Local 1, 41010 Sevilla, Spain
Phone: +34 854 64 85 44
Email: info@spain-internship.com