Privacy policy

Mapnia Smart Communication, S.L.

Spanish tax ID (NIF): B87917522

Registered office: Calle Fuente, 27, 28864 Ajalvir, Madrid, Spain

Madrid Commercial Registry: volume 36430, page 8, section 8, sheet M-654501, entry 1

Email: privacy@experts.vision

Privacy and rights contact:

privacy@experts.vision

This Policy applies to personal data processed through experts.vision, its subdomains, applications and related services.

Experts.vision processes data lawfully, fairly and transparently and applies purpose limitation, minimisation, accuracy, storage limitation, integrity and confidentiality principles.

Depending on Platform use:

• Identity and account data: name, email, account identifiers, language, country and photograph.
• Professional data: position, organisation, biography, expertise, sectors, experience, professional background, languages, professional location, availability, links, websites, profiles, publications and media appearances.
• Organisation data: name, domain, website, logo, sector, members, administrators and corporate information.
• Organisation creation and administration: identity of creator and Owner, capacity and authority declaration, version of Terms accepted, acceptance date and time, ownership changes and permissions.
• Requests: subject, purpose, requirements, dates, deadlines and Requester-supplied content.
• Pitches: content, relevant experience, availability, status, acceptance or rejection and metadata.
• Messaging: content, sender, recipient, date, time and metadata.
• Activity and reputation: pitches, acceptances, invitations, collaborations, favourites, ratings, verification, blocks and account activity.
• Verification: information required to verify identity, experience or organisational affiliation.
• Moderation and security: reports, complaints, blocks, moderation decisions, fraud, abuse and incidents.
• Technical data: IP, device, browser, operating system, session, access logs, errors, security and performance.
• Communications with Mapnia: support, rights requests, complaints and other communications.

Data may come from:

• the user;
• other users where required by a feature;
• authentication providers;
• an organisation with which the user seeks affiliation;
• publicly available professional sources where needed to verify user-supplied information;
• or technical and security systems.

Experts.vision may use external providers, including Google/Firebase where enabled, and may allow sign-in by email, Google, Apple or other methods.

When users use an identity provider, we receive data the provider is authorised to share.

The provider may carry out its own processing under its privacy policy.

We process data to:

• register and authenticate users;
• manage accounts and sessions;
• create and administer profiles;
• display public profiles;
• create and administer organisations;
• verify domains and affiliations;
• record and evidence the Owner's acceptance and declaration of capacity and authority;
• transfer or reassign organisation ownership where appropriate;
• verify profiles or organisations;
• publish requests;
• search for Experts;
• submit and manage pitches;
• manage invitations, favourites and messaging;
• record acceptances and collaborations;
• generate activity and reputation indicators;
• provide matching and recommendations;
• send service notifications;
• manage preferences;
• prevent spam, fraud, impersonation and abuse;
• maintain security;
• moderate content;
• process reports and complaints;
• comply with legal obligations;
• respond to rights requests;
• defend legal claims;
• analyse technical operation;
• improve the service under an appropriate legal basis;
• and send marketing communications where a valid legal basis exists.

7.1. Performance of a contract

To create and manage accounts, profiles, organisations, requests, pitches, messages and other requested functions.

7.2. Compliance with legal obligations

To comply with data-protection, digital-services, tax, commercial and other applicable law and valid authority orders.

7.3. Legitimate interests

To prevent fraud, spam, abuse and impersonation; protect systems; verify professional or corporate information; administer organisations; resolve disputes; moderate; analyse incidents; retain contractual evidence; and defend claims, subject to balancing where appropriate.

7.4. Consent

Where required for optional cookies, certain marketing communications or other voluntary processing.

Withdrawal does not affect prior lawful processing.

To create an organisation, the first user must expressly accept the Terms and declare that they have sufficient legal capacity and authority to create it and act as initial Owner.

To evidence this action, we may retain the user identifier, organisation, version of the Terms and declaration, date, time and technical data reasonably necessary.

These records may be retained during the relationship and afterwards for periods necessary to demonstrate acceptance, resolve disputes and manage liabilities.

Data published in public areas may be accessible without registration, indexed by search engines and shared by third parties.

Users should avoid publishing information they do not wish to make public.

Pitches and messages are not public unless expressly stated.

Access is limited to authorised users and members.

Mapnia may access them where required to provide the service, protect security, prevent fraud, investigate incidents, process reports, resolve complaints or comply with legal obligations.

When one user blocks another, we store the relationship required to enforce the block.

We may use automated systems to rank or recommend Experts, requests or opportunities based on expertise, topic, sector, language, location, availability, preferences, requirements, activity and relevance signals.

Their purpose is discovery and prioritisation.

Unless expressly disclosed and lawfully implemented, these systems are not used for solely automated decisions producing legal or similarly significant effects.

We may send operational communications concerning authentication, security, contractual changes, pitches, replies, invitations, messages, relevant requests, incidents and other service functions.

These are distinct from promotional communications.

Promotional communications are sent where there is a valid legal basis.

Where consent is relied upon, the option is separate from contractual acceptance and is not pre-selected.

A simple opt-out will be provided where required.

Data may be accessible to:

Technology providers may include Google/Firebase for authentication and related services where enabled.

Experts.vision does not sell users' personal data.

• other users where required by a requested function;
• technology providers for authentication, hosting, databases, storage, email, security, monitoring, support, development or analytics;
• competent authorities where required by law or a valid request;
• and participants in corporate transactions subject to applicable safeguards.

Where a provider processes data outside the European Economic Area and the transfer is subject to the GDPR, a valid mechanism will be used, such as an adequacy decision, Standard Contractual Clauses or other recognised safeguards.

As a general rule:

• accounts and profiles: while active;
• public content: while published or while a valid basis exists;
• pitches and messages: while required for the service and afterwards for security, dispute or legal-defence periods;
• organisation-creation and Owner-acceptance records: during the relationship and afterwards for periods needed to evidence acceptance and manage liabilities;
• contract and billing data: for statutory periods;
• security logs: for proportionate periods needed to detect and investigate incidents;
• reports and moderation: as needed to manage cases, appeals, repeated abuse and legal duties;
• verification documents: only as long as necessary, then deleted or minimised unless a valid basis exists;
• marketing: until objection or withdrawal, with minimum suppression data retained;
• backups: according to technical cycles and without incompatible reuse.

We apply technical and organisational measures designed to prevent unauthorised access, loss, alteration, destruction or improper disclosure.

No Internet-connected system can guarantee absolute security.

Where applicable, individuals may exercise:

Requests:

privacy@experts.vision

We may request reasonable information to verify identity.

• access;
• rectification;
• erasure;
• objection;
• restriction;
• portability;
• withdrawal of consent;
• and rights concerning automated decision-making.

In Spain, individuals may lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD).

Persons under 18 may not register.

Experts.vision does not generally request special-category data. Users should avoid submitting it unless strictly necessary and supported by a valid legal basis.

Users providing another person's data are responsible for having a lawful basis and complying with applicable duties.

This Policy may be updated because of legal, technical, functional or provider changes.

The current version is the version published on Experts.vision.