Privacy Policy
Last updated: August 17, 2026.
1. Data controller
NodeX Talent is the talent marketplace for the NodeX developer community. Nodex Systems S.L. (Tax ID B21901657), with registered address at Calle Joaquín Benlloch 85, E2, 7, P27, 46026 - Valencia, España, is the controller of the data collected on this platform and acts as an intermediary between registered developers and the companies looking for talent.
2. What data we collect
When you register and complete your profile, we collect the following categories of data:
- Identifying data: name, email, and profile photo.
- Professional data: specialty, seniority, years of experience, availability, location, skills, interests, languages, professional milestones, CV, bio, indicative hourly rate, and links (LinkedIn, GitHub, website).
- Technical usage data: information generated by the operation of the service itself (login session, application status), necessary to provide the platform.
- Offer views: we record which offers are viewed and when, to know how many people view each one and how many end up applying. If you view an offer while logged in, that view is linked to your profile and is visible to the platform administrator; if you view it while logged out, nothing that could identify you is stored. Your IP address is never stored, under any circumstance. This data is never used to decide anything about your application: it is used solely to measure the reach of offers.
- Invitations: each profile has its own invitation code for sharing offers. If you registered through another member's link, we store who invited you.
- Consents: we record whether you have accepted the terms of use required for job-placement intermediation and, independently and optionally, whether you consent to receiving marketing communications, along with the date each consent was given.
- Source data (attribution): only if you accepted the corresponding cookie in the cookie notice, and only at the moment you first complete your profile: the link or campaign tag through which you arrived, the landing page, the website you came from, and, if it comes from a paid campaign, the parameters added by Google/Meta Ads. If you rejected that cookie, or complete your profile without having responded, these fields remain empty. This is independent of the answer you give yourself to "How did you hear about us?" in the profile form (see below): one is technical and automatic, the other is what you tell us directly.
- How you heard about us: an optional answer you can provide in your profile (LinkedIn, Twitter/X, Google, referred by another person, event, other) so we know which channels work for the community.
3. Where the data comes from
All the data we process comes directly from you, through the registration form and your profile. We do not obtain data about you from third parties or from public sources without your knowledge.
4. Purposes of processing
We process your data to:
- Manage your account and your developer profile on the platform.
- Carry out job-placement intermediation between you and the companies for which we manage offers.
- Send you marketing communications about offers, content, and news, only if you have given your explicit consent to do so.
- Measure which channel new registrations come from (social networks, campaigns, referrals), only if you accepted the source-attribution cookie — see cookie policy.
- Maintain and improve the operation and security of the service.
5. Legal basis
We process your data in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018, on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD), on the following legal bases:
- Performance of a pre-contractual relationship: managing your profile and your applications, necessary to be able to present you with job opportunities.
- Explicit consent: sending marketing communications, which you can withdraw at any time.
- Explicit consent, given separately: the source (attribution) data described in point 2 — collected only if you accept the corresponding cookie in the cookie notice, never by default. This is not processed under legitimate interest, precisely because it is not necessary to provide you the service you requested: it serves our own interest in measuring where registrations come from.
- Legitimate interest: the measures necessary to guarantee the security, integrity, and proper functioning of the platform, and measuring how many people view each offer (Article 6.1.f GDPR). This measurement is internal and first-party: it is not shared with anyone, does not build profiles, and does not make automated decisions about you, and does not influence your applications. Being able to distinguish between different visitors — and not count the same person twice — also depends on your cookie consent: if you decline it, the view is still counted, but anonymously.
6. Job-placement intermediation and visibility of your data to companies
We use your profile to identify you as a potential candidate for job offers that we manage as intermediaries. Your contact and professional data (LinkedIn, GitHub, CV) is only shared with the relevant company when you decide to apply to an offer or when we actively put you forward for a hiring process, never in bulk or automatically.
The identity of the company behind each offer is not shown on the platform by default: we manage it directly with you. Only when the company expressly authorizes it do we show its name alongside the offer on /jobs. Under no circumstances are developers shown the company's tax or contact data (Tax ID, contact person, email, or phone) — that data is used exclusively internally to manage the relationship with each company.
7. Marketing communications
If you have given your explicit consent, we may send you communications about new offers, content, and news related to your technology interests, in accordance with Article 21 of Law 34/2002, on Information Society Services and Electronic Commerce (LSSI-CE). You can withdraw this consent at any time by updating your profile or requesting it by email, without this affecting your use of the rest of the platform.
8. Recipients and data processors
We use Supabase as our technology infrastructure provider (database, authentication, and file storage), which acts as a data processor in accordance with Article 28 GDPR under NodeX's instructions. We do not transfer your data to third parties for our own or others' commercial purposes.
9. International transfers
If our infrastructure provider were to process data outside the European Economic Area, such transfer would always be carried out under one of the safeguards provided for in Articles 45 or 46 GDPR (an adequacy decision by the European Commission or standard contractual clauses).
10. Retention period
We retain your data for as long as your account remains active. When you delete your account, your profile and applications are permanently deleted, except for any data we must retain for the period required by applicable regulations to address possible legal liabilities.
The record of offer views is kept for a maximum of 12 months. Views linked to your profile are also deleted immediately if you delete your account, along with the rest of your data.
Source (attribution) data has two different retention periods: the cookie in your browser lasts at most 90 days (or less, if you complete your profile sooner, at which point it is deleted) — see cookie policy. If that cookie's data is transferred to your profile because you completed it, those fields are then retained for the same period as the rest of your account data (for as long as it remains active), not 90 days.
11. Your rights
You have the right to:
- Access your personal data.
- Rectify inaccurate data.
- Request the erasure of your data.
- Request the restriction of processing.
- Object to processing.
- Request the portability of your data.
NodeX Talent does not subject you to automated decision-making or profiling (profiling) to decide which offers you can apply to: intermediation is always carried out by a person.
12. How to exercise your rights
You can access, rectify, or delete much of your data directly from your profile. For any other request, write to us at info@nodex.es. If you believe we have not properly handled your request, you have the right to file a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos) (aepd.es).
13. Security measures
We apply appropriate technical and organizational measures to protect your data, including encryption of communications, row-level access-restriction policies in our database, and administrative access control, so that only those who need it to provide you the service can access your full data.
14. Minors
NodeX Talent is not directed at persons under 18 years of age. If we detect that an account belongs to a minor, we will proceed to delete it.
16. Changes to this policy
We may update this policy to reflect changes in the service or in applicable regulations. The date of the last update appears at the top of this page.
17. Contact
For any questions about the processing of your data, write to us at info@nodex.es.