Legal

Privacy & data

What Oferon holds about you, where it is stored, who else touches it, and what you can ask us to do with it. This page describes the platform as it operates today.

What is held

Three kinds of record

Oferon does not buy personal data and does not build advertising profiles.

Your account

The email address you sign in with and the settings attached to it. Sign-in uses a one-time code mailed to that address. Oferon stores a hash of the code, not the code itself, and does not keep a password.

What you asked for

The needs you describe and the plans built from them, including the requirements and the candidate offers ranked against them.

What was decided

An append-only record of decisions that affect you, kept so that a ranking or an outcome can be explained afterwards rather than asserted.

Who else processes it

Service providers

Each one receives only what its function requires.

VercelServes this website. Request metadata needed to deliver a page: IP address, browser type, page requested.
RailwayRuns the Oferon application interface, in the European Union (europe-west4). The requests your session makes while using your account.
SupabaseStores the database and handles sign-in, in the European Union (eu-central-1). Your account identity, the needs and plans you create, and the record of decisions taken on them.
ResendSends transactional email when a message is triggered by something you did. Your email address and the content of that message.
TravelpayoutsProvides partner links on discovery pages. Loaded only when an operator enables it, and never on account, provider or administrative pages. Whatever the partner receives when you choose to follow their link, which is governed by the partner’s own policy.

Payments

No card data reaches Oferon

Oferon does not take payments today. When payment is opened, it is handled by a regulated payment provider that receives the details directly; card numbers are never stored on Oferon systems and never pass through them.

Your rights

What you can ask for

These apply to the records described above.

See what is heldA copy of the account and plan records associated with you.
Correct itAnything inaccurate in your account or in a plan you created.
Take it with youAn export of your records in a machine-readable form.
Have it removedDeletion of your account and the records that are not required to be kept.
ObjectAsk that a specific use of your records stops, and be told the outcome.

How to exercise them

Controller and contact

A self-service privacy console is not built. Requests go to the controller mailbox.

SMARTEDTECH SL is the controller

Write to this organisational mailbox for access, correction, export, deletion or objection. It is not a ticket queue and it is not staffed around the clock. No payment data is collected until payment is opened.

SMARTEDTECH SL
CIF B66970831

Ctra. del Masnou a Granollers km 0 8,7 Complem. Casa de Can Gineste

08188 Vallromanes, Barcelona, Spain

admin@oferon.net