Privacy policy

1. Data controller

Controller: Fermín López Zafra, DNI 76441265Y, address Calle El Salvador S/N, 23680 Alcalá la Real (Jaén), Spain. Contact for data protection: info@techlogmro.com.

2. Data we collect

• Account: email, name, password (stored encrypted by the authentication service) or Google sign-in details (name, email, photo).
• Technician profile: city, country, licences, authorities, aircraft type ratings, experience, summary, languages, availability, photo, recency, own tools, and licence and recurrent training expiry dates.
• Company profile: company name, type, bases, description, logo, publications.
• Activity: applications and course requests (name, email and the data you choose to share), messages, reviews and company validations of competences.
• Technical: counts of clicks on external links (no personal identifier) and, only if you accept, Google Analytics statistics.

3. Purposes and legal basis

• Managing your account and providing the platform (performance of the service you request).
• Showing your professional profile to validated, active companies according to your directory visibility choice; you can change it in My account → My profile. If you are not visible, only licences and aircraft type ratings appear on a card titled «Private profile», without a reference to your account.
• Sending your application to the company you choose (your express consent at the moment of applying).
• Service emails: account confirmation, password recovery, new-message notices (performance of the service).
• Notifying you when the legal notice or this privacy policy changes, so you can review the new version before continuing to use the platform (legitimate interest in informing you of the conditions that apply to you).
• Web analytics (your consent, via the cookie banner).
• Automatic translation of texts into the other language of the website (legitimate interest in offering the site in Spanish and English).

We do not send commercial communications and we do not sell your data.

Company and training-centre registrations record the express acceptance of appearing in the company directory and the separate choice about sharing offers or courses on TechlogMRO social media, together with their date and text version. Social sharing is optional and disabled by default. You can withdraw this authorisation by contacting info@techlogmro.com.

4. What companies can see

Only company accounts validated and active by the administrator can access the technician directory. If you enable visibility, they see: name, city, country, licences, authorities, aircraft type ratings, experience, summary, languages, availability, photo, recency and own tools. If you choose not to be visible, only a card titled «Private profile» with your selected licences and aircraft type ratings is shown, without your name, photo, other personal details or a link to your account. Your email, licence or training expiry dates and internal data are never visible in the directory.

Technician accounts are not visible by default: you must explicitly enable visibility at registration or in My account → My profile, where you can also disable it.

Your contact details (name and email) are only communicated to a company when you apply for one of its offers or courses.

5. Recipients and providers

TechlogMRO uses the following services to operate the platform:

• Lovable Cloud: hosting, database, authentication and storage of profiles, publications and associated data.
• Lovable managed email service: sending account and service notifications; it processes the recipient address and the content needed for each email.
• Lovable AI and OpenAI: automatic translation of website texts. Texts requiring translation are sent through Lovable's AI service and the results are stored for reuse.
• Google: optional Google sign-in and Google Analytics 4. Analytics is activated only with your explicit consent and can be disabled through the cookie settings.
• Zoho Mail: management of the info@techlogmro.com contact mailbox and enquiries received there.

When you apply for an offer or request course information, the company or training centre you select receives the information you expressly share. If a publication directs you to an external website, that website's privacy policy applies to data you provide there.

Some of these services may involve processing outside the European Economic Area. The exact locations, applicable processing agreements and transfer safeguards for the services contracted by the owner remain to be verified. You may request further information at info@techlogmro.com; this policy does not assert that all processing takes place in the European Union.

6. Retention

Profile data, publications, applications, messages and reviews are kept while the account exists, unless you delete content through the available functions. A deletion request does not immediately erase the data: the administrator reviews and processes it.

When account deletion is processed, the profile and associated data are removed through the platform's deletion procedure. The record of privacy acceptances (user identifier, date, version and type) is retained separately as evidence of acceptance.

The owner has set a retention period of five years from account deletion for this evidence, subject to legal review. If a specific legal obligation or an ongoing claim requires longer retention, only the necessary evidence should be kept for that purpose.

Expiry of this period requires manual review by the owner; automatic deletion of acceptance records has not been implemented. Provider backup, technical log, cached translation and analytics retention periods remain to be verified in the relevant service settings and contracts. Contact enquiries are kept while they are being handled and, where necessary, to address related claims.

7. Your rights

You can request access, rectification, erasure, objection, restriction and portability by writing to info@techlogmro.com. You can edit your profile in "My account" and request deletion of your account from "My account → My profile". You may also lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

8. Account deletion

From your profile you can request deletion of your account. The administrator reviews the request and deletes the account. Deletion is irreversible and removes your profile, publications, applications, messages and reviews. The record of privacy acceptances is kept as described above.