Privacy policy

1. Data controller

2. What data we process

We process the data needed to provide the service and handle requests.

• Account and contact data (name, email, school/organization, role).
• Mobility management data (participants, companies, related documentation) as provided/managed by the school.
• Support communications and requests.
• Minimum technical data for security and operations (e.g., access logs and events).

3. Purposes

• Provide the mobility management service and enable platform usage.
• Prevent fraud, abuse and unauthorized access; maintain system security.
• Handle incidents and requests.
• Comply with applicable legal obligations.

4. Legal basis

The legal basis may vary depending on the case: contract performance or pre-contractual measures, compliance with legal obligations, and where applicable, legitimate interest (e.g., security) and/or consent.

5. Retention periods

We keep data for as long as necessary to provide the service, meet legal obligations and manage liabilities. When no longer needed, it is deleted or anonymized as appropriate.

6. Recipients and processors

We may rely on vendors (e.g., infrastructure, authentication, storage) acting as data processors under contract. We do not sell your data.

7. International transfers

If any vendor processes data outside the EEA, appropriate safeguards (e.g., standard contractual clauses) will be applied to protect information.

8. Security (strong measures)

We apply technical and organizational measures aimed at strong security, including:

• Encryption in transit (TLS/HTTPS) and, where applicable, encryption at rest.
• Role-based access control and least-privilege principle.
• Protected authentication and sessions, with anti-abuse measures and hardened security headers.
• Logging and monitoring of relevant events for traceability and anomaly detection.
• Backups and incident recovery procedures where applicable.

Even so, no system is 100% infallible. If you detect a security issue, contact us as soon as possible.

9. Your rights

You can exercise the rights of access, rectification, erasure, objection, restriction and portability, and withdraw consent where applicable.

To exercise them, email info@readymob.eu describing your request and a way to verify your identity. You may also lodge a complaint with the Spanish Data Protection Agency (AEPD).

10. Changes to this policy

We may update this policy to reflect service improvements or legal changes. The current version will be published on this page.