Privacy policy

Draft prepared 18 October 2026 · www.maritime-bridge.com · English edition

Maritime Bridge operates as a Menorca Brokers service provided by the self-employed legal operator identified below. The service address and any required additional disclosures must be confirmed before new personal-data services are enabled.

What data we currently process

Public visitors may browse maritime jobs and education without accounts or submitting CVs. The site handles essential technical/security requests and optional consent-based analytics. The Platform Owner can send controlled candidate or employer email invitations, storing the invited email address, role, status and, for employers, business name. We do not store candidate CVs, passports or job applications in this phase. The external destination may separately process information submitted there under its own privacy notice.

Controller identity: The controller responsible for this platform's user and CV database is the self-employed individual operating commercially as Menorca Brokers and Maritime Bridge, not a separate company. Menorca Brokers is the trading name of the sole trader legally identified in this notice. The service address and final supplier disclosures must be completed before enabling additional account and personal-data services.

Why and on which legal basis

• Account, job searches, applications and profile management: provide the services requested and steps relating to potential employment (GDPR Art. 6(1)(b), as appropriate).
• Optional future-opportunities matching by Maritime Bridge staff: separately requested opt-in consent (GDPR Art. 6(1)(a)). Withdrawal stops use of your professional summary for new future-opportunity matching without affecting existing applications.
• Security and fraud prevention: our legitimate interests and/or legal obligations (Art. 6(1)(f)/(c)) subject to necessity and balancing.
• Legally required record retention: legal obligation (Art. 6(1)(c)) where applicable.

Who can access information

Only the verified Platform Owner and necessary service providers may process invitation records or internal moderation information. Employers cannot browse candidate profiles, contact registered candidates through the platform or access CV files. We do not automatically forward applicant data. Published vacancies and educational articles are public. The original external recruitment website receives any application submitted by the visitor there, under that provider's privacy terms.

Processors and international access

Maritime Bridge currently uses Netlify to deliver the website and Supabase in the European region for its database and authentication. GitHub Actions runs editorial automation, and Google Analytics 4 is only used after optional analytics consent. The operator must verify current processor agreements, support-access arrangements, retention periods, recipients and international-transfer safeguards before activating personal-profile, application or document features. Employers may be based outside the EEA; data transfers or employer access outside the EEA require specific legal assessment, transparency and suitable safeguards before being enabled.

Free membership requests and manual approval

Anyone can request free membership using only an email address. This does not create an account or grant access. The email, date and privacy-notice version are recorded by Maritime Bridge solely to assess the request and send an invitation if the Platform Owner approves it. No CV, passport, certificates, name, phone number or sensitive information is requested. Applications are visible only to the owner through a protected MFA session; employers cannot view them.

Cloudflare Turnstile verifies that requests are not automated, and a rotating pseudonymous rate-limit identifier is retained for no longer than seven days. Membership requests appear only in the protected owner dashboard, without an email notification to the owner. Invitations to approved members are delivered by Supabase Auth through configured SMTP (initially Gmail for the small pilot). The SMTP service's terms and international transfer safeguards must be reviewed before activation. Unapproved request data will be automatically erased after a retention period of 90 days when the cleanup schedule is enabled. Approved or rejected request records are also scheduled for deletion 90 days after review; approved member-account records are retained separately while the account remains active and under the account privacy terms. Membership request submission does not subscribe anyone to job alerts or marketing.

For access, correction, withdrawal of a request or deletion, email contact@maritime-bridge.com. If your request is accepted, Supabase Auth will send an invitation and require email confirmation. No applicants' details will be shared with maritime employers.

Optional generative maritime career assistant (Career Navigator 3.0)

The generative AI mode is off by default and runs only when a visitor explicitly enables it inside the Navigator. When enabled, recent questions and short assistant replies are transmitted from our EU-hosted Supabase function to GroqCloud for text generation. The service uses public, approved vacancy facts only; no stored candidate records, CVs, passport scans, employer accounts or private applicant information are sent to Groq. Do not type names, emails, telephone numbers, ID numbers, medical records or other personal or sensitive information into the chat. Automated checks reject some such inputs but cannot guarantee detection of everything.

Conversations are not stored in Maritime Bridge's database, and the browser retains only a temporary in-memory context for the current page session. A one-way daily quota identifier derived from request metadata is stored in Supabase for up to seven days to prevent abuse; raw visitor IP addresses are not written to that quota table. Groq retains technical usage metadata, may temporarily retain input/output content in exceptional operational or abuse cases, and offers Zero Data Retention settings. That setting must be verified and enabled by the operator before the generative mode is launched. Groq operates with US data locations and applicable safeguards for international transfers must be assessed before launch. Visitors who do not opt in use the local rule-based guidance, without sending their messages to Groq. Withdrawing consent stops further external inference and clears the current generative conversation context.

Optional website analytics

Only after affirmative consent (GDPR Article 6(1)(a) and LSSI-CE Article 22.2), Maritime Bridge may activate Google Analytics 4 (measurement ID G-8HHK9347XY), operated by Google, to measure visits, page views and other site usage. No Analytics request is initiated before consent. We do not deliberately send candidate CV data to Analytics, and candidate accounts remain disabled. Google may receive online identifiers and technical information, with applicable supplier terms and data transfer safeguards. You may reject or withdraw consent at any time using Cookie preferences. See the cookie policy.

Storage period

Account and private CV data will be stored while the account is active, subject to a documented retention and deletion schedule. Do not assume that data will be kept indefinitely. Optional Talent Pool matching can be withdrawn at any time. After account closure, data will be erased or limited when no longer necessary, except where law requires longer preservation. Exact deletion deadlines must be finalised and technically implemented before enabling additional account and personal-data services.

Data disclosure and security by default

No employer receives the applicant database or stored PDF documents through the website. Candidate lists are reviewed by authorised operators and restricted to the particular verified vacancy. The initial export intentionally excludes email and CV files; individual contact details, if needed, require a further restricted manual export. The operator must log recipient, purpose and time; verify the recipient and avoid ordinary unsecured bulk email attachments. Accounts and CVs require authentication, restricted access, HTTPS, storage access policies, and a documented deletion procedure. A security review is required before activation. No guarantee of perfect security is implied.

Special categories & minimisation

Do not upload medical records, passports, banking details, personal identification numbers, or other unnecessarily sensitive documents. Avoid disclosing special category data (Art. 9 GDPR). The platform must not use purely automated decisions with legal or similarly significant effects without a lawful basis and relevant protections.

Privacy rights

See Your data rights for access, rectification, erasure, restriction, portability, objection and consent withdrawal. You may complain to the Spanish Data Protection Agency, AEPD, where competent.

Children

This service is designed for adult professional users. A live launch needs a suitable age-access policy and checks for its intended markets.