Privacy Policy (Política de privacidad)

Last updated: October 2026

1. Data Controller

In accordance with the General Data Protection Regulation (EU Regulation 2016/679) and the Spanish Organic Law 3/2018 on Data Protection and Guarantee of Digital Rights (LOPDGDD), the Data Controller for personal data collected through this website is:

  • Controller: Chahrazed Anane (self-employed, autónoma)

  • Trading name:Humanitarian Career Consulting (HCC)

  • NIE: Y7401170Z

  • Registered address: 08012, Barcelona, Spain

  • Email: info@humanitariancareerconsulting.com

2. Scope

This policy covers personal data collected through the website https://www.humanitariancareerconsulting.com (the “Website”), through inquiries and discovery sessions, and in the course of providing consulting services to clients.

3. Personal Data Collected

HCC may collect and process the following categories of personal data:

  • Identification data: name, surname, country, and preferred pronouns (if shared).

  • Contact details: email address, phone number, or LinkedIn profile (if provided).

  • Professional data: position, organization, years of experience, and sector information.

  • Career documents (clients): CVs, cover letters, applications and LinkedIn profiles shared for the purpose of the service.

  • Session data: recordings, transcripts and written summaries of discovery sessions and client sessions, unless the person has asked not to be recorded.

  • Correspondence: emails and messages exchanged with HCC.

  • Invoicing data (clients): the details needed to issue an invoice. HCC does not store full payment card details. Limited payment and transaction information may be retained for accounting and tax purposes.

  • Evidence of residence (clients outside the EU): clients residing outside the EU may be asked for evidence of their place of residence (such as a copy of an ID or passport), solely for Spanish VAT purposes.

  • Navigation data: cookies, IP address, and browser data (see the Cookies Policy).

Personal data are collected through contact forms on the Website, discovery session bookings via Calendly, messages sent by email or WhatsApp, sessions, and documents that clients choose to share.

Sensitive information: HCC does not ask for health data or other specially protected information. Please share such information only where it is relevant to the service. If you do, it is used solely for that purpose, and you may ask for the recording to be paused at any time.

4. Purposes and Legal Basis

HCC processes personal data only for specific, explicit, and legitimate purposes.

  • Answering inquiries and holding discovery sessions: to respond to a request and to schedule and hold a call. Legal basis: pre-contractual measures taken at the person’s request, or their consent.

  • Delivering consulting services: to provide the service agreed with the client and to manage the client relationship. Legal basis: performance of a contract.

  • Session recording and transcription: to prepare session notes. Legal basis: the person’s consent, which may be withdrawn at any time.

  • Invoicing, accounting and tax: Legal basis: legal obligation.

  • Client relationship management and follow-up: HCC uses a client follow-up system (CRM) to manage inquiries, discovery sessions, ongoing engagements and individual follow-ups. Communications about requested services and existing client relationships rest on pre-contractual measures, the contract, or HCC’s legitimate interest in maintaining professional relationships. Promotional communications are sent only where the law allows it, that is, with prior consent or to existing clients about similar services. You may opt out at any time by writing to info@humanitariancareerconsulting.com. HCC does not send mass marketing emails or newsletters through this system and does not track whether emails are opened.

  • Cookies: to operate the Website and, where you have consented, to measure its use. Legal basis: consent, which you may change at any time in the cookie settings.

HCC collects and processes only the personal data needed for these purposes.

5. Session Recording and Use of AI Tools

  • Recording: HCC records and transcribes discovery sessions and client sessions with an AI notetaker (Calendly Notetaker) to prepare session notes. HCC tells participants at the beginning of the call. Recording is optional and does not affect access to the services. The notetaker is visible on screen throughout and posts a message in the meeting chat when recording starts. Anyone who prefers not to be recorded can say so at any time, or stop the recording directly by typing /stop in the chat; notes are then taken manually. Recordings and transcripts remain on the notetaker provider’s platform; HCC receives a written summary by email.

  • AI assistance: HCC uses AI tools to support its work (session notes, document analysis, drafting, follow-up). Where possible, names and contact details are removed from CVs before AI analysis. LinkedIn profiles are analysed as publicly displayed. AI tools connected to HCC’s email, calendar, client follow-up system and shared documents may process names, contact details, correspondence and documents.

  • Limits: Identity documents are never submitted to AI tools. HCC has switched off the use of client data for AI model training in the AI tools it uses. All analysis and advice is reviewed and delivered personally by the consultant. No decision is automated.

  • Accuracy: Transcripts are generated automatically and may contain errors. You may ask to see or correct them.

6. Documents Shared by Clients

Clients keep their documents in their own Google Drive and share access with HCC. HCC does not ask for documents as email attachments and does not keep copies, apart from temporary working copies that are deleted once the work is completed. Clients may withdraw access at any time.

7. Data Retention

  • Inquiries and prospective clients: contact details and correspondence are kept for up to 3 years after the last contact.

  • Discovery session recordings, transcripts and summaries: deleted within 90 days after the call if it does not lead to an engagement.

  • Client session recordings, transcripts and summaries: deleted within 30 days after the end of the engagement.

  • Clients: after the engagement, HCC keeps only contact details, correspondence and a brief record of the engagement, for up to 3 years after the last contact.

  • Invoicing records and evidence of residence: kept for as long as Spanish tax law requires.

  • Cookies: according to their type and duration (see the Cookies Policy).

8. Service Providers and International Transfers

Data are not sold. They are shared only where necessary to provide the services or to comply with legal obligations. The following providers process data in connection with HCC’s services:

  • Google (email, video sessions, access to documents shared by clients).

  • Calendly (appointment scheduling and AI notetaker).

  • HubSpot (client follow-up system), with data hosted in the European Union.

  • WhatsApp (messaging).

  • Stripe (card payments, where chosen by the client).

  • Anthropic and OpenAI (AI assistance).

  • Squarespace (website hosting and site analytics).

HCC’s tax advisor and the tax authorities may receive invoicing data and evidence of residence where the law requires it.

Some of these providers are based in the United States. Transfers rely on the EU–U.S. Data Privacy Framework or on standard contractual clauses approved by the European Commission.

9. Your Rights

You have the right to access your personal data, to have inaccurate data rectified, to request erasure, to request restriction of or object to processing, to request data portability, and to withdraw consent at any time without affecting prior processing.

To exercise these rights, send an email to info@humanitariancareerconsulting.com with “Data Protection Request” in the subject line. HCC may ask for proof of identity.

You also have the right to lodge a complaint with the Agencia Española de Protección de Datos (AEPD) at www.aepd.es.

10. Data Security

HCC applies appropriate technical and organizational measures to protect the confidentiality, integrity, and availability of personal data and to prevent unauthorized access, alteration, loss, or destruction.

11. Adults Only

HCC’s services are intended for adults aged 18 and over. Persons under 18 should not provide personal data through the Website.

12. Updates to This Policy

HCC may update this Privacy Policy to reflect legal, technical, or service changes. Updates are posted on this page with a revised “Last updated” date.