Privacy notice

Mundital is run by MCEXPERT SRL (trading as MC Expert), Rue Saint-Joseph 51/1, 1140 Evere, Belgium, enterprise number 0688.614.975. We decide why and how your personal data is used on Mundital, so we are the data controller.

For any question about your data, or to use your rights, write to us at Rue Saint-Joseph 51/1, 1140 Evere, Belgium.

• Account: your email address, name, role (student, company or school), language, and how you sign in (email link, Google, LinkedIn or Microsoft).
• Student profile: school and programme, study level and year, availability, the internships you look for, your languages and your CV file.
• School email check: a scrambled (hashed) copy of the school email address you give, its domain and the date, and a scrambled copy of the code we send. We never keep the address or the code itself.
• Applications: the internship, your message, the CV you sent, your answers to the apply questions, and each change of status.
• Alerts: your email address, your filters and how often you want emails.
• Companies and schools: the organisation's details, the people in its team, and the internships or partner requests it sends.
• Records: technical logs needed for security, and a record of who saw which student data. You can see the records about you.

• To run your account and the service you asked for: showing internships, sending your application to the company and showing you its status. Basis: our contract with you (GDPR, article 6(1)(b)).
• To share your applications with your school, only if you agree. You can withdraw that consent at any time in your account; sharing then stops. Basis: your consent (article 6(1)(a)).
• To send internship alerts, only after you confirm your email address. Every alert has an unsubscribe link. Basis: your consent.
• To check internships and companies before they go live, keep Mundital safe and prevent fraud. Basis: our legitimate interest in a service people can trust (article 6(1)(f)).
• To meet legal duties, for example accounting rules or a request from an authority. Basis: legal obligation (article 6(1)(c)).

• The company you apply to sees your application and the CV you sent. Mundital publishes internships only from companies it has verified.
• Your school sees your name and applications only if you agree, and only after you confirm your school email address. School statistics never show a number below 5.
• Mundital staff, to check internships and to help you.
• Our service providers, who process data for us under a contract: the database and hosting provider (Supabase) and our email provider. When a provider works outside the European Economic Area, we rely on the European Commission's standard contractual clauses or another safeguard the GDPR allows.
• We never sell your data, and we do not use it for advertising.

Some internships shown on Mundital come from other sites, such as Himalayas. Our server collects them once a day; your visit does not send your data to those sites. When you choose to apply on such a site, you leave Mundital and that site's privacy policy applies.

• Account and profile: as long as your account is open. When you delete your account, we delete your profile and your CV.
• Applications: as long as your account is open, so you and the company can follow them. When you delete your account, your applications are deleted or made anonymous.
• Alerts: until you unsubscribe or delete your account.
• School email codes: until they are used or expire.
• Security logs and the record of who saw student data: only as long as needed to protect the service and to answer questions about it.
• Data the law makes us keep, such as invoices: for the period the law sets.

You can ask to see your data, correct it, delete it, limit its use, receive it in a common format, or object to its use. You can withdraw a consent at any time; this does not affect what was done before.

You can do much of this yourself in your account. For anything else, write to us at Rue Saint-Joseph 51/1, 1140 Evere, Belgium. We answer within one month.

If you think we do not respect your data, you can complain to the Belgian Data Protection Authority (Autorité de protection des données), Rue de la Presse 35, 1000 Brussels, www.dataprotectionauthority.be.

You must be 16 or older to create an account on Mundital.

Data travels over encrypted connections. Each person sees only what they are allowed to see: database rules check every request. CVs are stored privately and shared only through short-lived links.

Mundital uses only the cookies it needs to work. The cookie notice lists them.

When we change this notice, we update the date at the top. For important changes, we tell you on the site or by email first.