Privacy notice

Data controller

B.lab ODV — Voluntary Organisation, with registered office at Via Isimbardi 25, 20136 Milano. For any request about your data you can write to alumni@blabbocconi.it.

What data we collect

The data you enter in the registration form: first name, last name, email address, the years you were part of B.lab, the area and role you held, degree programme, city and country, LinkedIn profile, current and previous employment, the availability you indicate, any memory you choose to share, and your (optional) consent to appear in the public directory.

If you forward a job offer to the network's Telegram bot: your Telegram ID, your username if you have one, the text or files you send, and the job-post fields derived from them.

For the directory and the map: only the professional fields you choose to make public (or that the Board publishes after review). The position on the map is city-level, never an address.

For the internal enrichment of the directory (Board only): any professional data already in our possession or suggested by searches of open sources, kept as a draft until there is explicit consent or confirmation. We do not publish email addresses, phone numbers or dates of birth.

We don't use profiling cookies and there are no advertising trackers on this site. We use a technical session cookie if you sign in via magic link or Google (Firebase Authentication).

Why we process it

To build and maintain the Alumni network: putting you in touch with other former members, inviting you to reserved events and — only if you indicated it among your availability — suggesting mentoring, speaking or sharing open positions.

To publish in the directory and on the map the profiles for which you gave directory consent (or, in documented cases, after review by the Board on an appropriate legal basis), so that a B.lab alum can look up who works at a given company or in a given city.

To sign you in to the network: via an email magic link or via Google Sign-In (Firebase Authentication). In that case we receive the account's email address and name from Google, and use them only to open the session and link it to your profile.

To publish on the jobs board the posts you choose to forward to the bot: title, company, location, description and application link or email become visible to anyone who opens the page. The Telegram ID of the person who forwarded it stays internal to the Board.

The legal basis for registration is the consent you give when submitting the form. For the public directory it is the additional consent to publish your profile. For Google sign-in it is the performance of the authentication request. For the jobs board, whoever forwards an offer to the bot expressly asks for the post to be published. You can withdraw your consent at any time, without affecting the lawfulness of the processing carried out before the withdrawal.

Who can see it

The full registration data (email, LinkedIn, internal notes) can be accessed by members of the B.lab Board and by the people in charge of running the Alumni network.

On the public directory and the map anyone can see name, generation, area, city, company and role (current and previous, as declared). The LinkedIn URL and the option to ask for an introduction are reserved for people with an active network session.

The data is stored on Google Cloud Firestore (Google Ireland Limited) and the site is hosted on Vercel: both act as data processors. For Google sign-in we use Firebase Authentication (Google Ireland Limited). To read and structure the posts forwarded to the bot we use Anthropic (Claude) as a data processor: the text and any screenshots or PDFs are sent to that service and are not kept published as files. For the map we use third-party map tiles (OpenFreeMap / OpenStreetMap).

Your data is not transferred or sold to third parties.

How long we keep it

Registration data is kept for as long as you remain registered in the network. If you ask for deletion, the data is removed within 30 days of the request. You can ask at any time to hide or update your public profile.

Published offers stay on the board until the stated deadline (usually 30 days) or until a withdrawal request. Rejected drafts and the original texts forwarded to the bot are kept for as long as moderation requires, then deleted on request.

Your rights

At any time you can request access to, rectification, erasure, restriction or portability of your data, and object to the processing (including publication in the directory), by writing to alumni@blabbocconi.it. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).