Privacy Policy

Last Updated: February 7, 2026
Effective Date: February 7, 2026


1. Introduction

Welcome to TalentEU ("we," "us," "our," or the "Platform"), operated at talenteu.eu. We are committed to protecting your personal data and respecting your privacy in full compliance with the General Data Protection Regulation (GDPR) (EU Regulation 2016/679).

This Privacy Policy explains:

  • What personal data we collect
  • Why we collect it (legal basis)
  • How we use, store, and protect it
  • Your rights under GDPR
  • How to contact us

By using TalentEU, you acknowledge that you have read and understood this Privacy Policy.


2. Data Controller

Identity: TalentEU
Website: https://talenteu.eu
Contact Email: privacy@talenteu.eu
Registered Address: TalentEU, hosted via Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany
Data Protection Officer (if applicable): Not Applicable

For any questions regarding this Privacy Policy or your personal data, please contact us at the email above.


3. Personal Data We Collect

3.1 Data You Provide Directly

When you register or use TalentEU, we may collect:

Data Category Examples Purpose
Identity Data Full name, username, profile photo Account creation, authentication
Contact Data Email address, phone number (optional) Communication, notifications, account recovery
Professional Data CV/Resume (PDF), work history, education, skills, LinkedIn profile URL Job matching, employer visibility
Application Data Cover letters, application messages, job preferences Facilitate applications to employers
Payment Data (Premium users only) Billing email, payment method details (processed by third-party payment processors) Subscription management

3.2 Data We Collect Automatically

Data Category Examples Purpose
Technical Data IP address, browser type, device type, operating system Security, fraud prevention, analytics
Usage Data Pages visited, time spent, clicks, search queries Platform improvement, personalization
Cookies Session cookies, analytics cookies (see Cookie Policy) Authentication, analytics (with consent)

3.3 Data from Third Parties

  • OAuth Login: If you sign in via Google, LinkedIn, or other providers, we receive basic profile information (name, email, profile picture) as permitted by that service.
  • Public Data: We may collect publicly available information from your LinkedIn profile if you provide the URL.

4. Legal Basis for Processing (GDPR Article 6)

We process your personal data only when we have a lawful basis:

Processing Activity Legal Basis
Account creation and management Consent (GDPR Art. 6(1)(a)) — You actively sign up
Job matching and applications Contractual Necessity (GDPR Art. 6(1)(b)) — To provide our service
Communication (job alerts, updates) Consent (for marketing) or Legitimate Interest (for service-related messages)
Security logs and fraud prevention Legitimate Interest (GDPR Art. 6(1)(f)) — Protecting our platform
Analytics (if cookies accepted) Consent (GDPR Art. 6(1)(a))
Legal compliance (e.g., tax records for premium users) Legal Obligation (GDPR Art. 6(1)(c))

You have the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before withdrawal.


5. How We Use Your Data

We use your personal data for the following purposes:

  1. Job Matching: To display your profile to employers for relevant job opportunities.
  2. Applications: To send your CV and application details to employers when you apply.
  3. Communication: To send you job recommendations, application status updates, and platform announcements.
  4. Platform Improvement: To analyze usage patterns (anonymized where possible) and improve user experience.
  5. Security: To detect and prevent fraud, abuse, and unauthorized access.
  6. Premium Features: To manage subscriptions, invoicing, and feature access for paying users.
  7. Compliance: To comply with legal obligations (e.g., data retention laws for financial transactions).

We do NOT:

  • Sell your data to advertisers or third parties
  • Share your CV with employers without your explicit action (applying to a job)
  • Use your data for purposes beyond those stated in this policy

6. Data Sharing and Recipients

6.1 When We Share Your Data

Recipient Data Shared Purpose Legal Basis
Employers/Recruiters Name, email, CV, cover letter (only when you apply to a job) Recruitment process Consent (you click "Apply")
Hosting Provider (Hetzner) All account and application data (encrypted in transit) Infrastructure and storage Contractual necessity
Payment Processor (if premium user) Billing email, payment details Subscription processing Contractual necessity
Legal Authorities (if required) Any data necessary to comply with law Compliance with legal orders Legal obligation

6.2 Third-Party Services

We use the following carefully vetted third parties:

  • Hetzner Online GmbH (Germany): Hosting infrastructure. Data remains in the EU. Hetzner Privacy Policy
  • Payment Processor (if applicable): Stripe or PayPal. Handles payments securely; we do not store credit card numbers.

Important: When you apply to a job, your CV and application data are shared with the employer/recruiter who posted that job. We are not responsible for how employers process your data after receiving it. Employers are independent data controllers.


7. International Data Transfers

Primary Data Location: EU (hosted on Hetzner servers in Germany/Finland).

If we ever transfer data outside the European Economic Area (EEA), we will:

  • Use Standard Contractual Clauses (SCCs) approved by the European Commission, or
  • Ensure the recipient country has an Adequacy Decision from the EU Commission, or
  • Obtain your explicit consent

Currently, all data remains within the EU.


8. Data Retention

We retain your personal data only as long as necessary:

Data Type Retention Period
Account Data (profiles, CVs) 6 months after last login, unless you delete your account earlier
Application History 6 months after application submission
Payment Records (premium users) 7 years (legal requirement for financial records)
Analytics Data (anonymized) Up to 12 months
Security Logs 90 days

After the retention period, data is permanently deleted from our systems.

You can request earlier deletion by contacting us or using the "Delete Account" feature in your profile settings.


9. Your Rights Under GDPR

You have the following rights regarding your personal data:

9.1 Right to Access (Article 15)

Request a copy of all personal data we hold about you.

9.2 Right to Rectification (Article 16)

Correct inaccurate or incomplete data.

9.3 Right to Erasure / "Right to be Forgotten" (Article 17)

Request deletion of your data when:

  • It is no longer necessary
  • You withdraw consent
  • You object to processing (and we have no overriding grounds)
  • Data was unlawfully processed

Exception: We may retain data if required by law (e.g., payment records).

9.4 Right to Restriction (Article 18)

Request that we limit processing in certain cases (e.g., while verifying accuracy).

9.5 Right to Data Portability (Article 20)

Receive your data in a structured, machine-readable format (e.g., JSON, CSV) and transfer it to another service.

9.6 Right to Object (Article 21)

Object to processing based on legitimate interest (e.g., direct marketing).

9.7 Right to Withdraw Consent (Article 7)

Withdraw consent at any time (e.g., unsubscribe from emails, revoke cookies).

9.8 Right to Lodge a Complaint

If you believe we are not complying with GDPR, you can file a complaint with your national Data Protection Authority:

How to Exercise Your Rights:

  1. Log in to your account and go to Settings → Privacy & Data
  2. Use the self-service tools (download data, delete account)
  3. Email us at privacy@talenteu.eu with the subject "GDPR Request"

We will respond within 30 days (GDPR requirement).


10. Data Security

We implement industry-standard security measures:

Measure Description
Encryption in Transit HTTPS/TLS for all data transmission
Encryption at Rest Database encryption for sensitive fields (CVs, passwords)
Access Control Role-based access; only authorized personnel can access data
Regular Backups Encrypted backups stored securely
Security Audits Regular reviews and vulnerability testing
Password Protection Passwords hashed using bcrypt/Argon2

No system is 100% secure. While we take all reasonable precautions, we cannot guarantee absolute security. If you suspect a data breach, contact us immediately.


11. Children's Privacy

TalentEU is not intended for users under 16 years old. We do not knowingly collect data from children. If we discover that a child under 16 has provided personal data, we will delete it immediately.

If you are a parent/guardian and believe your child has provided data, contact us at privacy@talenteu.eu.


12. Cookies and Tracking

See our separate Cookie Policy for detailed information.

Summary:

  • Strictly Necessary Cookies: Authentication, security (no consent required)
  • Analytics Cookies: Usage statistics (requires your consent via cookie banner)

You can manage cookie preferences in the banner or via your account settings.


13. Changes to This Privacy Policy

We may update this Privacy Policy to reflect:

  • Changes in laws or regulations
  • New features or services
  • Feedback from users or regulators

When we make material changes, we will:

  1. Update the "Last Updated" date at the top
  2. Notify you via email (if applicable)
  3. Display a prominent notice on the platform

Continued use of TalentEU after changes constitutes acceptance.


14. Contact Us

For questions, concerns, or to exercise your GDPR rights:

Email: privacy@talenteu.eu
Postal Address: TalentEU, hosted via Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany
Data Protection Officer: Not Applicable

Response Time: We aim to respond within 3-5 business days for general inquiries and within 30 days for formal GDPR requests.


15. Supervisory Authority

If you are not satisfied with our response, you have the right to lodge a complaint with a Data Protection Authority in the EU member state where you reside, work, or where the alleged infringement occurred.

Find your local DPA: https://edpb.europa.eu/about-edpb/board/members_en


End of Privacy Policy


Quick Links

Privacy Policy | EuroTalent | EuroTalent