GDPR Compliance - TalentOS

TalentOS is committed to protecting the privacy and rights of individuals in accordance with the General Data Protection Regulation (GDPR). This page outlines how we comply with GDPR and explains your rights as a data subject.

Our Commitment to GDPR

The GDPR is a regulation that strengthens data protection for individuals within the European Union (EU) and European Economic Area (EEA). TalentOS adheres to GDPR principles regardless of where our users are located.

Legal Basis for Processing

We process personal data under the following legal bases:

Consent: When you sign up for our services or agree to receive marketing communications.
Contract: When processing is necessary to fulfill our agreement with you.
Legitimate Interests: When we have a legitimate business interest that doesn't override your rights.
Legal Obligation: When we are required to process data by law.

Your Rights Under GDPR

As a data subject, you have the following rights:

Right to Access

You have the right to request a copy of the personal data we hold about you. We will provide this information within 30 days of your request.

Right to Rectification

You can request that we correct any inaccurate or incomplete personal data we hold about you.

Right to Erasure ("Right to be Forgotten")

You can request that we delete your personal data in certain circumstances, including:

When the data is no longer necessary for the purpose it was collected
When you withdraw consent (if processing was based on consent)
When you object to processing and there are no overriding legitimate grounds
When the data has been unlawfully processed

Right to Restrict Processing

You can request that we limit how we use your data while we verify its accuracy or assess a complaint.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.

Right to Object

You can object to processing of your personal data for direct marketing purposes or when processing is based on legitimate interests.

Rights Related to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing that significantly affect you. Our AI matching provides recommendations to human recruiters who make final decisions.

Data Protection Officer

For GDPR-related inquiries, you can contact our Data Protection Officer at:

Email: dpo@talentos.ai

Data Transfers

When we transfer personal data outside the EEA, we ensure appropriate safeguards are in place, including:

Standard Contractual Clauses approved by the European Commission
Transfers to countries with adequate data protection laws
Binding Corporate Rules where applicable

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected. Retention periods vary based on:

The nature of the data and the purposes of processing
Legal, regulatory, and contractual requirements
Legitimate business needs

Security Measures

We implement appropriate technical and organizational measures to protect personal data, including:

Encryption of data in transit and at rest
Access controls and authentication
Regular security assessments and audits
Employee training on data protection
Incident response procedures

Exercising Your Rights

To exercise any of your GDPR rights, please contact us using the information below. We will respond to your request within 30 days. In some cases, we may need to verify your identity before processing your request.

Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. We encourage you to contact us first so we can address your concerns.

Contact Information

For GDPR-related requests or questions:

Email: gdpr@talentos.ai
Data Protection Officer: dpo@talentos.ai