Privacy Policy

1. Data Controller

The Data Controller responsible for your personal data is:

2. Data We Collect

We may collect and process the following categories of personal data:

• Identification Data: name, surname, title, date of birth.
• Contact Data: email address, postal address.
• Professional Data: CV, employment history, education, skills, certificates.
• Technical Data: IP address, browser type, device information, cookies.
• Communication Data: messages via our contact forms, email, or other channels.

We only collect data that is necessary for the purposes described below.

3. Purposes and Legal Bases for Processing

We process personal data for the following purposes:

• Recruitment Services: to match candidates with job opportunities. (Legal basis: Art. 6(1)(b) GDPR; Art. 6(1)(f) GDPR)
• HR Consulting & Employer Branding: to provide consulting services to clients. (Legal basis: Art. 6(1)(b) & (f) GDPR)
• Marketing Communications: to send updates, newsletters, and promotional content, only if you have consented. (Legal basis: Art. 6(1)(a) GDPR)
• Website Analytics: to improve our services and website functionality. (Legal basis: Art. 6(1)(f) GDPR)
• Legal & Compliance: to fulfill legal obligations. (Legal basis: Art. 6(1)(c) GDPR)

4. Data Retention

• Candidate data: up to 2 years after last contact, unless consent is renewed.
• Client and partner data: 5 years after the business relationship ends.
• Marketing consent: until withdrawal of consent.
• Technical data (cookies/logs): see our Cookie Policy.

5. Data Sharing

We may share personal data with:

• Clients/Employers: only with your prior consent (for recruitment).
• Service Providers: IT hosting, cloud storage, analytics, communication tools.
• Authorities: where legally required.

All third parties are contractually bound to GDPR compliance.

6. Data Transfers

If we transfer personal data outside the European Economic Area (EEA), we ensure adequate safeguards, such as Standard Contractual Clauses (SCCs) approved by the European Commission.

7. Your Rights Under GDPR

You have the following rights:

• Access: request a copy of your personal data.
• Rectification: correct incomplete or inaccurate data.
• Erasure: request deletion of your data.
• Restriction of Processing: limit how we use your data.
• Data Portability: receive your data in a structured format.
• Objection: object to certain processing activities (e.g., marketing).
• Withdraw Consent: at any time, without affecting prior lawful processing.

To exercise your rights, please contact us at: office@talstak.com

You also have the right to lodge a complaint with the Romanian supervisory authority (ANSPDCP) or the relevant authority in your country.

8. Security of Your Data

We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction.

9. Contact Us

For privacy-related questions: office@talstak.com<br/>Address: Calea Aradului 99, 300110 Timișoara, Romania