Privacy Policy

1. Data Controller

Talentigo Moritz Steinbach & Markus Niedermeyer GbR Edelweißstraße 26a 82110 Germering Germany Email: contact@talentigo.de

2. Data Protection Officer

A data protection officer is not required for our company as we employ fewer than 20 people who process personal data automatically.

3. Basic Information

This privacy policy informs you about the nature, scope, and purpose of the processing of personal data on our website talentigo.de. The protection of your data is particularly important to us. We therefore process your data exclusively based on legal provisions (GDPR, TMG).

4. Processing of Personal Data

When using our website, the following personal data is processed:

  • Usage data (access times, visited websites, etc.)
  • Communication data (IP address, etc.)
  • During registration: Email address and password
  • During active use: Profile information and usage data of AI functions
  • When submitting forms: The data you provide such as name, email address, company, and message content
  • User profiles with personal data such as name, email, language, timezone
  • Profile pictures and avatars, if uploaded
  • Nutzungsverhalten wie Klicks, Scrollverhalten, Verweildauer und Interaktionen mit Elementen auf der Website
  • Mausbewegungen zur Erstellung von Heatmaps (anonymisiert)
  • Formularinteraktionen und -übermittlungen

5. Legal Basis for Processing

We process your personal data on the following legal bases:

  • Performance of a contract and pre-contractual measures (Art. 6(1)(b) GDPR): When you use our services or wish to enter into a contract with us.
  • Legitimate interests (Art. 6(1)(f) GDPR): When processing is necessary for the purposes of our legitimate interests or those of a third party, and your interests, fundamental rights, and freedoms do not override these interests.
  • Consent (Art. 6(1)(a) GDPR): When you have explicitly consented to the processing.
  • Legal obligation (Art. 6(1)(c) GDPR): When we need to comply with a legal obligation.

6. Contact Forms and Inquiries

When you fill out forms on our website or send us inquiries, your data is processed as follows:

  • Transmission via the Formspree.io service (Privacy Policy: https://formspree.io/legal/privacy-policy/)
  • Storage in our internal database for processing your request
  • Use for contacting you and answering your inquiries
  • Deletion after completion of processing, unless legal retention obligations exist

7. LinkedIn Data and Profile Analysis

When using our profile analysis function, please note:

  • The analysis of LinkedIn profiles is only performed at your request
  • We store LinkedIn profile data such as names, LinkedIn URLs, job titles, image URLs, professional experience, email addresses, skills, summaries, country and city information, education information, language skills, and "Open to Work" status
  • The analysis is performed exclusively for the purpose you specify
  • You are responsible for ensuring that you are authorized to use the profile data for analysis
  • The data is only stored for as long as necessary to provide our services

8. Processing of Public Personal Data

In the context of our recruiting and active sourcing activities, we process personal data that originate from publicly accessible professional networks such as LinkedIn. These data are automatically obtained through specialized search services.

Categories of personal data:

  • First and last name
  • current job title
  • professional career
  • qualifications
  • location information (e.g., city, region)
  • publicly visible contact information
  • LinkedIn profile URL

Purpose of processing:

The processing is carried out for the purpose of identification and initial contact with potentially suitable candidates for vacant positions at our customers or within our company.

Legal basis:

The legal basis is Art. 6 Abs. 1 lit. f DSGVO (legitimate interest). Our legitimate interest lies in the efficient implementation of recruiting processes as well as filling open positions with suitable specialists.

Storage period:

The data will be stored only as long as necessary for the purpose of the recruitment process, at the latest until a rejection or objection by the affected person or after 12 months without further contact.

Data origin:

The data originate from publicly accessible sources, in particular from publicly accessible profiles on professional networks such as LinkedIn.

Recipients:

The data will be processed exclusively internally by authorized employees or, in the context of customer projects, passed on to customers, provided this is necessary for the purpose of the recruitment process. No data will be passed on to unauthorized third parties.

Your rights:

You have the right to access, rectification, deletion, restriction of processing, and objection against the processing of your data. You also have the right to lodge a complaint with a supervisory authority.

Contact:

If you wish to object to the processing of your data or have questions about this, you can contact us at any time.

9. Project Data

When using our services, the following project data is processed:

  • Storage of project information
  • Linking profiles to projects
  • Storage of cover letters and interview guides for profiles
  • This data is only stored for the duration of your subscription and can be deleted by you at any time

10. Use of AI Technologies

We use AI technologies to provide our services. Your data is:

  • Not used for training AI models
  • Used exclusively for the analyses you request
  • Processed according to strict data protection guidelines
  • Only used with transparent decision processes
  • Used for the following functions: chat functionality, generation of cover letters, generation of interview guides, analysis of profiles, estimation of professional experience

11. Use of the OpenAI API

For certain functions of our services, we use the OpenAI API. The following applies:

  • We transmit data to OpenAI to provide the requested functions
  • OpenAI stores this data in accordance with their own privacy policies (https://openai.com/privacy/)
  • OpenAI is based in the USA, so data is transferred to a third country
  • The transfer is based on standard contractual clauses pursuant to Art. 46(2)(c) GDPR
  • You can deactivate the use of OpenAI functions at any time

12. Payment Processing

We use the Stripe service for payment processing. The following applies:

  • We transmit the data necessary for payment processing to Stripe
  • Stripe stores and processes this data in accordance with their own privacy policies (https://stripe.com/de/privacy)
  • Stripe is based in the USA, so data is transferred to a third country
  • The transfer is based on standard contractual clauses pursuant to Art. 46(2)(c) GDPR
  • We do not store complete payment information such as credit card numbers

13. Cookies and Tracking

We use cookies to provide you with a better user experience. These are small text files that are stored on your device. We distinguish between:

  • Essential cookies: These are required for the basic functions of the website (e.g., login status, session management). We do not use tracking or analytics cookies without your explicit consent.
  • Analyse-Cookies: With your consent, we use Google Analytics to analyze user behavior and improve our website. Data such as page views, clicks, scroll behavior, and session duration are recorded.

We use Google Analytics as an analytics tool. Google Analytics is a web analytics service provided by Google Ireland Limited. The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States. We have activated IP anonymization, which means your IP address will be truncated by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. You can object to the use of analytics cookies at any time by changing your cookie settings or deleting cookies from your browser.

14. Web Analytics with Google Analytics

We use Google Analytics to analyze the usage of our website. Google Analytics is a web analytics service provided by Google Ireland Limited ("Google"). Google Analytics uses so-called "cookies", text files that are stored on your computer and enable an analysis of your use of the website.

  • Legal basis: The processing is based on your consent (Art. 6(1)(a) GDPR).
  • Data collection: Google Analytics collects information such as page views, session duration, devices used, click behavior, scroll depth, and user interactions.
  • IP anonymization: We have activated IP anonymization, so your IP address will be truncated by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area.
  • Data transfer to the USA: The information generated by the cookie about your use of this website is usually transmitted to and stored by Google on servers in the United States. The transfer is based on standard contractual clauses pursuant to Art. 46(2)(c) GDPR.
  • Storage period: The data is stored for 14 months and then automatically deleted.
  • Opt-Out: You can object to data collection at any time by changing your cookie settings or deleting cookies from your browser.

We use the collected data to analyze and improve the usage of our website. The processing only takes place if you have given your consent through our cookie banner. You can revoke your consent at any time. Further information on terms of use and privacy can be found at https://www.google.com/analytics/terms/ and https://policies.google.com/privacy.

15. Third-Party Services

We use the following third-party services to provide our website and services:

  • Formspree.io for processing form submissions
  • Web3Forms for email notifications
  • Notion (optional) for storing contact requests
  • OpenAI for AI functions
  • Stripe for payment processing
  • Google Analytics for web analysis and usage statistics

16. Data Transfer to Third Countries

Some of our service providers are based in countries outside the European Union (third countries), particularly in the USA. The transfer of your data to these countries is carried out in compliance with the special requirements of Art. 44 et seq. GDPR, whereby an adequate level of protection is ensured in particular by the conclusion of standard contractual clauses pursuant to Art. 46(2)(c) GDPR.

17. Storage Period

We store your personal data only for as long as necessary for the purposes for which it was collected or as required by statutory retention periods:

  • Contact requests: Until your request is processed, maximum 6 months
  • User account data: For the duration of your subscription and up to 12 months after cancellation
  • Payment data: According to statutory retention periods, usually 10 years
  • Log data: Maximum 14 days
  • LinkedIn profile data: For the duration of the analysis and at most for the duration of your subscription

18. Automated Decision-Making and Profiling

We use AI technologies to analyze profiles and provide recommendations. The following applies:

  • The analysis is based on the data and criteria you provide
  • The results serve as decision support but do not replace your own judgment
  • The logic of the analysis is based on matching qualifications, experiences, and requirements
  • You have the right not to be subject to a decision based solely on automated processing

19. Data Security

We implement technical and organizational security measures to protect your data against manipulation, loss, or unauthorized access. Our security measures are continuously updated in line with technological developments.

  • SSL/TLS encryption for all data transfers
  • Access restrictions and authentication procedures
  • Regular security checks and updates
  • Pseudonymization and encryption of data where possible

20. Your Rights

You have the right at any time to:

  • Access information about your stored data (Art. 15 GDPR)
  • Rectification of incorrect data (Art. 16 GDPR)
  • Erasure of your data (Art. 17 GDPR)
  • Restriction of data processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Object to processing (Art. 21 GDPR)
  • Withdraw given consents with effect for the future
  • Lodge a complaint with a supervisory authority (Art. 77 GDPR)

21. Right to Lodge a Complaint with a Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority about our processing of your personal data. The competent authority is the one at your place of residence, workplace, or the place of the alleged infringement. The competent supervisory authority for us is: Bavarian State Office for Data Protection Supervision (BayLDA) Promenade 18 91522 Ansbach Phone: +49 (0) 981 180093-0 Email: poststelle@lda.bayern.de

22. Changes to the Privacy Policy

We reserve the right to adapt this privacy policy to ensure that it always complies with current legal requirements or to implement changes to our services in the privacy policy. The new privacy policy will then apply to your subsequent visits. We will inform you about significant changes by placing a corresponding notice on our website or by notifying you by email.

23. Contact

If you have questions about the collection, processing, or use of your personal data, for information, correction, blocking, or deletion of data, please contact: Talentigo Moritz Steinbach & Markus Niedermeyer GbR Edelweißstraße 26a 82110 Germering Germany Email: contact@talentigo.de

Last updated: July 2026