The data controller under the GDPR is:

• GlobalTalent24
• [Company address]
• Email: [contact@globaltalent24.com]

We process the following categories of personal data:

• Account data: email address, name, role (job seeker / employer)
• Application data: CV, cover letter, photo, language skills, work experience
• Profile data: target country, industry, salary expectations, availability
• Usage data: IP address, device information, visited pages, search queries
• Cookies and similar technologies (see Cookie Policy)
• Communications: messages to employers, support requests

We process your data for the following purposes:

• Providing the platform and its features (account, application assistant, job search)
• Matching job seekers and employers
• AI-assisted creation of application documents
• Communication with you (confirmations, magic-link emails, support)
• Improving the platform (analytics, debugging)
• Compliance with legal obligations

We process your data on the following legal bases:

• Art. 6(1)(b) GDPR — Contract performance (using the platform)
• Art. 6(1)(a) GDPR — Consent (e.g. analytics cookies, newsletter)
• Art. 6(1)(f) GDPR — Legitimate interest (platform security, fraud prevention)
• Art. 6(1)(c) GDPR — Legal obligations

We retain your data only as long as necessary for the respective purpose:

• Account data: until the user deletes the account
• Application data: until active deletion or 24 months after last activity
• Log files: maximum 90 days
• Billing data: 10 years (legal retention requirement)

We use the following service providers acting as processors under the GDPR:

• Vercel Inc. (USA) — Application hosting
• Neon (USA) — Database (PostgreSQL)
• Resend (USA) — Transactional emails (magic link, notifications)
• Bunny.net (Slovenia/EU) — CDN, media storage (photos, videos, documents)
• Anthropic (USA) — language models for the application assistant
• Creem (EU) — Payment processing for premium subscriptions
• Google (USA) — OAuth sign-in (optional)

Some of our providers are based in the USA. Transfers take place only under appropriate safeguards:

• EU Standard Contractual Clauses (Art. 46 GDPR)
• Adequacy decision (EU-US Data Privacy Framework, if certified)
• Pre-informed consent, where required

You have the following rights regarding your data:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)
• Right to withdraw consent (Art. 7(3) GDPR)

To exercise your rights, please contact us by email.

We use cookies and similar technologies to provide and improve the platform. Details are available in our Cookie Policy.

View Cookie Policy

If you believe that the processing of your data violates the GDPR, you have the right to lodge a complaint with a supervisory authority. In Switzerland: Federal Data Protection and Information Commissioner (FDPIC). In Germany: the competent state data protection authority.

We reserve the right to update this privacy policy to reflect changes in law or features. The current version is always available on this page.

If you have questions about privacy, please contact us:

• GlobalTalent24
• [Company address]
• Email: [privacy@globaltalent24.com]