Back to home

Privacy Policy

How we process your data — under GDPR and the Swiss FADP.

Last updated: 16 August 2026

Controller: NV Digital OÜ (Estonia, EU). Cookie consent under German TDDDG § 25 and GDPR Art. 6(1)(a) for analytics and marketing. Withdraw anytime via the Cookie Policy or banner.

This privacy policy informs you about how GlobalTalent24 collects, processes, and protects personal data. It applies to all users of our platform (job seekers, employers, visitors).

1. Data Controller

The data controller under the GDPR is:

  • NV Digital OÜ (operator of the “GlobalTalent24” platform)
  • Sepapaja tn 6, 11415 Tallinn, Estonia
  • Privacy email: datenschutz@globaltalent24.com
  • General contact: info@nvdigital.net
  • Because the controller is established in the European Union (Estonia), no separate EU representative under GDPR Art. 27 is required.

2. Data we collect

We process the following categories of personal data:

  • Account data: email address, name, role (job seeker / employer)
  • Application data: CV, cover letter, photo, language skills, work experience
  • Profile data: target country, industry, salary expectations, availability
  • Usage data: IP address, device information, visited pages, search queries
  • Cookies and similar technologies (see Cookie Policy)
  • Communications: messages to employers, support requests

3. Purposes of processing

We process your data for the following purposes:

  • Providing the platform and its features (account, application assistant, job search)
  • Matching job seekers and employers
  • AI-assisted creation of application documents
  • Communication with you (confirmations, magic-link emails, support)
  • Improving the platform (analytics, debugging)
  • Compliance with legal obligations

4. Legal basis (Art. 6 GDPR)

We process your data on the following legal bases:

  • Art. 6(1)(b) GDPR — Contract performance (using the platform)
  • Art. 6(1)(a) GDPR — Consent (e.g. analytics cookies, newsletter)
  • Art. 6(1)(f) GDPR — Legitimate interest (platform security, fraud prevention)
  • Art. 6(1)(c) GDPR — Legal obligations

5. Retention period

We retain your data only as long as necessary for the respective purpose:

  • Account data: until the user deletes the account
  • Application data: until active deletion or 24 months after last activity
  • Log files: maximum 90 days
  • Billing data: 10 years (legal retention requirement)

6. Recipients and processors

We use the following service providers acting as processors under the GDPR:

  • Vercel Inc. (USA) — Application hosting
  • Neon (USA) — Database (PostgreSQL)
  • Resend (USA) — Transactional emails (magic link, notifications)
  • Bunny.net (Slovenia/EU) — CDN, media storage (photos, videos, documents)
  • Anthropic (USA) — language models for the application assistant
  • Stripe Payments Europe, Ltd. (Ireland) - card payment processing (payment data only as required for billing)
  • Google (USA) — OAuth sign-in (optional)
  • Google Ireland Ltd. / Google LLC — Google Tag Manager and Google Analytics 4 (only with Analytics consent)
  • Meta Platforms Ireland Ltd. — Meta Pixel (only with Marketing consent)

7. International data transfers

Some of our providers are based in the USA. Transfers take place only under appropriate safeguards:

  • EU Standard Contractual Clauses (Art. 46 GDPR)
  • Adequacy decision (EU-US Data Privacy Framework, if certified)
  • Pre-informed consent, where required

8. Your rights

You have the following rights regarding your data:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object (Art. 21 GDPR)
  • Right to withdraw consent (Art. 7(3) GDPR)

To exercise your rights, please contact us by email.

9. Cookies and tracking

We use cookies and similar technologies. Essential cookies do not require consent. Analytics (Google Analytics 4 via Google Tag Manager) and marketing (e.g. Meta Pixel via GTM) run only after your consent. Details, retention and withdrawal: Cookie Policy. Technically we use Google Consent Mode v2.

View Cookie Policy

10. Right to lodge a complaint

If you believe that processing of your data infringes the GDPR, you may lodge a complaint with a supervisory authority. The lead authority for the controller is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon). You may also contact the data protection authority of your place of residence (e.g. a German state DPA).

11. Changes to this policy

We reserve the right to update this privacy policy to reflect changes in law or features. The current version is always available on this page.

12. Contact

If you have questions about privacy, please contact us:

  • NV Digital OÜ (GlobalTalent24)
  • Privacy contact: Vladan Živković
  • Sepapaja tn 6, 11415 Tallinn, Estonia
  • Email: datenschutz@globaltalent24.com
  • General email: info@nvdigital.net