DATA PROTECTION & PRIVACY POLICY EVERTALENT

1. Introduction This policy applies to all services provided by EVERTALENT. We act as the data controller for the data we collect through our website and for our own recruitment activities. In RPO (Recruitment Process Outsourcing) projects, we work closely with our clients; in such cases, the privacy policy of the respective client may additionally apply the moment data is processed within their systems (ATS).

2. Legal Basis for Processing We process personal data based on the following GDPR grounds:

  • Legitimate Interest: For matching candidates with potential vacancies and maintaining our professional network.

  • Consent: For retaining data longer in our talent pool or for marketing purposes.

  • Agreement: For the execution of our services to clients.

3. What data do we collect?

  • Candidates: Name and address details, contact details, CV, work history, education, public LinkedIn profiles, and any interview notes.

  • Clients: Contact details of stakeholders and business correspondence.

  • Website Visitors: IP address and browsing behavior (via cookies).

4. Sources and Sharing of Data We collect data directly from you (via the website or email) or through professional networks such as LinkedIn.

  • Transfer to clients: If we propose you for a specific role, we share your data with the client. This transfer may occur via secure email, manual upload into the client’s Applicant Tracking System (ATS), or through dedicated agency portals/links provided by the client.

  • Responsibility: From the moment your data is transferred to or entered into a client’s system, the client’s own privacy policy and data protection protocols become applicable to the further processing of that data.

  • Security: During the transfer process from our systems to the client, we maintain security through encrypted connections and professional standards to ensure data integrity.

5. Data Retention EVERTALENT adheres to the legal standards:

  • Application procedures: If you are not hired, we will delete your data no later than 4 weeks after the end of the procedure.

  • Talent pool: With your explicit consent, we retain your data for 1 year to be able to contact you for future opportunities. After this year, we will request consent again or delete the data.

  • Business contacts: Client data is retained for as long as the business relationship lasts or as legally required.

6. Your Rights You have the right to access, rectification, restriction of processing, and deletion of your data. You can also object to processing based on legitimate interest. Please direct your request to: hello@evertalent.co.

7. International Transfers We currently process data within the EEA. Should a client be located outside the EEA, we will implement appropriate safeguards (such as Standard Contractual Clauses) to guarantee the security of your data.