1. Data Controller
The data controller is TalentScale HR, based in Italy. For any privacy-related requests, contact: hello@talentscalehr.com
2. Data Collected
2.1 Data provided voluntarily
We collect personal data that you provide through:
- "Looking for Work" form: name, email, phone, current and desired role, seniority, tech stack, salary expectations, location preferences, availability, LinkedIn profile, CV, additional notes.
- "Looking for Developers" form: contact name, email, company name, role title, seniority, tech stack, salary budget, remote policy, team size, timeline, description.
- Hiring Readiness Assessment: questionnaire answers, number of open positions, average time-to-hire, email, name, company name.
- Calendly booking: name, email, and information provided during booking (managed by Calendly Inc.).
2.2 Automatically collected data
The site uses only technical cookies necessary for operation. The Calendly widget may set third-party cookies subject to Calendly's privacy policy.
3. Purpose of Processing
Personal data is processed for the following purposes:
- Managing applications and matching with open positions
- Managing recruiting requests from companies
- Communications related to TalentScale HR services
- Sending personalized reports (Assessment)
- Improving our services
4. Legal Basis
Data processing is based on:
- Consent: provided through voluntary form submission and acceptance of this policy.
- Legitimate interest: for managing service requests and communicating with candidates and companies.
5. Data Retention
Personal data is retained for a maximum of 24 months from the date of collection, unless otherwise requested by the data subject. Uploaded CVs are retained for a maximum of 12 months.
6. Data Sharing
Personal data is never sold to third parties. It may be shared with:
- Client companies: candidate profiles may be shared with companies that have compatible open positions, with prior consent.
- Service providers: Supabase (database and storage), Calendly (bookings), Resend (email notifications). All providers are GDPR compliant.
7. Data Transfer Outside the EU
Some service providers (Supabase, Calendly) may transfer data outside the European Union. In such cases, the transfer is based on Standard Contractual Clauses approved by the European Commission or adequacy decisions.
8. Your Rights
In accordance with Regulation (EU) 2016/679 (GDPR), you have the right to:
- Access: obtain confirmation of processing and access your data.
- Rectification: correct inaccurate data.
- Erasure: request deletion of your data ("right to be forgotten").
- Restriction: restrict processing of your data.
- Portability: receive your data in a structured, readable format.
- Objection: object to data processing.
- Withdraw consent: withdraw consent at any time.
To exercise your rights, email: hello@talentscalehr.com
You also have the right to lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it).
9. Cookies
The site uses:
- Technical cookies: necessary for site operation (language preference, cookie consent). No consent required.
- Third-party cookies: the Calendly widget may set cookies for the booking service. You can reject these via the cookie banner.
We do not use profiling or advertising tracking cookies.
10. Security
Data is protected through:
- Encryption in transit (HTTPS/TLS)
- Row Level Security in the database (Supabase)
- Data access limited to authorized personnel
- Secure CV storage with controlled access
11. Changes to This Privacy Policy
We reserve the right to update this privacy policy. Any changes will be posted on this page with an updated date.