Candidate Privacy Notice
Last updated: October 2026
You are applying to the employer. The application runs through the TalentGlo platform. Here is a short, plain explanation of what happens to your data.
1. Who is responsible?
The employer is the controller of your application data. Its name, address and privacy contact are in its job ad and its legal notice.
TalentGlo (Philip Global Sp. z o.o., ul. Zamknięta 10 lok. 1.5, 30-554 Kraków, Poland) provides the technology and processes your data only on the employer's instructions as a processor (Art. 28 GDPR). Contact: support@talentglo.eu.
If you also create a TalentGlo account or make your profile visible to all employers on TalentGlo, TalentGlo itself is responsible for that, not the employer. Section 11 explains it.
2. What data do we process?
- Contact details: name, email address, phone or WhatsApp number.
- Application documents: CV, cover letter, certificates and anything else you upload.
- Your answers to the job questions (for example availability, qualifications, salary expectation) and the chat history with Glo.
- Interview preferences and booked interview times.
- Technical data: time of application, proof of your consents, IP address in security logs.
We do not ask about age, origin, religion, health, marital status or photos unless needed for the job. Please do not volunteer such information.
3. Why, and on what legal basis?
| Purpose | Legal basis |
|---|---|
| Reviewing your application, communicating with you, planning an interview | Art. 6(1)(b) GDPR (steps you request before a possible employment contract) |
| Messages via WhatsApp | Your consent, Art. 6(1)(a) GDPR (you agree when the chat starts) |
| Defending legal claims, for example under anti-discrimination law | The employer's legitimate interest, Art. 6(1)(f) GDPR |
| Platform security | Legitimate interest, Art. 6(1)(f) GDPR |
4. Glo: our digital assistant (AI)
In the chat you speak with Glo, a digital assistant, which is an AI system and not a human. Glo asks you questions about the job, answers questions about the process and summarises your answers for the recruiting team.
- People decide. Glo does not reject, score or rank anyone and makes no decision about you. No decision based solely on automated processing under Art. 22 GDPR takes place.
- A human on request. You can ask to speak to a person at any time. The recruiting team can also take over the chat.
- CV analysis. An AI-supported analysis of your CV runs only when a recruiter starts it. It is a hint for that person, not a decision.
- Language model. Text is sent to Mistral AI SAS (Paris, France) for this. Under the contractual terms Mistral may not use the data to train its models.
5. Who receives your data?
- The employer: recruiters, the hiring department and other people the employer has authorised (including read-only access).
- TalentGlo's processors: Hetzner Online GmbH (hosting in Germany), Mistral AI SAS (AI processing, France), Amazon Web Services EMEA SARL (Amazon SES, email delivery from EU data centres) and, if you use WhatsApp, Meta Platforms Ireland Limited (WhatsApp Business Platform).
- Authorities where the law requires.
We do not sell data and do not use it for advertising.
6. WhatsApp and email
We message you on WhatsApp only if you have agreed. Reply STOP to end messages immediately. We do not write at night (quiet hours). WhatsApp is used through the employer's own WhatsApp Business account and operated by Meta Platforms Ireland Limited, which processes connection data (for example phone number and time) under its own privacy policy. A transfer to the USA is possible and is covered by the EU-US Data Privacy Framework (Art. 45 GDPR) or standard contractual clauses (Art. 46 GDPR). If you prefer not to use WhatsApp, you can reply by email or in the browser chat.
Email. We send emails (for example confirmation, chat invitation, interview confirmation) through Amazon SES (Amazon Web Services EMEA SARL, Luxembourg) using servers in the EU. We process your email address, the message content and the delivery status (for example "delivered" or "undeliverable"). We use no tracking pixels to measure whether emails are opened. If an address is undeliverable or you report an email as unwanted, we keep the address on a suppression list so that no further messages are sent. Because Amazon belongs to a US group, a transfer to the USA cannot be excluded. It is covered by the EU-US Data Privacy Framework or standard contractual clauses.
7. How long do we keep your data?
Our platform never deletes application data automatically. Instead:
- 180 days after the job is filled or your application is closed, your application appears on a review list for the employer. The employer then decides whether to delete it. Many employers keep applications for a few months to be able to defend legal claims.
- We delete your data whenever you ask, unless a legal duty or a legal dispute prevents it.
8. Your rights
You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and to object (Art. 21) to processing based on legitimate interests. You may withdraw any consent at any time with effect for the future (Art. 7(3)).
The best route is the employer (contact details in the job ad and its legal notice). You can also write to us at support@talentglo.eu; we will forward your request to the employer without delay. Requests about your TalentGlo account or visible profile we answer ourselves.
Right to complain: you may complain to a data protection authority, in particular where you live or work or where the alleged infringement took place, and to the authority responsible for the employer. For TalentGlo the Polish authority is responsible: President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warszawa, https://uodo.gov.pl.
9. Do I have to provide my data?
For the application we need your name, a way to contact you and the information the employer needs for the job. Everything else is voluntary. Without the required details the application cannot be processed.
10. Cookies and translation
We only set technically necessary cookies unless you agree to more in the cookie banner: the cookie "tf_locale" remembers your language choice and the cookie "tf_motion" your choice of "Pause animations" on our start page (one year each, no identifier) and, for people with a TalentGlo account, the sign-in session. There are no advertising cookies. Analytics cookies (Google Analytics, Google Ireland Limited, Ireland, and Google LLC, USA) are set only with your consent in the cookie banner (Art. 6(1)(a) GDPR), never in the application form and never in the chat. All cookies are listed in our Cookie policy; you can change your choice at any time under "Cookie settings" at the bottom of every page.
Optional translation: on a job page you can have the text translated automatically with "Translate this job". This is done by Google Translate (Google Ireland Limited, Ireland, and Google LLC, USA). Only after you choose a language there does your browser load a script from Google; Google then receives your IP address, your browser details and the text of the page, and sets the cookie "googtrans", which remembers your target language for this visit. Without your choice nothing is loaded from Google. The legal basis is your consent (Art. 6(1)(a) GDPR), which you give by choosing the language; the page always shows the original text, and the translation is automatic and not binding. What you enter in the application form is not translated and is not sent to Google.
11. Your TalentGlo account and visible profile (optional)
You can create your own TalentGlo account, either by ticking the box when you apply or at talentglo.eu. TalentGlo itself is responsible for the account (Philip Global Sp. z o.o., ul. Zamknięta 10 lok. 1.5, 30-554 Kraków, Poland), not the company you applied to. The Candidate Terms of Use apply to it.
The account is optional. You can apply without it, and your application does not depend on it. A person who already has a recruiter login can open the candidate area with the same login.
Your profile is private until you decide otherwise. Only you see it.
| What we do | Data | Legal basis | How long |
|---|---|---|---|
| Create and run your account | E-mail address (confirmed), name, password (stored encrypted only), language, phone number if you add it | Art. 6(1)(b) GDPR (account agreement) | Until you delete the account |
| Show your applications and their status | Applications you sent with the same confirmed e-mail address; each status the company sets | Art. 6(1)(b) GDPR | While the account exists; the application stays with the company under section 7 |
| Save your CV and fill in applications | Your CV file (private folder; a copy goes to a company only when you apply with it), name, e-mail, phone | Art. 6(1)(b) GDPR | Until you remove the CV or delete the account |
| Messages with employers | Your messages, the company's replies and Glo's messages in your application chats | Art. 6(1)(b) GDPR | As long as that application's messages are kept (section 7) |
| Notifications | The time you last looked at the bell; everything else is read from the data above | Art. 6(1)(b) GDPR | Until you delete the account |
| Job suggestions and insights | Titles and places of jobs you applied for, compared with open jobs on TalentGlo by simple rules; skills counted from job texts. No AI, no decision about you | Art. 6(1)(b) GDPR | While the account exists |
| Visible profile (optional, separate) | CV, skills, experience, desired job and region. Not your e-mail or phone number | Your consent, Art. 6(1)(a) GDPR | Until you switch it off or delete the account |
| Invitations from employers | The invitation, the employer and your answer | Art. 6(1)(b) GDPR | While the account exists |
| Your contact details to an employer whose invitation you accept | Name, e-mail, phone | Your consent, Art. 6(1)(a) GDPR, given by accepting that invitation | With the employer under its own rules; it is then responsible for them |
| Answering your requests | Your e-mail address and your request | Our legal duty, Art. 6(1)(c) GDPR | As long as needed to show we answered |
About the visible profile. If you switch it on, all employers and recruiters with a business account on TalentGlo can find your profile and invite you to apply for their jobs. They see your profile without your contact details and can only invite you through TalentGlo. Only when you accept an invitation do they receive your name, e-mail address and phone number; from then on that employer is responsible for them. Employers may use visible profiles only to fill their own jobs and may not copy or pass them on (our Terms of Service, section 7a). The profile is not public and does not appear in search engines.
Switch it off at any time on the account page ("Privacy & my data"). Your profile disappears from employer search at once. Invitations you already accepted and applications you already sent are not affected. Switching it on or off never changes an application, and the company you applied to cannot see your choice.
What we do not do: we do not sell your data, we do not show advertising in the account, and we do not decide about you automatically. The account has no analytics cookies. Ask for a copy of your data or for deletion on the account page or at support@talentglo.eu. Your other rights and the supervisory authority are in section 8.