This Privacy Policy explains how Global Talent Connect ("we", "us", "our") collects, uses, stores, and protects personal data when you visit our website, use our services, purchase services in our online shop, or otherwise interact with us.
We are committed to protecting your privacy and handling your personal data in compliance with the EU General Data Protection Regulation (GDPR) and other applicable data protection laws.
Data controller
The data controller responsible for processing your personal data in connection with this website and our services is:
Global Talent Connect
Friedrich-Ebert-Straße 66
34613 Schwalmstadt
Germany
Email: info@global-talentconnect.com
Phone: +49 66919690634
Unless stated otherwise in this Privacy Policy, Global Talent Connect is the primary controller for the processing of personal data described here.
Scope of this Privacy Policy
This Privacy Policy applies to the processing of personal data of the following groups:
- International candidates using our recruitment, visa, and relocation services;
- Employers and business contacts using our recruitment and consulting services;
- Users of our website and online shop, including newsletter subscribers and people who contact us via forms, email, or phone;
- Any other individuals whose data we process in the context of our business activities.
Depending on your relationship with us, not all parts of this Privacy Policy may apply to you. However, we aim to provide clear and transparent information for all core processing activities.
The exact personal data we collect depends on how you interact with us and which services you use. We generally process the following categories of data:
Data from candidates
- Identification and contact details (for example: name, address, country of residence, email address, phone number, date of birth);
- Application and career information (for example: CV, cover letter, education and qualifications, language skills, work experience, references, desired roles, salary expectations, availability);
- Visa and immigration information (for example: passport details, visa status, nationality, residency status, details relevant to skilled worker and fast-track procedures, including § 81a AufenthG, and recognition of qualifications);
- Relocation-related information (for example: family situation, preferred location, housing preferences, basic financial information you choose to share in the context of relocation planning);
- Communication data (for example: emails, messages via contact forms, consultation notes, interview notes);
- Booking and payment data for paid candidate services (for example: services booked, payment status, invoice details; we do not store full payment card details, which are processed by payment providers).
Data from employers and business contacts
- Business contact details (for example: name, position, company name, business address, work email, work phone);
- Information about open roles and company needs (for example: job descriptions, required skills and qualifications, salary ranges, visa sponsorship plans);
- Contract and billing information (for example: contracts, service agreements, invoices, payment details handled via payment providers);
- Communication data (for example: emails, meeting notes, messages via forms or phone).
Website, analytics, and technical data
- Technical data (for example: IP address, device and browser type, operating system, approximate location based on IP, access times, pages viewed, referrer URL);
- Usage data (for example: interactions with pages and features, clicks, scrolls, forms started and submitted, products viewed in the shop);
- Cookie and tracking data collected via cookies and similar technologies, as explained in the section on cookies and analytics.
Newsletter and marketing data
- Subscription and preference data (for example: email address, language preferences, type of content you signed up for);
- Interaction data (for example: email opens, link clicks, unsubscribe information), where permitted by law.
We generally do not request or intentionally process special categories of data (such as data about health, religious beliefs, or trade union membership) unless this is strictly necessary for a specific legal or visa-related purpose and you have provided this information voluntarily or based on a clear legal basis.
We process personal data only where we have a valid legal basis under the GDPR and other applicable laws. Depending on the context, we rely in particular on the following legal bases: performance of a contract or steps prior to entering into a contract (Art. 6(1)(b) GDPR), compliance with legal obligations (Art. 6(1)(c) GDPR), our legitimate interests (Art. 6(1)(f) GDPR), and your consent (Art. 6(1)(a) GDPR).
Provision of our website and online services
- Purpose: Operating and maintaining our website, ensuring functionality, security, and performance, displaying content, and enabling navigation and basic interactions.
- Legal basis: Our legitimate interests in providing a secure and user-friendly website (Art. 6(1)(f) GDPR).
Handling inquiries and communication
- Purpose: Responding to inquiries sent via contact forms, email, phone, or other channels; scheduling and conducting consultations; managing ongoing communication with candidates and employers.
- Legal basis: Performance of a contract or steps prior to entering into a contract (Art. 6(1)(b) GDPR) where the inquiry relates to our services; otherwise our legitimate interests in responding to requests and maintaining business relationships (Art. 6(1)(f) GDPR).
Recruitment, job placement, and employer services
- Purpose: Evaluating candidate profiles, matching candidates with suitable roles, sending candidate profiles to employers, organizing interviews, advising on offers and contracts, and coordinating recruitment processes.
- Legal basis: Performance of a contract or steps prior to entering into a contract with candidates and employers (Art. 6(1)(b) GDPR), and our legitimate interests in efficiently providing recruitment services to both sides (Art. 6(1)(f) GDPR).
Visa, immigration, documentation, and relocation support
- Purpose: Providing visa and immigration guidance (including under fast-track procedures such as § 81a AufenthG), preparing and reviewing documents, supporting recognition of qualifications, coordinating with employers, authorities, and other stakeholders, and supporting relocation and onboarding.
- Legal basis: Performance of a contract or steps prior to entering into a contract (Art. 6(1)(b) GDPR); compliance with legal obligations where we are required to retain certain data or provide information to authorities (Art. 6(1)(c) GDPR); and our legitimate interests in providing compliant visa and relocation services (Art. 6(1)(f) GDPR).
Online shop, bookings, and payments
- Purpose: Enabling you to book and pay for services (for example, consultations, document checks, candidate or employer packages), processing orders, delivering purchased services, and managing invoicing and accounting.
- Legal basis: Performance of a contract and steps prior to entering into a contract (Art. 6(1)(b) GDPR); compliance with legal obligations regarding tax and accounting (Art. 6(1)(c) GDPR); and our legitimate interests in operating an efficient and secure online shop (Art. 6(1)(f) GDPR).
Newsletter and marketing communication
- Purpose: Sending newsletters, updates, invitations, and information about our services and relevant topics (for example, recruitment, visa, and relocation insights) where you have subscribed or where this is otherwise permitted by law.
- Legal basis: Your consent (Art. 6(1)(a) GDPR) where required; in some business-to-business contexts, our legitimate interests in informing existing or potential business partners about our services (Art. 6(1)(f) GDPR). You can withdraw your consent or object to marketing at any time.
Analytics, service improvement, and security
- Purpose: Analyzing website usage and campaign performance, improving our content and services, preventing fraud and abuse, maintaining IT security, and enforcing our legal rights.
- Legal basis: Our legitimate interests in improving our services and maintaining security (Art. 6(1)(f) GDPR). Where non-essential cookies or similar technologies are used, we rely on your consent (Art. 6(1)(a) GDPR).
Compliance with legal obligations and enforcement
- Purpose: Fulfilling legal obligations (for example, under tax, commercial, immigration, or employment laws), responding to lawful requests from authorities, and establishing, exercising, or defending legal claims.
- Legal basis: Compliance with legal obligations (Art. 6(1)(c) GDPR) and our legitimate interests in protecting our rights and defending against claims (Art. 6(1)(f) GDPR).
We only share personal data with third parties where this is necessary for the purposes described in this Privacy Policy, where we are legally obliged to do so, or where you have given your consent.
Typical categories of recipients
- Employers and business partners: When you are a candidate and we introduce you to potential employers, we share relevant application data (for example, CV, qualifications, experience, and other information necessary for assessing your suitability for a role). We do so only with your knowledge and in the context of recruitment and placement.
- Service providers and processors: We use carefully selected service providers (for example, IT hosting providers, CRM and applicant tracking systems, communication tools, analytics providers, payment service providers, and professional advisors) who process data on our behalf and under data processing agreements.
- Authorities and public bodies: In the context of visa, immigration, and legal procedures, or where we are legally required, we may share necessary information with immigration authorities, consulates, embassies, courts, or other public bodies.
- Professional advisors: Where necessary, we may share data with lawyers, tax consultants, or other professional advisors bound by confidentiality obligations.
International transfers of personal data
Because we work with candidates, employers, and authorities in different countries, personal data may be transferred to countries outside the European Economic Area (EEA), including countries that may not provide the same level of data protection as in the EU.
Where we transfer personal data to such countries, we take appropriate safeguards to protect your data in accordance with the GDPR, for example by:
- Transferring data to countries for which the European Commission has adopted an adequacy decision; and/or
- Using standard contractual clauses (SCCs) approved by the European Commission, combined with additional measures where necessary.
Upon request, we can provide more information about the specific safeguards we use for international data transfers, subject to reasonable confidentiality requirements.
We retain personal data only for as long as necessary to achieve the purposes described in this Privacy Policy, unless we are required by law to keep it for a longer period (for example, due to tax, commercial, or immigration law obligations) or you have given consent for a longer retention where this is permitted.
The table below provides an overview of typical retention periods for key categories of data. Actual retention periods may vary depending on specific legal requirements, ongoing procedures, or the need to establish, exercise, or defend legal claims.
| Data category | Typical retention period | Examples |
|---|---|---|
| Candidate profiles and application data | Generally up to 2 years after the last meaningful contact, unless a longer period is justified or permitted by law or consent | CVs, cover letters, interview notes, matching history |
| Employer and business contact data | For the duration of the business relationship and up to 6 or 10 years thereafter where required by commercial and tax laws | Contact details, contracts, correspondence, service history |
| Visa, immigration, and documentation data | For the duration of the relevant procedure and for the period required by applicable immigration and legal regulations | Copies of documents submitted for visa or recognition, case notes |
| Online shop orders and payment records | Up to 10 years in line with statutory tax and commercial retention obligations | Invoices, payment confirmations, service bookings |
| Newsletter and marketing data | Until you withdraw your consent or object to processing, plus a short period to document your request | Subscription details, email preferences, unsubscribe records |
| Technical and analytics data | Short-term operational logs (for example, a few weeks or months), and aggregated statistics for longer where no longer attributable to individuals | Server logs, analytics event data, error logs |
As an individual whose personal data we process, you have various rights under the GDPR and other applicable data protection laws. These rights may be subject to certain conditions and legal limitations.
- Right of access: You have the right to obtain confirmation as to whether we process personal data about you and, if so, to receive a copy of that data and certain additional information.
- Right to rectification: You can request that we correct inaccurate personal data and complete incomplete data.
- Right to erasure ("right to be forgotten"): You can request the deletion of your personal data, for example where it is no longer necessary for the purposes for which it was collected or you have withdrawn your consent. This right may be limited where we are required to retain data by law or need it to establish, exercise, or defend legal claims.
- Right to restriction of processing: In certain circumstances, you can request that we restrict the processing of your data (for example, while we are verifying its accuracy or assessing an objection).
- Right to data portability: Where processing is based on consent or a contract and carried out by automated means, you can request to receive the data you provided to us in a structured, commonly used, and machine-readable format and to have it transmitted to another controller, where technically feasible.
- Right to object: Where we process data based on our legitimate interests, you have the right to object to such processing on grounds relating to your particular situation. If you object, we will stop processing the data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims. You have an unconditional right to object to the use of your data for direct marketing.
- Right to withdraw consent: Where processing is based on your consent, you can withdraw that consent at any time with effect for the future. This does not affect the lawfulness of processing based on consent before its withdrawal.
- Right to lodge a complaint with a supervisory authority: You have the right to lodge a complaint with a competent data protection authority, in particular in the EU Member State of your habitual residence, place of work, or place of the alleged infringement.
To exercise your rights, please contact us using the details provided in the "Contact for privacy inquiries" section below. We may need to verify your identity before responding to your request.
Our website uses cookies and similar technologies (such as tags and scripts) to enable core functions, improve performance, and analyze how visitors use our site. Cookies are small text files stored on your device by your browser.
Types of cookies we use
- Strictly necessary cookies: These cookies are required for the basic operation of the website, such as enabling navigation, security features, and access to secure areas. They cannot be switched off in our systems and do not require consent.
- Preference cookies: These cookies allow the website to remember choices you make (for example, language settings) to provide a more personalized experience.
- Analytics and performance cookies: These cookies help us understand how visitors use our website (for example, which pages are visited most often, how users move around the site) so that we can improve content and usability. We may use common web analytics tools provided by third parties for this purpose.
- Marketing and tracking cookies: Where used, these cookies help us measure the effectiveness of campaigns or display relevant content. We only use such cookies where permitted by law and, where required, based on your consent.
Legal basis and consent management
For strictly necessary cookies, the legal basis is our legitimate interests in providing a secure and functional website (Art. 6(1)(f) GDPR). For non-essential cookies (such as certain analytics or marketing cookies), we rely on your consent (Art. 6(1)(a) GDPR), which we obtain via a cookie banner or similar consent tool where required.
You can change your cookie preferences at any time via your browser settings and, where available, via the cookie settings on our website. You can also delete cookies stored on your device. Please note that disabling certain cookies may affect the functionality or performance of the website.
Analytics and log files
When you visit our website, we also collect server log data for security and diagnostic purposes (for example, IP address, date and time of access, pages visited, error messages). This processing is based on our legitimate interests in ensuring the security and stability of our website (Art. 6(1)(f) GDPR). Analytics data may be stored in pseudonymized or aggregated form where possible.
We take appropriate technical and organizational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. While no system can be completely secure, we continuously review and improve our security measures.
Depending on the specific processing activity, our security measures may include, among others:
- Use of secure connections (for example, TLS/SSL encryption) for transmitting data via our website;
- Access controls and authentication mechanisms to ensure that only authorized personnel and service providers can access personal data;
- Role-based access management and the principle of least privilege for staff and contractors;
- Regular updates and security patches for systems and applications;
- Backups and recovery procedures to protect against data loss;
- Internal policies, confidentiality obligations, and awareness-raising for personnel handling personal data;
- Selection and monitoring of service providers based on their security and data protection standards.
If, despite our security measures, a personal data breach occurs that is likely to result in a high risk to your rights and freedoms, we will inform you and the competent supervisory authority where required by law.
If you have any questions about this Privacy Policy or how we process your personal data, or if you wish to exercise your data protection rights, you can contact us at any time:
Global Talent Connect
Friedrich-Ebert-Straße 66
34613 Schwalmstadt
Germany
Email: info@global-talentconnect.com
Phone: +49 66919690634
When contacting us, please provide enough information for us to identify you and process your request (for example, your name, contact details, and a description of your relationship with us). We may ask for additional information if needed to verify your identity.
If you believe that the processing of your personal data infringes data protection law, you also have the right to lodge a complaint with a competent data protection supervisory authority. You are free to contact the authority in your habitual place of residence, place of work, or the place of the alleged infringement.
We may update this Privacy Policy from time to time to reflect changes in our processing activities or legal requirements. The current version is always available on our website.