Draft. The company details below are placeholders and this text has not yet been reviewed by counsel. Fill in the entity data and have a data protection lawyer confirm it before the site goes live.
We are glad you are here, and we take the protection of your personal data seriously. We handle personal data in line with the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). Below we explain what data we process when you visit this website, why, and what rights you have.
Controller
talecap intelligence GmbH
Guiollettstraße 48
60325 Frankfurt am Main, Germany
talecap.ai
info@talecap.ai
Data protection officer
We have not currently appointed a data protection officer. Based on the present scope of our data processing, we do not consider ourselves obliged to appoint one under Art. 37 GDPR; we keep this under review as the scope or nature of our business develops.
What counts as personal data
Personal data is any information relating to an identified or identifiable natural person — for example a name, an address, an email address, a phone number, or an IP address.
Data we process when you visit this site
When you open this website, your browser automatically transmits technical information that our hosting provider, Cloudflare, Inc. (101 Townsend St, San Francisco, CA, USA, together with its European group entities), records in server log files under a Data Processing Agreement concluded with us pursuant to Art. 28 GDPR. This includes:
- browser type and version
- operating system
- your internet service provider
- your IP address
- date and time of access
- the page you came from (referrer) and the pages you open on our site
We use this data solely to deliver the website reliably and securely and to investigate technical faults or abuse. The legal basis is our legitimate interest in the secure and stable operation of the site (Art. 6(1)(f) GDPR). Log data is deleted once it is no longer needed for these purposes.
Cookies and similar technologies
This website is a static site and does not set analytics or marketing cookies. Should we introduce them in future, we will only do so on the basis of your prior consent (Art. 6(1)(a) GDPR), which you may withdraw at any time with effect for the future. Strictly necessary cookies — those required for the secure delivery of the site — would remain active on the basis of Art. 6(1)(f) GDPR.
Cloudflare Web Analytics
We use Cloudflare Web Analytics to understand how this website is used, in aggregated form. This service does not set cookies or persistent identifiers, does not track visitors across different websites, and processes your IP address only briefly to produce anonymised statistics; the IP address itself is not stored. The legal basis is our legitimate interest in understanding and improving site usage (Art. 6(1)(f) GDPR). The provider is Cloudflare, Inc. (USA), acting as our data processor under the Data Processing Agreement referenced above.
Third-party content
We load web fonts (Google Fonts) from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, so that the site renders as intended. When you open the page, your IP address is transmitted to that provider, as it is technically required to deliver the font files to your browser. The legal basis is our legitimate interest in a consistent and functional presentation of our website (Art. 6(1)(f) GDPR). Where this involves a transfer to the parent company Google LLC (USA), it relies on the EU-US Data Privacy Framework, to which Google LLC has self-certified, and additionally on Standard Contractual Clauses under Art. 46 GDPR. Please see Google's own privacy notice for further detail.
Contacting us
If you contact us by email, the data you send us — your name, your email address and the content of your message — is stored so that we can handle your enquiry. The legal basis is Art. 6(1)(f) GDPR, and, where your enquiry is aimed at entering into a contract, Art. 6(1)(b) GDPR. We delete this data once your enquiry has been dealt with conclusively and no statutory retention obligations require us to keep it.
Applications
If you apply to us, we process the data in your application for the purpose of the recruitment process, on the basis of Art. 88 GDPR in conjunction with § 26 BDSG. If we do not offer you a role, we delete your data no later than six months after the process concludes, unless you have consented to us keeping it for longer. If we do hire you, your data is transferred into your personnel file.
Retention
We keep personal data only for as long as is necessary for the purpose it was collected for, or for as long as statutory retention periods require. Once the purpose falls away and no retention period applies, the data is deleted.
Transfers outside the EU/EEA
Where personal data is transferred to a country outside the EU/EEA, we ensure an adequate level of protection — for instance through an adequacy decision of the European Commission or through Standard Contractual Clauses under Art. 46 GDPR, together with any additional safeguards required. This applies in particular to our hosting and analytics provider Cloudflare, Inc. and our font provider Google LLC (both USA); both companies have self-certified under the EU-US Data Privacy Framework, with Standard Contractual Clauses under Art. 46 GDPR applying additionally.
Your rights
Under the GDPR you have the following rights in relation to your personal data:
- Access (Art. 15) — to know whether and how we process your data.
- Rectification (Art. 16) — to have inaccurate or incomplete data corrected.
- Erasure (Art. 17) — to have your data deleted where the conditions are met.
- Restriction (Art. 18) — to have processing limited in certain circumstances.
- Data portability (Art. 20) — to receive your data in a structured, machine-readable format.
- Objection (Art. 21) — to object to processing based on legitimate interests, on grounds relating to your particular situation, and at any time where data is used for direct marketing.
- Withdrawal of consent (Art. 7(3)) — to withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.
- Complaint (Art. 77) — to lodge a complaint with a supervisory authority, in particular in the member state of your residence or workplace.
Automated decision-making
We do not use your personal data for automated decision-making or profiling that produces legal effects concerning you or similarly significantly affects you.
Security
We apply appropriate technical and organisational measures to protect your data against loss, manipulation and unauthorised access. Our measures are reviewed regularly and adapted as technology develops.
Changes to this policy
We may update this privacy policy to reflect changes to our services or to legal requirements. The version published here is the one that applies.
