Candidate Privacy Notice

1. Who is responsible?

Geis is the controller of your application data. Its name, address and privacy contact are in its job ad and its legal notice.

TalentGlo (Philip Global Sp. z o.o., ul. Zamknięta 10 lok. 1.5, 30-554 Kraków, Poland) provides the technology and processes your data only on the employer's instructions as a processor (Art. 28 GDPR). Contact: filo.lingo@gmail.com.

2. What data do we process?

• Contact details: name, email address, phone or WhatsApp number.
• Application documents: CV, cover letter, certificates and anything else you upload.
• Your answers to the job questions (for example availability, qualifications, salary expectation) and the chat history with Glo.
• Interview preferences and booked interview times.
• Technical data: time of application, proof of your consents, IP address in security logs.

We do not ask about age, origin, religion, health, marital status or photos unless needed for the job. Please do not volunteer such information.

3. Why, and on what legal basis?

Talent pool consent is independent of your application. You suffer no disadvantage if you decline.

4. Glo: our digital assistant (AI)

In the chat you speak with Glo, a digital assistant, which is an AI system and not a human. Glo asks you questions about the job, answers questions about the process and summarises your answers for the recruiting team.

• People decide. Glo does not reject, score or rank anyone and makes no decision about you. No decision based solely on automated processing under Art. 22 GDPR takes place.
• A human on request. You can ask to speak to a person at any time. The recruiting team can also take over the chat.
• CV analysis. An AI-supported analysis of your CV runs only when a recruiter starts it. It is a hint for that person, not a decision.
• Language model. Text is sent to Mistral AI SAS (Paris, France) for this. Under the contractual terms Mistral may not use the data to train its models.

5. Who receives your data?

• The employer: recruiters, the hiring department and other people the employer has authorised (including read-only access).
• TalentGlo's processors: Hetzner Online GmbH (hosting in the EU), Mistral AI SAS (AI processing, France), Amazon Web Services EMEA SARL (Amazon SES, email delivery from EU data centres) and, if you use WhatsApp, Meta Platforms Ireland Limited (WhatsApp Business Platform).
• Authorities where the law requires.

We do not sell data and do not use it for advertising.

6. WhatsApp and email

We message you on WhatsApp only if you have agreed. Reply STOP to end messages immediately. We do not write at night (quiet hours). WhatsApp is used through the employer's own WhatsApp Business account and operated by Meta Platforms Ireland Limited, which processes connection data (for example phone number and time) under its own privacy policy. A transfer to the USA is possible and is covered by the EU-US Data Privacy Framework (Art. 45 GDPR) or standard contractual clauses (Art. 46 GDPR). If you prefer not to use WhatsApp, you can reply by email or in the browser chat.

Email. We send emails (for example confirmation, chat invitation, interview confirmation) through Amazon SES (Amazon Web Services EMEA SARL, Luxembourg) using servers in the EU. We process your email address, the message content and the delivery status (for example "delivered" or "undeliverable"). We use no tracking pixels to measure whether emails are opened. If an address is undeliverable or you report an email as unwanted, we keep the address on a suppression list so that no further messages are sent. Because Amazon belongs to a US group, a transfer to the USA cannot be excluded. It is covered by the EU-US Data Privacy Framework or standard contractual clauses.

7. How long do we keep your data?

Our platform does not delete application data automatically. Instead:

• The employer reviews at least every 12 months whether it still needs your data, and TalentGlo reminds it to. It deletes the data if not.
• For the talent pool we ask you at least every 12 months whether you want to stay. If you do not answer, your profile is no longer used.
• We delete your data whenever you ask, unless a legal retention duty or a legal dispute prevents it.

8. Your rights

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and to object (Art. 21) to processing based on legitimate interests. You may withdraw any consent at any time with effect for the future (Art. 7(3)).

The best route is Geis (contact details in the job ad and its legal notice). You can also write to us at filo.lingo@gmail.com; we will forward your request to the employer without delay.

Right to complain: you may complain to a data protection authority, in particular where you live or work or where the alleged infringement took place, and to the authority responsible for the employer. For TalentGlo the Polish authority UODO (ul. Stawki 2, 00-193 Warszawa, https://uodo.gov.pl) is responsible.

9. Do I have to provide my data?

For the application we need your name, a way to contact you and the information the employer needs for the job. Everything else is voluntary. Without the required details the application cannot be processed.