Privacy Policy
Last updated 20 September 2026
1. Who we are
TalentITan Global Managed Services ("TalentITan", "we") operates https://talentitan.com. For any privacy matter, contact talent@talentitan.com. Registered location: Frankfurt am Main, Germany.
2. What we collect
We only collect what you voluntarily submit through our forms, plus minimal technical data needed for security:
- Identity & contact: name, job title, company, email address, telephone number.
- Geographic: country, city, time zone — used to assign a delivery team in your region.
- Requirement data: service category, specific services, certifications, compliance drivers, seniority, headcount, budget range, timeline, and your free-text description.
- Attachments: any brief, RFP or scope document you choose to upload.
- Technical: IP address, browser user-agent and referring URL — retained for spam prevention and security auditing only.
3. Why we process it (lawful basis)
- Legitimate interest & pre-contractual necessity (Art. 6(1)(b) and (f) GDPR) — to respond to your enquiry and prepare a proposal.
- Consent (Art. 6(1)(a) GDPR) — for optional marketing emails, which you may withdraw at any time.
- Legal obligation (Art. 6(1)(c) GDPR) — where retention is required by law.
4. How long we keep it
Enquiry records are retained for 24 months from last contact, then deleted or anonymised. Uploaded attachments are deleted within 12 months unless they form part of an active contract. Marketing consents are retained until withdrawn.
5. Who we share it with
We do not sell, rent or trade personal data. Data may be processed by: our web host (Hostinger International Ltd., EU), our email provider, and — only where necessary to deliver your requested service — named TalentITan consultants bound by confidentiality agreements. All processors operate under data processing agreements.
6. International transfers
Where data is transferred outside the EEA (for example to a delivery hub you requested), we rely on EU Standard Contractual Clauses and apply supplementary technical measures including encryption in transit and at rest.
7. How we protect it
TLS encryption on all pages, CSRF protection on all forms, rate limiting, honeypot spam filtering, parameterised database queries, restricted file-type uploads with execution disabled, least-privilege access controls, and internal controls aligned to ISO/IEC 27001.
8. Your rights
Under the GDPR you may request access, rectification, erasure, restriction of processing, data portability, or object to processing. You may also withdraw consent at any time and lodge a complaint with your supervisory authority. To exercise any right, email talent@talentitan.com — we respond within 30 days.
9. Cookies
We use one essential cookie for your session and form security (PHPSESSID), and one local-storage entry to remember that you dismissed the cookie notice. We set no advertising or cross-site tracking cookies by default. If analytics are enabled in future, this policy will be updated and consent requested first.
10. Changes
We may update this policy. The "last updated" date above always reflects the current version.