Privacy Policy

This privacy policy informs you about processing of personal data by us.

This privacy policy is available on our website and may be printed at any time.

We reserve the right to adjust this privacy policy at any point in time to ensure that it is in line with the current legal requirements at all times, or in order to accommodate changes in the application process or other processes.

GENERAL INFORMATION

What are Personal Data?

“Personal data” are any information relating to an identified or identifiable individual person, such as a person’s name or also their hobbies. Personal data includes “personal data” or “personal information” as described both under the GDPR and CCPA (as defined below) as well as any other applicable data protection and privacy federal or state laws.

“Processing” of data means any operation or set of operations carried out with or without the aid of automated processes relating to personal data, such as collection, recording, organization, sorting, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or integration, limitation, erasure or destruction.

The legal basis for data subjects in the European Economic Area

can be found in particular in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data, on the free movement of such data, and repealing Directive 95/46/EC (“General Data Protection Regulation”, GDPR), as well as in the Federal Data Protection Act (BDSG) and Telemedia Act (TMG).

The legal basis for data protection for data subjects in the United States and in California specifically can be found in particular in the California Consumer Privacy Act (“CCPA”).

We process personal data only to the extent necessary and for the purpose of providing a functional and user-friendly internet presence, including its contents and the services offered there.

Controller

Handshake Europe GmbH

Chausseestraße 25, 10115 Berlin

Represented by Managing Directors: Jason Reich, Markus Dücker, Marco Eylert

Registered with the local court of Charlottenburg under HRB 191671 B

email: team@talentspace.io

We also refer to the further third party providers named in this privacy policy who control your data.

Controller is any natural or business person, which decides on the purpose and means of data processing on its own or jointly with others.

Data protection officer

We have appointed a data protection officer to protect your data: ‍

datenschutz nord GmbH

Kurfürstendamm 212, 10719 Berlin

Scope and Location of Data Processing

We as well as our external service partners process your data for the purpose of providing the website and our services, including providing hard- and software through such external service partners.

The type of data we collect from you depends on your interaction with us and we have set out the different kinds of interactions in and use of the data collected in the paragraphs below. In general, please note that we process the following categories of data –

  1. Minimum required data including User ID, first name, last name, email address, email verification status, password (salted + encrypted)
  2. Profile data including CV (pdf upload), photo (image upload), city, occupation, self-description, looking for work? (yes/no) languages, programming languages, job-seeking preferences, work history, education history, interests (industries, company types, areas), and values.
  3. Event-related data including registration for events, session/speech sign-ups, session/speech participants (chats requested with respective status), live booths participations, video join/exit events by a user (total) time spent by a specific user within a specific session, the written question asked in-video, chat messages sent in-video, user was granted the right to join “on stage” (in session or live booth)
  4. Behavior data including company/team profile (company/team ID (which profile was viewed), company/team interested in, FAQs viewed, Timestamp) and jobs (jobs viewed, jobs bookmarked, jobs clicked-out, timestamp).

Further details are included under the different sub-headings below. We will not collect any additional categories of personal data or use your personal data for additional purposes without notice to you.

Children

Our  Services are not directed to persons under the age of  13.  We do not knowingly collect personal information from children under the age of 13. If a parent or guardian becomes aware that his or her child has provided us with personal information without such parent or guardian’s consent, he or she should contact us. If we become aware that a child the age of 13 has provided us with personal information, we will delete such information from our files.

Location of Data Processing

In general, we process your personal data in the EU/EEA. If third-party providers engaged by us process personal data outside the EU/EEA, data protection standards applicable in the EU and in the US are ensured. For more information, you may also contact us via email at privacy@talentspace.io.

We process your personal data as follows (or as otherwise described in this privacy policy or information provided to you):

In the event you refrain from providing such data you may face legal disadvantages, for example, no answer to your email send to us.

For US citizens and specifically those in California, we would not subject you to any legal disadvantages for refraining to provide such data.

Furthermore, we have implemented technical and organizational measures to ensure that the data protection regulations are observed both by us and by external service providers. The website is operated through a safe SSL-connection. If an SSL-connection is activated third parties are prevented from reading any data that are transferred by you to us.

Your Rights

Your European Privacy Rights

If you are a data subject in the European Economic Area, you have the following rights:

  • the right to access,
  • the right to rectification or erasure,
  • the right to restriction of processing
  • the right to data portability,
  • the right to withdraw your consent.
  • You further have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data based on point e or f of Art. 6 para. 1 s.1 GDPR, including profiling based on those provisions.

To act according to your rights set forth above you may contact us via email to privacy@talentspace.io.

You have the right to lodge a complaint with the data protection authority of your choice (for example: Berliner Beauftragte für Datenschutz und Informationsfreiheit, Friedrichstr. 219, 10969 Berlin or mailbox@datenschutz-berlin.de).

Your rights under California Consumer Privacy Act

If you are a data subject under the CCPA, you may have the following rights –

  • The right to access information about the collection of your personal data upon request
  • The right to be informed before or at the point of collection about the categories of personal data we collect about you
  • The right to request the deletion of your personal data
  • The right to correct inaccurate personal data
  • The right to opt-out of the sharing of your personal data with third parties

If you wish to do any of these things, you may submit a request to us at [privacy@talentspace.io].  We will respond to your request consistent with applicable law and subject to proper verification. And we do not discriminate based on the exercise of any privacy rights that you might have under the CCPA. In particular, we will not:

  • Deny you our services.
  • Charge you different prices or rates for our services,  including through granting discounts or other benefits, or imposing penalties.
  • Provide you a different level or quality of services.
  • Suggest that you may receive a different price or rate for services or a different level or quality of services.

However, we may offer you certain financial incentives permitted by the CCPA that can result in different prices, rates, or quality levels. Any CCPA-permitted financial incentive we offer will reasonably relate to your personal information’s value and contain written terms that describe the program’s material aspects. Participation in a financial incentive program requires your prior opt-in consent, which you may revoke at any time.

For eligible students and parents (where applicable) under the Family Educational Rights and Privacy Act (Title 34 CFR), educational institutions to which funds have been made available under any program administered by the Secretary of the US Department of Education and who are utilizing our services for their students are responsible for ensuring that they observe the rights of their eligible students and parents (where applicable) under FERPA.

Storing and Deleting Data

The data are deleted if such data are no longer necessary for the purpose of processing. We or the engaged third party services delete your data according to the following criteria: Time and completion of requests, lapse of legal retention periods, settings provided by third-party providers etc. Furthermore, we store your data if we are obliged to do so in accordance with legal retention periods (e.g. German Commercial Code (HGB) or German Fiscal Code (AO)).

For US citizens and California residents, in particular, we shall not retain your personal data for a period that is longer than is necessary for the purpose for which such data is collected.

DATA PROCESSING WHEN VISITING OUR WEBSITE

Visiting the Website

We (or the web space provider) collect data on each visit to our website (so-called server log files) for statistical evaluations for the purpose of optimizing our services and in order to guarantee the stability and operational security of the website.

For United States residents and specifically those in California, the information in the table below is also provided in compliance with the CCPA’s requirement for businesses that control the collection of consumer’s personal data to inform consumers of the categories of personal information to be collected and the purposes for which such information are collected or used and whether such information is sold or shared.

Cookies

Our website partly uses so-called technical cookies for a user friendly and technical adequate presentation of the website. Cookies are small text files which are stored on your device and in your browser.

We use so-called session cookies. After the end of the session these cookies will be deleted automatically. The session cookies are used in order to associate successive page requests with the individual users, who at the same time access our website. Other cookies will be stored on your device until you delete them. These cookies enable us to recognize your browser during your next visit. We also use third-party cookies for different purposes, including marketing. For details please refer to the following section and the list of third-party cookies and providers used by us.

OPT-OUT: You can adjust your browser to notify you, before you receive a cookie or to decide to accept cookies on a case-by-case basis, to completely or partly exclude all incoming cookies and to activate the deletion of cookies automatically when the browser is closed. You may manage many online advertisement cookies provided by companies via the American web page http://www.aboutads.info/choices/ or the web page of the European Union http://www.youronlinechoices.com/uk/your-ad-choices/. We would like to inform you that the usage and especially the convenience of usage without using any cookies may be limited.

For data subjects in the European Economic Area, in the event personal data are processed such processing is based on Art. 6 para. 1 s.1 lit. f. GDPR with our legitimate interest of the presentation of a user friendly and technical correct website, or, where required, your consent (legal basis Art. 6 para. 1 s.1 lit. a. GDPR).

Third-Party Cookies and similar technologies on the website

This website uses third-party cookies and similar technologies. Some of these third-party cookies and similar technologies are necessary for our online service, some are needed for improving the functionality of our online services or used by us for marketing purposes. Details about the third-party cookies, similar technologies as well as other third-party services used on our website are set out in the table below.

For United States residents and specifically those in California, the information in the table below is also provided in compliance with the CCPA’s requirement for businesses that control the collection of consumer’s personal data to inform consumers of the categories of personal information to be collected and the purposes for which such information are collected or used and whether such information is sold or shared.

CONTACTING US, NEWSLETTERS, HOSTING PROVIDERS

Contacting us; online chat; emails

If you send us any requests via email, online chat or otherwise contact us your details in this request are processed by us as follows:

We use the online chat service “Intercom” by Intercom R&D Unlimited Company, 2nd Floor, Stephen Court, 18-21 Saint Stephen's Green, Dublin on our website for receiving and answering your chat requests. The provider of Intercom may process data outside the EU/EEA. More information may be found in the Intercom privacy policy:  https://www.intercom.com/legal/privacy

For United States residents and specifically those in California, the information in the table above is also provided in compliance with the CCPA’s requirement for businesses that control the collection of consumer’s personal data to inform consumers of the categories of personal information to be collected and the purposes for which such information are collected or used and whether such information is sold or shared.

Newsletter

With the email newsletter we inform you about our products and services. For the registration to the newsletter only the email address is needed. If you register for the newsletter, your email address will be transmitted to us (or to the engaged third party provider) and stored there. After registration, you receive an email to confirm the registration (“double opt-in”).

We use “Mailchimp” by The Rocket Science Group LLC d/b/a Mailchimp, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA as third party provider for the purpose of sending newsletters. For this purpose, the provider of Mailchimp processes the IP address, device name, mail provider, first and last name and date on servers in the USA. The US company of Mailchimp guarantees compliance with data protection regulations in the EU by using the EU Standard Contractual Clauses (SCC). For more information please also refer to Mailchimp’s privacy policy (https://mailchimp.com/legal/privacy/) and data processing agreement with us (https://mailchimp.com/legal/data-processing-addendum/).

Withdrawal of consent / OPT-OUT:  You can withdraw your consent to the processing of Data for the purpose of sending the newsletter or evaluation of related data at any time. The withdrawal can take place over a link, which is contained in each newsletter, or by separate message to us. You will not incur any costs other than the transmission costs according to the basic tariffs.

Hosting Providers

We use the services by Netlify (Netlify, Inc., 2325 3rd Street, Suite 215, San Francisco, California 94107, USA; further information: https://www.netlify.com/privacy/) and AWS (by Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855, Luxembourg; further information: https://aws.amazon.com/de/privacy/) for hosting your data. The provider by netlify may process your data outside the EU/EEA. Netlify Inc. processes data in the USA and guarantees compliance with data protection regulations in the EU by using the EU Standard Contractual Clauses (SCC).

For United States residents and specifically those in California, the information above is also provided in compliance with the CCPA’s requirement for businesses that control the collection of consumer’s personal data to inform consumers of the categories of personal information to be collected and the purposes for which such information are collected or used and whether such information is sold or shared.

Further information about third-party providers engaged by us are contained in this privacy policy or further information provided by us. You may also contact us for details via a message to privacy@talentspace.io.

DATA PROCESSING WHEN USING TALENTSPACE SOFTWARE

When signing up for our software service or entering into an agreement with us, we will process your data on the basis of initiating a business relationship or continuing an existing business relationship (legal basis Art. 6 para. 1 s.1 lit. b GDPR) as well as further described in this privacy policy or information provided to you. For more details on the use of your data for our software service please also refer to the respective terms relating to the use of our software. You may also contact us for details via a message to privacy@talentspace.io.

We process the following categories of information when you use our software –

  1. Minimum required data including User ID, first name, last name, email address, email verification status, password (salted + encrypted)
  2. Profile data including CV (pdf upload), photo (image upload), city, occupation, self-description, looking for work? (yes/no) languages, programming languages, job-seeking preferences, work history, education history, interests (industries, company types, areas), and values.
  3. Event-related data including registration for events, session/speech sign-ups, session/speech participants (chats requested with respective status), live booths participations, video join/exit events by a user (total) time spent by a specific user within a specific session, the written question asked in-video, chat messages sent in-video, user was granted the right to join “on stage” (in session or live booth)
  4. Behavior data including company/team profile (company/team ID (which profile was viewed), company/team interested in, FAQs viewed, Timestamp) and jobs (jobs viewed, jobs bookmarked, jobs clicked-out, timestamp).

THIRD-PARTY ACCESS TO YOUR DATA

As the purpose of our Service is to connect people and businesses during virtual and hybrid events, we will grant access to and share your submitted personal data as identified above (including name, email address, and CV) to the respective Event Organizer and to companies which attend an event you have applied and/or registered for. This access enables the companies to receive information about you in order to assess if they want to contact you prior, during or after the event. The companies may download and store your data for 1 year. However, the companies must not transfer your data to third parties, use it for marketing purposes or make it otherwise publicly available. The processing is based on your consent (legal basis Art. 6 para. 1 s.1 lit. a GDPR).

For users in the United States and in California in particular, you may have the right under the CCPA to opt-out of the sharing of your personal data to third parties. However, please note that this may limit the Event Organizers’ or companies’ access to your profile and other relevant personal data relevant for events that you may wish to attend.

Sharing in compliance with a legal process - We may also share your personal data with a third party if we have a good-faith belief that access,  use,  preservation,  or  disclosure of the data is reasonably necessary in order to comply with a  valid court order,  subpoena,  legal order, legal process, or other legal obligation; to enforce our Terms of Service, any of our terms and conditions or our policies;   Detect,  prevent,  or otherwise address fraud,  security,  or technical issues; as necessary to pursue any available legal remedies or defend legal claims; or Protect against harm to the rights,  property or safety of  Talentspace,  our users,  or the public as required or permitted by law. To the extent we are legally permitted to do so, we will endeavor to notify you in the event that we are required to provide your personal information to third parties in connection with a subpoena.

Jobteaser SSO

You may use the single sign-on option provided by JobTeaser SA, 19 Rue Blanche, 75009 Paris for our registration process. Before a connection to JobTeaser is established, you must expressly agree to the process and transmission of data described below. By clicking on the respective symbol, a new pop-up window will open, in which you must log in with your login data for JobTeaser. After you have successfully logged in, JobTeaser will inform you, which data will be transmitted to us for authentication as part of the registration or login process. If you have agreed to this data transfer, the fields required by us for registration will be filled with the transmitted data. The information we require for registration or login is your email address. Only after your express consent to the use of the transmitted and required data, your data will be stored by us and used for the purposes as stated within this Privacy Policy. In order to perform the authentication process for registration and login, your IP address is transmitted to JobTeaser. We have no influence on the purpose and scope of data collection and on the further processing of the data by JobTeaser. For further information, please read the data protection information of the respective provider [Jobteaser Privacy Policy].

DATA PROCESSING ON OUR SOCIAL MEDIA PAGES

We operate social media pages, where data are processed by us and the provider of social media. This type of service allows interaction with social networks or other external platforms directly from the pages of TalentSpace.io.

The respective provider of social media assumes the data protection obligations towards you, such as information on data processing, and is the contact person for rights. This follows from the fact that such provider has direct access to the relevant information on the social media pages and the processing of data. However, you are also welcome to contact us if this should become necessary and we will then forward the request to the respective provider if necessary.

With social media pages we can communicate with and provide you with interesting information. We may receive further data through comments, shared images, messages and reactions, which we then process to answer or communicate with you. If you use social media on several end devices, a cross-device analysis of the data can take place. Furthermore, the providers of the social media pages may also use cookies and tracking technologies to analyze and improve their services.

Data processing takes place with consent or for the purpose of answering user inquiries (Art. 6 para. 1 s.1 lit. a or b GDPR) or on the basis of legitimate interests in improving the services, advertising, and marketing activities and presentation to the outside world (Art. 6 para. 1 s.1 lit. f GDPR). The interaction and information obtained through TalentSpace.io are always subject to your privacy settings for each social network. This type of service might still collect traffic data for the pages where the service is installed, even when you do not use it.

It is recommended to log out from the respective services in order to make sure that the processed data on TalentSpace.io isn’t being connected back to your social media profile.

The social media providers may process your data outside the EU/EEA (mainly: USA). The US companies  Facebook and LinkedIn guarantee compliance with data protection regulations in the EU by using the EU Standard Contractual Clauses (SCC) as well as with data protection regulations in the US, including the CCPA.

Page Insights on Facebook

Facebook (by Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland) and we use the Page Insights  function to process statistical data from Users of Facebook pages (see also the agreement at: https://www.facebook.com/legal/terms/page_controller_addendum). This involves the processing of data in the form of so-called 'page insights', which are described in more detail at https://www.facebook.com/business/a/page/page-insights.

Evaluations and statistics are generated in the form of page insights from the usage data of the Facebook pages, which support us in improving marketing activities and external presence. We may also learn about users and their behavior who interact with or use our Facebook Pages to display relevant content and develop features that may be of interest to them. These page statistics show, for example, which people from certain target groups interact most with Facebook Pages or which content on the Facebook Page was visited, shared or licked when and how often. When classifying people into target groups, demographic data or data about the location of a person is also included in order to place targeted advertisements with these people. The data collected in this way is statistically processed and usually anonymous, i.e. we cannot establish any reference to the individual person. Information on these page insights and data processing can be found, for example, in Facebook's data protection statement at https://www.facebook.com/policy.php or at https://www.facebook.com/business/a/page/page-insights. Facebook also uses cookies and storage technologies. More information can be found here: https://www.facebook.com/policies/cookies/

OPT-OUT/Settings: https://www.facebook.com/settings

Page Insights on Instagram

When using Instagram and you have an account there, Instagram can assign your activities to your profiles there. Instagram (by Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland) and we use the Instagram Insights function to process statistical data from users of our Instagram pages (see also for Facebook which is connected to the provider of Instagram the agreement at: https://www.facebook.com/legal/terms/page_controller_addendum). This involves the processing of data in the form of so-called ‘Instagram Insights’ which are described in more detail at https://help.instagram.com/788388387972460?helpref=faq_content. Instagram also uses cookies and similar technologies. For more information please refer to: http://instagram.com/about/legal/privacy/

OPT-OUT/Settings: https://www.instagram.com/accounts/privacy_and_security/

Data processing on the LinkedIn Page

We may interact with data included on the LinkedIn Page via the service by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland / LinkedIn Corporation, 1000 W. Maude Ave., Sunnyvale, CA 94085, USA. LinkedIn also uses Cookies. More information: https://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy

OPT-OUT/Settings: https://www.linkedin.com/psettings/privacy

RECRUITING & CAREERS DATA PROCESSING

In the event you apply for a job with us or for recruitment purposes, we will process certain data. We may also ask for additional information to assist us with our recruitment process and in the event you are offered a job an example would be date of birth, work documents. You may also share details of other people with us; for example, if somebody else referred the job to you. In those circumstances, you will need to check with that person that they are happy for you to share their personal information with us, and for us to use it in accordance with this privacy policy.

For the online recruiting process we use the service by third party providers. In our job/careers section (https://talentspace.join.com/) we use the services by JOIN Solutions AG, Landsgemeindeplatz 6, 9043 Trogen/Switzerland (with EU representative: Fux:Legal GbR, Rheiner Landstraße 74, 49078 Osnabruck/Germany). JOIN processes your online application data through the job/careers section on our website within and outside the EU/EEA. For more information on data processing by JOIN please refer to: https://join.com/de-de/privacy. We further use the software solution Recruitee for our recruiting processes. Recruitee is provided by Recruitee B.V., Keizersgracht 313, 1016 EE Amsterdam/Netherlands. For further information on the processing of personal data by Recruitee visit https://recruitee.com/privacy.

Unless otherwise required by law (for example due to an employment with us) we delete your application data after 3 months following the end of the application process. With your explicit consent (as set forth in the form below), we will keep your information in case any other opportunities become available which you might be interested in. Provided your explicit consent we will keep your data for such purpose after the end of the application process. You may withdraw such consent with effect for the future at any time via email to privacy@talentspace.io.

SECURITY

The security of your information is a serious issue for us and we are committed to protecting the information we receive from you. We use reasonable security measures to protect against the loss, misuse, and alteration of your personal information under our control and to ensure that your information is treated in accordance with this privacy policy. Notwithstanding such measures, please be aware that no security measures are perfect or impenetrable, and we cannot guarantee the security of any information transmitted to or from the Services, including your personal information or financial account information.  We also are not responsible for the actions of any third parties that may receive any such information.

TO  THE  FULLEST  EXTENT  PERMITTED  BY  APPLICABLE  LAW WE  ASSUME  NO LIABILITY OR RESPONSIBILITY FOR DISCLOSURE OF YOUR INFORMATION DUE TO  ERRORS  IN  TRANSMISSION,  UNAUTHORIZED  THIRD-PARTY  ACCESS,  OR OTHER   CAUSES   BEYOND   OUR   CONTROL. BY   USING   THE   SERVICES   OR PROVIDING  PERSONAL  INFORMATION  TO  US,  YOU  AGREE  THAT  WE  MAY COMMUNICATE    WITH    YOU    ELECTRONICALLY    REGARDING    SECURITY, PRIVACY,  AND  ADMINISTRATIVE  ISSUES  RELATING  TO  YOUR  USE  OF  THE SERVICES. IF WE LEARN OF A SECURITY SYSTEM’S BREACH, WE MAY ATTEMPT TO  NOTIFY  YOU  ELECTRONICALLY  BY  POSTING  A  NOTICE  ON  OUR WEBSITE, BY MAIL, OR BY SENDING AN E-MAIL TO YOU.

You play an important role in keeping your personal information secure and you should not share your username, password, or other security information for your Account with anyone. If we receive instructions using your username and password,  we will consider that you have authorized the instructions. If you believe there has been any unauthorized access or use of your information, please contact us immediately at privacy@talentspace.io.

Declaration of Consent to the Storage of Applicant Data

If my application is unsuccessful, I agree to Handshake Europe GmbH, Berlin storing my personal data that I have provided during the entire application process (for example in letters, CVs, certificates, applicant questionnaires, applicant interviews) beyond the end of the specific application process. I agree that Handshake Europe GmbH may use this information to contact me later and continue the application process if I am eligible for another job.

If in my letter of application or other documents I submitted in the application process I myself have communicated ‘special categories of personal data’ in accordance with Art. 9 of the General Data Protection Regulation (e.g. a photo showing ethnic origin, details of disabled status, etc.), my consent also refers to this data. If I have communicated sensitive personal information in accordance with section 1798.100 of the CCPA, my consent also refers to this sensitive personal information.

TalentSpace GmbH would, however, like to evaluate all applicants only according to their qualifications and therefore asks that such details in the application be waived if possible.

This consent also applies to data about my qualifications and activities from publicly available data sources (in particular: professional social networks) that TalentSpace GmbH has obtained during the application process. My data will not be disclosed to third parties, except as set forth in this privacy policy https://talentspace.io/privacy-policy/.

This consent is voluntary and has no effect on my chances in the current application procedure. I can refuse it without giving reasons and without fear of disadvantages. I can also withdraw my consent at any time, for example via email to privacy@talentspace.io - in this case my data will be deleted immediately after completion of the application procedure.

However, in the event of non-issuance or withdrawal of this consent, the application I have already submitted cannot be taken into account in the present form.

For details on data processing please also refer to our privacy policy https://talentspace.io/privacy-policy/.