Privacy Policy

2What data we process, and where it comes from

We only process data you give us, or that your own visit generates. We do not buy it from third parties and we do not scrape it from public sources. Depending on what you do on the site, this is everything that gets stored:

• Contact form: name, email address, company, phone number, country, profile type, the service you are interested in, and the message you write. We also record the moment you ticked the box accepting this policy, because that is the proof that you accepted it.
• Website assistant: if you choose to speak, the audio of the conversation and its transcript; if you choose to type, the text only. In both cases an internal conversation identifier is stored so we can tie it to your enquiry.
• Phone messages: name, callback number, email address if you provide one, country, organisation, language, reason for the call, and a summary of the message.
• Where your visit came from: if you arrive from a campaign, the parameters in the web address (utm_source, utm_medium, utm_campaign, utm_term, utm_content), the Google and Meta click identifiers (gclid, fbclid), the page you landed on, and the site you came from. This tells us which campaign works; it is not used to build a profile of you.
• Cookie consent record: which categories you accepted or refused, the version of the policy you were shown, the language, the date, your IP address, and your browser identification. The IP address is stored solely so that we can demonstrate that specific consent if it is ever disputed, and for nothing else.
• Blog newsletter: your email address and nothing more.

3What we use the data for

To answer what you ask us, handle requests for demonstrations or commercial information, call you back when you leave a message, send you blog articles if you have subscribed, measure how our campaigns perform when you have accepted the relevant cookies, and demonstrate that consent was given if we ever need to. We do not use your data for any other purpose, and if we ever wanted to, we would ask you first.

4Legal basis

We process your data with your consent when you subscribe to the newsletter, use the conversational assistant, leave a message on our phone line, or accept analytics or marketing cookies (Article 6(1)(a) GDPR). When you write to us through the form, processing is necessary for the pre-contractual relationship you yourself initiate and rests on our legitimate interest in replying to you (Articles 6(1)(b) and 6(1)(f)). The cookie consent record responds to the legal obligation to be able to demonstrate consent (Articles 6(1)(c) and 7(1)).

5How long we keep the data

Form and assistant data, phone messages, and consent records are kept for twenty-four months from creation and then deleted. This is not a statement of intent: an automated process runs daily and removes anything past that period. Newsletter addresses live in Mailjet and are kept until you unsubscribe, at which point they disappear from the list. If a specific legal obligation required us to keep something longer, we would keep only that, and only for as long as the obligation lasted.

6Who else processes your data on our behalf

We do not sell your data and we do not pass it to third parties for commercial purposes. To run the service we use providers who process it on our instructions under a signed data processing agreement: ElevenLabs (United States) processes the audio and transcript of the assistant and the phone line, together with the context of the page you write from — its language, its address, and the campaign you arrived through, if any; Mailjet, part of the Sinch group (European Union), sends the newsletter; and, only if you accept the relevant cookies, Google (United States) analyses how the site is used and Meta (United States) measures how our ads perform. Form data, conversations, and phone messages are also stored on our own server, hosted in the European Union.

7International transfers

ElevenLabs, Google, and Meta process data in the United States, which constitutes an international transfer. All three are certified under the EU-U.S. Data Privacy Framework and its UK Extension, which the European Commission regards as providing an adequate level of protection. In the case of ElevenLabs, its data processing agreement additionally incorporates the Standard Contractual Clauses approved by the European Commission, so the transfer remains covered even if the Framework ceased to apply. You can ask us for a copy of these safeguards at privacy@talent360hub.com.

8The phone line

Our phone number is answered by an artificial intelligence agent. Before collecting anything it tells you the call may be recorded and asks for your permission: if you do not give it, the agent does not handle the enquiry and refers you to the form on this site. If you do give it, what we store in our systems is the message — who called, what about, and how to call them back — not the full recording, which stays with ElevenLabs as our provider. It appears in this policy because that message is stored in our database, which makes us the controller for it.

9The website assistant

The contact page offers an assistant you can either speak or type to, as you prefer. It is optional: the contact form is still there and does the same job. Before you start you must expressly accept this policy, and that acceptance is recorded with its date. If you choose to speak, your browser will ask permission for the microphone and you may refuse; if you choose to type, the microphone is never activated and no audio is recorded. You can ask us to delete the conversation by writing to privacy@talent360hub.com.

10Blog newsletter

If you subscribe, we use your email address solely to send you blog articles. The legal basis is your consent, given by ticking a box that is never pre-checked. You can unsubscribe at any time from the link in every email, without writing to us or explaining why.

11Cookies

This site uses one necessary cookie to remember the language you chose and, only if you accept them, analytics and marketing cookies. Until you answer the banner none of them load: the Google and Meta scripts are not even present on the page. Your decision expires after twenty-four months, at which point we ask again. Full detail is in the cookie policy.

12Your rights

You can exercise the rights the GDPR gives you at any time, free of charge, by writing to privacy@talent360hub.com. We will reply within one month. We may ask you for additional information, purely to be sure you are who you say you are.

• Access: find out what data we hold about you and what we do with it.
• Rectification: correct data that is inaccurate or incomplete.
• Erasure: ask us to delete data when it is no longer necessary, or when you withdraw your consent.
• Restriction of processing: ask us to keep the data but stop using it while a challenge or complaint is resolved.
• Portability: receive the data you gave us in a machine-readable format, or have us send it to another controller.
• Objection: object to processing based on our legitimate interest.
• Withdrawal of consent: where processing rests on consent, you can withdraw it at any time and as easily as you gave it, without affecting the lawfulness of processing carried out beforehand.

13Complaints to a supervisory authority

If you believe we have not handled your request properly, you can complain to our supervisory authority, the Commission for Personal Data Protection of Bulgaria (Комисия за защита на личните данни), at 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, or at cpdp.bg. If you live in another country in the European Economic Area, you may also complain to the authority where you live or work.

14Automated decisions and profiling

We do not make automated decisions that significantly affect you, and we do not build profiles from your data. The conversational assistant generates its replies automatically, but it decides nothing about you: it only collects your enquiry so that a person can deal with it.

15Children

This site is aimed at professionals and organisations, not at children. We do not knowingly collect data from anyone under sixteen. If you believe a child has given us their data, write to privacy@talent360hub.com and we will delete it.

16Security

The site is always served encrypted and data is stored on a server in the European Union with restricted access. We apply reasonable technical and organisational measures to protect it, although no system connected to the internet can guarantee absolute security. If a breach occurred that posed a risk to your rights, we would notify the supervisory authority and, where required, you.

17If you live in the United Kingdom

Processing is also governed by the UK GDPR and the Data Protection Act 2018. The rights described above apply to you equally, and you may complain to the Information Commissioner's Office (ICO), Wycliffe House, Water Lane, Wilmslow SK9 5AF, or at ico.org.uk. Transfers to the United States are covered by the UK Extension to the Data Privacy Framework.

18Changes to this policy

If we change anything material, we will update the date and version shown at the top and publish the new text on this same page. Where the change affects tools that require your permission, we will ask you again rather than rely on your earlier answer.

19Versions in other languages

This document is published in the languages of the site so that you can read it in your own. Translations are offered as a courtesy and, in the event of any discrepancy between versions, the English version prevails.