Home / GDPR

Legal

GDPR & Data Protection

Last updated: 1 January 2026

TalentBridge LLC provides HR and recruitment services to clients across Ukraine and works with candidates who may be located in the European Union. Where we process the personal data of individuals within the EU, we do so in accordance with the General Data Protection Regulation (GDPR, EU 2016/679). We also comply with applicable Ukrainian data protection legislation for the processing of personal data within Ukraine. This page explains our approach to data protection and your rights as a data subject.

1. Data controller

The data controller responsible for your personal data is:

TalentBridge LLC
8 Baseina Street, Kyiv 01004, Ukraine
Email: privacy@talentbridgedeck.com
Phone: +380 44 338 27 15

For all data protection enquiries, please contact us at privacy@talentbridgedeck.com. We will acknowledge your request promptly and respond within the timeframes required by law.

2. Lawful bases for processing

Under the GDPR, every processing activity requires a lawful basis. TalentBridge relies on the following lawful bases, depending on the nature of the processing:

  • Consent (Article 6(1)(a) GDPR): where you have given us a clear, freely given, specific and informed consent to process your data — for example, when you submit our contact form, accept analytics cookies, or register your candidate profile with us. You may withdraw consent at any time without affecting the lawfulness of prior processing.
  • Performance of a contract (Article 6(1)(b) GDPR): where processing is necessary to fulfil our obligations under a service agreement with you or to take steps at your request prior to entering into a contract — for example, processing your employment history and references as part of the recruitment process.
  • Legitimate interests (Article 6(1)(f) GDPR): where processing is necessary for our legitimate business interests — such as operating and improving our website, preventing fraud, maintaining security and running our recruitment business — provided that those interests are not overridden by your fundamental rights and freedoms. We carry out a balancing test before relying on this basis.
  • Legal obligation (Article 6(1)(c) GDPR): where processing is required to comply with a legal obligation under Ukrainian or EU law applicable to TalentBridge.

3. Categories of personal data processed

Depending on your relationship with TalentBridge (website visitor, candidate or client), we may process the following categories of personal data:

  • Identification data: name, email address, phone number, employer or company name.
  • Professional data (candidates): CV, employment history, educational qualifications, professional skills, references, salary expectations and career aspirations.
  • Communication data: the content of messages, emails and correspondence you send to us.
  • Technical data: IP address, browser type, device type and website usage data collected automatically when you visit our site.
  • Cookie and analytics data: where you have consented, anonymised data about how you navigate our website.

We do not intentionally collect or process special categories of personal data (such as racial or ethnic origin, health data, criminal records or biometric data) unless explicitly required and with appropriate additional safeguards and legal basis.

4. Your rights under the GDPR

Where the GDPR applies to the processing of your personal data, you have the following rights. We will respond to any request to exercise these rights within one calendar month of receiving it (or within three months for complex or numerous requests, with prior notice to you):

  • Right of access (Article 15): you have the right to obtain confirmation of whether we process your personal data, and if so, to receive a copy of that data along with information about how it is processed.
  • Right to rectification (Article 16): you have the right to have any inaccurate personal data we hold about you corrected, and to have incomplete data completed, without undue delay.
  • Right to erasure / "right to be forgotten" (Article 17): you have the right to request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (and there is no other lawful basis), where you object to processing and there are no overriding legitimate grounds, where the data has been unlawfully processed, or where erasure is required by law.
  • Right to restriction of processing (Article 18): you have the right to request that we restrict the processing of your data in certain circumstances — for example, if you contest the accuracy of the data while we verify it, or if you have objected to processing and we are assessing whether our legitimate interests override yours.
  • Right to data portability (Article 20): where processing is based on consent or on a contract, and is carried out by automated means, you have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, and to transmit that data to another controller without hindrance from us.
  • Right to object (Article 21): you have the right to object at any time to the processing of your personal data where it is based on legitimate interests or carried out for direct marketing purposes. Where you object to processing for direct marketing, we will cease that processing immediately. Where you object on other grounds, we will stop processing unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing is for the establishment, exercise or defence of legal claims.
  • Right to withdraw consent (Article 7(3)): where processing is based on your consent, you may withdraw that consent at any time by contacting us at privacy@talentbridgedeck.com. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
  • Right not to be subject to solely automated decision-making (Article 22): you have the right not to be subject to a decision based solely on automated processing — including profiling — that produces legal or similarly significant effects. TalentBridge does not currently make such automated decisions about individuals.

5. How to exercise your rights

To exercise any of the rights listed above, please send a written request to privacy@talentbridgedeck.com or by post to the address above. Please include:

  • your full name and contact details;
  • a description of the right you wish to exercise and the data to which your request relates;
  • any information that will help us identify the data you are referring to.

We may need to verify your identity before acting on your request. We will not charge a fee for responding to a request unless it is manifestly unfounded or excessive, in which case we will inform you of any fee before proceeding.

6. International transfers of personal data

TalentBridge is based in Ukraine. Where we transfer personal data to service providers or other recipients located outside Ukraine or the European Economic Area (EEA), we ensure that appropriate safeguards are in place to protect that data. These safeguards may include:

  • Standard Contractual Clauses (SCCs) approved by the European Commission;
  • Transfers to countries that the European Commission has determined provide an adequate level of protection;
  • Other legally recognised transfer mechanisms under the GDPR.

You may request information about the specific safeguards applicable to any transfer by contacting us at privacy@talentbridgedeck.com.

7. Data retention

We retain personal data only for as long as necessary for the purposes for which it was collected, and in accordance with our data retention schedule set out in our Privacy Policy. After the applicable retention period expires, data is securely deleted or permanently anonymised.

8. Security measures

We implement appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. Our security practices include encrypted data transmission (HTTPS), access controls and regular security assessments. In the event of a personal data breach that is likely to result in risk to the rights and freedoms of individuals, we will notify the competent supervisory authority and, where required, affected data subjects in accordance with GDPR timelines.

9. Supervisory authority

If you are located in the EU and believe that our processing of your personal data infringes the GDPR, you have the right to lodge a complaint with the supervisory authority in your EU member state of residence, place of work or place of the alleged infringement. A list of EU supervisory authorities is available at edpb.europa.eu.

For individuals in Ukraine, oversight of personal data protection is provided by the Ukrainian Parliament Commissioner for Human Rights (Ombudsperson) and, where applicable, by the courts of Ukraine.

We encourage you to contact us first at privacy@talentbridgedeck.com so we can address your concerns directly.

10. Updates to this statement

We may update this GDPR & Data Protection statement from time to time as our practices or applicable law change. The latest version will always be published on this page with its effective date. For material changes, we will take reasonable steps to notify you.

11. Contact

For any data protection question or to exercise your rights, contact us:

TalentBridge LLC
8 Baseina Street, Kyiv 01004, Ukraine
Email: privacy@talentbridgedeck.com