Privacy Statement.

Last updated: September 2026.

At Talyn, we respect the privacy of everyone we interact with – candidates, clients, prospective clients, business contacts and visitors to our website.

This Statement explains what personal data we collect, why we collect and use it, how long we retain it, who we may share it with, and what rights you have in relation to its processing.

It applies to data we collect through the website, job applications and open applications, direct communication, social and professional networks, lead campaigns and other channels we use in our business.

1. Controller

The controller of personal data is:

Talyn društvo s ograničenom odgovornošću za savjetovanje i usluge
Trg Ante Starčevića 10, 31000 Osijek, Croatia
Personal Identification Number (OIB): 50628290909
Email: info@talyn.hr

For questions about the processing of your personal data or exercising your rights, you can contact us at the email address above.

2. What personal data do we process and when?

Business enquiries and client relationships

When you contact us through the contact form, by email, by phone, through social networks or another communication channel, we may process your full name, business contact details, the name of the organisation you represent, and the information you provide in your enquiry or further communication.

We use this data to respond to your enquiry, understand your needs, prepare a proposal and manage communication relating to a potential or existing business relationship.

Depending on the circumstances, the processing is based on Talyn’s legitimate interest in communicating with you and developing business relationships or, where applicable, on taking steps at your request prior to entering into a contract.

Applying for an open position

When you apply for a position for which Talyn is managing the candidate sourcing and selection process on behalf of a client, we may process your name and contact details, CV, information about your education, work experience, qualifications and skills, professional interests and preferences, and other information you provide or that is generated during the selection process.

We use this data to process and assess your application, communicate with you, carry out the relevant stages of the selection process and assess whether your profile is a good match for the specific opportunity.

As part of the selection process, we may prepare a summary of relevant information about your professional experience, qualifications, interests, availability and other information relevant to the specific opportunity, including our professional assessment based on the selection process. We may share this information with the client for whom we are conducting the selection process, after we have informed you about the specific opportunity and the client to whom your profile will be presented.

The processing is based on Talyn’s legitimate interest in providing candidate sourcing and selection services and conducting a high-quality and effective selection process. In doing so, we take into account the necessity of the processing as well as your rights and interests.

If you would like us to retain your profile after the specific selection process has ended so that we can consider you for other job opportunities, we will ask for your separate consent. Providing this consent is not a condition of participating in the selection process for the position you applied for.

We will not present your profile or CV to a client before we have discussed the specific opportunity with you and you have confirmed that you would like to move forward with the process.

Open application

When you send us an open application, we process the information you provide so that we can understand your experience, professional interests and preferences, and contact you when we identify an opportunity that could suit you.

Processing for this purpose is based on your consent.

We will not present your profile or CV to a client before we have discussed the specific opportunity with you and you have confirmed that you would like to move forward with the process.

Please do not include special categories of personal data in your applications or CVs, such as information about your health, religious or political beliefs, trade union membership or other sensitive personal information, unless such information is necessary for a specific purpose and there is an appropriate legal basis for processing it.

When Talyn contacts you first

As part of our candidate sourcing services, we may identify potential candidates through LinkedIn, professional networks, job boards and other relevant professional or publicly available sources.

In these cases, we process limited professional data relevant to assessing whether your experience matches a particular opportunity and to contacting you.

Such processing is based on Talyn’s legitimate interest in identifying potentially suitable candidates for its clients. In doing so, we take into account the nature and source of the data, its relevance, your reasonable expectations and the potential impact of the processing on your rights and interests.

Where we did not obtain the data directly from you, we will provide you with information about its processing when we first contact you, together with the option to object to further processing for that purpose.

If you tell us that you do not wish to be contacted further, we will respect your request and stop using your data for that purpose, unless there is another legal basis for retaining it.

Social networks, communication and lead campaigns

Talyn is present on professional and social networks. When you communicate with us through these platforms, we may process data from your profile and the content of your communications to the extent necessary to respond to your enquiry or communicate with you. Talyn may also use forms and campaigns on these platforms to collect candidate applications, expressions of interest in opportunities or business enquiries.

If you submit your data through such a form, you will be informed of the purpose for which it is collected before you submit it. We will use the data only for the purpose specified in the relevant campaign and on an appropriate legal basis.

Where part of the processing takes place on the platform through which you submitted your data, that platform’s privacy policy also applies to the processing it carries out.

3. How long do we retain personal data?

We retain personal data only for as long as necessary for the purposes for which it was collected, taking into account applicable legal obligations and the need to protect legal interests.

If you apply for a specific open position, we retain the data relating to your application for the duration of the selection process and, after it has ended, for as long as necessary to document the process and protect against potential legal claims, generally for no longer than six months, unless there is a legal basis for longer retention. If you have not given separate consent for future job opportunities, we will not use your data to contact you about other positions once the specific selection process has ended.

If you have consented to us retaining your profile for future job opportunities, we retain the data for that purpose for up to 12 months from the date you gave your consent, unless you withdraw your consent or request erasure earlier.

If you submit an open application, we retain and use the data for relevant future job opportunities for up to 12 months from the date you gave your consent.

We retain data relating to business enquiries and business relationships for the duration of the relevant communication or business relationship and afterwards for as long as justified by the purpose of the processing, applicable legal obligations and the need to protect legal interests.

Once the relevant retention period has expired, we erase or anonymise the personal data, unless there is another legal basis or legal obligation requiring us to retain it.

If we wish to retain a candidate profile for future job opportunities after the consent period has expired, we will ask for fresh consent.

4. Who may we share personal data with?

We do not sell personal data or disclose it to third parties for their own marketing purposes.

To manage candidate applications and recruitment processes, we use Zoho Recruit as our ATS/CRM system and data processor. Data held in Talyn’s account is stored in a Zoho data centre in the European Union.

To measure website traffic and analyse how the website is used, we use Google Analytics 4 and manage our measurement tags through Google Tag Manager (Google Ireland Limited). To measure advertising performance and build advertising audiences on Facebook and Instagram, we use Meta Pixel (Meta Platforms Ireland Limited). These tools are activated only with your consent.

The data collected by these tools relates to how the website is used. They do not have access to the content of your application or CV, or to the information you submit through our forms.

Personal data may also be accessible to other providers of IT, hosting, communication and related services that we use, only to the extent necessary for them to provide their services and subject to appropriate contractual and security measures.

We may disclose data to competent authorities or professional advisers where this is necessary to meet legal obligations or protect legal interests.

Clients and prospective employers

When you take part in a selection process for a specific job opportunity, we may share relevant information from your profile with the client for whom we are conducting the candidate sourcing and selection process and who is the prospective employer. We share this information only after you have been informed about the specific opportunity and the identity of the client and have confirmed that you would like to continue with the process. We share only the information relevant to that particular selection process.

Once the client receives candidate data for its own selection process, it is responsible for the processing it carries out as a separate controller, unless a different allocation of roles has been established for the specific engagement.

5. Transfers of personal data outside the European Economic Area

In providing its services, Talyn may work with clients, service providers or other recipients located outside the European Economic Area (EEA).

Where personal data is transferred to a country for which the European Commission has not issued an adequacy decision, Talyn applies an appropriate transfer mechanism and the safeguards provided for by applicable data protection legislation, including, where applicable, the European Commission’s Standard Contractual Clauses (SCCs).

You can request information about the applicable safeguards using the contact details provided in this Statement.

6. Your rights

Depending on the circumstances and the legal basis for the processing, you may have the right to access your personal data, request the rectification of inaccurate or incomplete data, request erasure or restriction of processing, and exercise your right to data portability where the applicable legal requirements are met.

Where processing is based on legitimate interest, you have the right to object to that processing.

Where processing is based on consent, you can withdraw your consent at any time. Withdrawing consent does not affect the lawfulness of processing carried out before it was withdrawn.

To exercise your rights or if you have any questions about the processing of your personal data, you can contact us at info@talyn.hr.

If you believe that your personal data is being processed contrary to the law, you have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP).

7. Security of personal data

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, misuse or unauthorised disclosure.

Access to personal data is limited to persons and service providers who need it to carry out their tasks.

8. Automated decision-making

Talyn does not make decisions about candidates based solely on automated processing that would produce legal effects concerning them or similarly significantly affect them.

If the way we use automated systems changes in the future, we will update this Statement accordingly.

9. Cookies and similar technologies

The website uses cookies that are necessary for it to function properly and, with your consent, analytics and marketing cookies and similar technologies.

Necessary cookies include a technical server cookie, a record of your cookie preferences and a cookie that remembers your selected language. These cookies do not require consent because the website cannot function properly without them.

With your consent, we use:

• Google Analytics 4 (Google Ireland Limited) – to measure website traffic and analyse how the website is used; loaded through Google Tag Manager;
• Meta Pixel (Meta Platforms Ireland Limited) – to measure advertising performance and build advertising audiences on Facebook and Instagram.

Until you give consent, these tools are not loaded and do not set any cookies.

You can withdraw or change your consent at any time through Cookie Settings, where you can also find a list of the individual cookies with their purpose and duration.

These tools may transfer data about your use of the website outside the European Economic Area, subject to the safeguards described in section 5 of this Statement.

10. Changes to this Statement

We may update this Statement from time to time due to changes in our business practices, the technologies or service providers we use, or applicable legislation.

The date of the last update will always be shown at the top of the page.

This Statement is a translation of the Croatian original. In the event of any discrepancy or difference in interpretation between the Croatian and English versions, the Croatian version shall prevail.