Privacy policy

The following information explains which personal data we process when you visit this website, when you contact us and in the course of our placement activities, for what purposes this happens and what rights you have.

This policy applies to the website www.iseeit-talent.com, including the redirect domains iseeit-talent.de, iseeittalent.de and iseeittalent.com, and to our placement activities. A separate privacy policy applies to the candidate portal IseeIT Kompass at kompass.iseeit-talent.com/recht/datenschutz.html.

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

IseeIT UG (haftungsbeschränkt)
Kastanienallee 70A
38102 Braunschweig
Germany

Telephone: +49 531 42879645
Email: info@iseeit-talent.de

Represented by the managing directors David Bundies and Evangelos Pourtsas.

Contact for data protection matters: David Bundies, managing director, reachable at info@iseeit-talent.de. This role is not a data protection officer within the meaning of Art. 37 to 39 GDPR. We have not designated a data protection officer because the conditions of Art. 37(1) GDPR and Section 38(1) BDSG (German Federal Data Protection Act) are not met in our case. Your rights under this policy apply in full regardless.

2. General information on data processing

We process personal data only to the extent necessary to provide this website, to handle your enquiries or to carry out our placement activities. Depending on the operation, the legal bases are:

We erase personal data as soon as the purpose of the processing no longer applies and no statutory retention obligations stand in the way, in particular under § 147 AO (German Fiscal Code), § 257 HGB (German Commercial Code) and § 298(2) SGB III (German Social Code, Book III). The specific periods are stated for each processing operation.

3. Hosting and server log files

This website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. A data processing agreement under Art. 28 GDPR is in place with IONOS. Processing takes place in data centres in Germany.

When you visit the website, the server automatically records information in so-called log files that your browser transmits: IP address, date and time of access, page or file requested, amount of data transferred, message confirming successful retrieval, browser type and version, operating system and the previously visited page (referrer).

This data is not merged with other data sources and is not analysed for marketing purposes. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the technical provision, stability and security of the website, for example in detecting and defending against attacks. According to our hosting provider, the log files are generally stored for up to eight weeks and then deleted. What counts is how long they are needed for secure operation, for troubleshooting and for defending against attacks; they are kept longer only if a specific security incident requires them as evidence.

4. Cookies and local storage in your browser

This website does not set any cookies. It does not embed any analytics, tracking or marketing services. A consent banner is therefore not required.

No content from third-party servers: All components of this website, that is fonts, software libraries, images and videos, are delivered exclusively from our own server. We do not embed Google Fonts, a content delivery network, a map service, a video platform, a social media plugin or an external analytics service. When you visit this website, no connection to third-party servers is therefore established and no IP address is transmitted to third parties.

The website stores two settings exclusively locally in your browser (localStorage): the display language you have chosen (entry iseeit-sprache) and the light or dark appearance (entry iseeit-thema). This storage is strictly necessary for the function you have requested, Section 25(2) no. 2 TDDDG (German Telecommunications Digital Services Data Protection Act), and therefore takes place without a consent banner. The entries remain on your device, are not transmitted to us and can be deleted at any time via your browser settings.

5. City comparison tool

The city comparison tool offered on this website runs entirely in your browser. Your entries, such as salary, age, cities or details on church tax, and the calculated results are not transmitted to our servers, not stored and not analysed. They are deleted when you close or reload the page. Only the language and appearance settings mentioned in section 4 are stored. The tool is served from our own server; opening it establishes no connection to third parties. The sources linked in the tool open only when you click on them.

6. Contact form and contacting us

If you contact us via the contact form, by email or by telephone, we process the data you provide (in the form: name, email address, field of expertise, destination country, optionally profile links and a file, and the content of your message) in order to handle your enquiry.

Messages from the contact form are sent technically via our hosting provider IONOS (section 3) as an email to our mailbox at Proton AG (section 12). To ward off automated spam submissions, the form checks only technical characteristics of the input: a control field invisible to humans, the time of sending and a short-term, pseudonymised limit on how often messages can be sent. The legal basis for this is Art. 6(1)(f) GDPR (protection against misuse). If sending via the form is disrupted, your email program opens with your details as a draft, without the file; you then send the message yourself via your email provider.

Voluntary links and attachments: You may voluntarily provide profile links and attach a CV (PDF or Word, no more than 4 MB). Both are optional. An attached file is transmitted in encrypted form, checked on the server for file type and size and passed on immediately as an attachment to the form email to our mailbox. It is not stored on the web server, not written to a database and cannot be retrieved from outside. We open the links you provide only to assess your enquiry; the providers behind them process your data under their own responsibility.

The legal basis for handling your enquiry is Art. 6(1)(b) GDPR insofar as your enquiry relates to initiating or carrying out a placement or contractual relationship, and otherwise Art. 6(1)(f) GDPR (legitimate interest in answering enquiries). Providing your data is voluntary; without your name, email address and message, however, we cannot handle your enquiry.

We delete enquiries unrelated to a placement no later than six months after they have been dealt with conclusively, unless statutory retention obligations for business correspondence stand in the way. Sections 7 and 8 apply to documents you send us for a placement.

7. Candidates: placement and support

If you contact us as a candidate or send us your documents, we process your application data, in particular contact details, CV, references, certificates, qualifications, interview notes and details of your professional expectations, in order to present you for suitable positions with companies in Germany and, via our partner agencies, in Switzerland. The legal basis is Art. 6(1)(b) GDPR (initiating and carrying out the placement relationship). Before we evaluate your documents, you will receive from us by email our intake information "How we work with your data", which supplements this policy.

Sending us your documents is voluntary. Without a CV and contact details, however, we cannot present you for positions. Our service is free of charge for you.

Disclosure to companies: We pass on your documents, including your name, only if you have agreed to being presented to exactly this company for exactly this position (Art. 6(1)(a) GDPR). We transmit a photo only if you expressly wish us to; whether with or without a photo has no influence on how we present you. Without your consent, companies receive at most anonymised competence profiles without your name. Companies in Switzerland receive your dossier on the basis of the European Commission's adequacy decision for Switzerland. You can withdraw consent you have given at any time; after a dossier has been sent, we ask the company to delete it.

Document folder and support portal: For the exchange of original documents we provide you, on request, with a personal, end-to-end encrypted cloud folder at Proton AG (Switzerland); access is possible only via your personal link. During support for a move to Germany or Switzerland, you use our candidate portal IseeIT Kompass, which has its own privacy policy (kompass.iseeit-talent.com/recht/datenschutz.html).

Retention period: If no placement is made, we delete your data no later than six months after the last contact, and after a rejection no later than six months after the rejection. This period serves to defend against possible claims under § 15(4) AGG (German General Equal Treatment Act) and § 61b ArbGG (German Labour Court Act). After a successful placement, we retain your placement file until the end of the guarantee period agreed with the company plus six months; we return original documents after the placement is completed or delete them (§ 298(2) SGB III). Business records that we are legally required to retain remain stored for the duration of the statutory periods.

Talent pool: Beyond the current process, we store your data only if you have consented to being added to our talent pool, for 24 months from your consent. Before this period expires, we ask whether you would like to extend it; if we receive no reply, we delete your data. You can withdraw this consent at any time with effect for the future (info@iseeit-talent.de); the lawfulness of the processing carried out up to the withdrawal remains unaffected.

We keep records of consents and approvals given for three years after the end of the processing (Art. 7(1) GDPR, § 195 BGB (German Civil Code)).

Please note that transmission by unencrypted email may involve security risks. For confidential documents, we recommend the encrypted document folder that we set up for you after the first contact.

8. AI-supported evaluation of your documents

To prepare a placement, we use an AI-supported system (the Claude language model by Anthropic) to evaluate and structure your documents. The system extracts details of your qualifications and experience from your documents, checks them for consistency and proposes a rating for each requirement of a position (points from 0 to 5, weighted by the importance of the requirement). Every item generated in this way is linked to a verbatim quotation from your documents. This is an assessment of your professional fit and therefore profiling within the meaning of Art. 4(4) GDPR.

A human makes the decision: Your IseeIT consultant reviews every item and every rating individually, can change or discard it and decides whether and where we propose you. No decision based solely on automated processing within the meaning of Art. 22 GDPR takes place. On request, we will explain to you at any time how a rating came about.

The legal basis is Art. 6(1)(b) GDPR (carrying out the placement relationship). Please submit your documents without a photo; if needed, you can send us a photo for your dossier separately.

Service provider: Anthropic Ireland Limited, 6th Floor, South Bank House, Barrow Street, Dublin 4, Ireland, as our contractual partner; processing is carried out in part by Anthropic PBC, San Francisco, USA. A data processing agreement is in place; Anthropic does not use your data to train its models. Transfers to the USA take place on the basis of the EU standard contractual clauses (Art. 46(2)(c) GDPR), available at www.anthropic.com/legal/data-processing-addendum. We store the structured results in a database at Supabase (contractual partner Supabase Pte. Ltd, Singapore) in a data centre in Frankfurt am Main; support access from third countries takes place on the basis of the EU standard contractual clauses (www.supabase.com/legal/dpa).

9. Direct approach to professionals

We approach professionals whose career profiles are publicly accessible on professional networks (in particular LinkedIn). In doing so, we process your name, profile link, the publicly visible career details and the content of our message in order to check whether an open position suits you. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is filling open positions with suitable professionals. The data comes from your publicly accessible profile.

If you do not reply, we delete this information no later than six months after our message. If you say no, we delete it immediately; if you wish, we keep only your profile link so that we do not approach you again. You can object to being approached at any time (section 14).

10. Companies and their contact persons

If a company is interested in our placement services or we approach a company, we process the contact details of the contact persons (name, role, business email address and telephone number), details of the company and of the position to be filled, and our correspondence. The purposes are initiating and carrying out the cooperation (Art. 6(1)(b) GDPR) and maintaining business contacts (Art. 6(1)(f) GDPR). In the case of a direct approach, the data comes from publicly accessible sources such as the company website or professional networks.

We manage this data in the CRM system named in section 12. We store it for the duration of the business relationship and thereafter in accordance with the statutory periods (business correspondence six years, contracts and invoices ten years). Contact persons at our clients receive a separate privacy notice at the start of the cooperation.

11. Presence on social networks and messaging services

We are present on social networks and messaging services, currently including LinkedIn, Instagram, Facebook and WhatsApp. The profiles we currently maintain can be seen from the links on this website and in our signature. Providers include LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, and Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland (Facebook, Instagram, WhatsApp).

If you visit one of these profiles or write to us through one of these services, the provider concerned processes your data under its own responsibility, including for its own purposes such as reach measurement and advertising. The provider's privacy notices apply; we have no influence on the scope, purpose or duration of that processing, and data may be transferred to countries outside the EU.

Insofar as a provider gives us aggregated statistics on the use of our page, such as Page Insights on LinkedIn or page and account insights at Meta, we are joint controllers with that provider to that extent under Art. 26 GDPR. The basis is the agreement made available by the provider in each case; the legal basis for our participation is Art. 6(1)(f) GDPR, our legitimate interest in our public presence and in approaching specialists. You can exercise your rights both against the provider and against us; the technical details of the processing are held by the provider.

Messages that reach us through a profile or a messaging service are treated like an enquiry by email (section 6). For confidential information and for application documents, please use the contact form or email; we do not request documents via messaging services. This section applies to every network and service on which we appear, including channels added or discontinued later.

12. Recipients, processors and transfers to other countries

We pass on personal data only to the extent described in this policy or with your consent. The processors we use are:

In addition, we transmit data to companies to which we present you with your consent (Germany and Switzerland), to our partner agencies in Switzerland (only with your consent), and to bodies to which we are legally obliged to provide information, such as tax authorities. Your data is thus processed in Germany, in the European Union, in Switzerland (adequacy decision), in the USA and in Singapore (EU standard contractual clauses in each case). You can obtain copies of the applicable safeguards via the links given or on request.

13. Your rights

You have the following rights against us with regard to the personal data concerning you:

To exercise your rights, an informal message to info@iseeit-talent.de is sufficient.

14. Right to object (Art. 21 GDPR)

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you that is based on Art. 6(1)(f) GDPR (legitimate interest). This concerns in particular the server log files (section 3), the direct approach (section 9) and the maintenance of business contacts (section 10). We will then no longer process the data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. Please send your objection informally to info@iseeit-talent.de.

15. Right to lodge a complaint with a supervisory authority

Without prejudice to any other remedies, you have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The supervisory authority responsible for us is:

Der Landesbeauftragte für den Datenschutz Niedersachsen (State Commissioner for Data Protection of Lower Saxony)
Prinzenstraße 5
30159 Hannover
Telephone: +49 511 120-4500
Email: poststelle@lfd.niedersachsen.de
www.lfd.niedersachsen.de

16. Note for persons in Switzerland

If you live or work in Switzerland, the Swiss Federal Act on Data Protection (FADP) applies to you in addition to the GDPR. You can exercise your rights of access, rectification, erasure and objection via the same contact details. The countries to which we disclose data are listed in section 12. A representative in Switzerland under Art. 14 FADP is not required for us. The competent supervisory authority in Switzerland is the Eidgenössischer Datenschutz- und Öffentlichkeitsbeauftragter (Federal Data Protection and Information Commissioner, FDPIC), Bern.

17. Data security

This website uses TLS encryption (recognisable by the padlock symbol in your browser's address bar). We also take technical and organisational measures under Art. 32 GDPR to protect your data against loss, misuse and unauthorised access. These include in particular:

Please note that, despite these measures, data transmission over the internet is never entirely free of risks.

18. Automated decision-making

No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place when you visit this website. In our placement work we use AI-supported rating proposals (profiling as described in section 8); the decision is always made by a human.

19. Version and changes to this privacy policy

We update this privacy policy when our data processing or the legal situation changes. We additionally inform persons whose data we process by email about significant changes, such as new purposes or new recipients. Earlier versions are available on request.

Version 1.2 of 8 September 2026 replaces the version of August 2026. New are sections 8 (AI-supported evaluation), 9 (direct approach) and 16 (Switzerland) as well as the complete versions in English, Spanish and Greek; the details on retention periods, service providers and local storage have been made more precise.

Version 1.2, as of 8 September 2026