Privacy & Security Policy | The Talent Seed

1. Who is responsible for your data

The controller within the meaning of the GDPR is The Talent Seed OÜ (registry code 17070921), Ahtri tn 12, Kesklinna linnaosa, 10151 Tallinn, Estonia. For any privacy request, contact us at info@thetalentseed.com.

2. What we collect, and what we don't

This website lets you learn about our services, use free resources, and get in touch. You can browse most of the site without giving us any personal information.

When you contact us, subscribe, or use one of our forms, we collect and process:

the contact details you provide — such as your name, email address and, if you enter it, your phone number;
the content of your enquiry or message, including anything you choose to tell us about your hiring or career goals;
if you subscribe to our newsletter, your email address;
if you complete our free Hiring Health Check and choose to share it, your email address and a summary of your responses;
basic technical metadata that our service providers may log automatically (e.g. IP address, browser type, timestamp) as part of delivering and protecting the site.

Providing this information is voluntary — you choose what to send when you get in touch.

3. Why we process it, and the legal basis

To respond to your enquiry and provide the information or consultation you request — Art. 6(1)(b) GDPR (steps taken at your request) and/or your consent under Art. 6(1)(a).
To send occasional career- and hiring-related updates — only on the basis of your consent (Art. 6(1)(a)), which you may withdraw at any time via the unsubscribe link in any email.
To operate, secure and improve the website — our legitimate interests (Art. 6(1)(f)).
To provide paid services you engage us for — performance of a contract (Art. 6(1)(b)).

4. Service providers (processors) and third parties

We use trusted third-party providers to run this website and respond to you. Depending on how you interact with us these may include:

a form / contact provider (Tally) — to receive and manage messages you send through our contact form;
a newsletter platform (Substack) — if you subscribe, to manage and send our newsletter;
our website host (Netlify), which also processes form submissions;
a scheduling provider (Calendly) — if you book a consultation;
an email provider (Google) — to correspond with you;
Google Fonts, which currently loads fonts from Google servers and may transmit your IP address to Google.

These providers act as our processors and only process your data on our instructions and for the purposes described above; we conclude a data processing agreement (Art. 28 GDPR) with each of them where required.

Some of these providers are based in, or process data in, the United States or other countries outside the EU/EEA. Where personal data is transferred outside the EU/EEA, we only do so where an appropriate transfer mechanism under Chapter V of the GDPR is in place. In practice this means one or more of the following: (i) the European Commission's adequacy decision for the EU–U.S. Data Privacy Framework, where the recipient is certified under that framework; (ii) the European Commission's Standard Contractual Clauses (Implementing Decision (EU) 2021/914); and/or (iii) other lawful safeguards recognised under the GDPR — in each case together with any supplementary technical and organisational measures needed to ensure a level of protection essentially equivalent to that guaranteed within the EU. You may ask us which mechanism applies to a particular provider, and request a copy of or reference to the relevant safeguards, by emailing info@thetalentseed.com.

5. How long we keep it

We keep your contact details and the content of your enquiry only as long as needed for the purposes above or until you ask us to delete them or withdraw consent, after which we erase or anonymise them, subject to any legal retention obligations. As a general rule, we keep this data for up to 24 months after your last contact with us, unless you ask us to delete it sooner.

6. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict or object to the processing of your data, the right to data portability, and the right to withdraw consent at any time (without affecting prior lawful processing). To exercise any right, email info@thetalentseed.com.

You also have the right to lodge a complaint with a supervisory authority. The competent authority in Estonia is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), Tatari 39, 10134 Tallinn; email info@aki.ee; website aki.ee.

7. Cookies and local storage

This website does not set advertising or tracking cookies of its own. Embedded third-party services (such as forms, scheduling or payment) may set their own cookies when used; please see their policies.

8. Security

We apply reasonable technical and organisational measures to protect your data, and our service providers are selected for their security practices and encrypt data in transit. However, no internet transmission or storage is ever completely secure, and we cannot guarantee absolute security.

9. Children

This website is intended for adults and is not directed at children. We do not knowingly collect data from anyone under 13 (the age of valid consent for information society services in Estonia under § 8 of the Personal Data Protection Act).

10. Changes

We may update this policy from time to time. The current version is always available on this page.

Privacy & Security