Privacy Policy

Last updated: September 2026

Who We Are

Talentas (talentas.bg) is a job search platform operated by Astrea Recruitment Ltd. (UIC: 203088121), a licensed employment agency registered in Bulgaria at 83 Odrin Street, Vazrazhdane District, Sofia, Bulgaria. Registration Certificate No. 1809 issued by the Bulgarian Employment Agency on 18 June 2025.

This Privacy Policy explains how we collect, use, and protect your personal data when you use the Talentas platform.

Legal Bases for Processing

Performance of Contract (Article 6(1)(b) GDPR): We process your data when you apply for a job through our platform, as this is necessary to carry out the recruitment mediation service you have requested.

Legitimate Interest (Article 6(1)(f) GDPR): We may retain your application during a recruitment process and for a reasonable period thereafter to protect our legitimate interests in providing recruitment services.

Consent (Article 6(1)(a) GDPR): With your explicit consent, we may retain your application in our candidate database for up to 24 months to inform you about future employment opportunities. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Applicable Legislation

We process personal data in compliance with:

Regulation (EU) 2016/679 (General Data Protection Regulation / GDPR)
Bulgarian Personal Data Protection Act
Bulgarian Electronic Communications Act
Bulgarian employment mediation legislation

Scope of This Policy

This policy applies to:

Job applicants who apply through the Talentas platform
Candidates presented to employers through our services
Visitors to our website (talentas.bg)
Individuals who subscribe to job alerts
Employers who submit inquiries through our platform

Personal Data We Collect

When you apply for a job or use our services, we may collect:

Full name (first name and last name)
Email address
Telephone number
Curriculum Vitae (CV) and its contents
Cover letter or message
Education, qualifications, and professional experience
Answers to screening questions
Job alert preferences (category, city, email)
Employer inquiry details (company name, contact person)

Important: Please do not include special categories of personal data in your CV, such as information relating to your racial or ethnic origin, political opinions, religious or philosophical beliefs, health status, or sexual orientation. Also avoid including Personal Identification Numbers (EGN), identity card numbers, or passport numbers unless specifically requested.

Data Collected Automatically

When you visit our website, our server may automatically collect:

IP address (stored only as a one-way hash for rate limiting and fraud prevention)
Browser type and version
Device information
Pages visited and time of visit

We use privacy-focused, cookieless analytics (Plausible Analytics, self-hosted) that does not track individual visitors and does not use cookies. No personal data is collected through our analytics.

Purposes of Personal Data Processing

We process your personal data for the following purposes:

Processing and managing your job applications
Connecting you with prospective employers
Sending application confirmation and status notifications
Sending job alert notifications (if you subscribe)
Responding to employer inquiries
Preventing fraud and abuse (rate limiting, honeypot fields)
Improving the quality of our platform
Complying with legal obligations

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects concerning you.

Cookies

Talentas is designed with privacy in mind. Our public-facing pages do not use tracking cookies, third-party scripts, advertising pixels, or hosted fonts.

Analytics: We use Plausible Analytics, a privacy-focused, self-hosted analytics tool that does not use cookies and does not collect personal data. No consent banner is required.

Session cookies: If you access the administrative area of our platform, a session cookie is used for authentication purposes only. This is a strictly necessary cookie that does not require consent.

We do not use marketing cookies, social media tracking pixels, or any third-party advertising technology.

Data Retention

We retain your personal data only for as long as necessary:

Job applications: For the duration of the recruitment process and applicable legal retention periods.
Talent pool (with consent): Up to 24 months from the date of consent, unless you withdraw your consent earlier.
Job alert subscriptions: Until you unsubscribe.
Employer inquiries: For the duration necessary to respond and follow up.

After the applicable retention period expires, your personal data is securely anonymised. Anonymisation replaces identifying information with non-reversible placeholders while preserving aggregate statistical data.

Disclosure of Personal Data

We do not sell your personal data. We may share your data with:

Prospective employers for positions you have applied to
IT and infrastructure service providers (hosting, email delivery)
Competent public authorities when required by law

All data processors are contractually bound by confidentiality obligations and process data solely in accordance with our instructions and GDPR requirements.

Your Rights

Under GDPR, you have the right to:

Access your personal data
Rectify inaccurate or incomplete data
Erase your data (right to be forgotten) where legal conditions are met
Restrict processing of your data
Object to processing based on legitimate interests
Data portability — receive your data in a portable format
Withdraw consent at any time without affecting prior lawfulness

Self-service deletion: Every application confirmation email includes a secure link that allows you to delete your personal data at any time.

How to Exercise Your Rights

Contact our Data Protection Officer:

DPO: Silvia Djokich
Email: [email protected]
Address: Astrea Recruitment Ltd., 83 Odrin Street, Vazrazhdane District, Sofia, Bulgaria

We will respond within the time limits established by GDPR (typically within one month).

Complaints

If you believe your data protection rights have been violated, you may lodge a complaint with:

Commission for Personal Data Protection (CPDP)
2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, Bulgaria
Email: [email protected] | Website: www.cpdp.bg

International Transfers

We process and store personal data within the European Economic Area (EEA). If any transfer outside the EEA is necessary, we ensure appropriate GDPR safeguards are in place.

Data Security

We implement appropriate technical, organisational, and administrative measures to protect your personal data, including:

Encrypted data transmission (HTTPS/TLS)
Access controls limiting data access to authorised personnel
Secure, authenticated file access (CVs are never publicly accessible)
IP address hashing (one-way, non-reversible)
PII-free analytics and error reporting
Regular security assessments

In the event of a personal data breach, we will notify the Commission for Personal Data Protection within 72 hours and affected individuals where there is a high risk to their rights and freedoms.

Updates to This Policy

We may update this Privacy Policy to reflect changes in legislation or our data processing practices. The most current version is always available on this page.

Contact Us

Astrea Recruitment Ltd. (operating the Talentas platform)
83 Odrin Street, Vazrazhdane District, Sofia, Bulgaria
DPO: Silvia Djokich — [email protected]