Candidate Privacy Notice

What this page is

When we obtain your personal data from a source other than you, Article 14 of the GDPR — and Article 14 of Moldovan Law No. 195/2024 — requires us to tell you. The deadline is not “within a month”. It is the moment we first contact you, because we obtained your details in order to contact you.

So the notice below goes into the first message we send you: the first email, the first InMail, the first message of any kind. Every time. It is reproduced here so you can check that what we sent you matches what we publish, and so that it has a short, stable URL that works in any message.

The notice, in full

About this message and your data

Who we are. S.R.L. “UNQENERGY” (IDNO 1020600034949), trading as “TalentSync” — a technical recruitment company registered in the Republic of Moldova, at MD-2005, Chișinău Rîșcani, mun. Chișinău, Colina Pușkin 18, ap. (of.) 1. We are the controller of your personal data.

How to reach us in the EU. We have not appointed a representative in the European Union under Article 27 GDPR; we are assessing whether one is required, and we will publish the details here as soon as any is appointed. Until then, write to us directly at victor@talentsync.eu — and you can complain to the authority in your own country at any time, as set out below.

Where we got your details. From your public professional profile on [platform] — [profile URL]. We found you there while searching for engineers for a specific, live role. We did not buy your details, scrape them, or get them from a data broker, and we have not looked at any personal social media.

What we recorded. Your name, your public profile URL, your current job title and employer, the skills and technologies listed on your profile, your seniority, your location, and the contact route you have made available. Nothing else.

Why. To assess whether your experience matches a role we are currently recruiting for, and to contact you about it.

Our legal basis. Legitimate interests, Article 6(1)(f) GDPR — and the same article of Moldovan Law No. 195/2024 — our interest in matching engineers to live client mandates, and yours in hearing about relevant work. We have documented a written assessment weighing that against your privacy, and we will send it to you if you ask.

Who might see it. Nobody, unless you and we agree to go further. If you decide you want to be considered for a role, we will name the client and ask you before sending anything. We never share a profile with a client you have not agreed to.

How long we keep it. If you do not reply, we delete everything we hold about you six months from the date of this message. If we speak and it does not lead anywhere, we keep your profile for a maximum of 24 months from our last contact, and we will email you at 22 months to ask whether to keep it.

What we do not do. We do not use automated decision-making or AI screening to evaluate candidates — a person reads every profile. We do not collect your photograph, date of birth, health information, or anything about your race, religion, politics, union membership or criminal record, and if any of that appears on a CV you send us, we remove it.

Your rights. You can ask us for a copy of what we hold, correct it, delete it, restrict what we do with it, or object to it. You can object to this processing at any time — just reply “remove me” and you will hear from us again only to confirm it is done. We keep a one-way (SHA-256) hash of your email address and a one-way hash of your profile URL, and nothing else, so that we do not accidentally contact you again in future. You have these rights whether or not you reply to this message.

How. Reply to this email, or write to victor@talentsync.eu. We answer within one month, free of charge.

Complaints. To the Moldovan National Centre for Personal Data Protection (centru@datepersonale.md, datepersonale.md) or, if you are in the EU or EEA, to the data protection authority in your own country — the list is at edpb.europa.eu. In the UK, the ICO at ico.org.uk/make-a-complaint.

Full privacy policy: talentsync.eu/privacy/

The short version, for a character-limited message

We use this only where the channel genuinely cannot carry the full text — a LinkedIn InMail, for example — and only with a working link to the full notice above.

The rules we hold ourselves to when we use this

These are not part of the notice we send you. They are published here so that you can hold us to them.

The notice goes in the first message. Not the second, not the follow-up, not “once they show interest”.
We fill in the actual platform and the actual profile URL. “A public source” is not an answer; Article 14 requires the source.
If a client is already named and identified, we name them, even before you agree.
We never send an outreach message from a channel that cannot carry at least the short version plus a working link. In practice that means email and LinkedIn only — we do not use WhatsApp, Telegram or SMS for candidate outreach.
“Remove me”, in any wording, is an objection. We stop the same day, add the hashes to the suppression list, confirm within five working days, and never ask why.
We do not use the “disproportionate effort” exemption in Article 14(5)(b). We have your address and we are emailing you anyway; the effort is zero.
We do not keep profiles of people we have not written to. If we record a profile while searching and then decide not to approach you, we delete it within 30 days, and you never hear from us.

Where to read more

Full privacy policy — every purpose, every recipient, every retention period, and the sections covering clients and website visitors. §6 is the candidate section.
Candidate terms — Part E of our terms: we never charge you anything, we never send your details anywhere without naming the company and asking first, and you are tied to us in no way at all.
Cookie policy — what this website stores in your browser, and what it does not.

Questions about any of it: victor@talentsync.eu. That address reaches the person who answers.