Privacy policy

GDPR compliance

The Auralink Talent website and platform are designed and operated in accordance with the General Data Protection Regulation (GDPR, EU 2016/679): minimal collection, explicit purposes, consent where required, guaranteed data-subject rights and data hosted in Europe (OVH).

Data controller

Auralink Talent is the controller for data collected on this site. Contact: contact@auralinktalent.com.

Data we collect

We only collect data you voluntarily provide:

• Talent request form: identity, business contact details, company and hiring-need information.
• Contact form: identity, email, company, message.
• Talent profile submission: identity, email, CV and application information.
• Newsletter: email address.
• Technical preferences (display language, subscription state) stored locally in your browser, never sent to third parties.

Purposes and legal bases

Your data is processed to: answer your requests (pre-contractual measures), assess and present applications (legitimate interest and consent), send the newsletter (consent, revocable at any time), and improve our services (legitimate interest).

Recipients

Data is processed by authorised Auralink Talent teams. Talent profiles are only presented to a company when relevant to the expressed need. We never sell or rent your data.

Subprocessors

To deliver the service, we rely on subprocessors that process data on our behalf, under our instructions and within contractual commitments compliant with Article 28 of the GDPR:

• Brevo (Sendinblue SAS, a French company, data hosted within the European Union): sending the transactional emails related to your requests and managing our contact and newsletter subscriber lists. Accordingly, the information you enter in our forms (identity, contact details, company, message and, for a profile submission, your CV) is transmitted to Brevo.
• OVH (OVHcloud, France): hosting of the site and data in Europe.
• Cloudflare (Cloudflare, Inc.): anti-bot protection of our forms (Turnstile). When you submit a form, your browser communicates with Cloudflare, which processes technical data (IP address, browser characteristics) to distinguish legitimate visitors from bots.
• Google (Google Ireland Ltd): online appointment booking. If you book a call through our booking link, your reservation (identity, email, selected time slot) is processed by Google Calendar.

Retention periods

Applications and CVs: 2 years after the last contact. Company requests and prospects: 3 years after the last exchange. Newsletter: until you unsubscribe. Contractual data: for the duration of the relationship, then archived only as legally required.

Your rights

Under the GDPR, you have rights of access, rectification, erasure, objection, restriction and portability. To exercise them: contact@auralinktalent.com. You may also contact the competent supervisory authority.

Hosting and data access

Your data is hosted in Europe, on OVH servers (OVHcloud, France). Our teams, notably based in Madagascar, may access it remotely to process your requests; this access is restricted, secured and covered by appropriate safeguards.

Security

We apply proportionate technical and organisational measures: restricted access, encrypted transmission, team awareness.