Privacy Policy

Who we are

• The data controller is The Principal Recruiter, Andreea Lungulescu, Neue Grünstr. 39, 10179 Berlin, Germany.
• Email: info@talent-crunch.com. USt-IdNr.: 34/428/03294.
• We have not appointed a Data Protection Officer as this is not required under Articles 37 to 39 of the GDPR.
• Contact info@talent-crunch.com to exercise your rights. We respond within one month.

What personal data we collect

• Identity data: first name, last name.
• Contact data: email address.
• Professional data: city, country, company, role, LinkedIn profile URL.
• Event data: registration details for Talent Crunch events via Luma.
• Photographic data: images taken at Talent Crunch events. We do not name or tag people and remove any image on request.
• Communications data: emails or messages you send us directly.
• Slack community data: first name, last name, email address, city, company, role, LinkedIn profile URL, and how you heard about Talent Crunch.
• Membership record data: events attended, how you joined, and which mailing lists you belong to.
• We do not collect special category data, create user accounts, or process passwords or financial data directly.

How and why we use your personal data

• Newsletter and email communications, where you subscribed directly - identity, contact and professional data - consent (Art. 6(1)(a) GDPR) - retained until you unsubscribe.
• The Crunch newsletter sent to Slack community members - identity, contact and professional data - legitimate interest (Art. 6(1)(f) GDPR) together with section 7 Abs. 3 UWG - retained until you unsubscribe or leave the Slack workspace.
• Making sure we never email you again once you have unsubscribed - email address and unsubscribe date - legitimate interest (Art. 6(1)(f) GDPR) and section 7 UWG - kept for as long as we run the newsletter.
• Reviewing applications to join the Slack community - identity, professional data and LinkedIn profile URL - legitimate interest (Art. 6(1)(f) GDPR) - accepted applications kept until you leave or request deletion; rejected applications deleted immediately.
• Event registration and management - identity, contact and event data - legitimate interest (Art. 6(1)(f) GDPR) - kept in your contact record and deletable on request.
• Event photography and marketing - photographic data - legitimate interest (Art. 6(1)(f) GDPR) - retained while actively used and removable on request.
• Responding to direct enquiries - communications and identity data - legitimate interest (Art. 6(1)(f) GDPR) - kept in our email account and deletable on request.
• Keeping our contact records accurate - identity, contact, professional, event and membership record data - legitimate interest (Art. 6(1)(f) GDPR) - kept as long as we hold your record for another purpose.
• Proof of consent and of lawful contact - email address, subscription timestamp and source of signup - legal obligation (Art. 6(1)(c) GDPR) - 3 years from subscription date.
• Slack community membership - identity and professional data - legitimate interest (Art. 6(1)(f) GDPR) - until you leave the Slack workspace or request deletion.

Sharing your data

• We do not sell or rent your personal data.
• With event sponsors: when you register via Luma and check the consent box, you explicitly consent to sharing your name, email address, company, role and city with that event's sponsor.
• With other community members: your Slack profile and posts are visible to other Slack workspace members.
• With subprocessors: listed in Section 5, solely to operate Talent Crunch.
• With law enforcement or regulators: where required by law.

Third-party subprocessors

• Brevo (Sendinblue) - France / EU - email marketing, newsletter distribution, community application forms, contact database - https://www.brevo.com/legal/privacypolicy/
• Lovable Labs Sweden AB - Sweden / EU - website hosting for talent-crunch.com - https://lovable.dev/privacy
• Luma - USA (SCCs) - event registration and management - https://luma.com/privacy-policy
• Google Workspace - USA (DPF) - email, file storage, internal communications - https://policies.google.com/privacy
• LinkedIn (Microsoft) - USA (DPF) - live streaming of webinars via LinkedIn Live, community presence - https://www.linkedin.com/legal/privacy-policy
• Streamyard - USA (SCCs) - webinar and live stream production - https://streamyard.com/privacy
• Slack (Salesforce) - USA (DPF) - external community workspace - https://slack.com/intl/en-gb/trust/privacy/privacy-policy
• Zapier / Make - USA (SCCs) - workflow automation between tools - https://zapier.com/privacy and https://www.make.com/en/privacy-notice
• AI tools (Claude, OpenAI) are used only for our own content and internal admin work. Community personal data is not entered into them.
• Brevo entity details: Sendinblue SAS, Paris, France; EU entity Brevo GmbH, Berlin, Germany. Data stays in EU data centres.
• Lovable: Lovable Labs Sweden AB, Stockholm. Acts as processor under https://lovable.dev/data-processing-agreement and uses SCCs for US infrastructure providers listed at https://trust.lovable.dev.

International data transfers

• Some subprocessors are based outside the EEA.
• EU to US Data Privacy Framework (DPF) where applicable: Google, LinkedIn, Slack.
• Standard Contractual Clauses (SCCs) approved by the European Commission: Luma, Streamyard, Zapier, Make, and Lovable's infrastructure providers.
• Data Processing Agreements (DPAs) with all relevant subprocessors.

Data security

• We take reasonable steps to protect personal data from unauthorised access, loss or disclosure.
• Access is limited to Andreea Lungulescu and trusted contractors under confidentiality obligations.
• Suspected breaches are assessed promptly and reported to you and the relevant supervisory authority within the legally required timeframe.

Your rights under GDPR

• Right of access (Art. 15): request a copy of the data we hold about you.
• Right to rectification (Art. 16): ask us to correct inaccurate or incomplete data.
• Right to erasure (Art. 17): ask us to delete your data where we have no legal obligation to retain it.
• Right to restriction (Art. 18): ask us to pause processing in certain circumstances.
• Right to data portability (Art. 20): receive your data in a structured, machine-readable format.
• Right to object (Art. 21): object to processing based on legitimate interest, including direct marketing.
• Right to withdraw consent (Art. 7(3)): withdraw consent at any time where processing is consent-based.
• Right to lodge a complaint (Art. 77): complain to the supervisory authority.
• Contact info@talent-crunch.com to exercise any right. We respond within one month and do not charge unless the request is clearly unfounded or excessive.

Supervisory authority

• Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59 to 61, 10555 Berlin.
• Website: https://www.datenschutz-berlin.de

Third-party links

• The Talent Crunch website and emails may contain links to third-party websites.
• We are not responsible for the privacy practices of those sites.

Changes to this policy

• We may update this policy from time to time.
• Meaningful changes are notified to newsletter subscribers by email.
• The date at the top of the page always reflects the most recent version.

Cookies and email tracking

• The website is hosted on Lovable and is informational. We do not use analytics or marketing cookies and do not track visitors.
• Any cookie set is strictly necessary for the site to load and display correctly.
• Newsletter emails sent via Brevo use tracking pixels and link tracking to measure opens and clicks, based on legitimate interest (Art. 6(1)(f) GDPR).
• You can unsubscribe from tracked emails at any time via the link in any email.

Contact

Email info@talent-crunch.com.