Personal data processing

Who we are and what data we process

Talantiq processes the personal data of a customer’s employees and candidates within the platform’s functions (HR records, recruiting, learning, assessment) on behalf and under the instructions of the customer. The customer acts as the data controller for the data of its own employees and candidates.

Legal basis

Processing is carried out under the contract between the customer and Talantiq (the Public Offer) and the personal data legislation applicable in the customer’s country.

Processing of personal data is governed by Law No. 94-V of the Republic of Kazakhstan "On Personal Data and Their Protection". Personal data is stored in Kazakhstan.

Categories of data

We process: identification data (name, contact details), employment data, assessment and learning results, and, where voluntarily provided, restricted-access data (such as a national ID number) — the content of such files is encrypted.

Storage and residency

Personal data is stored in the infrastructure of the delivery class chosen by the customer (see the "Delivery classes" page for details), physically located in the customer’s country.

Data subject rights

A data subject may request an export of their data or request its correction or erasure. Requests are handled within the period set by applicable law.

Security measures

Data in transit is protected by TLS 1.3, sensitive fields are encrypted with AES-256-GCM, and access is restricted by role.

Retention periods

Retention periods are set by applicable law and by the customer’s own policy as the data controller.