Privacy Policy

1. Controller

RheinTalent GmbH i. G.
Bahnhofstrasse 7
FL-9494 Schaan, Principality of Liechtenstein
Email: admin@rheintalent.li

RheinTalent GmbH is currently being incorporated («i. G.» — in formation).

This policy applies to rheintalent.li including the RheinTalent web app reachable through it.

2. Legal bases and principles

We process personal data under the General Data Protection Regulation (GDPR), the Liechtenstein Data Protection Act (DSG; LGBl. 2018 No. 272) and, where applicable, the Swiss Federal Act on Data Protection. The relevant bases are in particular contract and pre-contractual measures (Art. 6(1)(b) GDPR), legal obligations (lit. c), legitimate interests in a secure and functioning placement service (lit. f) and your consent (lit. a) where we expressly obtain it.

RheinTalent is intended for adults.

3. What data we process, and why

• Website and security: technically necessary connection, server and error data for delivery, abuse prevention and error analysis.
• Account and sign-in: name, email address, password hash, verification and reset tokens, session, IP address and browser details.
• Talent profiles: contact and profile data, career history, competencies, work preferences, region, salary expectation, languages, education, uploaded CVs and other documents you provide voluntarily.
• Employers and vacancies: company and contact data, vacancy details, search criteria, published company profiles and enquiries.
• Placement: match values, contact releases, communication about the placement process, salary confirmations or objections, and the placement fee calculated from them.
• Voluntary AI features: answers and results from the purpose, personality and career coach features, where you use the respective feature and give the necessary consent.
• Contact: the details from contact and company enquiries, and our related correspondence.

4. Visibility, releases and data sources

Data generally comes from you, or from a company recording a vacancy or an enquiry. Talent profiles are initially made available to employers without direct contact details. Which parts of a profile are visible depends on the respective publication and on your releases. Identity and contact data are disclosed in the placement process only after the intended consent has been given.

Details such as competencies, region, career goals, salary expectation or a released purpose statement may form part of an anonymised profile. Please do not enter third-party data in free-text fields unless this is necessary and legally permitted.

5. Hosting, operations and security

The website, application, database and uploads run on infrastructure of Hetzner Online GmbH in the EU. Our measures include transport encryption, password hashing, role-based access, logging of security-relevant events, and daily database backups. No technical system can guarantee absolute security.

Server logs. When you access our pages and interfaces, the web server records technically necessary access data: IP address, time, requested path, response status, amount of data transferred, browser details and request duration. In addition, the application records failed requests as well as registrations, publications, withdrawals and deletions — there with the user identifier, not with an email address, name or form content.

The purpose is secure and stable operation, detecting and investigating faults and misuse, and keeping changes to profiles and accounts traceable. The legal basis is our legitimate interest in operating a traceable and attack-resistant service. Web server access data is deleted automatically after 30 days. This data is not combined with other sources for analytics purposes.

6. AI-supported features and matching

RheinTalent uses models from Mistral AI via the European API endpoint. Depending on the feature you choose, profile texts, answers, vacancy details, document text or extracts from a CV are transmitted to Mistral. A CV may also contain names or contact details. Where it is not necessary for the purpose, we limit the identifying data transmitted.

The processing serves, for example, structured CV parsing, competency mapping, drafting of voluntary profiles, career orientation and the calculation of explainable fit indicators. AI output can be incomplete or incorrect and serves as decision support. There is no solely automated decision with legal or comparably significant effect; releases and selection decisions are made by people. How RheinTalent uses AI and which limits apply in code are described on AI at RheinTalent.

Mistral AI processes API data in line with the subscribed plan and the data protection settings applied there. RheinTalent does not use the content to train its own general-purpose AI models. Further information is available in the Mistral AI privacy policy.

7. Email and RheinTalent Notes

Registration confirmations, password resets, placement messages and RheinTalent Notes are sent via Lettermint B.V. in the EU. In doing so, Lettermint processes in particular sender, recipient, subject, message content and delivery and error data.

For RheinTalent Notes we store the email address, an optional first name, language, source, time and version of consent, and subscription status in our own database. After sign-up we send a confirmation link (double opt-in). Only once it has been used do we add the address to the distribution list. Every issue contains an unsubscribe option. Unsubscribes, undeliverable addresses and spam complaints are blocked from further newsletter sendings.

The basis for the Notes is your consent (Art. 6(1)(a) GDPR), which you may withdraw at any time with effect for the future. Lettermint publishes details of its processing on behalf in its Data Processing Agreement.

8. Cookies and audience measurement

We use only technically necessary cookies and comparable storage techniques: a security and session cookie for signed-in accounts, and a language preference. The language preference is stored for up to one year. Campaign parameters from the address bar (utm_source, utm_medium, utm_campaign, utm_content, utm_term) may be kept in the browser’s sessionStorage for the browsing session so internal links can carry them; they are not sent to third parties. RheinTalent currently uses no analytics, advertising or marketing cookies and no external tracking pixels. Third-party content is not loaded automatically; the map on the contact page appears only after an explicit click (section 8a). Open and click tracking is disabled for RheinTalent Notes sent by RheinTalent.

8a. The map on the contact page

A Google Maps map can be loaded on the contact page. The map does not load automatically: the content is only retrieved from Google once you explicitly click «Load map». Your browser then transmits, in particular, your IP address, browser details and the page you are on to Google Ireland Ltd., and Google may set cookies or comparable technologies. The basis is your consent given by that click (Art. 6(1)(a) GDPR); it is not required in order to use the website. Without the click, no transmission takes place. The address is also given on the contact page without the map. Further information is available in Google’s privacy policy.

9. Recipients, processors and transfers

Access is granted only to people and service providers who need it for operations, support or the respective placement. The material processors are Hetzner Online GmbH (hosting), Lettermint B.V. (email) and Mistral AI (AI processing). Google Ireland Ltd. receives data only if you load the map on the contact page yourself (section 8a). Processing takes place primarily in the EU or the EEA. Where a provider engages sub-processors outside that area, the safeguards provided for by law apply. We do not sell personal data.

10. Retention and deletion

We store data only for as long as this is necessary for the respective purpose, for performing the contract, for security, or to meet statutory evidence and retention obligations. Accounts and profiles can be deleted using the features provided; an ongoing placement or probation process may restrict immediate full deletion. Billing and evidence data required by law is retained until the respective periods expire. Deleted data may still be contained in backups until they are overwritten in the normal cycle.

Newsletter subscriber data is processed until you unsubscribe. After that we store the necessary suppression and consent records only for as long as this is necessary to prevent further sendings and to demonstrate lawful processing.

11. Your rights

Within the limits of the law you have the right to access, rectification, erasure, restriction, data portability and objection (in particular Art. 15–21 GDPR). You may withdraw consent at any time with effect for the future. Please address requests to admin@rheintalent.li.

You may also lodge a complaint with the Liechtenstein Data Protection Authority. For matters with a Swiss connection, the Federal Data Protection and Information Commissioner may also be competent.

12. Changes

We adapt this policy when features, service providers or the legal situation change. The version in force at any time is published on this page with its date.