Talaskill
Create account

Data Processing Terms for employers

Last updated: 27 October 2026

These Data Processing Terms ("DPT") apply to every organisation that uses Talaskill's employer features — posting jobs, receiving applications, viewing candidates' shared profiles and managing a team ("the Employer"). They form part of the Terms of Use and explain how the Employer and the Operator protect the personal data of candidates and team members.

If these Terms and the Terms of Use conflict on a question of data protection, these Terms prevail.

1. Who is responsible for what

Candidates create their profiles and decide what to share. The Operator is the controller of candidates' accounts and profiles on the Service.

When a candidate applies to the Employer or shares their profile with it, the Employer receives that data and becomes an independent controller of it for its own recruitment. The Employer then decides how it uses the data, and is responsible for that use under the law that applies to it.

For the data the Employer itself puts into the Service in order to recruit — its job posts, its team members' accounts, and its notes and decisions on applications — the Operator acts as the Employer's processor. It processes that data only to provide the Service, following these Terms, the Terms of Use and the settings the Employer chooses.

2. The Employer's obligations

The Employer will:

  • use candidates' data only to assess them for the roles they applied to or were invited to, and never sell, rent or publish it;
  • have a lawful basis for its processing and give candidates any information the law requires;
  • make decisions without unlawful discrimination, and not rely on a match score or an assessment result as the only basis for rejecting a candidate;
  • not copy candidates' data out of the Service in bulk, scrape the Service, or contact candidates for purposes unrelated to recruitment;
  • keep candidates' data no longer than its recruitment and the law require, and delete it when the candidate asks, unless the law requires otherwise;
  • keep its team accounts secure, give access only to people who need it, use two-step verification where it is offered, and remove team members who leave;
  • answer the rights requests that candidates make to it, and tell the Operator promptly about any breach involving data it received through the Service.

3. The Operator's obligations as processor

For the data it processes for the Employer, the Operator will:

  • process it only to provide the Service and on the Employer's documented instructions, unless the law requires otherwise, in which case it will tell the Employer first where the law allows;
  • make sure that anyone authorised to process it is bound by confidentiality;
  • protect it with the measures described in Section 11 of the Privacy Policy;
  • use only the service providers (sub-processors) listed in Section 6 of the Privacy Policy, bind them by contract to equivalent data-protection obligations, and announce any new provider on that page before it is used, so that the Employer can object;
  • help the Employer, as far as reasonably possible, to answer people's rights requests and to meet its obligations on security, breach notification and impact assessments;
  • notify the Employer without undue delay, and where feasible within 48 hours, after becoming aware of a personal data breach affecting that data;
  • delete that data when the Employer closes its account, after giving the Employer the chance to export it, unless the law requires it to be kept;
  • make available the information reasonably needed to show that it meets these obligations.

4. Where the data is processed

The Service's data is stored in the European Union (Frankfurt), as described in Section 7 of the Privacy Policy. Where data is transferred outside the country where it was collected, the Operator relies on the safeguards described there, such as the European Commission's standard contractual clauses.

5. Liability

Each party is responsible for its own processing and for meeting its own obligations under these Terms and the law. Liability between the Employer and the Operator under these Terms is subject to the limits in Section 15 of the Terms of Use, except where the law does not allow those limits.

6. Duration

These Terms apply for as long as the Employer uses the employer features, and afterwards for as long as the Operator still holds data on the Employer's behalf. The obligations on confidentiality and deletion continue after the account is closed.

7. Contact

Questions about these Terms, and breach notifications: Talaskill1@gmail.com. Omar Alnawasrah, operator of Talaskill, Hashemite Kingdom of Jordan.