Privacy Policy
1. INITIAL PROVISIONS
1. 1 This Privacy Policy is made by EXPLORE & BEYOND INC., located at 19904 Dover, DE, 1111B S Governors Ave STE #6655, United States of America, on behalf of explore & beyond s.r.o., having its registered office at Rybná 716/24, Staré Město, 110 00 Prague 1, Czech Republic, ID No. 09525602, registered in the Commercial Register maintained by the Municipal Court in Prague under No. C 337604 (also “we”, “us” or “our”). We refer to all our products, services, websites, and apps, including in particular (but not limited to) our product “Talentpilot”, collectively as the “Services” in this Privacy Policy.
1.2 We respect the need for privacy and protection of personal information, including but not limited to any personal data. For the purposes of this Privacy Policy, personal data shall mean any information relating to an identified or identifiable natural person, where an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person (the “Personal Data”).
1.3 We always process Personal Data in accordance with this Privacy Policy and applicable legislation, such as Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (the “GDPR”).
1.4 Please read this Privacy Policy carefully to understand how we collect, process, and protect Personal Data if you use the Services, and what rights you have in this connection. By using the Services and/or providing any Personal Data to us, you consent to be bound by this Privacy Policy and warrant that all Personal Data provided by you is accurate and that you are authorized to provide such Personal Data to us.
1.5 For the purpose of this Privacy Policy we might be a data controller or data processor depending on the context and nature of the service provided and depending on whether we receive personal data from you or from a customer using our services (the “Customer”).
2. CATEGORIES OF PERSONAL DATA
2.1 We process the following categories of personal data:
i) identification data (e.g., first name, last name, gender, nationality, age group,);
ii) contact information (e.g., e-mail address, personal address);
iii) professional, employment and work history (e.g., your past jobs);
iv) your likeness (e.g. pictures and video recordings);
v) IP address;
vi) personality attributes (e.g., character traits, work preferences); and
vii) other Personal Data
3. PURPOSES OF PERSONAL DATA PROCESSING AND DATA RETENTION
3.1 We obtain, collect and process personal data when:
a) you input Personal Data into our Services (such as entering information into forms, uploading your CV, etc.)
b) we receive your Personal Data from the Customer, who is acting in a capacity as a data controller of your personal data (in which case we are the processor of Personal Data) or data processor (in which case we are the sub-processor of Personal Data)
3.2 We process your Personal Data primarily for the purpose of fulfilling the contract (provision of Services). The data processed this will be processed only for the duration of provision of the Services, but no longer than 3 years.
3.3 If you give us your consent, your data may be stored in the database for up to 3 years for the purpose of contacting you in case the Partner has a similar job offering.
3.4 We also might process your Personal Data (e.g. video recordings) for the purpose of ensuring that you are not violating the terms of use of the Services (e.g. cheating). In such a case, we will process such Personal Data only for the time necessary for the verification, but no longer than 3 months
3.5 We will retain and process Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy and only to the extent necessary to comply with our legal obligations, resolve disputes, exercise our rights, and protect our interests.
4. TRANSFER OF PERSONAL DATA
4.1 Personal Data we process may be transferred to (and maintained on) a computer located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those from your jurisdiction. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and that no Personal Data are transferred to any organization or a country unless there are adequate controls in place ensuring the security of Personal Data.
5. DISCLOSURE OF PERSONAL DATA
5.1 We may disclose Personal Data to a third party in particular in connection with:
a) Business Transactions
We may disclose Personal Data to any third party that acquires all or substantially all of our business, stocks, or assets, or with whom we merge or undergo any other form of corporate restructuring. If we do, we will inform such a third party of the requirement to process Personal Data in accordance with this Privacy Policy.
b) Disclosure for Law Enforcement
We may, under certain circumstances, be required to disclose Personal Data by law or in response to requests made by public authorities (e.g., a court or a government agency).
c) Legal Requirements
We may disclose Personal Data if we believe in good faith that such disclosure is necessary in order to: (i) comply with a legal obligation, (ii) protect and/or defend our rights or property, (iii) prevent or investigate possible wrongdoing in connection with the Services, (iv) protect the safety of users of the Services or the public, (v) protect against legal liability.
6. SECURITY
6. 1 We are committed to storing all Personal Data securely. Therefore, we have implemented adequate physical, technical, and organizational measures and plans for protecting and securing Personal Data (which do not, however, deprive you of your responsibility for taking adequate steps to secure your data, particularly for the transmission of data). Our aim is to eliminate any unauthorized or unlawful processing of Personal Data as well as any accidental, unauthorized, or unlawful accessing, use, transferring, processing, copying, transmitting, alteration, loss, or damage of Personal Data.
6.2 Where we have given you (or where you have chosen) a password that enables you to access certain parts of the Services, you are responsible for keeping this password strong and confidential. We ask you not to share the password with unauthorized persons.
6. 3 Unfortunately, the transmission of information via the internet is never completely secure. Although we will do our best to protect Personal Data, we cannot guarantee the security of Personal Data transmitted by you. Any such transmission is at your own risk. Once we have received Personal Data, we will use strict procedures and security measures to protect Personal Data and prevent unauthorized access.
6.4 To maintain the highest standard of Personal Data protection, all information you provide to us is stored on secure servers behind firewalls. We restrict access to Personal Data to employees, contractors and agents who need to know such Personal Data in order to operate, develop or improve the Services.
6.5 Certain parts of the Services that collect personal data also use Secure Sockets Layer (SSL) encryption or other types of encryption. We back up all Customer data in the data center located in the European Union, which enables an expedited recovery in case of a disaster or other event of similar nature, and whenever possible, we will ensure the pseudonymization or anonymization of all personal or related data (except for names and e-mail addresses).
6.6 In case, despite our best efforts, a Personal Data breach occurs which is not unlikely to result in a risk to the rights and freedoms of our clients or users, we will undue delay and, where feasible, not later than 72 hours after having become aware of it, notify the supervisory authority and, if your Personal Data has been a part of the breach and none of the exceptions in Article 34(3) of the GDPR apply, you as well. We will describe to you the nature of the breach in clear and plain language, what measures we implemented and will yet to implement and what consequences the breach is likely to have.
7. YOUR RIGHTS
7.1 Subject to the rules and conditions set forth in the GDPR, you are or may be eligible to the following rights in relation to your Personal Data:
a) Right of Access
You are eligible to request from us confirmation, as to whether or not Personal Data concerning you are being processed and, if this is the case, you may access further information about such processing.
Your right of access can be exercised in accordance with the applicable laws. However, where requests from you are manifestly unfounded, excessive, or repetitive, we may either:
i) charge a reasonable fee, considering the administrative costs of taking the actions requested; or
ii) refuse to act on the request.
b) Right to Erasure (Right to be Forgotten)
You are eligible to request from us the erasure of Personal Data concerning you without undue delay and we shall have the obligation to erase such data without undue delay if all respective conditions are met under the GDPR. Please note that the erasure of your Personal Data may result in our inability to provide you with our services.
c) Right of Rectification
You are eligible to request from us without undue delay the rectification of inaccurate or incomplete Personal Data concerning you.
d) Right to Object
You are eligible to object, on grounds relating to your particular situation at any time, to the processing of Personal Data.
e) Right of Restriction of Processing
You are eligible to request from us the restriction of processing of Personal Data.
Right to Data Portability
f) Right to Data Portability
You are eligible to receive Personal Data concerning you, which you have provided to us, in a structured, commonly used, and machine-readable format, and you have the right to transmit those data to another controller without hindrance from us to which Personal Data have been provided.
g) Right to Withdraw Consent
You are eligible, where the processing is based on consent, to withdraw your consent at any time. Such withdrawal shall not affect the lawfulness of processing based on your consent before its withdrawal.
7.2 If you feel that your Personal Data have been processed unlawfully, please contact us at dpo@talentpilot.com and we will resolve the problem. You have the right to lodge a complaint with the competent supervisory authority. A list of competent supervisory authorities in the European Union is available at https://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm.
8. FINAL PROVISIONS
8.1 The Services may, from time to time, contain links to and from websites of our partner networks, advertisers, and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any Personal Data to these websites.
8.2 The Services are not addressed to anyone under the age of 15. We do not, to our best knowledge, collect Personal Data from anyone under the age of 15. If you are a parent or a guardian and you are aware that your child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from children without verification of parental consent, we will take steps to remove that information from our servers.
8.3 We reserve the right to amend, modify, supplement, or otherwise change this Privacy Policy at any time and for any reason. Any new version of this Privacy Policy supersedes its previous version as of the date of effectivity of the new version. If you are our registered user and we have your e-mail information, we will inform you about any substantial amendments to this Privacy Policy by e-mail.
8.4 If you have any questions about this Privacy Policy or our privacy practices, please contact us by e-mail at dpo@talentpilot.com.
This Privacy Policy enters into force and becomes effective as of 30.6.2025.
[END OF THE PRIVACY POLICY]