Skip to main content

Privacy Policy

Last updated: 20 October 2026

This privacy policy explains how Blucora Talent Advisors UG (haftungsbeschränkt) (“Blucora Talent”, “we”, “us”) processes personal data when you visit blucora-talent.com and when we work with you as a candidate, client or business contact. It is written to meet the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the German Telecommunications Digital Services Data Protection Act (TDDDG).

1. Controller

Blucora Talent Advisors UG (haftungsbeschränkt)
Bergstraße 4
89312 Günzburg
Germany
Represented by: Kevin Eisermann, Managing Director
Phone: +49 158 88621852
Email: info@blucora-talent.com

For any question about your data, contact us at the email address above. Further company details are in our Impressum / Legal Notice.

2. Visiting our website

When you visit our website, our hosting provider automatically records technical data in server log files. This includes your IP address, the date and time of access, the page requested, the referring page, and your browser and operating system. We need this data to deliver the website and keep it secure. The legal basis is our legitimate interest in a secure and working website (Art. 6(1)(f) GDPR). Log files are kept for a limited period for security purposes and then deleted. Our hosting provider processes this data on our behalf under a data processing agreement (Art. 28 GDPR).

Our website is encrypted with SSL/TLS, which you can see from “https” in your browser’s address bar.

3. Cookies and consent

We use a consent tool (Complianz) to ask for your permission before any cookies or similar technologies are used that are not strictly necessary. Strictly necessary cookies are used on the basis of § 25(2) TDDDG. All other cookies are only used with your consent under § 25(1) TDDDG and Art. 6(1)(a) GDPR. You can change or withdraw your consent at any time using the “Manage consent” option on our website. Details of each cookie are listed in our Cookie Policy.

4. Contact form and email

If you contact us through our contact form or by email, we process the details you give us, such as your name, email address, phone number and message, to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a contract or possible contract, and otherwise our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR). Our contact form is built with Gravity Forms and the data is stored in our website database and sent to us by email. We delete enquiries once they are dealt with, unless they lead to an ongoing working relationship or we are legally required to keep them.

5. Google reCAPTCHA

To protect our contact form from spam and automated abuse, we use Google reCAPTCHA, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. reCAPTCHA analyses how a visitor interacts with the form, using data such as your IP address, browser information and time spent on the page, to tell humans from bots. The legal basis is our legitimate interest in protecting our website from abuse (Art. 6(1)(f) GDPR). Data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework. More information: Google Privacy Policy.

6. Google Analytics

With your consent, we use Google Analytics 4, provided by Google Ireland Limited and set up through the Google Site Kit plugin, to understand how visitors use our website. Google Analytics uses cookies and processes data such as pages visited, time on site, approximate location and device information. IP addresses are not stored by Google Analytics 4. The legal basis is your consent (Art. 6(1)(a) GDPR and § 25(1) TDDDG). Google Analytics is only loaded after you accept statistics cookies, and you can withdraw your consent at any time. Data may be transferred to Google LLC in the USA, which is certified under the EU-US Data Privacy Framework.

7. LinkedIn and Xing

Our website links to our profiles on LinkedIn and Xing. These are plain links. No data is sent to LinkedIn or Xing until you click one. Once you are on those platforms, their own privacy policies apply.

8. Candidates

As a recruitment business, we process personal data of candidates to find and offer suitable roles.

Where we get your data from

  • directly from you, for example when you send us your CV or speak to us
  • professional networks such as LinkedIn and Xing
  • job boards
  • referrals and our professional network
  • active headhunting, using publicly available professional information

If we collect your data from a source other than you, we will tell you when we first contact you, and at the latest within one month (Art. 14 GDPR).

What data we process
Name, contact details, CV, career history, qualifications, skills, current and expected salary, availability, location, work preferences, and notes from our conversations with you. Please do not send us special category data, such as health information, unless it is needed for a specific role.

Why and on what legal basis

  • to match you with roles, contact you about opportunities and support you through hiring processes (Art. 6(1)(b) GDPR, steps taken at your request before a contract)
  • to identify and approach suitable candidates for our clients (our legitimate interest in running a recruitment business, Art. 6(1)(f) GDPR)
  • where we ask for it, your consent (Art. 6(1)(a) GDPR)

Who we share it with
We share your profile with clients in connection with specific roles you are considered for. Some of our clients are based in the USA (see section 11).

9. Clients and business contacts

We process the business contact details of our clients, prospective clients and suppliers, such as name, job title, company, email address and phone number, to manage our business relationship and to contact you about our services. The legal basis is Art. 6(1)(b) GDPR where there is a contract, and otherwise our legitimate interest in developing our business (Art. 6(1)(f) GDPR).

10. Service providers

We use service providers who process personal data on our behalf under data processing agreements (Art. 28 GDPR). These include:

  • our website hosting provider
  • Bullhorn, our applicant tracking and job board system
  • SourceWhale, our recruitment platform for candidate management and outreach
  • our email and office software provider
  • Google, for reCAPTCHA and, with your consent, Google Analytics

Some of these providers may process data outside the European Economic Area (see section 11).

11. Transfers outside the EU

We support clients in Germany, the USA and the rest of Europe. Where personal data is transferred to a country outside the European Economic Area, we make sure it is protected. Transfers are based on an adequacy decision of the European Commission (including the EU-US Data Privacy Framework where the recipient is certified, and the adequacy decision for the United Kingdom), or on the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR). Where we send a candidate’s profile to a client in the USA for a specific role and none of these apply, the transfer is necessary for steps you asked us to take (Art. 49(1)(b) GDPR).

12. How long we keep your data

We keep candidate data for two years after our last contact with you, and then delete it. If you ask us to keep your details for longer for future roles, we will do so with your consent. Client and business contact data is kept for as long as the business relationship lasts and then for up to two years. Where we are legally required to keep records, for example under German commercial and tax law (§ 257 HGB, § 147 AO), we keep them for the required period of up to ten years.

13. Your rights

You have the right to:

  • access the personal data we hold about you (Art. 15 GDPR)
  • have incorrect data corrected (Art. 16 GDPR)
  • have your data deleted (Art. 17 GDPR)
  • restrict how we use your data (Art. 18 GDPR)
  • receive your data in a portable format (Art. 20 GDPR)
  • withdraw any consent you have given, at any time and with effect for the future (Art. 7(3) GDPR)

Right to object (Art. 21 GDPR): Where we process your data based on our legitimate interests, you can object at any time for reasons arising from your particular situation. You can object to direct contact about opportunities or our services at any time, without giving a reason. To use any of these rights, email info@blucora-talent.com.

14. Right to complain

You have the right to complain to a data protection supervisory authority. The authority responsible for us is:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Germany
www.lda.bayern.de

15. No automated decision making

We do not make decisions about you based solely on automated processing, including profiling, that have legal or similarly significant effects (Art. 22 GDPR).

16. Changes to this policy

We may update this privacy policy when our services or the law change. The current version is always available on this page.