Privacy Policy
Last updated: 18 September 2026
1. Data Controller
The controller responsible for processing personal data is:
Talero UG (haftungsbeschränkt)
Kollwitzstr. 17
60488 Frankfurt am Main
Germany
Email: contact@taleroai.com
Web: www.taleroai.com
2. Data We Process
We process only data necessary to provide, secure and improve the Talero platform.
a) Account and Basic Personal Data
Depending on how you use Talero, this may include:
- Email address
- User ID
- Login and authentication data
- Account settings
- Support communications
b) Game and Behavioral Assessment Data
When you use Talero's game-based assessments, we may process:
- Decisions and choices made during the assessment
- Interactions with game elements
- Reaction and decision patterns
- Task performance
- Cognitive task results
- Behavioral signals
- Generated profiles, insights and reports
Assessment data is separated from directly identifying information wherever technically possible and processed using pseudonymous identifiers.
Pseudonymised data remains protected as personal data under the GDPR.
Name, postal address, gender and age are not used as input factors for calculating an individual's behavioral profile.
c) Employability Intelligence Data
If you use Talero Employability Intelligence, we may process career-related information such as:
- CV information
- Education and qualifications
- Professional experience
- Skills and technologies
- Languages
- Career preferences
- Job requirements
- Job matches and matching explanations
- Assessment insights you choose to use with Employability Intelligence
For AI-supported job matching, direct identifiers and unrelated demographic characteristics such as name, postal address, gender and age are removed or excluded from the matching input.
Talero's matching process is designed to evaluate career-relevant information such as skills, experience, qualifications, capabilities and job requirements.
d) Technical Data
For security and operation of the platform, we may process technical information including:
- Truncated IP address
- Browser and device information
- Operating system
- Date and time of access
- System and security logs
- Technical usage information
3. Why We Process Data
We process personal data for the following purposes:
- Providing and operating Talero
- Creating behavioral assessments and reports
- Providing Employability Intelligence and job matching
- Providing AI-supported explanations and insights
- Managing user accounts
- Maintaining platform security
- Detecting technical problems, misuse and fraud
- Providing customer support
- Improving the reliability and usability of the platform
- Complying with legal obligations
Where product improvement is based on usage statistics, we aim to use aggregated or anonymised information wherever possible.
Individual user data, CV data, behavioral assessment data and generated reports are not used to train or fine-tune AI models.
4. Legal Basis
Depending on the processing activity, we rely on the following legal bases under the GDPR:
Art. 6(1)(b) GDPR, performance of a contract
Where processing is necessary to provide the Talero service requested by the user.
Art. 6(1)(a) GDPR, consent
Where we explicitly ask for consent for an optional processing activity.
Art. 6(1)(f) GDPR, legitimate interests
Where processing is necessary for platform security, fraud prevention, system stability, service improvement or the protection of our infrastructure, provided that these interests are not overridden by the rights and freedoms of users.
Art. 6(1)(c) GDPR, legal obligation
Where processing is required to comply with applicable law.
Where processing is based on consent, consent may be withdrawn at any time with effect for the future.
5. Use of Artificial Intelligence
Talero uses AI systems to support functions such as:
- Interpretation of assessment signals
- Creation of understandable reports
- Analysis of skills and experience
- Semantic comparison of user profiles with job requirements
- Generation of matching explanations
AI systems receive only the information necessary for the respective task.
Where possible, directly identifying information is removed before information is processed by an AI system.
For behavioral analysis and job matching, characteristics such as name, postal address, gender and age are not used as matching or scoring factors.
No AI Training With User Data
Talero does not use users' personal data, CVs, behavioral assessment data, profiles, reports or job-matching data to train or fine-tune AI models.
Talero also does not permit external AI service providers to use data submitted through Talero for model training or model improvement.
No Automated Decisions With Legal Effect
Talero does not make solely automated decisions that produce legal effects or similarly significant effects for users.
Assessment results and job matches provide insights and recommendations. They do not constitute automatic hiring, rejection, admission or employment decisions.
6. Data Storage and Location
Talero's core platform and user data are hosted using Google Cloud infrastructure located in Germany.
We use appropriate technical and organisational measures to protect data stored within our infrastructure.
Certain AI-supported functions may require limited, pseudonymised or minimised information to be processed by specialised technology providers.
Where processing involves a provider outside the European Economic Area, Talero uses appropriate safeguards required under applicable data protection law, such as an adequacy decision or Standard Contractual Clauses.
7. Sharing of Data
Talero does not sell personal data.
Personal data may only be shared where necessary with:
- Hosting and infrastructure providers
- Authentication providers
- AI technology providers
- Technical service providers
- Security and monitoring providers
- Other processors necessary to operate Talero
- Public authorities where disclosure is legally required
These providers may process data only for the purposes required to provide their services to Talero and subject to applicable data protection requirements.
Behavioral Data
Raw individual behavioral assessment data is not made available to third parties by default.
Access within Talero is restricted to systems and authorised personnel where necessary to provide, maintain, secure or support the service.
Where Talero is used in cooperation with a school, university, employer or another organisation, any information shared with that organisation depends on the specific service and applicable agreement.
Talero does not automatically provide organisations with unrestricted access to a user's complete behavioral data or Talero account.
8. Data Retention and Deletion
Personal data is stored only for as long as necessary for the purpose for which it was collected.
Users may request deletion of their personal data and assessment data at any time.
Following a deletion request, Talero will delete the relevant personal data unless continued retention is required or permitted by law, for example to comply with statutory obligations or establish, exercise or defend legal claims.
Technical backup copies may remain temporarily until they are overwritten according to the regular backup lifecycle.
Research data, where applicable, is governed by separate research participant information and consent.
Deletion requests can be sent to: contact@taleroai.com
9. Research and Scientific Evaluation
Where users are invited to participate in scientific research or validation studies, participation is voluntary.
Research participation is handled separately from normal use of the Talero platform.
Where required, participants receive separate information about:
- The purpose of the study
- Data collected
- Research partners
- Retention periods
- Data processing
- Publication or anonymisation
- Withdrawal of consent
Product consent does not automatically constitute consent to participate in research.
10. Data Security
Talero implements technical and organisational measures designed to protect personal data against:
- Unauthorised access
- Loss
- Manipulation
- Unauthorised disclosure
- Accidental deletion
- Misuse
These measures may include access controls, encryption, pseudonymisation, logging and restricted administrative access.
No digital system can guarantee absolute security.
11. Your Rights
Subject to the requirements of the GDPR, users have the right to:
- Access their personal data, Art. 15 GDPR
- Correct inaccurate personal data, Art. 16 GDPR
- Request deletion, Art. 17 GDPR
- Restrict processing, Art. 18 GDPR
- Data portability, Art. 20 GDPR
- Object to processing, Art. 21 GDPR
- Withdraw consent at any time where processing is based on consent
Requests can be sent to: contact@taleroai.com
Users also have the right to lodge a complaint with a competent data protection supervisory authority.
For Talero's registered office in Hesse, the competent supervisory authority is:
The Hessian Commissioner for Data Protection and Freedom of Information (Hessischer Beauftragter für Datenschutz und Informationsfreiheit, HBDI)
Wilhelmstraße 7
65185 Wiesbaden
Germany
12. Changes to This Privacy Policy
We may update this Privacy Policy when our services, technologies or legal requirements change.
The current version will always be available on this page.
Where material changes affect how we process personal data, we will provide appropriate notice where required.