Privacy policy

At TalentShift, we value your privacy and are committed to protecting your personal data. This policy describes how we collect, use, and protect the data of our users, applicants, and clients, in accordance with the General Data Protection Regulation (Regulation (EU) 2016/679, hereinafter "GDPR").

1. Data Controller
TalentShift – Trabalho Temporário, S.A., headquartered at Vale da Azinheira Apt 796ª, 8200-389 Albufeira, Portugal, VAT number 518388557, is the entity responsible for processing your personal data, under the terms of article 4.º, n.º 7 of the GDPR.

2. Data Collected
We may collect the following personal data:
• Identification: name, date of birth, nationality;
• Contact details: email, telephone number, address;
• Professional data: CV, professional history, qualifications;
• Contractual and tax information (in the event of hiring).

3. Purposes of Processing
We process data for the following purposes:
• Recruitment and selection processes;
• Management of temporary employment contracts;
• Communication with candidates and companies;
• Compliance with legal and tax obligations (e.g., Labor Code, Tax Code);
• Continuous improvement of our services.

4. Legal Basis
Your data is processed based on:
• Your consent (art. 6.º, n. º 1, al. a) of the GDPR), for example, when you submit your resume;
• The performance of contracts (art. 6.º, n. º 1, al. b);
• Compliance with legal obligations (art. 6.º, n. º1, al. c);
• The legitimate interests of TalentShift (art. 6.º, n. º 1, al. f), namely, to improve services and prevent fraud.

5. Data Sharing
Data may be shared with:
• Client companies, in the context of recruitment and contract management processes;
• Public authorities (e.g., Social Security, Tax Authority), in accordance with applicable legal terms;
• Subcontractors providing services to TalentShift (e.g., recruitment platforms), ensuring compliance with data protection legislation, in accordance with article 28.º of the GDPR.

6. Data Retention
Data is retained for the period strictly necessary, which may vary depending on the purpose:
• Applications: up to 2 years after the last contact, based on legitimate interest;
• Employment contracts: in accordance with legal obligations (e.g., 10 years for tax and labor purposes).

7. Rights of Data Subjects
Under Articles 12.º to 23.º of the GDPR, data subjects have the right to:
• Access their personal data;
• Rectify incorrect or outdated data;
• Erase data, in cases provided by law;
• Restrict processing;
• Data portability;
• Opposition in processing data;
• Withdraw consent at any time, without compromising the lawfulness of the processing carried out up to that date.
To exercise your rights, please contact us via email dpo@talentshift.pt.
You may also lodge a complaint with the National Data Protection Commission (www.cnpd.pt).

8. Data Security
We take appropriate technical and organizational measures to protect data against loss, unauthorized access, disclosure, or destruction, in accordance with article 32.º of the GDPR.