Privacy Policy

Version 1.1
Last updated: 18 August 2026

1 - Identification of the data controller

This Privacy Policy governs the processing of personal data carried out by Laboratorio Web Soluciones, S.L., tax identification number B13704515, with registered office at Avd. de Burgos, 56, 3B, 26007 Logroño (La Rioja), Spain, registered in the Commercial Registry of La Rioja, Volume 890, Folio 128, Sheet LO-20257, Entry 1, and represented by Ms Mayte Navarro Torres, hereinafter "TalentoHQ".

You can contact us at info@talentohq.com.

Laboratorio Web Soluciones, S.L. is not required to appoint a Data Protection Officer (DPO), as it does not fall within any of the circumstances set out in Article 37 of Regulation (EU) 2016/679 or Article 34 of Spanish Organic Law 3/2018 on Personal Data Protection and the guarantee of digital rights.

2 - Purposes of processing personal data

Personal data collected through the TalentoHQ website and Platform is processed to manage registration on the Platform, activate the free trial, enter into the contract, provide the service as software as a service (SaaS), manage the contractual relationship, issue invoices, manage payments and direct debits, including bank details such as the IBAN account number, and respond to enquiries, incidents and technical support requests.

The data may also be processed to comply with legal obligations relating to tax, accounting, commercial and data protection matters and to send communications concerning the contracted service.

When the software is used, TalentoHQ may process personal data entered by the Customer relating to employees or collaborators, including identification data, contact details, professional and employment data, working-time records, clock-in and clock-out records, geolocation data associated with clocking in when that feature is enabled, document management information and any other information required for the proper provision of the service.

In these cases, TalentoHQ acts as the Data Processor on behalf of the Customer, who acts as the Data Controller, in accordance with Article 28 of Regulation (EU) 2016/679 and the corresponding Data Processing Agreement.

3 - Categories of data processed

TalentoHQ may process identification data, contact details, professional and employment data, financial and billing data, bank details including the IBAN account number, Platform usage data, activity logs, geolocation data linked to time tracking when that feature is enabled and any other information provided within the contractual relationship.

As a general rule, TalentoHQ does not process special categories of data in its capacity as Data Controller. If the Customer enters this type of data into the Platform, the Customer does so under its sole responsibility and only where it has a lawful basis that legitimises the processing under the applicable legislation.

4 - Lawful basis for processing

Personal data is processed on the basis of the performance of the service agreement under Article 6(1)(b) of Regulation (EU) 2016/679; compliance with legal obligations under Article 6(1)(c) of that Regulation; and, where necessary, the data subject’s consent for specific communications or purposes under Article 6(1)(a).

For processing carried out on behalf of the Customer, the lawful basis will be that which applies to the Data Controller.

5 - Data retention

Personal data will be retained for as long as necessary to provide the service and while the contractual relationship remains in force.

Once the relationship has ended, the data will be retained for the periods required by applicable tax, commercial and administrative legislation, generally for a maximum of six years under commercial law and four years under tax law, unless a different period applies or the data is required to establish, exercise or defend legal claims.

Bank details will be retained while the contractual relationship remains in force and subsequently for the periods legally required to address any liabilities arising from the financial relationship.

Where data is processed in the capacity of Data Processor, its retention and subsequent deletion or return will be carried out in accordance with the Data Processing Agreement.

6 - Recipients of the data

Personal data will not be disclosed to third parties unless required by law or where necessary for the proper provision of the service. It may be accessed by technology providers, hosting services, maintenance and support providers or ancillary tools acting as data processors under the relevant agreement entered into in accordance with Article 28 of Regulation (EU) 2016/679.

7 - International transfers

If certain technology providers are located outside the European Economic Area, TalentoHQ will ensure that such international transfers are made subject to the appropriate safeguards provided for in Regulation (EU) 2016/679, such as the standard contractual clauses approved by the European Commission or other legally valid mechanisms.

8 - Data security

TalentoHQ applies appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including restricted access controls, secure authentication, encryption of communications, regular backups, activity logging and internal protocols for managing incidents and security breaches.

These measures are reviewed periodically, taking into account the state of the art, implementation costs, the nature, scope, context and purposes of processing and the risks to the rights and freedoms of natural persons, in accordance with Article 32 of Regulation (EU) 2016/679.

Access to bank details and sensitive information is restricted exclusively to authorised personnel.

TalentoHQ maintains a record of processing activities in accordance with Article 30 of Regulation (EU) 2016/679 and applies internal data protection policies.

9 - Rights of data subjects

Data subjects may exercise their rights of access, rectification, erasure, restriction of processing, objection and data portability by sending a request to info@talentohq.com and providing proof of identity.

TalentoHQ will respond to requests to exercise rights within the time limits established by the applicable legislation.

Data subjects also have the right to lodge a complaint with the Spanish Data Protection Agency if they believe that the processing of their data does not comply with applicable legislation.

Where TalentoHQ acts as Data Processor, requests concerning data processed on behalf of the Customer must be addressed to the relevant Data Controller.

10 - Data entered by Customers

The Customer guarantees that it has sufficient legal grounds to enter personal data into the Platform and that it has fulfilled its duty to provide information to its employees or third parties in accordance with Regulation (EU) 2016/679.

TalentoHQ is not responsible for processing carried out by the Customer in its capacity as Data Controller.

11 - First-party website analytics

The marketing website measures visits, campaign landings and completed demo or trial outcomes with first-party technology. It does not set analytics cookies and does not use third-party advertising pixels.

On each page the server records a visit from the request (including a masked IP address, browser family, referrer and campaign parameters in the URL). If JavaScript runs, the browser may also keep a random identifier named talentohq_analytics_id_v1 in local storage for 30 days. That value is sent to TalentoHQ only as a keyed digest, so we can recognise the same browser across sessions and attribute a completed trial. Raw user-agent strings and precise location are not kept. Visit records are deleted after 90 days; de-identified campaign facts may be kept for up to 25 months.

This processing supports the legitimate interest of understanding how the website is used and whether campaigns lead to a demo or a trial, without building an advertising profile. You can delete the local identifier by clearing this site’s stored data in your browser. More detail is in the Cookie Policy.

12 - Amendments

TalentoHQ may amend this Privacy Policy to adapt it to regulatory, technical or functional changes.

The current version will always be available on the website.

Where amendments substantially affect the processing of personal data, TalentoHQ may notify users of the update electronically or by means of a notice on the Platform.