Privacy Notice

Talentapy – Consulting and Recruitment, Selection, and Talent Development Services

In compliance with the Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP) and its regulations, the General Data Protection Regulation (GDPR), as well as other applicable local laws, Talentapy issues this Privacy Notice to inform you about the processing, use, protection, and rights associated with your personal data.

1. Data Collected

At Talentapy, we collect and process personal data lawfully, transparently, and proportionally. Depending on the service, product, or assessment applied, we may collect the following categories of data:

  • Identification data: full name, gender, date of birth, nationality, country and city of residence.
  • Contact data: email address, telephone number (mobile or landline), physical address (if applicable).
  • Employment data: job title or position, department, company name, hierarchical level, role type, seniority, and professional experience.
  • Contextual or anecdotal data: personal, cultural, or employment information voluntarily provided during interviews, diagnostics, or assessments.
  • Assessment and performance data: responses, scores, and observations from psychometric assessments, 360° feedback, qualitative interviews, cultural instruments, and surveys.
  • Behavioral data: perceptions, interaction patterns, leadership styles, decision-making, and organizational behavior.
  • Inferred or generated data: interpretative results, categorizations, profile reports, and analyses derived from processing the above data.
  • Technical and digital data (where applicable): IP address, device, browser, operating system, time zone, cookies, or similar technologies.
  • Financial or administrative data (only where applicable): tax ID (RFC), invoicing details, payment methods, and other data required for contractual or administrative purposes.

2. Use of Information

The information collected will be used exclusively for the following purposes:

  • To create and manage your profile within Talentapy.
  • To administer assessments and generate individual and collective reports.
  • To facilitate communication with you.
  • To conduct analyses and diagnostics to support your professional and organizational development.
  • To comply with contractual, administrative, or legal obligations.

All processing is carried out based on your informed consent and limited to the purposes expressly set forth in this notice.

3. Security Measures

We implement technical, physical, and administrative safeguards to protect your personal data, ensuring its confidentiality, integrity, and availability. These include:

  • Data encryption.
  • Role-based access controls.
  • Multi-factor authentication for administrative access.
  • Periodic audits and reviews.
  • Secure disposal of both digital and physical files.

4. Data Sharing and Transfers

Your personal data will not be transferred to third parties without your consent, except in the following cases:

  • Where indispensable for the execution of contracted services.
  • Where required by legal obligation.
  • Where shared with contracted technology providers subject to equivalent privacy obligations.

For international transfers, the recipient’s adequate level of protection will be ensured, and standard contractual clauses or other appropriate legal mechanisms will be applied.

5. Data Retention

Your data will be retained under the following criteria:

  • Active users: for as long as the account remains active.
  • Inactive users or upon withdrawal of consent: up to 24 months, after which it will be deleted or anonymized.
  • Sensitive assessment data (psychometric, CPA, 360°, diagnostics): retained until the delivery of reports (maximum 12 months), then anonymized.
  • Tax/administrative data: up to 5 years or as required by applicable law.

6. ARCO Rights and GDPR Rights

You may exercise at any time your rights of Access, Rectification, Cancellation, and Opposition (ARCO), as well as GDPR-recognized rights: restriction of processing, data portability, and withdrawal of consent.

Response timeframes:

  • LFPDPPP: 20 business days to respond + 15 additional business days to execute the action.
  • GDPR: 1 month to respond (extendable to 2 months in complex cases).

Requests: compliance@talentapy.com

7. Consent

  • Mexico: Consent may be express or tacit (except for sensitive data, which requires express written consent).
  • European Union: Consent must always be express, freely given, informed, and verifiable.

8. Accuracy, Updates, and Corrections

Talentapy is committed to maintaining your data accurate and up to date. You may request corrections or updates at any time via the contact email provided.

9. Use of Cookies and Similar Technologies

We use cookies and similar technologies to enhance your experience, personalize content, and perform statistical analysis. You may manage your preferences through your browser settings.

10. Scope and Dissemination

This notice applies to all information collected by Talentapy through forms, interviews, assessments, or digital platforms and is disseminated via electronic and physical means.

Available at: https://talentapy.com/privacy

11. Updates and Modifications

This notice may be modified at any time. Any changes will be published on the official website. Periodic consultation is recommended.

12. Applicable International Regulations

  • Mexico: LFPDPPP and its regulations.
  • European Union: GDPR.
  • United States (where applicable): CCPA.
  • Other countries: local applicable law will be observed.

13. Contact

For any inquiries or requests regarding your personal data: compliance@talentapy.com

Last Update: 12 September 2025