Applicant Privacy Notice
Last updated: 23-sep-2026
When you apply for a job with Tacta, we collect and use some of your personal information as part of our recruitment process.
This notice explains what we collect, why we use it, how long we keep it, and what rights you have under the GDPR. For recruitment purposes, Tacta d.o.o. Zagreb, Petračićeva 4, Croatia, is the data controller.
If you have any questions about your personal data, you can contact us at:
Email: dpo@tacta.io
What information we collect
Depending on your application, we may collect:
- your name and contact details;
- your CV and information about your work experience, education, qualifications and
- skills;
- answers you provide in the application form;
- interview notes and assessments;
- messages and other communication related to your application; and
- other information you choose to provide during the recruitment process.
We use TalentLyft, a cloud-based recruitment platform, to collect and manage applications.
Why we use your information
We use your information to:
- review and assess your application;
- decide whether your experience and skills match the role;
- contact you about your application;
- arrange interviews and other recruitment activities;
- manage and keep records of our recruitment process;
- protect our recruitment systems; and
- meet legal obligations or deal with legal claims where necessary.
Please avoid including sensitive personal information in your CV unless it is relevant and necessary for your application.
Our legal basis for using your data
We do not rely on consent to process the information needed for your current job application.
Depending on the situation, we process your information because:
- it is necessary to take steps at your request before potentially entering into an
- employment contract;
- we need to comply with a legal obligation; or
- we have a legitimate interest in running a fair, effective and secure recruitment process.
These legal bases are set out in Article 6(1)(b), (c) and (f) of the GDPR.
If we want to keep your profile and contact you about future job opportunities after the current recruitment process ends, we will ask for your separate consent. Giving that consent is completely optional and will not affect your current application.
Who can access your information
Your information is only available to people who need it for recruitment purposes, such as authorised members of our hiring team.
We also use TalentLyft to manage applications. TalentLyft processes personal data on our behalf as our service provider.
We do not sell applicant data or share it with other companies for their own marketing or commercial purposes.
We may disclose information where required by law, a court or a competent authority.
International transfers
Some service providers or their subprocessors may process personal data outside the European Economic Area.
Where this happens, appropriate GDPR safeguards must be in place, such as an adequacy decision or the European Commission’s Standard Contractual Clauses.
You can contact us if you would like more information about international transfers relating to your data.
How long we keep your information
We keep information related to your current application only for as long as we reasonably need it for the recruitment process and, where necessary, for a limited period afterwards to meet legal obligations or deal with potential legal claims.
For unsuccessful applications, our normal retention period is 12 months after the recruitment process ends.
If you separately agree that we may keep your profile for future job opportunities, we will keep it for up to 24 months, unless you withdraw your consent earlier.
You can withdraw your consent at any time by contacting dpo@tacta.io or by using the privacy options available through TalentLyft, where available.
Your rights
Under the GDPR, you may have the right to:
- access the personal data we hold about you;
- ask us to correct inaccurate information;
- ask us to delete your information;
- ask us to restrict how we use your information;
- object to certain types of processing;
- receive certain information in a portable format; and
- withdraw your consent at any time where we rely on consent.
To exercise any of these rights, contact us at dpo@tacta.io
We may need to verify your identity before completing your request.
You also have the right to submit a complaint to the Croatian data protection authority:
Croatian Personal Data Protection Agency (AZOP)
Agencija za zaštitu osobnih podataka
https://azop.hr/
Automated decisions
We do not make hiring decisions about you solely through automated processing that has a legal or similarly significant effect, unless we clearly tell you otherwise and the processing is allowed by law.
How we protect your information
We use appropriate technical and organisational measures to protect applicant information from unauthorised access, loss, misuse or disclosure.
Access to recruitment information is limited to people who need it for their work.
Changes to this notice
We may update this privacy notice from time to time if our recruitment process, service providers or legal requirements change.
The latest version will be available through our careers page or recruitment portal.
