Talexio
Browse all Talexio legal documents and policies

Talexio User Privacy Policy

Your privacy is important to us!

This Privacy Policy explains the Personal Data that Talexio Ltd. (C50568) processes, how it processes it, and for what purpose.

Talexio Ltd. (C50568) (hereinafer referred to as ‘Talexio’, ‘we’, ‘us’ and/or ‘our’) offers a wide range of products, including software that gives organisations full control over their HR processes, employee satisfaction surveys and research based compensation data. References to Talexio products in this statement include Talexio services, websites, apps, software, servers, and devices. This Privacy Policy applies to all the products, services, websites, apps and/or servers (hereinafter collectively the ‘Services’) offered by Talexio except where otherwise noted.

This Privacy Policy applies to Personal Information we collect to provide you with the Services. It does not apply to anonymized, de-identified or aggregate information.

This Policy describes the rights available to you regarding our use of your Personal Information. Use of Personal Information collected through the Services shall be limited to the purposes of providing the Services, and otherwise with your consent.

This Privacy Policy applies to the interactions Talexio has with you and the Talexio products listed below. Please read the product-specific details in this Privacy Policy, which provide additional relevant information.

We may from time to time update this Privacy Policy; where we deem it appropriate, we will seek to notify you about the changes, however, we recommend you review this page periodically.

This Privacy Policy was last updated on 1st November 2024.

General Applicability        2

About us        2

What do we mean by 'Personal Data'        2

Effectiveness        2

Changes to this Privacy Policy        2

Applicability        3

Why we have your information        3

On what legal basis we have your information        3

1. Where an organisation you work for uses one of our solutions        3

2. Where you have engaged with an organisation that uses one or more of our solutions        3

3. Where you have used one of our solutions where we process your data in our capacity as data controller        4

4. Where you have contacted us        4

5. Where you visit our website        4

6. Where your data was provided to us by a third party        4

7. Where we collect your data through lead generating activities done by us        5

8. Where you sign up or are otherwise registered to one of our software solutions        5

9. You attended an Expedition42/ Talexio Ltd led event        5

Marketing        5

Cookies        5

Processing of your personal data        5

Further processing of Data        6

Sharing your personal data        6

Storage and disposal of your personal data        7

Analytics and Data Sharing        7

Safety of Minors        8

Your rights        8

How We Protect Your Information        8

International Transfers        9

Team Voice        9

What Personal Data do we collect        9

How we use the Personal Data we collect        10

Entrant        10

Respondent        12

How we share or disclose Personal Data        12

Information we share        13

Data Retention        13

Data Transfers        13

Roles        13

Contact        13

Complaints        13

Salariesinmalta        14

How we collect the Personal Data        14

How we use the Personal Data we collect        14

Information sharing and disclosure        14

Data Retention        15

Jobsinmalta        15

Information we collect        15

Jobseekers        15

Employers & Human Resources Management Personnel        15

How we use your Personal Information        16

Jobseekers        16

Employers & Human Resources Management Personnel        16

Information sharing and disclosure        16

Data Subject Rights        17

Data Retention        17

Jobseekers        17

Employers & Human Resources Management Personnel        18

Links to other Websites        18

General Applicability

About us

Talexio is a wholly owned subsidiary of Expedition42 Co. Ltd. (C94085). The registered address for both is: Capital Business Centre, Entrance C, Level 2, Taz-Zwejt Street, San Gwann, SGN3000, Malta.

For the purpose of this Privacy Policy, and subject to the Services being availed of, Talexio may be the Controller, Joint Controller and/or Processor of the Personal Data which is processed by it.

To contact us regarding our use of Personal Data, you may email us at gdpr@exp42.com

What do we mean by 'Personal Data'

References in this Privacy Policy to data, personal information, or information, are all references to Personal Data. Personal Data is information that identifies, relates to, describes, references or is capable of being associated with, or could reasonably be linked, directly or indirectly with an individual(a "Data Subject").

Effectiveness 

By using the Services, you acknowledge that you have read, and agree to, the terms of this Privacy Policy and that you consent to the use by us, of your Personal Information for the purposes set out below. If you do not wish to provide your Personal Information on the basis set out in this Privacy Policy, you should not enter the relevant information on Talexio Ltd’s website or provide your Personal Information to us otherwise. However, if you do not provide your Personal Information, you may not be able to use the Services.

Changes to this Privacy Policy

If we decide to change this Privacy Policy, we will post those changes to this website, and other places we deem appropriate so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we may disclose it.

We reserve the right to modify this Privacy Policy at any time. It is the user's obligation to review it frequently. If we make material changes to this Policy, we will notify you here, by email or by means of a notice on our homepage. Your continued use of our Services or websites constitutes your agreement to this Privacy Policy and any updates.

Any failure by the user to review the Privacy Policy shall not act to the detriment of Talexio Ltd. and the latest version of the Privacy Policy shall become applicable upon publication, in whichever method such publication takes effect.

Applicability

The following segments of the Privacy Policy  applies to Services relating to Talexio modules: Payroll, HR Essentials, Time & Attendance, Training, Performance Management, the Application Tracking System (ATS), Surveys, Remuneration Benchmarking, Job Board and any other modules as may be added to the Services.  

Why we have your information

We process Personal Data to fulfil our contractual obligations to our customers as well as to collect feedback about, improve and market our solutions in relation to HR, Payroll and Recruitment software. There are various ways in which we may process your Personal Data.

For example, because:

On what legal basis we have your information

We will only ever process your Personal Data where we have a lawful basis to do so.

We have expanded upon the reasons for us processing your Personal Data below.

1. Where an organisation you work for uses one of our solutions

If you use our Services through your employer, for example, our HR, Payroll solutions, then your employer is the Controller while we will process your Personal Data as a Processor subject to a contract . We recommend you read your employer’s relevant privacy statement for information explaining what personal data is collected, and the reason for it.

Third parties may also process your personal data on our behalf. The details of these third parties will be included in the contract we hold with your employer.

2. Where you have engaged with an organisation that uses one or more of our solutions

If you use our solutions via another organisation; for example, to submit your CV, then we will process your personal data as a Processor (the relevant third-party organisation is the Controller).

We recommend you read the third-party organisation’s relevant privacy documentation for information explaining what personal data is collected, and what for, etc.,

Third parties may also process your personal data (on our behalf). The details of these third parties will be included in the contract that we hold with the Controller.

3. Where you have used one of our solutions where we process your data in our capacity as data controller

We provide a limited number of solutions where some or all your personal data is processed by Talexio Ltd in its capacity as a Controller. Where you use one or more of our Services and we process all your data in our capacity as Controller, the relevant Service is allocated its own dedicated privacy notice.

Where we use your information to market Talexio Ltd solutions which may be of interest to you, our lawful basis is legitimate interests. The legitimate interest pursued is to share service messages pertaining to the solution that is used, and to market Talexio Ltd’ solutions which may be of interest to you. The information we will process for marketing purposes is limited to: business email address; business phone number; your name; company name and service category reference.

We use third-party solutions to store and otherwise process your information, they will therefore process your personal data on our behalf.

4. Where you have contacted us

If you contact us, for example, for technical support, to inquire about our solutions, or to inquire about a vacancy listed on our Job Board (https://exp42.talexio.com/jobs), we will record the contact made and log necessary details of the interaction on our systems. We process any personal data collected via these methods as a Controller.

The data collected (which may be via telephone recording) may include your first and last name, the email address and telephone number you use for business purposes, your job title, and your employer.

Our lawful basis for processing your personal data in this case is legitimate interests. The legitimate interests pursued are to support us delivering on our contractual obligations (where applicable), training on the system, to improve the quality of our services, to make information available to you (including marketing), and or to resolve any conflict (where applicable).

We use third party solutions to record and log the contact made with us; they will therefore process your personal data on our behalf.

5. Where you visit our website

Your personal data, such as your first and last name, telephone number, email address, postal address, job title, employer and any other relevant contact details may be collected by us when you contact us using our online forms or by submitting a request on our website.

The lawful basis for processing this information is legitimate interests. The legitimate interest pursued is to keep you informed about the solutions we offer which we think may be of interest to you, namely marketing.

Where personal data is collected by us via mechanisms available via the website, we will process that data using third party solutions. These third parties will process your personal data on our behalf.

6. Where your data was provided to us by a third party

If an intermediary uses our Services, for example, our HR, Payroll solutions, then your employer is the Controller while we will process your Personal Data as a Processor or Sub-Processor subject to a contract. We recommend you read your employer’s relevant privacy statement for information explaining what personal data is collected, and the reason for it.

Third parties may also process your personal data on our behalf. The details of these third parties will be included in the contract we hold with the intermediary.

7. Where we collect your data through lead generating activities done by us

We may collect your personal data through various lead generating activities such as events, webinars, and other networking activities

Our lawful basis for processing is legitimate interests. The legitimate interest sought is the marketing of our available solutions, or where relevant, to engage with you for the purpose of concluding an agreement.

All personal data collected by us is done on the basis that we are the Controller.

Where we obtain your personal data through these activities, we will process that data using third party solutions. These third parties will process your personal data on our behalf.

8. Where you sign up or are otherwise registered to one of our software solutions

To give you access to any one of our platforms we require you to register. The information required for registration to our platform is limited to: your name, email address, telephone number, job title, and, where applicable, past experience/CV. The lawful basis upon which we process your information as Controller, Joint Controller or Processor (depending on the Service) is legitimate interest. The legitimate interest pursued is the security and confidentiality of Talexio Ltd’s information.

Where you submit reviews, testimonials, or other user-generated content (in each case which may contain your views, opinions etc.,) on our platforms, we may reproduce, and display such content for marketing and promotional purposes.

9. You attended an Expedition42/ Talexio Ltd led event

When in attendance at an Expedition42 and/or Talexio Ltd-led event, we may take photographs and or video footage. We process this information in our capacity as a Controller, and our lawful basis is legitimate interests. The legitimate interest pursued is to generate marketing/promotional material.

Where you express any opinion/view regarding Access, we may record the same and use and otherwise reproduce this for marketing and promotional purposes. This information will be processed in our capacity as a Controller, and our lawful basis is legitimate interests. The legitimate interest pursued is to generate marketing/promotional material.

Marketing

We may use your information for marketing relevant Talexio and/or Expedition42 solutions to you. You are free to unsubscribe or opt-out to marketing messages from us at any time. An unsubscribe option will be included in each message.

Cookies

Cookies are pieces of data stored on your computer or mobile device when you visit websites. We use cookies to help distinguish you from other users and website visitors to tailor your user experience.

These cookies will usually store information in the form of a session identification that doesn’t personally identify the user – meaning it will not personally identify you. We use cookies to:

To find out how to allow, block, delete, disable and manage the cookies on all standard web browsers, go to the AboutCookies.org website and select the browser and version you are using. However, blocking cookies may impact your experience of the site.

Processing of your personal data

In addition to the above, we may also act as an independent Controller of a smaller subset of Personal Data, which we either may collect directly from you; from the relevant solution(s) you are using; and or through a third party, because you have been identified by us as a key contact pertaining to:

Financial matters – meaning we may contact you regarding the payment of invoices. We require you to provide your billing details, a name, address, email address and financial information corresponding to your selected method of payment. These communications are of a transactional nature (e.g., service-related announcements, billing-related matters, changes to our services or policies, a welcome email when you first register). You cannot opt out of these communications since they are required to provide our Services to you. Our lawful basis for processing this data is legitimate interests. The legitimate interest sought is the payment of invoices; and/or Billing information. 

We may also use billing information in aggregate to adjust or manage pricing at the individual level or across all service users.

Implementation of a Talexio Ltd solution – meaning we may store some of your information outside of our system. Our lawful basis for processing this data is legitimate interests. The legitimate interest sought is the administration and management of Talexio’s business activities.

Services or goods we have or might need to procure Where you use one of our solutions, we may derive or create anonymous data and information about your use of that solution. This anonymised data will be further aggregated before being used either by us or a third party nominated by us to improve our products. Our lawful basis for the anonymisation and aggregation process is legitimate interests. The legitimate interest pursued is statistical analysis and insights to drive informed decision making, for the benefit of our customers, Talexio and the Expedition42 group of companies. Post completion of this anonymisation and aggregation process (which is irreversible and cannot be reverse engineered), the data is no longer considered Personal Data for the purpose of applicable Data Protection legislation.

Customer support information  meaning we may use information provided to our Customer Support  and Sales teams such as name, email, and message content to train machine learning models to better predict customer support question type, provide answers, generate insights about customer support trends, and to improve our Customer Support for our Customer. This data is de-identified where possible.Our lawful basis for processing this data is legitimate interests. The legitimate interest sought is the administration and management of Talexio Ltd’s business activities.

In all of the above cases, the information we process is limited to your first name; surname; business email address; location; business phone number; Talexio user role(s); and job title.

We may also use your information to market to you Talexio or Expedition42  solutions we think may be of interest to you/your employer. Our lawful basis is legitimate interests. The legitimate interest sought is the sale of Talexio solutions.

Further processing of Data

Where you use one of our solutions, we may derive or create anonymous data and information about your use of that solution. This anonymised data will be further aggregated before being used either by us or a third party nominated by us to improve our products.

Our lawful basis for the anonymisation and aggregation process is legitimate interests.

The legitimate interest pursued is statistical analysis and insights to drive informed decision making, for the benefit of our customers, Talexio and the Expedition42 group of companies.

Post completion of this anonymisation and aggregation process (which is irreversible and cannot be reverse engineered), the data is no longer considered Personal Data for the purpose of applicable Data Protection legislation.

Sharing your personal data

We may have to share your Personal Data with regulators, law enforcement bodies, government agencies, courts or other third parties where we must or think it’s necessary to comply with applicable laws or regulations, or to exercise, establish or defend our legal rights.

We have also partnered with reputable third parties to provide a service offering to you and our wider customer base. Where sharing your Personal Data with our trusted partners means a transfer to a third country (without an adequacy decision or adequacy regulations, as applicable) is to take place, we will ensure we put in place appropriate safeguards and supplementary measures to ensure an essentially equivalent level of protection (as compared to the EU GDPR) to your personal data will be given.

We may also share your personal data with other members of Expedition42. We will only do this where we have a lawful basis for doing so, for example, fulfilment of contract obligations or legitimate interests.

In the event that Expedition42 or Talexio is involved in a merger, acquisition, restructuring or sale of all or a portion of its assets, equity or similar transaction, your Personal Data may be transferred to the acquiring person or entity and you will be notified via email and/or a prominent notice on our website of any change in ownership or uses of Personal Data, as well as any choices you may have regarding your Personal Data. We will use reasonable efforts to direct the acquiring person or entity to supply or otherwise make available to you their relevant Privacy Policy.

Storage and disposal of your personal data

Where we collect your Personal Data in our capacity as a Controller, we will delete your Personal Data in accordance with our data retention schedule/s for each solution, or as otherwise required by Data Protection legislation. For example, we generally retain information regarding our payroll services for ten (10) years from the date of our last interaction/account closure, in compliance with our obligations under applicable laws, or for longer if required to do so according to our regulatory obligations or where we believe necessary to establish, defend, or protect our legal rights or those of others. When we destroy your Personal Information, we do so in a way that prevents that information from being restored or reconstructed.Deletion may also occur where you choose to exercise your rights as a Data Subject (see ‘Your Rights’ section for more information).

Where we are in possession of your Personal Data in our capacity as a Processor, we will delete your Personal Data in accordance with the Controller’s instruction which is governed by a contractual agreement, or as otherwise required by Data Protection legislation. If we are required by law to retain any of your Personal Data, we will inform the Controller of this lawful obligation.

Analytics and Data Sharing

We use the following third party platforms to collect data and analyse user behaviour as follows:

Google Ads 

Reason: To improve marketing and analytics data accuracy, including Conversion Measurement, Enhanced Conversions, Remarketing, Personalised Advertising and Customer Match. Details of these can be found by following this link: Google Ads Glossary

Data we collect: Email address, phone number, first name, last name, unique identifiers (e.g., Google Ads Click IDs, Conversion Data)

Privacy Policy: https://policies.google.com/privacy

Google Analytics 

Reason: To improve marketing and analytics data accuracy, including conversion measurement, Enhanced Conversions, Google Signals, Remarketing and Customer Match.

Data we collect: Email address, phone number, first name, last name, unique identifiers (e.g., Google Analytics Client ID, session ID, Google Ads Click IDs)

Privacy Policy: https://policies.google.com/privacy 

Meta

Reason: To improve marketing and analytics data accuracy, including Conversion Measurement, Remarketing, Conversions API, and Custom Audiences.

Data we collect: Email address, phone number, first name, last name, unique identifiers (e.g., Meta Browser ID, Meta Click ID, Meta Lead ID)

Privacy Policy: https://www.facebook.com/privacy/policy/ 

LinkedIn

Reason: To improve marketing and analytics data accuracy, including Conversion Measurement, Marketing, and Matched Audiences. Details of these can be found by following this link: LinkedIn Glossary

Data we collect: Email address, phone number, first name, last name, organization name, unique identifiers (e.g., LinkedIn Ads Click ID)

Privacy Policy: https://www.linkedin.com/legal/privacy-policy

Microsoft Clarity

Reason: To capture how you use and interact with our website through behavioral metrics, heatmaps, and session replay to improve and market our products/services. Website usage data is captured using first and third-party cookies and other tracking technologies to determine the popularity of products/services and online activity. Additionally, we use this information for site optimization, fraud/security purposes, and advertising.

Data we collect: Behavioural metrics and session data.

Privacy Policy: https://www.microsoft.com/en-gb/privacy/privacystatement 

Safety of Minors

Our services (including creating and responding to surveys) are not intended for and may not be used by minors. “Minors” are individuals under the age of 18. Talexio does not knowingly collect Personal Data from Minors or allow them to register. If it comes to our attention that we have collected Personal Data from a Minor, we may delete this information without notice. If you have reason to believe that this has occurred, please contact customer support.

Your rights

Regardless of your geographical location, we will process your personal data in accordance with the rights stated below:

To exercise any of these rights, including the right to withdraw your consent, please contact us at gdpr@exp42.com

How We Protect Your Information

The security of your Personal Information is important to us. We take appropriate security measures to protect against loss, misuse and unauthorised access, alteration, disclosure, or destruction of your information and Personal Data. We take industry-accepted steps to ensure the ongoing confidentiality, integrity, availability, and resilience of systems and services processing personal information, and will restore the availability and access to information in a timely manner in the event of a physical or technical incident. When you enter information in our systems, we encrypt the transmission of that information using secure socket layer technology (SSL).

Talexio  is ISO 27001 certified and as a result it maintains a comprehensive information security programme management system that complies with the certification requirements, applicable law and generally accepted industry standards. This includes appropriate administrative, technical, and physical safeguards, procedures, and practices to protect Personal Information submitted to us, both during transmission and once we receive it. No method or transmission over the internet, or method of electronic storage, however, is 100% secure. Therefore, we cannot guarantee its absolute security. If you have any questions about the security on our websites, please see our Information Security Policy.

If you hold an account with Talexio please know that we will never request your account credentials. You should never share your account information, including your username and password, with anyone else. We recommend that you use a unique password for your Talexio  account that is not associated with other websites. You should check your account regularly to ensure that your Personal Information has not been tampered with or altered. You should only use the Services within a secure environment.

Any suspicious activity regarding your account, including automated messages or calls from parties you cannot identify, should be reported to Talexio  by sending an email to gdpr@exp42.com.

If we learn of a security systems breach, we may attempt to notify you electronically so that you can take appropriate protective steps. By using this Website or providing Personal Data to us, you agree that we can communicate with you electronically regarding security, privacy and administrative issues relating to your use of our services. We may post a notice on the relevant platform and/ or site if a security breach occurs.

International Transfers

As part of the Services offered, the information you provide to us will be transferred to and stored in countries within the European Economic Area (EEA). Talexio Ltd will always take reasonable steps with the aim of ensuring that your privacy rights continue to be protected, as outlined in this Privacy Policy and in accordance with Data Protection laws.

If you are visiting the website from a country outside of the European Union with laws governing data collection and use that may differ from EU law, please note that you are transferring your personal data to Malta, which may not have the same data protection laws as other countries outside of the EU. By providing your personal data, you consent to:

Team Voice

The following segments of the Privacy Policy apply to Services relating to Talexio Team Voice Survey.

Whose data do we collect

We interact with the following categories:

What Personal Data do we collect

Contact information

You provide us with your contact information (for example: name and work email address), through use of our Services via your employer in order to respond  to the Team Voice survey. Talexio Ltd will not sell, rent, or loan your contact information or personal data to any third party.

Customer support information

We collect information submitted through our Customer Support, such as name, email, and message text. We may also record the content of Customer Support.

Referral information

If you arrive at a Talexio website from an external source (such as a link on another website or in an email) or have been invited to review a survey as a guest, we record information about the source that referred you to us.

Software integration

We utilize integration data to:


We may share integration data with trusted third-party partners to enable specific functionalities, such as:

Survey data

We store survey data (questions and responses) and share it in an anonymous and aggregated format with the Entrant to be able to carry out analysis based on such data.

How we use the Personal Data we collect

Entrant

We process Personal Data about you as an Entrant where:

Consent

We rely on your consent to process yourContact information. We use contact information to respond to your inquiries, send you information as part of the services, and send you marketing information.

Contract 

We collect and use the following data elements on the basis that we have to use this information in order to fulfill our contract with you: 

Account information

We need to use your account information to run your account, provide you with Services, bill you for our Services, resolve disputes such as chargebacks and refund requests, provide you with customer support, and contact you or your organization about your service or account.

Customer support information

We will use information submitted through our Customer Support, submissions via our website, submissions via our website, emails, chats, or phone calls, such as name, email, and message content, in order to provide you with customer support.

Usage information

We use data about how you use our services and how our services are performing to ensure that we’re meeting our service-level policies or other contractual obligations to you as outlined for the specific service.

Aggregated or de-identified survey questions and responses

We use aggregated or de-identified information to provide the Entrant with useful benchmarking statistics and more relevant insights from the data collected using our Services.

We also use this data to enforce our agreements, where applicable.

Legitimate interests

We process your personal information in the following categories of data for legitimate interests pursued by us. We have undertaken to ensure that we place clear limitations on each of these uses so that your privacy is respected and only the information necessary to achieve these legitimate aims is used. 

Contact information

Where consent is not required, we use contact information to send the Entrant marketing information based on our legitimate interests for as long as you do not opt out. You can opt out of marketing communications at any time by clicking on the “unsubscribe” link in emails.

Customer support information

We may use information provided to our Customer Support and Sales teams such as name, email, and message content to train machine learning models to better predict customer support question type, provide answers, generate insights about customer support trends, and to improve our Customer Support for you. This data is de-identified where possible.

Usage information

We use information about how you use our services to improve our services for you and all users and to make recommendations to you and your organization about our other services.

Event data

We use events contained in log data for many different business purposes, including but not limited to creation of new content, features or services, or investigation of security issues.

De-identified Survey Data

De-identified data refers to information that has been stripped of personally identifiable information such that individuals cannot be readily identified. This process involves removing or altering specific data points to ensure that the remaining information cannot be linked back to any individual.

We use de-identified data for various purposes, including:

We may share de-identified data with third parties, including partners and service providers, for purposes such as research, marketing analysis, and service improvement. Since this data cannot be linked back to individual users, it is not subject to the same privacy protections as personal identifiable information.

We implement robust security measures to protect de-identified data from unauthorized access and misuse. Although de-identified data is less sensitive, we take its protection seriously and follow industry best practices.

De-identified data may be retained indefinitely for research and analytical purposes, as it does not contain personal identifiers. However, we regularly review our data retention policies to ensure compliance with applicable laws and regulations.

Legal Obligation

To respond to legal requests, we may need to use and disclose information we hold about you. If we receive a subpoena or other legal request, we may need to inspect the data we hold to determine how to respond.

We may also use usage data, event data, and aggregated or (where possible) de-identified survey questions and responses:

Respondent

We process Personal Data about you as a Respondent where:

Contract

Contact information

We only use contact information should we need to obtain clarity or resolve a technical issue with respect to your response to the survey.

Event data

We use event data for many different business purposes including the following:

Third parties and software integration

We will collect and use information from third parties and integration partners to facilitate Entrants in sending survey  questionnaires to you.

Legitimate Interests

We process your personal information in the following categories of data for legitimate interests pursued by us. We have undertaken to ensure that we place clear limitations on each of these uses so that your privacy is respected and only the information necessary to achieve these legitimate aims is used.

Usage information

We use information about how you use our Services to improve our Services for you and all users, and to make recommendations to our customers about usage of our Services.

Responses (in aggregated and/or de-identified form).

Provide Entrant access to the responses submitted through Team Voice survey as well as actionable data to improve the employee experience, and to build new product features.

Email Address

The Entrant provides the employee name, surname, business e-mail address and department prior to the survey launch date.  Personal email addresses shall be accepted for exceptional reasons and in such instances, the Entrant must first obtain the necessary consent.

Legal Obligation

To respond to legal requests, we may need to disclose information we hold about you. If we receive a subpoena or other legal request, we may need to inspect the data we hold to determine how to respond.

We may also use usage data, event data, and aggregated or de-identified survey questions and responses:

How we share or disclose Personal Data

Information we share

We do not share your information or data with third parties outside Talexio except in the following limited circumstances:

Data Retention

We retain the right to make use of the Survey Results indefinitely only if they have been fully anonymised and for the sole purpose of generating statistical insights. 

Data Transfers

For the aforementioned purposes, your Personal Data may be transferred to the following categories of recipients: (i) third-party suppliers of assistance and advice for Talexio Ltd with reference to the following sectors: technological, accounting, administrative, legal, insurance, IT; (ii) companies of the group to which Talexio Ltd belongs; (iii) subjects and authorities which right of access to Personal Data is recognized by law, regulations or provisions issued by the competent authorities. Depending on the specific case, these recipients will process such personal data as Data Controllers or Processors. All of the companies listed as providers in our cookie list act as data processors according to article 28 GDPR.

Roles

If you have provided survey responses to an Entrant using Talexio Services, that Entrant is the Controller of your data, and Talexio is the Processor of that data. 

This Privacy Policy does not apply to the information provided by an Entrant that is an organisation or legal person.

Where you have responded to a survey sent to you by Talexio on behalf of the company/ partnership/ entity by which you are employed/ engaged  , you will need to reach out directly to that company/ partnership/ entity to discuss managing, deleting, accessing, restricting access to or otherwise withdrawing consent for use of the information which you provided to them in your responses. Talexio does not control your response data and, accordingly, is not in a position to directly handle these requests in relation to that data. If you are having difficulties finding this Entrant or if you have any other questions after reading this Privacy Policy, you can contact our gdpr@exp42.com  and we will try our best to help you.

Contact

Except as explicitly provided herein, please use the following contact information for privacy inquiries: gpdr@exp42.com

Complaints

If you are a resident in the European Union and you are dissatisfied with how we have managed a complaint you have submitted to us, you are entitled to contact your local data protection supervisory authority. As Talexio operates its business in Malta, it operates under the remit of the local Office of the Data Protection Commissioner (DPC contact).

Salariesinmalta

The following segments of the Privacy Policy applies to Services relating to the salary benchmarking tool; Salariesinmalta (SIM)

How we collect the Personal Data

We collect Personal Data when data is shared with salariesinmalta.com, including but not limited to Personal Data received from employers, business partners and other direct users.

We collect your Personal Information through the use of surveys and when you email us, as an individual with your details. Depending on how you interact with us, the personal information we collect from you may vary. This information may consist of your e-mail address; job title; type of employment; type of contract; salary information; FS3 or payslip; year of birth; nationality; gender; Highest Educational Achievement; annual gross salary; fixed annual compensation, including: value of company car, car cash allowance, other fixed allowance; bonus or commission entitlement; annual benefits, including: health insurance cover, health insurance includes family, life insurance, memberships (professional & lifestyle), communication allowance, qualification allowance, on call allowance (standby), overseas travelling allowance, housing allowance, schooling allowance; current employer; years working within the company; and sector.

How we use the Personal Data we collect

Our primary purpose for collecting Personal Data is to provide the services and features in relation to information on remuneration and benefits.

In particular, we collect your Personal Information in order to enable us to collate individual compensation information with other similar data in order to generate aggregate remuneration and benefits data, and to contact you about service related announcements.

Any remuneration information you may have provided us with, will be kept in our database and will continue to feature in reports in an aggregate anonymous format.

Purchase/subscription history together with other data submitted might remain in our archived records but is not used in ways that are publicly displayed.

Information sharing and disclosure

We fully recognise the sensitivity of the data submitted by any user and commit to hold all individual, company and employee data in the strictest confidence. We undertake and guarantee that any and all data submitted shall not be disclosed to or resold to any third parties except in such form as shall render the identification of any individual and/or entity impossible. Data shall only be published in aggregate form and shall never be displayed or released by us in such a way that an individual's or entity's identity is revealed or be easily discernible or that its pay levels, practices, or any employees could be determined.

The user agrees and acknowledges that by submitting data it shall have a right to access the aggregated form of data results and agrees that information extracted from the results will be used solely for internal purposes and shall not be sold, shared, transferred or otherwise made available to any other person or entity. This excludes trusted third parties who assist us in operating our website, conducting our business, or servicing you, so long as those parties agree to keep this information confidential.

The user shall remain responsible for the use of the aggregated data and any other data it shall have had access to by the user's employees, contractors and consultants, including after the termination of the Services.

We may disclose your personal information:

Data Retention

In order  to provide you with our Service, we will retain salary data, for a period of 14 days, during which it shall be validated, prior to deletion.

Jobsinmalta

The following segments of the Privacy Policy applies to Services relating to the job board Jobsinmalta (JIM)

Information we collect

The section below describes how we collect and process personal data of different data subjects through the Website. Please refer to the section which applies to you.

Jobseekers

Our primary purpose for collecting Personal Data is to provide you with the services and features in relation to information about vacancies.

Our goal is to provide the best possible employment opportunities that are tailored to you. To achieve this, we need to process certain information about you, and this in order to provide you with the services under the agreement that regulates our relationship. This will enable us to provide you with the best opportunities and should save you time in not having to search through information about jobs and services that are not relevant to you. Depending on how you interact with us, the personal information we collect from you may vary. This information may consist of:

Should you decline to provide us with any such data we may not be able to provide you with our service.

Employers & Human Resources Management Personnel

Our primary purpose for collecting Personal Data about you or members of your human resources management personnel is to provide you with the services and features in relation to the listing of situations vacant.

We will receive data directly from you or members of your human resources management personnel in the following ways: through the use of registration forms, contact forms and when you email us your details. Depending on how you interact with us, the personal information we collect from you may vary. This information about you or your human resources management personnel may consist of:

Should you decline to provide us with any such data we may not be able to provide you with our service.

How we use your Personal Information

Jobseekers

Your Personal Data is processed by us to perform our contract with you and provide you with the Service. In particular, we collect your Personal Data in order to enable us to:

In the case of job alerts, we will only do this with your permission and to keep you up to date. If you do not wish to receive job alerts from us you have the option to disable the job alerts thereby you are accepting that you will not receive any job alerts.

Please note further to our sharing of your data with prospective employer/s to provide you with the Service, the manner in which any of your personal data is processed by prospective employer’/s is the sole responsibility of that employer/s.  The deletion of your CV sent to any employers through the jobsinmalta portal, by way of example, will be at the discretion of the prospective employer/s. If you wish to have this information deleted or have any other questions, you may contact the prospective employer/s or refer to their privacy notice.

Employers & Human Resources Management Personnel

Your Personal Data is processed by us to provide you with the Service. In particular, we collect your Personal Data in order to enable us:

Information sharing and disclosure

We do not, and will not, sell any of your personal data to any third party – including your name, address, email address. It is not our business to do so – and we want to earn your trust and confidence.

Additionally, we may share your data with the following categories of companies as an essential part of being able to provide our services to you, as set out in this statement:

In addition, there may be case where we may disclose Personal Data because we are obliged to, as set out below:

When we do share data, we do so on an understanding with the other entities that the data is to be used only for the purposes for which we originally intended.

We may also provide third parties with aggregated but anonymised information and analytics about our customers and, before we do so, we will make sure that it does not identify you. Anonymous information means it is anonymous.

If we ever have to share data with entities that are outside of the EEA, we will be sure to do so in a manner that complies with the requirements established by under Applicable Legislation.

Data Subject Rights

You enjoy several rights relating to your personal information under Applicable Legislation. We respect your privacy rights and provide you with reasonable access to the Personal Data that you may have provided through your use of the service. Your principal rights under data protection law are:

Please appreciate that the rights must be exercised within some limitation – for example, if you ask us for information we can only give you what relates to you and not what relates to other persons. Additionally, in accordance with Applicable Legislation, we reserve the right to withhold Personal Data if disclosing it would adversely affect the rights and freedoms of others. When we receive requests, we may also request that you identify yourself and provide documentation or information for verification (we would not want to disclose information to the wrong person). Unreasonable requests may be subjected to a reasonable fee.

To get in touch about these rights or to learn more, please contact us on gdpr@exp42.com. We will seek to deal with your request without undue delay, and in any event within one month (subject to any extensions to which we are lawfully entitled). Please note that we may keep a record of your communications to help us resolve any issues which you raise.

You may delete your profile. By doing so you agree to remove any history related to your job applications from jobsinmalta’s database and will no longer receive any job notifications.

Once the profile is deleted, any applications sent to employers will be automatically removed from the Application List of the relevant employer’s profile on jobsinmalta. You will need to re-register with jobsinmalta in order to submit an application.

Please note that your data will not be removed from any employers’s records you have applied with through jobsinmalta. To delete this data, please get in touch with each employer where you applied.

Data Retention

We will hold on to your information for no longer than is necessary keeping in mind the purpose/s (or compatible purposes) for which we first collected the data. Please note the following information on retention as a guide:

Jobseekers

We will retain your information for as long as needed to provide you with our service, or to comply with our legal obligations, resolve disputes and enforce our agreements, as follows:

Employers & Human Resources Management Personnel

We will retain your information for as long as needed to provide you with our service, or to comply with our legal obligations, resolve disputes and enforce our agreements, as follows:

Links to other Websites

Our site may have a number of links to other Maltese and international organisations and agencies. In some cases, for the benefit of the visitor, it may be required that we link to other websites of other organisations after permission is obtained from them respectively. It is important for you to note that upon linking to another site, you are no longer on our website and you become subject to the privacy policy of the new site. We are not responsible for the collection or use of your personal information from these third-party websites. Therefore, we encourage you to read the privacy statements on the other websites you visit.