Privacy

1. Who is responsible

The controller within the meaning of the GDPR is the company named in the imprint. Privacy questions: [privacy contact e-mail address].

Technical Sales Board is a job board for technical and industrial sales with its own team of recruiters. This policy explains which personal data we process when you use the site, why, and for how long.

2. Visiting the website

When you open a page, our server processes your IP address, the time, the requested address, the referring page and your browser type. We need this to deliver the page and to keep the service secure (Art. 6 (1) (f) GDPR). Log files are deleted after 14 days. The site is hosted on servers in Germany.

Cookies and local storage. Visitors get no cookies unless they allow analytics (section 8). Your browser stores locally: the draft of the profile form, so nothing is lost on reload (it never contains your contact data), and your cookie choice. Staff members get a session cookie when they sign in to the administration area.

3. Applying for a job

If you apply through the form on a job page we process your name, e-mail address, phone number, LinkedIn address, your message and your CV in order to handle the application (Art. 6 (1) (b) GDPR).

Who receives it. Your application goes to our recruiters – not automatically to the employer. This is stated above every application form. Where we recruit on behalf of the employer we present your application to that employer. For jobs we list from public sources we contact you first and only introduce you to an employer with your agreement; the original posting is always linked if you prefer to apply there directly.

How long. Applications are deleted 180 days after the process has ended. If you ticked "keep my details for other suitable roles" we keep them for up to 730 days (Art. 6 (1) (a) GDPR); you can withdraw this consent at any time.

4. Talent pool profile

When you create a profile we store two separate records: an anonymised profile (role, industries, experience, achievements, languages, preferences) and your contact record (name, e-mail, phone, LinkedIn, current employer, CV). Legal basis is your consent (Art. 6 (1) (a) GDPR), given separately for storing the data and for showing the anonymised profile publicly.

• The public profile never contains your name, contact details or employer, and a recruiter checks it before it goes live. Profiles are excluded from search engines.
• Your identity is only released to an employer after you have agreed to that specific introduction.
• We confirm your e-mail address with a link (double opt-in). Sign-ups that are never confirmed are deleted after 14 days.
• Profiles without any activity for 730 days are hidden until you confirm that you are still interested.
• You can have your profile changed or deleted at any time – a short message from the address you signed up with is enough.

5. Employers, introductions and coaching requests

If you contact us through the employer form, the "introduce me to this candidate" form or the coaching form, we process the details you enter to answer your request and to prepare a contract (Art. 6 (1) (b) and (f) GDPR). Inquiries are deleted after 365 days unless a contract results, in which case commercial retention periods apply.

6. E-mail

We send confirmations and notifications through the e-mail service Resend (Resend Inc., USA), which acts as our processor. Transfers to the USA are based on the EU–US Data Privacy Framework or standard contractual clauses. Copies of sent messages are kept in our system for 90 days.

7. Protection against abuse and malware

Forms are protected against automated submissions. Where enabled, this is done with Cloudflare Turnstile (Cloudflare Inc., USA), which processes technical data of your browser to tell people from bots (Art. 6 (1) (f) GDPR). Uploaded files are checked for malware on our own servers before anyone opens them.

8. Analytics

We only measure visits with Google Analytics (Google Ireland Ltd.) if you allow it in the cookie banner (Art. 6 (1) (a) GDPR and Art. 5 (3) of the ePrivacy Directive as implemented in your country). Without your consent no analytics script is loaded. You can change your choice at any time via "Cookie settings" in the footer.

9. Access inside our company

Only recruiters and administrators can see personal data, after signing in with two-factor authentication. Every access to a CV or contact record is logged; these logs are kept for 1095 days.

10. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and the right to object to processing based on legitimate interests (Art. 21). Consent can be withdrawn at any time with effect for the future. Write to [privacy contact e-mail address]. You may also lodge a complaint with a supervisory authority, in particular the Office of the Commissioner for Personal Data Protection, Cyprus (dataprotection.gov.cy).

11. Changes

We update this policy when the service or the law changes. Version: 2026-09-20 (draft).