Skip to content
Human Talent Luxembourg

Privacy policy

Last updated: 16 October 2026

Human Talent Luxembourg attaches great importance to the protection of your personal data. This policy explains what data we collect, why, how long we keep it and how to exercise your rights, in accordance with Regulation (EU) 2016/679 (GDPR) and the Luxembourg law of 1 August 2018 on the organisation of the National Commission for Data Protection and the general data protection framework.

1. Data controller

Human Talent Luxembourg SARL-S
21, rue du Puits Romain, L-8070 Bertrange, Luxembourg
RCS Luxembourg B286791
Represented by Sabah Seguer, managing director
Contact: contact@humantalent.lu, +352 661 226 448

2. Data collected, purposes and legal bases

Candidates

  • Data: identity, contact details, profession, country of residence, languages spoken, CV, cover letter, career history, exchanges and interview notes.
  • Source: yourself (“I'm a candidate” form, e-mail), a facility recruiting as part of an assignment, or your public professional profile (LinkedIn, for example) when we contact you about a position.
  • Purposes: reviewing your application, supporting you through the recruitment process, introducing you to recruiting facilities and offering you other positions that match your profile.
  • Legal bases: steps taken with a view to recruitment (Art. 6(1)(b)); our legitimate interest in being able to contact you again when a position matches your profile, as healthcare recruitment often takes place over time (Art. 6(1)(f)); your consent to your application being shared with an employer (Art. 6(1)(a)).
  • No application is ever shared with a recruiting facility without your prior consent, for a specific position.
  • Assessment tests: some candidates are offered a behavioural assessment test, carried out only with their consent, obtained at the time of the test.
  • Without a CV or contact details, we cannot review your application.

Professionals trained abroad (“Authorisation to practise” form)

  • Data: identity, contact details, profession, country where your diploma was obtained and the content of your message.
  • Purposes: reviewing your situation and presenting our support for the recognition of your diploma and the authorisation to practise.
  • Legal basis: pre-contractual measures taken at your request (Art. 6(1)(b)).
  • If you then entrust us with your file, the necessary documents are requested under the support contract, which specifies how they are processed. No identity document or diploma is requested through the website.

Healthcare facilities, clients and prospects

  • Data: name, facility, position held, professional contact details, position to fill or need expressed, and exchanges (“I'm hiring” form, e-mail, telephone).
  • Purposes: responding to a request for recruitment, HR consulting, an audit or training, preparing a proposal, carrying out the assignment, invoicing and presenting our services to you.
  • Legal bases: pre-contractual measures and performance of the contract (Art. 6(1)(b)); accounting obligations (Art. 6(1)(c)); our legitimate interest in making our services known to professionals in the sector (Art. 6(1)(f)).

Training participants

  • Data: identity, position, facility, contact details and attendance.
  • Purposes: organising the training and issuing certificates.
  • Legal basis: performance of the contract (Art. 6(1)(b)).

Website statistics

  • Data: browsing data collected by cookies, only with your consent (see section 6).
  • Purpose: measuring the website's audience and the effectiveness of its pages.
  • Legal basis: your consent (Art. 6(1)(a)).

Website security

  • Data: IP address and technical connection data, recorded by the website host.
  • Purpose: ensuring the security and proper functioning of the website.
  • Legal basis: our legitimate interest in protecting the website (Art. 6(1)(f)).

We do not collect criminal record extracts or health data. When an employer requires these documents, it requests them directly from the candidate.

3. Retention periods

DataPeriod
Application in progressDuration of the recruitment process
Unsuccessful candidate2 years maximum from the last contact, unless you object
Candidate hired by a clientDuration of the guarantee period, then 2 years from the last contact
Prospects3 years from the last contact
ClientsDuration of the relationship, then 3 years
Training participantsDuration of the training, then 3 years
Contracts, invoices and accounting records10 years
“Authorisation to practise” request not followed up1 year from the last exchange
Authorisation to practise support fileDuration of the support (details in the contract)
“I'm hiring” request not followed upTreated as a prospect: 3 years from the last contact
Proof of handling a request to exercise rights3 years
Server technical logsLimited period set by the host, for security purposes

At the end of these periods, the data is deleted.

4. Recipients

Your data is processed by the Human Talent Luxembourg team, within the limits of its assignments. It may be shared:

  • with your consent, with facilities recruiting for a specific position;
  • for authorisation to practise files you entrust to us, with the competent Luxembourg authorities;
  • with our technical service providers (website hosting and maintenance, e-mail, application management, assessment tests), who act solely on our instructions and are bound by confidentiality.

Some of these providers are located outside the European Union. These transfers are governed by the safeguards provided for by the GDPR: an adequacy decision of the European Commission, in particular the EU-US Data Privacy Framework, or standard contractual clauses. You can obtain information about these safeguards by writing to contact@humantalent.lu.

Your data is never sold or rented.

5. Your rights

You may at any time request access to your data, its rectification or erasure, the restriction of its processing or its portability, and withdraw your consent, without affecting processing already carried out.

Right to object: you may at any time object to the retention of your CV and to receiving our professional communications, without having to give reasons, by simple e-mail to contact@humantalent.lu.

To exercise your rights, write to contact@humantalent.lu. We reply within one month of receiving your request. This period may be extended by two months if the request is complex, in which case you will be informed within the first month. If your application has been shared with an employer, we inform it of your erasure request.

No decision concerning you is taken in a fully automated way. Every application is reviewed by a person.

You may lodge a complaint with the National Commission for Data Protection (CNPD), 15, boulevard du Jazz, L-4370 Belvaux, cnpd.public.lu.

6. Cookies

The website only uses technical cookies, strictly necessary for its operation, which do not require your consent.

7. Security

We protect your data with appropriate measures: secure connection, access limited to authorised persons only and a confidentiality commitment.

8. Changes

This policy may be updated. The date of the last update appears at the top of this page.