Recruiting software,built from DACH for DACH.
Talentwunder GmbH is based in Berlin, bound by GDPR, and works with an external data protection officer. GDPR is not an add-on for us. It's the precondition.
Berlin GmbH · External DPO (SECUWING) · GDPR by default · 100% DACH focus
What does GDPR-compliant recruiting software mean?
GDPR-compliant recruiting software processes candidate data on a clear legal basis, with traceable retention periods, a deletion concept, data subject rights, and a data processing agreement (DPA). Talentwunder is bound by GDPR as a German GmbH, works with an external data protection officer, and provides a model DPA before any contract is signed.
GDPR is the floor, not the ceiling. We treat it that way.
Four pillars of our data protection setup
What you get today. And what we deliver transparently on request.
- 01
German GmbH
Talentwunder GmbH, registered in Berlin. Fully bound by GDPR, no Schrems-II discussion about US parents.
- 02
External data protection officer
SECUWING GmbH & Co. KG, named in the imprint. The escalation path for data subject rights is clearly documented.
- 03
GDPR by default
Records of processing, deletion concept, role and permission model are part of our architecture. Not a patch added later.
- 04
Available on request
Model DPA, technical and organisational measures (TOM), and detailed hosting information are provided before any contract is signed.
Hosting, encryption and the technical measures are set out on the Trust page. We do not currently claim SOC 2 Type II or ISO 27001.
Common questions for this page
The most relevant answers at a glance. The full catalogue lives in the FAQ.
- Yes. Talentwunder GmbH is based in Berlin, works with an external data protection officer (SECUWING GmbH & Co. KG) and is built to enable GDPR-compliant sourcing. Talentwunder plays two different roles depending on the stage of processing. We act as an independent controller when we build and maintain our database of publicly sourced candidate profiles. When a client selects a profile, adds notes or ratings, or initiates contact, the client acts as controller for that specific recruiting activity, and Talentwunder processes the resulting data on the client's instruction under a data processing agreement.
- The application and Keycloak run on AWS in Frankfurt. PostgreSQL, MongoDB and Elasticsearch run on dedicated Hetzner servers in Germany. Backups sit in Hetzner Object Storage in Germany, uploads in Amazon S3 Frankfurt. CloudFront may use edge locations in Europe and North America.
- Talentwunder does not currently claim SOC 2 or ISO 27001 certification.
- Yes. We provide a template DPA before contract close and sign one by default with every customer. The DPA covers the customer-specific layer: notes, ratings, status, projects and customer-initiated contact actions. Talentwunder is the controller for building and maintaining the candidate-profile database.