Legal Information

Privacy Policy

SalesBrothers Connect s.r.o. — Elqorian | As of: August 2026

Disclaimer: These notices describe the current Elqorian pilot operation. They are not a substitute for individual legal advice; the final version should be reviewed by specialist counsel before a broad public rollout.

1. Controller and Data Protection Contact

SalesBrothers Connect s.r.o.

Varšavská 715/36, Vinohrady (Prague 2), 120 00 Praha 2, Czech Republic

Represented by: Enrico Donat (Managing Director) | IČO: 236 68 881 | DIČ: pending

General email: info@salesbrothers-connect.com

Data protection: privacy@salesbrothers-connect.com

For data protection inquiries, please contact privacy@salesbrothers-connect.com.

2. Purposes and Legal Bases for Processing

Purpose	Data Categories	Legal Basis	Retention Period
Assessment (Candidates)	Name, email, answers, scores, timestamps	Art. 6(1)(a) GDPR (Consent)	12 months after completion
Video pitch processing	Video recording, transcript, AI draft	Art. 6(1)(a) GDPR	90 days after upload, then auto-deleted
Transfer to client company	Evaluation PDF, score data	Art. 6(1)(a) GDPR	Per client's own privacy policy
B2B contract processing	Contact data, access codes, invoices	Art. 6(1)(b)+(c) GDPR	10 years (§ 147 AO analogy)
Newsletter / notifications	Email address	Art. 6(1)(a) GDPR	Until withdrawal

3. AI-Based Processing (EU AI Act / Art. 22 GDPR)

3.1 The assessment uses a rule-based scoring system and, optionally, Google Gemini to generate an AI draft for video pitch reviews.

3.2 Depending on the specific intended use, AI functionality in employment and recruiting contexts may be subject to additional requirements under the EU AI Act. Elqorian is designed as decision support: AI-generated content is not used as the sole basis for hiring or personnel decisions and human review remains required.

3.3 AI drafts are based exclusively on the text transcript. No inference from facial expressions, voice, body language, or biometric characteristics.

3.4 Candidates have the right to receive an explanation of the key scoring factors (Art. 13(2)(f) GDPR).

4. Recipients and Third-Country Transfers

4.1 Internal recipients: Only authorized staff with a need to access the data.

4.2 External data processors (Art. 28 GDPR):

Base44 Ltd. (Israel) — Hosting/infrastructure. DPA concluded. Transfer basis: EU adequacy decision for Israel.
Google LLC (USA) — Gemini API (video AI draft only, optional). Transfer basis: Standard Contractual Clauses (SCCs, Art. 46 GDPR).

4.3 The client company receives the evaluation as an independent controller. No third parties receive data without separate consent.

5. Data Subject Rights (Art. 15–22 GDPR)

✓Access (Art. 15): What data do we process about you?
✓Rectification (Art. 16): Correction of inaccurate data
✓Erasure (Art. 17): "Right to be forgotten"
✓Restriction (Art. 18): Restrict processing instead of erasing
✓Data portability (Art. 20): Export in machine-readable format
✓Objection (Art. 21): Against processing based on legitimate interests
✓Withdrawal (Art. 7(3)): Consent can be withdrawn at any time — without disadvantage to the ongoing assessment
✓Complaint: To ÚOOÚ (Czech Data Protection Authority), www.uoou.cz

Requests to: privacy@salesbrothers-connect.com — Response within 30 days.

6. Data Security

Technical (TOMs per Art. 32 GDPR)

• SSL/TLS encryption (in transit)
• Encrypted data storage (at rest)
• Role-based access controls (RBAC)
• Base44 infrastructure: SOC 2 Type II + ISO 27001
• Automatic video deletion after 90 days

Organizational

• DPA with all data processors
• DPIA for video/AI processing
• Documented deletion concept and retention periods
• Breach notification obligations (Art. 33/34 GDPR)

As of: August 2026 | Elqorian is a product of SalesBrothers Connect s.r.o. | Pilot version

🍪 Cookies & Datenschutz

Wir nutzen LocalStorage, um Ihre Test-Ergebnisse zu speichern und die Funktionalität der App zu gewährleisten. Keine Tracking-Cookies von Drittanbietern. Ihre Daten bleiben lokal auf Ihrem Gerät gespeichert, bis Sie sie aktiv teilen.

DSGVO-konform • Keine Weitergabe an Dritte