Data Protection Notice

Protect your information by reporting any suspicious activity or unauthorized use. Together, we ensure a secure and trusted experience for all.

New Update

This notice on data protection outlines how we handle personal data collected during your visits to our website, through the delivery of our services, and from individuals employed by companies we engage with or plan to engage with.

We have recently revised our privacy notice to provide clearer insights into how we process your personal information. For reference, the previous version of the privacy notice is also available for consultation.

Last updated: Jan 27, 2026

Introduction

At MatchaTalent, your privacy and the security of your personal data are our top priorities. We are committed to processing all personal information entrusted to us in compliance with applicable data protection laws.

This notice provides details about who we are, the purposes for which we use your personal data, how we process and protect it, to whom it may be disclosed (such as MatchaTalent’s service providers or partners), where it may be transferred or accessed, and your rights regarding your data.

About Matcha Talent

MatchaTalent (referred to in this notice as “we,” “us,” or “MatchaTalent”) will process your personal data in accordance with this data protection notice (such personal data sometimes also referred to as “information”).

Except as otherwise specified below, MatchaTalent is the controller of the personal data (‘controller’ within the meaning of applicable data protection legislation).

For the efficient operation and management of our business, MatchaTalent and its affiliated companies may, in certain instances, jointly define the purposes and means of processing personal data (joint controllers). Examples of processing activities where MatchaTalent and its affiliates jointly process personal data include managing our Misconduct Reporting Procedure and conducting sanctions checks, which we do jointly with MatchaTalent’s local operating entities. Please contact us (see the “Contact Us” section below) if you wish to know more about these jointly-controlled processing activities, receive a summary of the joint controllers’ roles and responsibilities, or exercise your data protection rights regarding any jointly-controlled processing of your personal data.

Website Visitor

When you visit the MatchaTalent website or use our online services, we may collect certain information about your device, browser, and how you interact with our content. This information may be gathered using cookies.

What Are Cookies?

Cookies are small text files stored on your device when you visit our website. They enable the website to remember your preferences (e.g., language selection) and recognize you on subsequent visits. Cookies help us analyze trends, understand your interests, improve site navigation, and enhance your overall experience.

What Personal Data Do We Collect?

When you interact with our website, we collect data related to your device, browser, and activity on our site, including:

  • Your device’s Internet Protocol (IP) address

  • The IP address of your Internet Service Provider

  • Device screen resolution

  • Device type (including unique identifiers)

  • Browser and operating system versions

  • Geographic location (country)

  • Preferred language

  • Date and time of website access

  • Referring URL or internet address

  • Sections and pages visited

  • Hyperlinks clicked

  • Content downloaded or uploaded

If you choose to download reports, subscribe to newsletters, or submit inquiries, we may also collect personal details such as your name, email address, job title, and company. This data allows us to connect website activity to you and tailor our services.

Why Do We Need Your Personal Data?

We process your personal data for the following purposes:

  1. Website Management and System Administration

    • Diagnose technical issues and analyze website traffic.

    • Based on our legitimate interest in managing our website, marketing, and communication strategies, or with your consent where legally required.

  2. Web Analytics

    • Improve user experience, monitor visitor engagement, and optimize the quality of our content (e.g., job postings).

    • Processing is based on our legitimate interest in enhancing our website or with your consent where applicable law requires.

  3. Content Delivery and Communications

    • If you download reports, subscribe to newsletters, or request information, we use your data to fulfill these requests and communicate with you.

    • You can opt out of communications at any time.

  4. Inquiry Management

    • Address specific inquiries and improve our website, marketing, and communication strategies.

    • Based on our legitimate interest or your consent, depending on legal requirements.

  5. Legal Compliance and Dispute Resolution

    • Cooperate with law enforcement, handle legal claims, or address reports of misconduct.

    • Processing is necessary for our legitimate interest in protecting company assets and managing legal matters.

  6. IT Support and Security

    • Safeguard assets and ensure information system security.

    • Based on our legitimate interests.

Additional Processing

We may process your data for compatible purposes related to those listed above. Any unrelated processing will occur only if required by applicable law.

Your Consent and Choices
Where consent is required, you have the option to provide or withdraw it. If you have any questions about how your data is processed or wish to exercise your rights, please contact us.

Candidates

We use your personal data for recruiting and selecting candidates for internal job opportunities at MatchaTalent. Our goal is to provide a seamless, transparent, and engaging talent experience that aligns with our vision of empowering careers and delivering on our commitment to professionalism, integrity, and guidance.

What Personal Data Do We Collect About You?

As a candidate, MatchaTalent may collect and process the following personal data:

  • Identification Information: Your name, contact details (e.g., address, phone number, email), citizenship, date of birth, and languages spoken. In some cases, gender may also be processed.

  • CV/Resume and Recruitment Details: Information about your work history, skills, experience, educational background, and relevant materials such as photographs, interview notes, and cover letters.

  • Compensation and Benefits Information: Details about your current salary, bonuses, and other benefits.

  • Government-Issued Identifiers: Where legally required, we may collect data such as your national ID number, social security number, or tax identification number.

  • Photographs and Video Footage: Images or videos captured during recruitment-related events, conferences, or meetings.

  • Visitor Information: If you access MatchaTalent facilities, we may collect your name, contact information, vehicle registration details, and other data for security purposes. Health information may also be collected when required by health and safety regulations.

  • Additional Information You Share: Any other personal data you voluntarily provide to us.

This data may be collected directly from you or indirectly through third parties. When data is obtained indirectly, we will inform you of its purpose and source unless doing so would involve disproportionate effort, in which case alternative measures will be implemented to protect your rights.

Why Do We Need Your Personal Data?

MatchaTalent processes your personal data for the following purposes:

  1. Recruitment and Selection:
    To evaluate and match candidates to internal roles, facilitate interviews and assessments, and introduce candidates to hiring managers. This processing is based on contractual necessity.

  2. Training and System Improvement:
    To enhance our systems using aggregated data for statistical purposes and to train machine learning technologies. Legitimate interests include ensuring reliable systems and providing opt-out options where possible.

  3. Dispute Resolution and Legal Compliance:
    To manage disputes, address misconduct reports, and comply with labor, tax, and social security laws, including diversity and equal opportunity obligations.

  4. Community Engagement and Events:
    To maintain relationships with candidates and promote MatchaTalent services through event invitations, based on legitimate interests.

  5. Facilities and Security:
    To protect our physical and digital assets, ensure the safety of employees and candidates, and plan for contingencies.

  6. Corporate Transactions:
    To facilitate business growth through mergers, acquisitions, or divestitures.

  7. Marketing and Communications:
    If you subscribe to our newsletters or download materials, we use your data to deliver content, communicate relevant updates, and improve our marketing strategies. You can opt out of these communications at any time.

  8. IT Support:
    To safeguard our systems and ensure they remain secure and efficient, as part of our legitimate interests.

Data Retention

MatchaTalent retains your personal data for up to two years after your last interaction with us to support ongoing services.

If you have any questions or wish to exercise your data protection rights, please contact us.

Business Relations

In providing our services, MatchaTalent processes personal data of individuals working for companies we collaborate with or intend to partner with. This includes using personal data to facilitate business relationships and offer services.

What Personal Data Do We Collect About You?

MatchaTalent may process the following personal data:

  • Identification Information: Your name, contact details (email address, phone numbers), gender, digital signature, and languages spoken.

  • Professional Information: Your job title, location, and department within your organization.

  • Photographs and Videos: Media captured during events, meetings, or conferences.

  • Survey Responses: Answers provided in surveys or feedback forms.

  • Visitor Information: Data collected when you visit our premises, such as name, contact details, car registration number, and identification for security purposes. Health information may also be requested for health and safety compliance where legally permissible.

  • Information You Share: Any additional details you choose to provide.

  • Trade Sanctions Information: Verification to ensure compliance with applicable laws, such as checking whether you are a politically exposed person or subject to sanctions.

Why Do We Need Your Personal Data?

MatchaTalent processes personal data for the following purposes:

  1. Contract Management: To administer and manage contractual relationships with clients and suppliers, based on contractual necessity.

  2. Business Development and Marketing: To send offers and marketing communications, either based on consent or legitimate interests in maintaining strong business relationships. You can opt out of such communications at any time.

  3. Facilities, Security, and Contingency Planning: To safeguard our assets, facilities, information systems, and people, based on legitimate interests.

  4. Health and Safety: To comply with health and safety regulations and protect the well-being of employees and visitors, including in emergencies or disputes.

  5. Corporate Transactions: To support mergers, acquisitions, or divestments in line with our legitimate business interests.

  6. Events: To organize events that foster relationships with clients and suppliers, based on legitimate interests.

  7. Fraud Prevention and Investigation: To prevent, detect, and address fraud, comply with legal obligations, and protect company assets and legal interests.

  8. IT Support and Security: To ensure the security and proper functioning of our systems, based on legitimate interests.

  9. Surveys: To gather client feedback and improve services, based on legitimate interests.

  10. Dispute Management: To handle legal claims, disputes, or reports of misconduct, protecting company assets and legal interests.

  11. Compliance: To meet legal and regulatory obligations, such as tax or data retention requirements.

  12. Policy Enforcement: To monitor and ensure compliance with MatchaTalent policies, safeguarding company assets and information security.

  13. Audits: To perform internal and external audits, ensuring accurate financial reporting and effective business practices.

How Long Do We Keep Your Personal Data?

We retain personal data for up to 7 years, or as required by legal obligations or local regulations. If data is needed to resolve disputes or comply with legal or regulatory requirements, it will be retained until the matter is resolved or the obligation is fulfilled.

For any questions or to exercise your data protection rights, please contact us.

HR Technologies

At MatchaTalent, our mission is to empower individuals and organizations to reach their full potential. To achieve this, we combine our passion for people with cutting-edge HR technologies, which help streamline and enhance various recruitment processes.

By HR technologies, we mean tools that digitize and improve recruitment workflows. These tools enable us to connect candidates with our recruitment teams more efficiently, helping them explore suitable roles while ensuring internal teams receive the right talent faster. Furthermore, HR technologies allow us to match candidates not only based on qualifications but also their aspirations and interests.

Enhancing the Internal Recruitment Experience

HR technologies broaden the pool of talent we can explore, allowing us to identify the best candidates with relevant skills for our internal needs. This enables our team to focus on uniquely human tasks such as creative problem-solving and building emotional connections—traits that technology cannot replicate.

Enhancing the Client Experience

These technologies also allow us to search through a diverse range of candidates, ensuring we find the most qualified individuals for our clients. By automating certain tasks, our consultants can dedicate more time to creative, empathetic, and personalized interactions with clients and candidates.

Web Beacons

Our emails may include a campaign-specific “web beacon pixel,” which helps us track whether emails are opened and links are clicked. This data allows us to identify which emails are engaging, query whether recipients still wish to receive them, and provide advertisers with aggregate click-through information. The pixel is removed when you delete the email. If you prefer not to download the pixel, opt to receive plain text emails instead of HTML.

Ethical Use of HR Technologies

At MatchaTalent, we are committed to the responsible and ethical use of HR technologies to create more meaningful, personal, and relevant interactions between our team and candidates. These tools are not intended to replace human involvement but to enhance it.

When decisions significantly impacting candidates are made, we ensure human oversight is involved. In rare cases where fully automated processes are used, they are implemented only when legally permissible and after prior notification to candidates.

Ensuring Fairness and Avoiding Bias

To treat all candidates fairly, we take proactive steps to eliminate bias in our HR technologies:

  • Regular Testing: We frequently test the outputs generated by our tools to identify and address any potential biases.

  • Expert Guidance: We collaborate with experts to continuously refine our processes and minimize bias.

  • Integrated Human and AI Efforts: Our consultants work closely with our search and match algorithms, ensuring that technology complements human expertise.

At MatchaTalent, technology empowers us to focus on what matters most connecting people with opportunities in a thoughtful, unbiased, and impactful way.

With Whom do We Share Your Personal Data

MatchaTalent may share your personal data under the following circumstances:

  1. With MatchaTalent Group Companies
    As part of a multinational organization, we may share personal data with other MatchaTalent entities for efficient business management, compliance with legal and regulatory obligations, and to deliver our services, including talent matching, to you and our clients.

  2. With Clients
    In the course of providing our recruitment and talent placement services, we may share your data with clients.

  3. With Third-Party HR Service Providers
    This includes payroll service providers and other HR-related service providers assisting us in delivering our services.

  4. With IT Service Providers
    Personal data may be shared with third-party providers that support our IT infrastructure, such as those managing cloud-based databases and software.

  5. With Marketing Service Providers
    For marketing activities, we may store personal data in cloud-based CRM systems or share it with event organizers to invite you to events.

  6. With Professional Service Providers
    Personal data may be shared with auditors, tax advisors, and legal consultants to ensure compliance and proper business operations.

  7. With Banks and Insurers
    To process payments, such as salaries for temporary workers, we share necessary personal data with banks.

  8. With Pension Funds
    Where applicable, personal data may be disclosed to manage pension contributions.

  9. With Public Authorities
    In compliance with laws and regulations, we may disclose personal data to tax authorities or social security agencies.

  10. With Law Enforcement and Regulatory Authorities
    Personal data may be disclosed to courts, police, or regulatory bodies during investigations or legal proceedings.

Disclosure in Business Transactions

  • Business Sales or Acquisitions: In the event of a business sale or acquisition, personal data may be shared with prospective buyers or sellers.

  • Asset Transfers: If MatchaTalent’s assets are acquired by a third party, personal data may be part of the transferred assets.

International Data Transfers

When sharing personal data, it may be transferred within or outside the European Economic Area (EEA). In such cases, we ensure:

  • Adequate Protection: Data is transferred to countries with laws providing an adequate level of data protection (e.g., countries approved by the European Commission).

  • Standard Data Protection Clauses: Transfers may be governed by standard contractual clauses approved by the European Commission.

  • Appropriate Safeguards: Other safeguards under Article 46 of the EU General Data Protection Regulation (GDPR) may also be applied.

For example, data may be transferred from the EEA to countries such as the United States, with appropriate measures in place to protect your information.

Further Information

For more details about how we safeguard your personal data during international transfers, please refer to the “Contact Us” section to get in touch.

How We Will Protect Your Personal Data

MatchaTalent has implemented technical and organizational security measures to safeguard your personal data from accidental loss, unauthorized use, alteration, destruction, or access. Access to your personal data is restricted to individuals who have a legitimate business need, and all personnel processing personal data adhere to MatchaTalent’s policies on information security, IT security, data protection, and other relevant internal guidelines.

While we are committed to protecting your personal data, it is important to recognize that absolute security cannot be guaranteed. To address this, we have robust procedures in place to manage data security incidents and to ensure compliance with legal requirements for detecting, managing, and reporting personal data breaches.

Your Data Protection Rights

As a valued client or candidate of MatchaTalent, you have the following rights concerning your personal data:

  1. Right to Be Informed
    You are entitled to clear and transparent information about how we use your personal data and your rights. This notice provides the relevant details.

  2. Right of Access
    You have the right to request access to the personal data we hold about you. This ensures you are aware of the data we process and allows you to verify compliance with applicable data protection laws.

  3. Right to Rectification
    If your personal data is incomplete or inaccurate, you can request corrections to ensure it is up to date and accurate.

  4. Right to Erasure (Right to Be Forgotten)
    You can request the deletion of your personal data when there is no valid reason for us to retain it. Note that this right is subject to exceptions.

  5. Right to Restrict Processing
    In specific circumstances, you can request that we limit the use of your personal data. While processing is restricted, we may store your data but cannot use it further.

  6. Right to Data Portability
    You have the right to obtain your personal data in a structured, commonly used, and machine-readable format. In some cases, you may also request that we transfer this data directly to another organization.

  7. Right to Object to Processing
    You can object to certain types of processing in specific situations, such as processing based on our legitimate interests or for direct marketing purposes.

  8. Right to Withdraw Consent
    If we process your data based on your consent, you can withdraw that consent at any time, including for activities like voluntary surveys.

  9. Right to Object to Automated Decision-Making
    You have the right not to be subject to decisions made solely through automated processing that significantly affect you. Exceptions include situations where automated processing is necessary to fulfill a contract and safeguards are in place to protect your rights.

How to Exercise Your Rights

To exercise your rights, please contact MatchaTalent’s Data Protection Officer via the contact details provided on our website. You may also send a written request to:

 

MatchaTalent Data Protection Officer
Centennial Tower, Jalan Gatot Subroto, Karet Semanggi, South Jakarta City, Jakarta, Indonesia

We will handle your request with care and may ask for proof of identity to ensure your data is not shared with anyone else. While some requests may take time due to legal or technical constraints, we will inform you of the actions taken within one month.

We are committed to ensuring your data protection rights are respected and will work diligently to address your concerns.

Changes to This Data Protection Notice

We may revise this notice periodically. The date of the most recent update is indicated below. We encourage you to check this notice regularly to stay informed about any changes.

Interested? Get in touch with us.

Send Whatsapp

Send Email

Follow

Quick Links

Role Aspiration

Seeking for role aspiration? Maps your career ahead here.

HR Services

Looking to hire? Get all the details here.

Become Partner

Wanna be our Partner? Elevate your HR practice here. 

Contact us

PT Talenta Eksekutif Asia
Centennial Tower, Level 29, Unit D-E, Kav. 24-25
South Jakarta, Indonesia 12950

Member of

© 2025 MatchaTalent. All rights reserved.