Your rights, clearly stated.

What is GDPR

The General Data Protection Regulation (GDPR) is a European Union law that gives individuals control over their personal data and requires organisations to handle that data responsibly and transparently.

As a company operating in Finland and processing the data of EU residents, Norva Talent is required to comply with GDPR. We take this seriously, not as a legal obligation alone, but because transparency about data is a core part of how we operate.

Your rights under GDPR

Every person whose data we process has the following rights. These rights are free to exercise and we will respond within 30 days.

• Right of access: you can ask us what data we hold about you and receive a copy of it
• Right to rectification: you can ask us to correct inaccurate or incomplete information
• Right to erasure: you can ask us to delete all data we hold about you
• Right to portability: you can ask for your data in a structured, machine-readable format
• Right to restriction: you can ask us to pause processing while a concern is resolved
• Right to object: you can object to processing based on legitimate interest
• Right to withdraw consent: you can withdraw consent at any time without affecting prior processing

How to exercise your rights

Email us at privacy@norvatalent.com with your request. Please include enough information to identify your data (your email address is sufficient).

We will acknowledge your request within 5 working days and respond fully within 30 days. If your request is complex, we may extend this to 60 days and will notify you if this is the case.

We do not charge a fee for exercising your rights unless a request is clearly unfounded or excessive.

What data we may hold about you

Depending on how you have interacted with Norva Talent, we may hold:

• Your email address (used for communication and authentication)
• Your responses to the Norva assessment questionnaire
• Your derived spectrum scores from that questionnaire
• The date and time your consent was recorded
• Anonymised salary range preference (stored in aggregate, not linked to you individually)

Requesting deletion of your data

To request deletion of all data we hold about you, email privacy@norvatalent.com with the subject line "Data deletion request" and the email address you used to apply or register.

We will confirm deletion within 30 days and send you a written confirmation (reference format: NV-DEL-YYYY-NNN).

Note: we are required by law to retain a record that a deletion was requested and completed for 5 years. This record contains only the fact of deletion, not your personal data.

Contact and complaints

For all data-related enquiries: privacy@norvatalent.com

If you are not satisfied with our response, you have the right to lodge a complaint with the Finnish Data Protection Ombudsman: