We collect as little as possible, store it securely, and give you full control over it.
Norva Talent is a recruitment service operating in Finland. We connect international professionals with English-speaking companies through a structured, question-based assessment process.
| Detail | Information |
|---|---|
| Company name | Norva Talent (Toiminimi) |
| Data controller | Mike Verwoerd, Founder |
| Privacy contact | privacy@norvatalent.com |
| Website | norvatalent.com |
| Location | Espoo, Finland |
| Supervisory authority | Finnish Data Protection Ombudsman (tietosuoja.fi) |
We collect only the minimum data necessary to provide our recruitment service. Version 1.1, effective from company registration.
| Data type | Purpose | Legal basis | Retention |
|---|---|---|---|
| Email address | Contact and authentication | Consent (Art. 6.1a GDPR) | Until deletion request or 24 months inactivity |
| Questionnaire answers | Candidate assessment and matching | Consent (Art. 6.1a GDPR) | 12 months active, deleted at 24 months |
| Spectrum scores | Role matching and talent pool | Consent (Art. 6.1a GDPR) | Same as questionnaire answers |
| Role application details | Processing specific job applications | Consent + Legitimate interest | 6 months after application closes |
| Anonymous salary range | Market intelligence, never linked to an individual | Legitimate interest (Art. 6.1f) | Anonymised permanently |
| Consent timestamp | Proof of consent given | Legal obligation (Art. 7 GDPR) | 5 years |
What we do not collect: CVs are not stored on our systems. No names, phone numbers, addresses, demographic data, or photos are stored beyond what candidates explicitly provide in questionnaire answers.
We do not sell your data. We do not share your data with third parties outside of the active recruitment process. We do not use your data for advertising.
All candidate data is stored in encrypted cloud infrastructure. We use Microsoft 365 (Outlook and OneDrive for Business) for email and document storage, which operates under Microsoft's GDPR-compliant data processing agreement applicable to all European customers.
To exercise any of these rights, contact us at privacy@norvatalent.com. We will respond within 30 days.
| Right | What it means |
|---|---|
| Access | Request a copy of all data we hold about you |
| Rectification | Ask us to correct inaccurate or incomplete data |
| Erasure | Ask us to delete all your data. We confirm deletion within 30 days. |
| Portability | Receive your data in a structured, machine-readable format (JSON or CSV) |
| Restriction | Ask us to stop processing your data while a dispute is resolved |
| Object | Object to processing based on legitimate interest |
| Withdraw consent | Withdraw consent at any time. Does not affect prior processing. |
If you believe we have handled your data incorrectly, you have the right to lodge a complaint with the Finnish Data Protection Ombudsman: tietosuoja.fi
| Data type | Retention period | What happens after |
|---|---|---|
| Active application data | 6 months after application closes | Permanently deleted |
| Talent pool profile (opted in) | 24 months from last activity | Profile deleted, email removed |
| Consent records | 5 years | Archived then deleted |
| Anonymous salary range data | Indefinite (fully anonymised) | No individual deletion applicable |
| Email correspondence | 2 years | Permanently deleted |
Candidates in the talent pool receive a re-confirmation request at 18 months. If no response, the profile is archived. At 24 months of inactivity all personal data is permanently deleted.
| Service | Purpose | Data processed |
|---|---|---|
| Microsoft 365 | Email, document and data storage | Email addresses, documents, questionnaire data (under Microsoft DPA) |
| Supabase | Assessment response database | Questionnaire answers, scores, timestamps (EU data residency) |
| Domainhotelli.fi | Website hosting | Website access logs only |
norvatalent.com uses minimal cookies necessary for basic website function, specifically a single cookie to remember your light/dark theme preference. No advertising cookies, tracking pixels, or third-party analytics scripts are used. If this changes, this policy will be updated and visitors will be informed.
When we make significant changes, we will notify affected individuals by email at least 14 days before the changes take effect. The latest version is always available at norvatalent.com/privacy.html.