1. Data controller
TalentPath operates this platform at talentpath.eu. For data enquiries, contact us at: info@talentpath.eu.
2. What we collect
We collect the following personal data: • Assessment participants: first name, last name, email address, and assessment responses (scores, domain results, timestamps). • B2B organisation users: organisation name, country, VAT number (optional), and admin email address. • Usage data: page visits, assessment start/completion events. We use Plausible Analytics, which is cookieless and GDPR-compliant by default. We do not collect payment card details directly — payments are processed by Stripe under their own privacy policy.
3. Why we collect it (legal basis)
• To deliver the assessment service and issue certificates: performance of a contract (GDPR Art. 6(1)(b)). • To send assessment result emails: performance of a contract. • To operate the B2B compliance dashboard: performance of a contract. • To maintain aggregate analytics for platform improvement: legitimate interest (GDPR Art. 6(1)(f)). We do not use your data for advertising, profiling, or automated decision-making with legal effects.
4. How long we keep your data
• Assessment results and certificates: 2 years from the date of issue, then deleted. • B2B organisation and staff records: 2 years after last activity, or on request. • Contact and support emails: 1 year. You can request deletion at any time (see Your Rights below).
5. Who we share data with
We share data only with processors required to run the platform: • Vercel — hosting and edge functions (EU region). • Neon / Supabase — database (EU region, encrypted at rest). • SMTP (nodemailer) — transactional email delivery. • Stripe — payment processing (B2B plans only). • Anthropic — AI-powered tools on /readiness, /market, /intelligence use the Claude API. Inputs are processed transiently; Anthropic's data use policy applies. We do not sell data to third parties.
6. Cookies
We use session cookies for authentication only (NextAuth.js). We do not use advertising or tracking cookies. Plausible Analytics is cookieless. You can disable session cookies in your browser but this will prevent B2B dashboard access.
7. Your rights under GDPR
You have the right to: • Access the personal data we hold about you. • Correct inaccurate data. • Request deletion ("right to be forgotten"). • Request data portability (receive your data in a machine-readable format). • Object to processing based on legitimate interest. • Withdraw consent at any time (where consent is the legal basis). To exercise any of these rights, email info@talentpath.eu. We will respond within 30 days. If you believe we are not handling your data correctly, you have the right to lodge a complaint with your national data protection authority.
8. International transfers
All data is stored on servers within the European Economic Area (EEA). Where sub-processors operate outside the EEA (e.g. Anthropic, Stripe), we rely on Standard Contractual Clauses (SCCs) and adequacy decisions to ensure equivalent protection.
9. Changes to this policy
We will notify B2B account holders of material changes by email. The date at the top of this page reflects the last update. Continued use of TalentPath after a change constitutes acceptance.