Legal
Privacy notice
TalentInvites is not open yet. This website is a single page that explains what we are building and lets you ask for an invitation. This notice covers everything that page does with personal data — no more and no less. When the service itself opens we will publish a fuller notice covering accounts, roles, referrals and payments, and we will tell anyone on the waitlist before it takes effect.
1. Who is responsible
TalentInvites is operated from Amsterdam, the Netherlands, and is the controller for the personal data described here. A Dutch private limited company (besloten vennootschap) is being incorporated at the time of writing; as soon as that is complete we will publish the company's registered name, address and Chamber of Commerce (KvK) number in this section. Until then, reach us at the address below — it is the same address either way, and every request under this notice is answered from it.
For anything in this notice, including any request about your data, write to [email protected]. We have not appointed a Data Protection Officer; we are not required to.
2. What we collect and why
Three things, and that is the whole list.
The invitation request
When you submit the form, we receive your email address, which side you picked (hiring, or referring and earning), and which form on the page you used, together with the time of the request. We use it for one purpose: to contact you about your invitation and about TalentInvites opening. It is not used for unrelated marketing, it is not sold, and it is not enriched with data from anywhere else.
Our legal basis is your consent (Article 6(1)(a) GDPR), given by submitting the form. You can withdraw it at any time — see your rights — and withdrawing it does not affect anything we did with the data beforehand. Giving us your email is entirely voluntary; the only consequence of not doing so is that we cannot invite you.
Email you send us
If you write to [email protected], we hold your message and address for as long as it takes to deal with it and to keep a record of the exchange. Legal basis: our legitimate interest (Article 6(1)(f) GDPR) in answering people who contact us.
Technical logs
Our hosting provider, HostPro, records standard server logs for every request — IP address, time, page requested, browser and referring page. These exist to deliver the site and to protect it against abuse. Legal basis: our legitimate interest (Article 6(1)(f) GDPR) in a site that stays up and secure. We do not use these logs to build a picture of individual visitors.
We do not ask for, and this page has no way to collect, your name, CV, employment history, phone number or payment details. We do not collect special categories of data. No decision about you is made by automated means, and we do not profile you.
3. Cookies and analytics
Nothing that is not strictly necessary is placed on your device until you have said yes. When you first arrive, a consent banner asks which categories you accept; measurement and marketing tags stay switched off until then, and your choice is remembered so we do not ask again on every visit.
If you accept measurement, we load Google Analytics through Google Tag Manager to understand how many people visit, roughly where they come from, and how many go on to request an invitation. That reporting is aggregate: it tells us how the page performs, not who you are.
If you also accept marketing cookies, and only then, we send Google a one-way scrambled version of your email address (a SHA-256 hash) alongside the record that an invitation was requested. Google cannot read your address back out of it. Its purpose is to let Google recognise that a request came from someone who had already seen one of our ads, so we can tell which advertising actually works. If you decline marketing cookies, nothing derived from your address is sent anywhere — the request is still counted, just anonymously.
Consent is managed by CookieYes, whose banner also stores your choice. You can change or withdraw it at any moment — it is exactly as easy to say no later as it was to say yes.
Separately, this page loads its typefaces from Google Fonts. That request is made by your browser directly to Google's servers and reveals your IP address to Google as a technical necessity of fetching the files. No cookie is set by it.
You can also clear or block cookies in your browser settings; the page works without them.
4. Who we share it with
We do not sell personal data and we do not share it with third parties for their own purposes. We do rely on a small number of service providers, who process data only on our instructions and under a data processing agreement:
| Provider | What it does | What it sees |
|---|---|---|
| Web3Forms | Delivers the invitation form to our inbox | Your email address and the form fields |
| Google (Tag Manager, Analytics) | Tag delivery and aggregate site measurement | Usage data, only with your consent; a hashed form of your email address, only if you accept marketing cookies |
| CookieYes | Records your cookie choice | Your consent preferences |
| HostPro | Serves the website and hosts our mailbox | Server logs including IP address; your email address and any correspondence |
We may also disclose data where the law requires it, or to establish or defend a legal claim.
5. Transfers outside the EEA
HostPro, which serves this site and hosts the mailbox your waitlist request lands in, is based in Ukraine — outside the European Economic Area, and not covered by a European Commission adequacy decision. We are formalising the safeguards for that transfer as part of establishing the company behind TalentInvites, and this section will name them once they are in place. In the meantime, what travels is deliberately minimal: an email address, which side of the marketplace you picked, and ordinary server logs.
Some of the other providers listed above are based in, or store data in, the United States. Those transfers rely on the European Commission's Standard Contractual Clauses or on the provider's certification under the EU–US Data Privacy Framework.
Ask us at any time which safeguard applies to a particular provider and we will tell you plainly, including where one is still being put in place.
6. How long we keep it
- Invitation requests — until you have been invited and have either taken up or declined the invitation, and in any case no longer than three years from your request, unless you ask us to delete it sooner.
- Correspondence — up to 24 months after the exchange ends.
- Server logs — typically 30 days, as set by our hosting provider.
- Analytics data — as configured in Google Analytics, up to 14 months.
- Your consent record — kept for as long as we need it to prove the choice you made.
7. Your rights
Under the GDPR you can ask us to:
- Give you a copy of the personal data we hold about you (access).
- Correct anything inaccurate or incomplete (rectification).
- Delete it (erasure).
- Restrict what we do with it while a question about it is open.
- Hand it over to you or another provider in a machine-readable form (portability).
- Stop processing based on legitimate interest (objection).
- Withdraw your consent to being on the waitlist or to cookies, at any time and without giving a reason.
Email [email protected] and we will respond within one month. Taking yourself off the waitlist takes one line and no explanation — every email we send you also carries an unsubscribe link. Exercising any of these rights is free.
If you think we have handled your data badly, please tell us first so we can put it right. You also have the right to complain to a supervisory authority — in the Netherlands that is the Autoriteit Persoonsgegevens, and you may instead go to the authority in the EU country where you live or work.
8. Security
The site is served over HTTPS, the form is submitted over an encrypted connection, and access to the inbox holding waitlist addresses is limited to the people who need it and protected by multi-factor authentication. No system is perfectly secure, but the amount of data we hold at this stage is deliberately small.
9. Children
This site is meant for people working or hiring in a professional capacity. It is not directed at children, and we do not knowingly collect data from anyone under 16. If you believe a child has given us their details, write to us and we will delete them.
10. Changes to this notice
We will update this page as TalentInvites grows — most obviously when the service itself opens and there is more than a waitlist to describe. The date at the top always shows the current version. If a change materially affects how we use data you have already given us, we will email you before it takes effect.