Privacy policy

1. Who we are

Talno finds and assesses specialists for Nordic employers, and supplies vetted expert capacity to AI labs.

The controller for the personal data described here is Talno, based in Oslo, Norway.

2. What this policy covers

This policy covers three groups: visitors to the website, people who contact us, and candidates and domain experts we assess on behalf of an employer or an AI lab.

The last group matters most. We process information about people who have not approached us themselves, and that carries a higher duty of transparency.

3. Website visitors

We use Vercel Analytics to measure traffic and usage patterns.

• No cookies. The tool does not store cookies on your device.
• Information such as browser type, device, country and pages visited is collected in aggregate.
• IP addresses are processed to generate a temporary identifier and are not stored in a way that lets us identify you as an individual.
• The lawful basis is our legitimate interest in understanding how our own site is used.

4. People who contact us

If you submit the contact form, we process your name, email address, company, phone number and the content of your message. We use it to reply to you and to follow up where relevant.

The lawful basis is answering your enquiry and taking steps towards a possible business relationship.

5. Candidates and domain experts

On behalf of an employer or an AI lab, we look for people who may fit a specific role or engagement, and assess them against what that work requires.

The lawful basis is legitimate interest: ours, the client's, and the individual's own interest in being considered for relevant work. We have weighed that against the privacy of the individual, and limit ourselves to information that is professionally relevant to the role.

• What we process: name, professional background, work experience, skills, education, publicly visible professional activity and contact details.
• If you take one of our assessments, we also process your answers and the result.
• Where it comes from: professional networks and publicly available profiles, information you give us directly, and information from a client you are already speaking to.
• What we do with it: we assess you against the requirements of the specific role, write down the reasoning, and share it with the client if you are placed on a shortlist.
• We do not collect special categories of personal data, such as health, religious or political beliefs, or trade union membership.
• If we approach you, we tell you who the client is and why we got in touch.

6. Automated decisions and human oversight

We use AI to search, assess and rank. We do not make solely automated decisions that produce legal effects concerning you or similarly significantly affect you.

A person reviews every shortlist before it goes to a client, and it is always the client who decides who is interviewed or engaged.

7. How long we keep it

Candidate information is kept for as long as it is needed for the engagement it was collected for, and is then deleted or anonymised.

If you ask to be deleted, we delete your information without undue delay, unless we are required by law to retain something.

Contact form enquiries are kept for as long as needed to follow up the conversation.

8. Who we share it with

We do not sell personal data, and we do not use it for tracking or advertising across other websites.

• The client: if you are placed on a shortlist, we share your profile and our reasoning with the employer or lab the engagement is for.
• Vercel: provider of hosting and website analytics.
• Formsubmit: provider that forwards submitted contact forms to us.

9. Where data is processed

We work from Norway and engage European experts under European rules.

Some of our providers may process data outside the EEA. Where that happens, the transfer must rest on a valid transfer mechanism under Chapter V of the GDPR.

10. Your rights

Under the GDPR you have the right to:

• Access the information we hold about you.
• Have inaccurate or incomplete information corrected.
• Have your information deleted.
• Ask us to restrict the processing.
• Object to processing based on legitimate interest. If you object to being assessed for roles, we stop.
• Receive the information you gave us in a machine readable format.

11. How to exercise your rights

Send privacy requests through the contact form on this site, and choose 'Something else'.

We respond to requests within one month. If you believe we are processing your data unlawfully, you can complain to the Norwegian Data Protection Authority, Datatilsynet.

12. Changes

If we change this policy, we update the date at the top of the page.