GDPR Compliance
Last updated · January 2026
Talvnt supports customers in meeting their obligations under the EU and UK General Data Protection Regulation (GDPR). This page summarises our approach.
Roles
For candidate data processed on our customers' behalf, our customers are the data controller and Talvnt acts as a data processor, processing data only on documented instructions.
Lawful basis
Our customers are responsible for establishing a lawful basis for processing candidate data. Talvnt provides the tools to support consent capture, access and erasure.
Data subject rights
The platform enables customers to fulfil data subject requests — including access, rectification, erasure and portability — efficiently.
International transfers
Where data is transferred internationally, we rely on appropriate safeguards such as Standard Contractual Clauses.
Data processing agreement
We offer a Data Processing Agreement (DPA) to all customers. Contact us to request a copy.
Questions about this policy? Contact us at talvnt.com/contact.