Who we are
Innotalent is the trading name used by the founders behind Innoworks, Innomads, and Notum to operate a shared nearshore team in Prishtina, Kosovo, for clients in the Netherlands, Germany, and the wider EU.
For data-protection purposes, the controller is:
- Legal entity
- [Registered legal name]
- Registered office
- [Street, postal code, city, country]
- KvK / registration
- [Number]
- VAT
- [Number]
We don't have a dedicated Data Protection Officer because we're small enough that one of the four founders reads every privacy request personally. Email the address above and you'll get a human reply, usually within one business day.
What we collect
Things you send us
- Contact form. Your name, email, optional company or role, and the message you write. If you tap any of the quick tags (team size, role focus), we receive those too.
- Role applications. The same plus the role you're applying for and any links you provide (LinkedIn, portfolio, GitHub).
- Team Architect. Your structured answers (what you're building, gaps, team size, timeline, stack notes) are sent to our AI provider so it can return the staffing sketch. The sketch and your answers are also stored in your own browser's local storage so the form survives a reload; nothing about that local copy ever leaves your device.
- Direct email. Whatever you write us, plus your email metadata.
Things the site collects automatically
- Server logs. Standard request logs from Vercel: IP address, browser user-agent, page requested, response time, timestamp. Retained briefly for security and debugging.
- Cookieless analytics. Vercel Web Analytics counts page views and referrer hosts at an aggregate level. No cookies, no fingerprint, no per-visitor identifier you can be re-recognised by.
- Local storage (your browser only). The Team Architect saves your in-progress answers locally so a reload doesn't blank the form. We can't read it; you can clear it from your browser settings at any time.
What we don't collect
- No advertising cookies, no third-party trackers, no fingerprinting, no session replay, no heatmaps.
- No special-category data (health, biometrics, political views, etc.). Don't put that in a form.
- No background location data.
Why we collect it (and our legal basis)
Under the GDPR, every piece of data needs a reason. Ours:
- To reply to you. Legal basis: our legitimate interest in answering people who ask to talk to us, and the steps necessary to enter into a contract you've requested.
- To consider a role application. Legal basis: steps necessary to enter into a (potential) employment or contracting relationship at your request.
- To generate a Team Architect sketch. Legal basis: legitimate interest in providing a tool you've asked to use; processing happens because you submitted the form.
- To run the site safely. Legal basis: legitimate interest in security, debugging, and basic measurement.
- To meet our legal obligations. E.g. retaining financial records for the tax authority.
If we ever process your data for a reason that needs your consent (it would be a change for us), we'll ask first and you'll be free to say no.
Who sees it
The short list, on purpose:
- The founders. Form submissions land in a shared inbox a founder reads. Role applications may be shared with the founder hosting the relevant practice.
- Vercel, our hosting and analytics provider. Vercel processes server logs and aggregate page views on our behalf.
- Resend, the email service that delivers contact-form and role-application messages to our inbox.
- Our AI provider for Team Architect. The structured brief you submit is sent to a third-party model API to generate the sketch returned to you. We don't include any data the model provider would use for training; the request is processed and discarded by the provider per their API terms.
- Our accountant and tax authority, but only invoice-level financial data, and only when legally required.
We do not sell or rent personal data. We do not share it with advertisers, data brokers, or anyone else for marketing.
How long we keep it
- Contact messages. Typically up to 24 months after the last reply, then deleted, unless they became part of a signed engagement (kept for the duration of that engagement plus 7 years for tax law).
- Role applications. Up to 12 months after the role closes, unless you ask us to keep your details longer for future openings.
- Team Architect submissions. The structured request lives in our logs for up to 90 days for debugging, then is deleted. Your local-storage copy stays in your browser until you clear it.
- Server logs. Vercel's standard retention, currently up to 30 days.
- Aggregate analytics. Page-view counts are kept indefinitely because they aren't tied to you.
Where it lives
Our hosting and email providers are EU- and US-headquartered companies that process data both in the EU and the US:
- Vercel Inc. (United States) for site hosting, server logs, and cookieless analytics. Data is processed in regions we configure; the default is Frankfurt (eu-central-1).
- Resend (United States) for transactional email delivery.
- Our AI provider for the Team Architect sketch (see that section).
Transfers outside the EEA are protected by the European Commission's Standard Contractual Clauses included in each provider's Data Processing Addendum. If you'd like a copy of those, write to us.
Your rights
You can ask us, at any time, to:
- Show you what personal data we hold about you.
- Correct anything that's wrong.
- Delete what we hold (unless we have a legal obligation to keep it).
- Restrict how we use it, or object to a particular use.
- Receive a portable copy of what you sent us.
- Withdraw consent for anything you previously consented to.
Email hello@innotalent.tech and a founder replies. We don't run a ticket system for this; we just answer.
If we get something wrong and you'd rather complain to a regulator, you're entitled to. In the Netherlands that's the Autoriteit Persoonsgegevens.
Children
This site is for business audiences. We don't knowingly collect personal data from anyone under 16. If you believe a child has sent us data, email us and we'll delete it.
Changes to this policy
When we change anything material (a new processor, a new purpose, a different retention period) we'll update the "Last updated" date at the top of this page and, if it affects someone we already have data on, email the people it affects. The current version always lives here.
How to reach us
Email hello@innotalent.tech. A founder reads it; a founder replies, usually within one business day.
Postal address: [Registered office].
This is the founders' draft of the policy, not a lawyer's. We read every word ourselves. If you spot something that should be clearer, or your legal team needs a specific clause, write to us and we'll either explain it or fix it.
