Privacy Policy

Talentsio is a two-sided talent booking marketplace operating in Sweden. We connect event organisers with verified talent professionals including DJs, live musicians, hosts, comedians, and talent agencies.

Talentsio is operated from Stockholm, Sweden by Mentgroup AB, which is the data controller for the personal data processed through this platform. For privacy questions, contact us at hello@talentsio.com.

We collect the following categories of personal data:

• Account data: your name, email address, and phone number when you register or submit a booking request.
• Profile data (talent and agencies): your professional biography, location, pricing, media links, and profile photo.
• Booking request data: event details, dates, location, budget, and contact information submitted through booking forms.
• Payment data: credit purchase history and transaction records. Card payments are processed by Stripe. We do not store card numbers or full card details.
• Communication data: messages sent between organisers and talent through the platform.
• Usage data: page visits, features used, and actions taken on the platform, collected via analytics cookies only with your consent.
• Cookie and consent data: your cookie preferences and the date consent was given or withdrawn.

We process your personal data on the following lawful bases under GDPR Article 6:

• Contract performance (Article 6(1)(b)): processing necessary to provide the Talentsio service you have signed up for, including account management, matching, and booking facilitation.
• Legal obligation (Article 6(1)(c)): retaining transaction and payment records as required by Swedish accounting law (Bokföringslagen).
• Legitimate interests (Article 6(1)(f)): platform security, fraud prevention, service improvement, and sending service-related notifications. We have assessed that these interests are not overridden by your rights.
• Consent (Article 6(1)(a)): analytics cookies and optional marketing communications. You may withdraw consent at any time.

We use your data to:

• Operate the Talentsio platform and provide our services to you.
• Match talent profiles to relevant booking requests.
• Process credit purchases and send payment confirmations and VAT receipts.
• Send platform notifications such as new offers, booking updates, and system alerts.
• Verify talent profiles before they are approved and published on the marketplace.
• Improve and develop the service based on usage patterns (analytics, with consent only).
• Comply with legal obligations including tax and accounting requirements.

We do not sell your personal data to third parties. We do not use your data for automated decision-making that produces legal or similarly significant effects.

We share data only with the following categories of processors and partners, all of whom are required to process data in compliance with GDPR:

• Stripe (stripe.com): payment processing for credit purchases. Stripe is certified under PCI DSS Level 1.
• Secure cloud database infrastructure: your data is stored in EU-based data centres.
• Email delivery providers: for transactional emails such as booking confirmations, verification emails, and notifications.
• Hosting and application infrastructure provider: processing data on our behalf under a Data Processing Agreement in EU-based data centres.

We do not share your data with advertisers, marketing networks, or data brokers. We do not transfer personal data outside the European Economic Area except where an appropriate safeguard is in place (such as Standard Contractual Clauses).

As a data subject under GDPR, you have the following rights:

• Right of access (Article 15): request a copy of the personal data we hold about you.
• Right to rectification (Article 16): request correction of inaccurate or incomplete data.
• Right to erasure (Article 17): request deletion of your personal data where we no longer have a legal basis to hold it. Note that transaction records required by accounting law are retained for 7 years even after deletion.
• Right to data portability (Article 20): request your data in a structured, machine-readable format.
• Right to object (Article 21): object to processing based on legitimate interests.
• Right to withdraw consent: where processing is based on consent (e.g. analytics cookies), you may withdraw at any time without affecting prior processing.
• Right to restrict processing (Article 18): request that we limit how we use your data in certain circumstances.
• Right to lodge a complaint: you have the right to complain to the Swedish data protection authority, Integritetsskyddsmyndigheten (IMY), at imy.se.

To exercise any of these rights, email hello@talentsio.com. We will respond within 30 days. Signed-in users can also download a copy of their data and request deletion from the Account and privacy page.

We retain personal data for the following periods:

• Account data: retained for as long as your account is active. When you request account deletion, personal data is anonymised within 30 days.
• Transaction and payment records: retained for 7 years from the date of the transaction, as required by Swedish accounting law (Bokföringslagen 5 kap. 2 §).
• Booking requests and offers: retained for 3 years after the event date to support dispute resolution.
• Messages: retained for 2 years after the last message in a conversation.
• Archived records: soft-deleted records are retained for 360 days and then permanently purged.

Anonymised and aggregated data (with no ability to re-identify individuals) may be retained indefinitely for analytical purposes.

We use the following categories of cookies:

• Strictly necessary cookies: required for the platform to function. These keep you logged in and maintain your session. These cannot be disabled.
• Analytics cookies (optional, consent required): used to understand how the platform is used in aggregate. We only activate these with your explicit consent.
• Marketing cookies: we do not currently use marketing or advertising cookies.

You can manage your cookie preferences at any time using the Cookie Settings link in the footer. Withdrawing consent for analytics cookies takes effect immediately and does not affect any prior data collected.

Cookies we set include: talentsio_session (session management, expires on browser close), talentsio_cookie_consent (stores your consent preferences, expires after 90 days).

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include:

• Encrypted data transmission (HTTPS/TLS) for all platform traffic.
• Row-level security on all database tables, ensuring users can only access their own data.
• Payment data handled exclusively by Stripe under PCI DSS Level 1 certification.
• Access to personal data restricted to staff who need it to provide the service.

No method of transmission over the internet is completely secure. In the event of a data breach that is likely to result in high risk to your rights and freedoms, we will notify you and the relevant supervisory authority within the timeframes required by GDPR.

For privacy-related questions, data requests, or complaints:

Email: hello@talentsio.com
Platform: Talentsio
Location: Stockholm, Sweden

Supervising authority: Integritetsskyddsmyndigheten (IMY), imy.se