a. About this policy
This Privacy Policy explains how, when and why your personal data is processed by Nova. For the purpose of this policy, any reference to “Nova” shall mean any applicable company within NGlobal Holding AB, company registration no. 559240-0864, with address at C/O Talent Venture Group AB, Postbox 3053, 10361, Stockholm, Sweden, including its subsidiaries:
b. Your rights
Your rights to privacy and integrity are important to us and we are therefore cautious with handling your personal data and thrive to limit the processing only to information that is required in order to perform our services to you.
c. Scope of this policy
This Privacy Policy applies to personal data that Nova collects directly from you when you apply to become a Nova member, use our network services (such as the Nova app, Gravity or Nova 111), or interact with our events, programs or newsletters. Nova also operates Nova Recruiter, a separate talent intelligence / sourcing service that may process professional information obtained from third-party sources (e.g. public profiles or licensed datasets). That processing is described in the Nova Recruiter Data Privacy Policy.
a. What is personal data
Personal data is any kind of information that directly or indirectly refers to an identified or identifiable person.
b. What personal data is Nova processing?
For the purposes stated in this privacy policy, Nova will process your name, contact information (including email address), age, gender, study background, career preferences, career type, university, main field of study or any other information you may provide when using the Sites.
If you choose to submit your account from Facebook, Instagram and/or LinkedIn to Nova Sites, Personal Data will also include your profile picture.
Our intentions with carrying out our services is to help professionals and students currently studying at university. For this reason, we have no reason to collect personal data from people who do not fall within said demographics. We therefore do not collect, or otherwise process, personal data from any individual under the age of 18.
A cookie is a small data file that our website plants on your hard drive to store certain information that we may recover later to be used for different purposes. We use cookies to complete and handle our surveys and to track user traffic patterns in order to evaluate our user’s patterns and to see how effective our navigational structure is in helping users to complete surveys as effectively as possible. We gather your consent ahead of using cookies (except for the use of technical cookies or cookies that are necessary to fulfil your specific requests). You may find more information on how we use cookies in our Cookies Policy
a. Overview
Nova processes personal data only for specific, explicit and legitimate purposes. Depending on how you interact with Nova (for example, applying to become a member, participating in community programs, or receiving newsletters), we rely on different lawful bases under Article 6 GDPR. This section explains, purpose by purpose, which lawful basis applies.
b. Membership application and account creation
Purpose: to receive and review your application to Nova, assess whether you meet the eligibility criteria, create your member account, and manage your membership.
Data used: identification data, contact details, education and career information, application answers, test results, video interview (if applicable).
Lawful basis: performance of a contract / steps prior to entering into a contract (Art. 6(1)(b) GDPR). Without this processing, we cannot evaluate your candidacy or give you access to the Nova community.
c. Provision of Nova community services (Nova Connect, Gravity, events, Nova 111, mentoring, introductions, etc.)
Purpose: to let you build and update your profile, be visible to other Nova members (when you choose so), receive introductions, be matched with other members, and participate in initiatives and events.
Data used: profile data, career and interest data, participation data, internal Nova score (if applicable).
Lawful basis: performance of a contract (Art. 6(1)(b) GDPR), because these features are part of the service you sign up for as a Nova member. Certain optional features (for example, publishing you publicly as Nova 111) will rely on consent (Art. 6(1)(a)) as explained in Section 7.
d. Communications about your membership and service messages
Purpose: to send you information that is necessary for your use of Nova (membership status, selection updates, event confirmations, platform changes, security notices).
Lawful basis: legitimate interest in operating and securing our services and keeping members informed (Art. 6(1)(f) GDPR) and/or performance of a contract (Art. 6(1)(b) GDPR), since these messages are part of the service.
e. Career and development content, newsletters and third-party employer opportunities
Purpose: to send you career-related content, Nova news, job or project opportunities, and invitations from partner companies that may be relevant to your profile.
Lawful basis: where we have your opt-in to receive this content: consent (Art. 6(1)(a) GDPR); where the law allows B2B or soft-opt-in communications: legitimate interest in promoting our services to our members (Art. 6(1)(f) GDPR). You can object or withdraw consent at any time via the links in the message or by writing to privacy@novatalent.com
f. Referrals, nominations and applications run with partners
Purpose: to process your application to a job, talent pool, program or event that Nova runs with a company, university or other partner, and to share the strictly necessary data with that partner.
Lawful basis: performance of a contract / steps prior to a contract (Art. 6(1)(b) GDPR) because you are asking Nova to put you forward; and Nova’s legitimate interest in operating these collaborations (Art. 6(1)(f) GDPR).
g. Optional visibility to recruiters via Nova Recruiter
Purpose: to make limited professional information from your Nova profile (name, role/title, industry, LinkedIn URL and similar) visible to verified recruiter users of Nova Recruiter only if you have set your status to “open to new opportunities” or “actively looking.”
Lawful basis: consent (Art. 6(1)(a) GDPR), given when you enable that status, which you can withdraw at any time in your account settings.
h. Analytics, service improvement and aggregated reporting
Purpose: to measure usage of our platforms, improve member experience, maintain security, and produce aggregated, de-identified reports about community activity.
Lawful basis: legitimate interest in operating, securing and improving our services (Art. 6(1)(f) GDPR). When we fully anonymize data, GDPR no longer applies.
i. Legal, security and compliance
Purpose: to comply with legal obligations, respond to authorities, prevent fraud or abuse, and defend Nova’s rights.
Lawful basis: compliance with a legal obligation (Art. 6(1)(c) GDPR) and legitimate interest in establishing, exercising or defending legal claims (Art. 6(1)(f) GDPR).
a. Data security
Nova protects your personal data using technical and organisational measures designed to prevent accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
These measures include firewalls, encryption in transit and at rest, multi-factor authentication, least-privilege access control, continuous monitoring, and regular security audits.
All Nova employees and contractors are bound by confidentiality obligations and receive privacy and security training.
If Nova becomes aware of a personal data breach that may result in a risk to your rights or freedoms, we will promptly notify the competent supervisory authority and, where required, you as the affected individual.
b. Storage locations
Your personal data is primarily stored and processed on secure servers located within the European Union / European Economic Area (EU/EEA).
Nova’s main cloud-hosting provider is Amazon Web Services (AWS), with data stored in the EU (Ireland) region.
c. Transfers outside the EU/EEA
Some of Nova’s trusted technology and infrastructure partners may store or access data from outside the EU/EEA for support or maintenance purposes. When such transfers occur, Nova ensures that an adequate level of protection is applied in accordance with Chapter V of the GDPR.
Depending on the provider and destination, Nova relies on one or more of the following legal mechanisms:
d. Key service providers and transfer mechanisms
Each provider acts under a Data Processing Agreement (DPA) consistent with Article 28 GDPR, ensuring that they process data solely on Nova’s instructions, maintain appropriate security, and assist with data-subject rights and breach notifications.
e. Copies and further information
You may contact privacy@novatalent.com to request further details about Nova’s international data transfers or to obtain a copy of the relevant safeguards (e.g., applicable Standard Contractual Clauses).
Nova shares personal data only when necessary to deliver our services, operate our community, or comply with legal obligations. We never sell personal data.
We group our data-sharing activities into the following categories:
a. Internal community visibility
If you are accepted as a Nova member, you may create a profile on Nova Connect. Other members of the Nova community can view the information you choose to share there – such as your name, current role, education, skills, photo, and interests – for the purpose of professional networking. You can edit or remove this information at any time. Profiles are never visible to people outside Nova.
b. Nova programs and initiatives
When you take part in a Nova program or initiative, Nova may share relevant information with verified partners or jury members strictly for that purpose:
All partners receiving such data have agreed in writing to comply with the GDPR and to delete the information after the evaluation or event ends.
c. Referrals and nominations
If you nominate or refer another person to Nova (a “nominee” or “referral”), you must first ensure that you have that person’s consent to share their basic information (typically name, email address, and LinkedIn profile). Nova will use this information solely to invite the referred person to start their own membership or application process. Once the nominee engages with Nova (for example, by opening the invitation or beginning an application), their data is treated in the same way as any other applicant’s and processed under this Privacy Policy. If the nominee chooses not to proceed, Nova may retain minimal information (e.g. email address, date of referral) for a limited period to record that an invitation was sent and to avoid duplicate nominations. This processing is based on Nova’s legitimate interest in operating its referral system efficiently and maintaining the integrity of its recruitment and selection processes.
d. Visibility to recruiters via Nova Recruiter (opt-in)
If you indicate in your Nova profile that you are “open to new opportunities” or “actively looking for roles”, selected professional details from your Nova profile – your name, current role or title, industry, experience summary, and LinkedIn URL – may become visible to verified recruiters and company users of Nova Recruiter.
e. Service providers (data processors)
To operate efficiently, Nova uses trusted service providers that process data on our behalf for functions such as hosting, analytics, communications, customer support, and productivity tools. These include Amazon Web Services (AWS), Google, Intercom, Notion, Typeform, TestGorilla, and Unipile, among others. All such providers act under Data Processing Agreements consistent with Article 28 GDPR and are listed in Section 6 (Protection and International Transfers).
f. Legal, corporate and compliance disclosures
Nova may disclose personal data:
Nova will process your personal data until you withdraw your consent as long as it is necessary for the stated purposes. After that, and before fully erasing your personal data, Nova will keep these duly blocked for the statute of limitations of potential claims that may arise as a consequence of the processing of said data.
a. You have the right to access the information Nova holds about you. If you want to obtain such access, or if you wish to correct information or data, object to, or restrict a certain processing of your data, you are welcome to contact Nova on privacy@novatalent.com. Nova will also assist you, if requested to the aforementioned e-mail address, with the transmitting of your data to another controller (so called “data portability”), delete information regarding you and/or your use of the Site and/or if you wish to withdraw your consent to a specific processing. However, please be aware that if you ask us to delete all information from your user account you will no longer be able to use the parts of the Sites where a user account is mandatory for access.
b. We hope that questions regarding our processing of your personal data can be resolved effectively through communication between us. However, please be informed that you always have the right to lodge a complaint with the the Data Protection Authority competent in the country in which you are located.
a. This privacy policy may be updated without prior notice. Where appropriate, Nova will duly inform you about that.
Nova has appointed a Data Protection Officer in accordance with Articles 37–39 GDPR. The DPO is responsible for monitoring compliance with data-protection laws, advising Nova on privacy obligations, and acting as the contact point for supervisory authorities and data subjects.
Email: dpo@novatalent.com
Postal: Attn: Data Protection Officer, NGlobal Holding AB, Postbox 3053, 10361 Stockholm, Sweden
You may contact the DPO for any questions or concerns about how Nova processes personal data or to exercise your data-protection rights.
For general privacy inquiries or to exercise your rights, you may also contact privacy@novatalent.com
© NGlobal Holding AB, 2025, All rights reserved.
