What data does Alva process?
Alva Labs assesses your abilities and suitability for a specific position within an organisation you are applying for. Candidates and employees submit data to the Alva platform, typically including:
Contact information
Ability and suitability information (i.e. test input)
Device information
Information about the job position
Demographic information
How Alva uses aggregated data
To deliver more value to both users and the organisations that use Alva, we analyse aggregated segments of our data set to uncover broad, statistical trends. These analyses are always performed on anonymised data - never on personally identifiable information.
An example of a finding:
"In fast-growing companies in industry X, candidates with personality traits Y are more likely to be happy and stay longer in role Z."
Alva's GDPR roles
Alva operates under three different GDPR roles depending on the processing activity.
Data Processor
Alva acts as a data processor when processing personal data on behalf of its customers. The customer decides which candidates to assess, for what purpose, and by what means. This relationship is governed by a Data Processing Agreement (DPA).
Joint Controller
During the test procedure, Alva and the customer are joint controllers. Alva alone determines which questions to ask and, therefore, which personal data to collect. No customer can influence test content, making it impossible for the customer to be a standalone controller for this part of the process.
Independent Controller
If a candidate creates an Alva account, Alva becomes an independent controller for the personal data in that context. The candidate opts in by giving consent, and Alva processes the data for its own purposes, separate from the customer's instructions under the DPA.
Alva Labs customer service offering
Assessment (test taking) | Storing, processing, etc. |
Alva decides what questions to ask and how to calculate ability scores, meaning the customer is not in full control. Both Alva and the customer participate in the process to find suitable candidates — i.e. they have a joint purpose. | The customer can for example interview and shortlist candidates and conduct team analysis. Alva processes candidate data on behalf of the customer. |
Customer as Joint Controller | Customer as Data Controller |
Alva as Joint Controller | Alva as Data Processor |
Alva Labs candidate service offering
Saving test results and account creation
When a candidate decides to create an account with Alva and take part of Alva's candidate service offering, Alva acts as independent controller for this service. This service is completely separate from the customer's relationship with Alva and the candidate. Account creation takes place either before or after the assessment. Alva uses consent as the legal basis.
External review and audit
Alva is committed to performing annual privacy audits carried out by an external party. The purpose is to confirm compliance with legal obligations and to identify opportunities for improvement.
Alva has also appointed an external Data Protection Officer (DPO) to oversee the privacy framework.
Any Questions?
Use the chat in the bottom right corner to connect with a member of our support team.
