Version dated 24 October 2026
1. Why are you receiving this information?
You are invited to participate in an assessment as part of recruitment, promotion or professional development. The company that invites you determines the purpose of the course and communicates its identity to you before the evaluation begins.
2. Who processes your data?
The company initiating a Studio assessment generally acts as controller. Vik Consulting SRL, 112 rue Sans Souci, 1050 Brussels, Belgium, VAT BE 0693.674.615, provides Thalionis and acts as processor or controller depending on the mandate. Contact: assessment@thalionis.com; +32 479 360 985. Before starting, you must know the legal name, contact details and data protection contact of the company responsible for your case. If your invitation does not provide them, request them from the company or Thalionis.
3. Information used
Depending on the assessment, information includes your identity, contact details, CV, photograph where collected, responses and behavioural results, interview and simulation observations, external tests supplied and the final report. Combining this information may constitute profiling. Questions and conclusions must remain necessary and proportionate to the role and stated purpose; they do not constitute a medical diagnosis.
4. Process
Your personal invitation gives access to a secure space. You can consult the instructions, complete the questionnaires and follow the planned steps. The questions and exercises must remain linked to the function and the announced purpose. You can immediately report a technical difficulty or a question that you think is inappropriate.
5. Use of artificial intelligence
Some stages may use AI to structure, compare or summarise information. AI makes no recruitment or promotion decision. A competent person checks, contextualises and validates the results and can amend or reject them.
6. Recipients
Your data is accessible only to authorized people: the company concerned, its authorized users, the consultants assigned to the course and the supervised technical service providers. The report is not made public.
7. Retention
Before assessment, the company must tell you the retention period or criteria, its starting point and reasons for any extension. A blanket 24-month period is not justified for every case. In Switzerland, unsuccessful applications are in principle deleted after the process unless there is a legitimate reason. Retention for future opportunities must be handled separately, with your consent where required. Ask for the exact period if it was not provided; archiving is not deletion and backups follow a separate cycle.
8. Your rights and human control
You can request access, rectification, erasure, limitation or portability of your data and object to certain processing under the conditions provided for by the GDPR. You can request an understandable explanation, present your point of view, report an error, and request a human review.
9. Contact
Send your request to the responsible company or assessment@thalionis.com, which will direct it according to the case. Where the GDPR applies, you may contact the competent supervisory authority, including the Belgian Data Protection Authority: autoriteprotectiondonnees.be. For processing under Swiss law, also see the Switzerland section below.
10. Information for people in Switzerland
The Swiss Federal Act on Data Protection (FADP) applies within its scope, alongside the GDPR where it also applies. You may exercise access rights (Art. 25), request rectification or other FADP remedies, and request delivery or transfer of data you disclosed where Article 28 conditions are met. Access requests are normally handled free of charge within 30 days, subject to statutory exceptions. Portability does not amount to a general right to all inferred analyses.
High-risk profiling requires a specific assessment by the controller. Where consent is relied upon for such processing, it must be express, informed and specific. You may report an error, present your view and request human review. Article 21 FADP safeguards apply to the relevant solely automated individual decisions, subject to statutory exceptions. A validation click does not replace effective human review.
For processing subject to Swiss federal law, the FDPIC is the supervisory authority: www.edoeb.admin.ch. For a cantonal or municipal public employer, also check the competent cantonal authority. Applicable rights and remedies remain available.
11. Processing countries and checks before starting
Vik Consulting is established in Belgium. The public website and Cockpit Thalionis VPS are hosted by OVHcloud in Gravelines, France; automated OVHcloud backups are also hosted in France. The identified Standard backup runs daily and retains one copy for 24 hours; this does not cover any other copies. AI assistance uses the OpenAI API in Global configuration, with standard retention and training sharing disabled. Email is sent through Google Workspace, purchased through Wix. OpenAI and Google processing is not guaranteed to be exclusively European; processing in the United States or other countries published by these providers remains possible depending on the services used. The list specific to your file and the applicable safeguards must be provided before the assessment. The contractual clarification requested from OpenAI remains pending.
Providers’ technical retention is separate from your assessment file’s retention: OpenAI may retain security logs for up to 30 days by default, subject to legal or safety exceptions, and some caches for up to 24 hours. The application requests deletion of files after analysis, but a failed deletion does not guarantee erasure. Emails and their copies are not automatically deleted with the assessment file. See the privacy policy for details and contact the responsible company or assessment@thalionis.com before starting if any information is missing.
This page is general. Before a real assessment, check five case-specific elements: the responsible company and contact, the purpose, sources and role of AI, countries and recipients, and the retention period and your rights. Contact assessment@thalionis.com for missing details.