Recruitment Privacy Notice

Last update: 16.05.2024

This Recruitment Privacy Notice (hereinafter “Notice”) explains how Jobbatical OÜ (hereinafter “we”, “us” or “Jobbatical”) processes the personal data of candidates for employment and other individuals who we may come into contact during the recruitment process (e.g., recommenders) at Jobbatical (hereinafter “you” or “candidate”).

Dieser Hinweis beschreibt die Verarbeitung personenbezogener Daten durch uns als für die Verarbeitung Verantwortliche. Das bedeutet, dass wir allein oder gemeinsam mit anderen über die Zwecke und Mittel der Verarbeitung personenbezogener Daten entscheiden.

1. DATA CONTROLLER‍

Name: Jobbatical OÜ.

Registriernummer: 12671900.

Address: Narva mnt 7b, 10117, Tallinn, Estonia.

Email: dpo@jobbatical.com. 

Contact details of data protection officer: dpo@jobbatical.com.   ‍

2. PERSONAL DATA WE PROCESS 

We process the following personal data:

“Identification data” – this includes your name and surname. We collect this data from you at the beginning or during the recruitment process. We may also receive this data from third party recommenders.

“Contact data” – this includes your phone number and email address. We collect this data from you at the beginning or during the recruitment process. We may also receive this data from third party recommenders. 

“Information about experience, education and training” – this includes your diplomas, certificates and licences, training attendance, skills and competencies and other work-related qualifications. We collect this data from you at the beginning or during the recruitment process. 

“Recruitment communication” – this includes recruitment-related e-mail correspondence or other communication, where permissible. This data is generated during the recruitment process.

“Compliance and risk management information” – this includes background check reports, information about complaints and disciplinary sanctions, and where permissible, information about violation of laws or breach of company policies. We may collect the information for background checks from publicly available sources on the Internet. The information about complaints may be received from our employees or third-party complainant(s).

“Social media data” – this includes publicly available information about you on social media platforms (for example, LinkedIn, Facebook etc.), e.g., previous work experience, education or other information that is public and might be relevant in the recruitment process. We may collect this information when scouting possible candidates for employment, when receiving a job application or a recommendation about you from a third party.

“Recruitment and hiring related information” – this includes information that was provided or created during the recruitment and hiring process, including your motivational letter, recommendations (please note that it is your responsibility to obtain consent from your recommenders prior to providing us personal information about them), interview details, test results, home tasks and copies of relevant documents. We get this information from you at the beginning of the recruitment process.

3. THE PURPOSES AND THE LEGAL GROUNDS FOR THE PROCESSING OF PERSONAL DATA

      3.1 Legitimate interests

We process your personal data based on our legitimate interests for the purposes described below. You have the right to ask for clarifications regarding the processing based on the legitimate interests. You also have the right to send the objection, if you find that processing of your personal data for the purposes provided below prejudice your rights. Please see section 1 of this notice for our contact details.

     3.2 Pre-contractual relations

We process the personal data based on Article 6 (1) (b) of the GDPR where it is necessary for the actions prior to entering into an employment contract. 

4. CATEGORIES OF RECIPIENTS OF PERSONAL DATA AND TRANSFER OF PERSONAL DATA TO THIRD COUNTRIES

In some cases, we may transfer your personal data to certain recipients who are categorised as follows:

1.1 Partners who provide the services to us, and who process the personal data on our behalf (data processors), e.g.:some text

      a. Providers of various ICT services (e.g., providers of cloud services);

      b. Various contractors (e.g., recruitment agencies).

1.2 Independent controllers of personal data, such as our attorneys, auditors, etc.

1.3 Public authorities and supervisory bodies, e.g., court, law enforcement authorities, Data Protection Inspectorate. We transfer your personal data to public authorities and supervisory bodies only if the law requires it. 

Unless necessary for the provision of services, we do not transfer your personal data outside of the European Union (EU) or the European Economic Area (EEA), nor to such third country or international organisation, the level of data protection of which the European Commission has not considered adequate. If your personal data is transferred outside of the EU or EEA, such transfer of personal data will take place only upon appropriate legal basis, and we will take appropriate protective measures. Data transfers to such third countries are mainly based on Standard Contractual Clauses adopted by the European Commission.

Sie haben das Recht, zusätzliche Informationen über die Übermittlung Ihrer personenbezogenen Daten zu erhalten, indem Sie uns eine entsprechende Anfrage über die in Abschnitt 1 dieses Hinweises beschriebenen Kontaktdaten zusenden.   

5. RETENTION OF PERSONAL DATA

We retain your personal data for the period necessary for the achievement of purposes stated in this notice or until it is required by the law. For example, unsuccessful application data will be deleted after 18 months taking into consideration our need to answer queries or resolve problems and comply with legal requirements under the applicable laws. 

For more detailed information about the retention of your personal data, you can send an email using the contact details described in section 1 of this notice. 

6. YOUR RIGHTS REGARDING THE PERSONAL DATA

Recht auf Zugang zu Ihren Daten: Sie haben das Recht zu erfahren, ob Sie betreffende personenbezogene Daten verarbeitet werden oder nicht, was der Zweck der Verarbeitung ist und welches die Kategorien personenbezogener Daten sind. Außerdem haben Sie das Recht zu erfahren, an wen die personenbezogenen Daten weitergegeben werden (insbesondere an Empfänger in Drittländern), wie lange die personenbezogenen Daten gespeichert werden und welche Rechte Sie in Bezug auf Berichtigung, Löschung und Einschränkung der Verarbeitung haben.

Recht auf Berichtigung: Sie haben das Recht, die Berichtigung der Sie betreffenden personenbezogenen Daten zu verlangen, wenn die Daten unrichtig oder unvollständig sind.

Recht auf Löschung: In einigen Fällen haben Sie das Recht, die Löschung der Sie betreffenden personenbezogenen Daten zu verlangen, z. B. wenn Sie Ihre Einwilligung widerrufen und es keine anderen rechtlichen Gründe für die Verarbeitung der personenbezogenen Daten gibt.

Right to restrict the processing: in some cases, you have the right to restrict processing of the personal data concerning you for a certain time (e.g., if you have objected to the processing of personal data).

Right to object: you have the right to object to the processing of personal data, which is processed based on the legitimate interest, including profiling. Upon objection, we will no longer process the personal data unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms.

Recht auf Datenübertragbarkeit: Wenn die Verarbeitung Ihrer personenbezogenen Daten auf Ihrer Einwilligung oder dem Vertrag mit uns beruht und die Datenverarbeitung mit automatisierten Verfahren erfolgt, haben Sie das Recht, die Sie betreffenden personenbezogenen Daten, die Sie uns bereitgestellt haben, in einem strukturierten, gängigen und maschinenlesbaren Format zu erhalten. Außerdem haben Sie das Recht, die Übermittlung dieser personenbezogenen Daten an einen anderen Diensteanbieter zu verlangen, sofern dies technisch möglich ist.

Right to turn to us, supervisory authority, or a court: if you want to exercise the above-mentioned rights, please send us an email using the contact details described in section 1 of this notice. If you find that your rights have been breached, you have the right to turn to the Data Protection Inspectorate (Andmekaitse Inspektsioon) and/or court. The contact details of the Data Protection Inspectorate are available at www.aki.ee. 

7. AMENDMENT OF THIS NOTICE

Wir haben das Recht, diesen Hinweis einseitig zu ändern. Die geänderte Fassung des Hinweises wird auf unserer Website veröffentlicht.