Privacy Policy

Last updated: October 2, 2020
EFFECTIVE DATE: OCTOBER 2, 2020

Estoty SIA Website Privacy Policy

In accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as GDPR, this website privacy policy, hereinafter referred to as the Privacy Policy, briefly describes personal data processing activities conducted by Estoty SIA, registration number: 40103567138, registered office address: Pulkveža Brieža street 6-1, Riga, LV-1010, Latvia, hereinafter referred to as Us or Data Controller, via this website. This Privacy Policy refers without exceptions to all users of this website, hereinafter referred to as You, Visitor, or Data Subject, in particular, users consuming website content and candidates submitting applications via website designated job application directory. The Privacy Policy describes personal data We collect, defines personal data processing activities We conduct, identifies other data controllers and/or data processors We share or transfer to Your personal data or other information, if any, determines time of storage of Your personal data, as well as lists Your GDPR rights and ways to exercise them in full. Our Privacy Policy may vary among different jurisdictions to reflect local legal and compliance requirements, as well as best local personal data protection practices.

Content

  1. Scope of the Personal Data Processing
  2. Legal Grounds and Purposes of the Personal Data Processing
  3. Privacy Considerations for Minors
  4. Personal Data Processing Procedure
  5. Rights of the Data Subject
  6. Enforcement of the Rights by the Data Subject
  7. Responsibility for the Personal Data Processing
1.Scope of the Personal Data Processing:

We collect and process Your personal data in a number of ways depending on the use of the designated directories of the website:

1.1.

Your name, surname, relevant CV entries, graduation diplomas and other certificates of achievement, personal e-mail address, phone number, and other information provided by You for the initiation and administration of the recruitment process using Careers directory of this website;

1.2.

Your name, e-mail address, as well as any other information provided by You, while communicating with Us using one of the vacancy directory of this website;

1.3.

Your internet protocol (IP) address, unique device identifier (UDI), browser characteristics, device characteristics, operating system (OS), referring uniform resource locators (URLs), information concerning Your website activities, dates and times of Your visits to Our website and other Visitor related statistics subject to the Website Cookies Policy.

2.Legal Grounds & Purposes of the Personal Data Processing:
2.1.

Your Personal Data submitted within the framework of the recruitment process will be processed by Us with the aim of evaluating candidates for the vacant position and entering into contractual relations with the successful candidate in accordance with the applicable laws and regulations, in particular:

to communicate with You regarding job interviews, test assignments and other recruitment related matters;

to review and evaluate Your eligibility and suitability for the position under consideration;

to establish employment relations or other form of cooperation with You upon successful completion of the recruitment process.

2.2.

Your Personal Data communicated to Us, while using one of the options of Careers directory of this website, will be processed by Us to secure Our legitimate interest by ensuring good customer service and providing You with the prompt personalised reply to Your enquiry. Any Personal Data going beyond the one strictly necessary to ensure technical functioning of the website will be processed based on Your personal consent.

2.3.

Your Personal Data collected by Us, while browsing Our website, will be processed by Us to secure Our legitimate interest by ensuring technical functioning of Our website. Any Personal Data going beyond the one strictly necessary to ensure technical functioning of the website will be processed based on Your personal consent received via cookies banner in accordance with Website Cookies Policy.

3.Privacy Considerations for Minors:
3.1.

We do not intent to target and/or address any individuals under the legitimate age restriction, i.e. 16 (sixteen) years of age subject to derogations, if any, introduced in a designated countries or states. The Terms & Conditions provides a detailed description of the requirements and restrictions regarding use of this website. If We become aware of any Personal Data being collected from the underage consumer without a verified parental or legal guardian consent, We will immediately proceed with erasing Personal Data of the underage customer to the extent possible.

4.Personal Data Processing Procedure:
4.1.

We undertake various organisational, technical and technological measures to secure integrity and confidentiality of the Personal Data processed within the course of recruitment process, e-mail and/or text message exchange, as well as website browsing session. The Personal Data will be processed in the electronic form, unless You decide to contact us by post.

4.2.

The Personal Data is processed by Us individually or jointly with the designated third parties. The following private individuals and legal entities, if applicable, may be involved in the data processing operations on behalf of the Data Controller:

Members of the Board of the Data Controller and designated employees of the Data Controller responsible for the management of the human resources;

Designated employees of the Data Controller temporary responsible for substituting Data Subject in the case of absence, illness, maternity leave and any other legitimate reason;

Designated employees of the Data Controller responsible for managing Personal Data processing activities, including, but not limited to, employees of the recruitment, legal and compliance departments, health and safety specialists, employees responsible for the maintenance of the documentation archives, internal IT systems, servers and reserve servers of the Data Controller;

4.3.

We will not apply to You automated decision-making processes with legal or other substantial effect on You.

4.4.

We will process Your personal data only as long as required for the designated purpose, for instance, during the entire term of the recruitment process for the vacant position under consideration and 2 (two) years extra, e-mail and/or text message exchange information will be kept as long as required to address the issue under consideration and 2 (two) years extra, and website related Personal Data in accordance with the Website Cookies Policy.

5.Rights of the Data Subject:

We hereby inform You on the following rights in regards to the Personal Data processing:

5.1.

A right to revoke Your consent for the processing of Your personal data in any case, including cookies preferences;

5.2.

A right to submit a written enquiry to Us regarding processing of Your Personal Data and receive following information in a short, clear and precise machine-readable format:

the categories of the Personal Data being processed by Us;

the legal grounds and purposes for the processing of Your Personal Data;

the recipients and/or categories of recipients of Your Personal Data;

the envisaged duration of storage of Your Personal Data and criteria determining the period of storage, if applicable;

the envisaged duration of storage of Your Personal Data and criteria determining the period of storage, if applicable;

existence of the automated decision-making, including profiling in regards to Your Personal Data.

5.3.

A right to submit a written request inviting rectification of Your Personal Data by Us, if relevant.

5.4.

A right to submit a written request to Us demanding temporary restriction of processing of Your Personal Data, if:

the accuracy of the Personal Data processed by Us is contested;

the Personal Data processing is unlawful, but You request restriction on the use of the Personal Data instead of erasure;

the Personal Data is required for the establishment, exercise or defence of the legal claim;

the verification is pending on whether Our legitimate interest prevails over Your interests.

5.5.

A right to submit a written request to Us suggesting erasure of Your Personal Data, if:

the Personal Data is no longer necessary in the light of the achievement of the purpose for which it was originally collected or otherwise processed by Us;

the Data Subject withdraws the consent for the corresponding data processing activity and no other legal ground for subsequent processing of the Personal Data exists;

the Data Subject objects to the processing of the Personal Data by Us, when no overriding legitimate ground exists to justify processing of such Personal Data;

the processing of the Personal Data is unlawful;

the Personal Data shall be erased to comply with the legal obligation stipulated in the corresponding laws and regulations.

A right to object in a written form against Your Personal Data being processed by the Data Controller.

A right to lodge a written complaint regarding breach of GDPR requirements regarding processing of Your personal data.

6.Enforcement of the Rights:

You are entitled to rely on the aforementioned rights of the Data Subject by submitting written enquiries, requests and complaints:

6.1.

via an e-mail to the e-mail address of Estoty SIA at privacy@estoty.com in the case of enquiry and/or request or,

6.2.

via a registered mail to the registered office address of Estoty SIA at Pulkveža Brieža iela 6 - 1, Riga, LV-1010, the Republic of Latvia, with the mark “to the attention of the Data Protection Officer” in the case of a complaint.

7.Responsibility for the Personal Data Processing:
7.1.

Estoty SIA, registration number: 40103567138, registered office address: Pulkveža Brieža iela 6 - 1, Riga, LV-1010, the Republic of Latvia, is Your Personal Data Controller.

Privacy Policy