Candidate privacy policy
DataVie OÜ is the controller of personal data.
Below is an explanation of how your (i.e. data subject) personal data is processed. Processing of your personal data is based on the General Data Protection Regulation and possible specific laws.
Our data protection contact is: Piia Laks-Järve (piia.laksjarve@datavie.eu)
I Definitions
In order for the privacy policy to be understandable and comprehensible to you, we will explain some of the most important definitions presented in the privacy policy:
- Data subject - natural person, whose personal data DataVie OÜ is processing. The data subjects are: Candidates
- Personal data - any information relating to an identified or identifiable natural person („data subject“). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
- Controller - DataVie OÜ as a controller itself determines the purposes and means of personal data processing. Where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.
- Third party - a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.
- Profiling - any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.
- Automated decision-making - making a decision by automated means without any data subject, e.g. human involvement that evaluates his character traits, abilities or other personality traits, if this leads to legal consequences for the data subject or significantly affects him in some other way.
- Partners - natural or legal persons or authorities with whom DataVie OÜ processes personal data for business purposes or to whom the data is transmitted. According to this document, cooperation partners are recipients of personal data, processors and third parties.
- Recipient - a natural or legal person, public authority, agency or another body, to which the personal data is disclosed due to processing.
- Processor - a natural or legal person, who is authorised to process personal data on behalf of DataVie OÜ, i.e. the controller, based on the instructions of the controller.
DataVie OÜ ensures that the personal data is processed lawfully and considers keeping personal data confidential and personal data protection very important. The purpose is to ensure responsible personal data processing based on the interests, fundamental rights and freedoms of the data subject.
The exact extent of the personal data processed by DataVie OÜ depends on the purpose for which the personal data is processed. Personal data is collected only for specified and legitimate purposes and will not further process data in a manner that is incompatible with those purposes.
Below, the necessary information is presented about your personal data processing purposes and activities, depending on whether the data was received from you, or which was created during the cooperation between you and DataVie OÜ, or which was received from a third party.
DataVie OÜ will store personal data for as long as it is necessary to achieve the purpose of the processing. If personal data needs to be kept longer than it is necessary due to the purpose of collection, the personal data will be anonymised so that you are no longer identifiable as a data subject.
II Processing activities where personal data is obtained from you
Here DataVie OÜ gives you an overview of the purposes and activities for which we collect your personal data, on which legal basis we process it and how long we store this data. In addition, we outline whether the provision of personal data is voluntary, a legal or contractual obligation or a necessary requirement for concluding a contract and what are possible consequences of not providing the data.
Activities
| Activity | Purpose | Legal basis | Data provision basis | Possible consequence of failure to provide data | Data retention period |
|---|---|---|---|---|---|
| Candidate suitability assessment | Recruitment | Legitimate interests (Ensuring company performance (incl. processes)) | Voluntary assignment | Participating in recruiting process not possible | 1 year from making recruitment decision |
| Organising recruitment | Recruitment | Legitimate interests (Ensuring work management) | Voluntary assignment | Participating in recruiting process not possible | 1 year from making recruitment decision |
You can get acquainted with legitimate interests assessments by submitting a corresponding request: piia.laksjarve@datavie.eu
III Processing activities where personal data have been created during our cooperation or obtained from a third party
In the course of its business activities, DataVie OÜ does not process personal data, which have been created during our cooperation or obtained from a third party.
IV Disclosure of personal data to cooperation partners
We do not disclose or transfer personal data to cooperation partners.
V Transfers of personal data to a third country cooperation partners
We do not transfer personal data to cooperation partners located in third countries.
VI Profiling and automated individual decision-making
As part of various activities, we are performing profiling and/or automated decision-making on you
Activities
| Activity | Purpose | Profiling and automated decision-making |
|---|---|---|
| Candidate suitability assessment | Recruitment | Profiling |
VII your rights
You have the right to get any information about processing principles of your personal data. DataVie OÜ makes the principles of processing data available to you on the basis of this document or by submitting an inquiry.
You have the right to consult the information specified in points 1 and 2 of Article 15 of the General Data Protection Regulation. We make the information specified in the Regulation available to you on the basis of this document and/or a corresponding inquiry, which you can submit to: piia.laksjarve@datavie.eu
You have the right to request correction of personal data. you can correct the data by submitting corresponding request: piia.laksjarve@datavie.eu
You have the right to request erasure of personal data ("right to be forgotten"). you have the right to demand that your personal data be erasured, for example, if you have withdrawn your consent to data processing and there is no other legal basis for processing your data.
You have the right to restrict the processing of personal data. you have the right to demand the restriction of personal data processing if the processing of personal data is not permitted by law or if you dispute the correctness of the personal data. you have the right to request the restriction of the processing of personal data for a period that allows us to verify the correctness of the personal data or if the processing of personal data is illegal, but you do not request the deletion of personal data.
You have the right to receive the personal data, concerning you that you have submitted to us and the right to transfer this data to another controller (right to data portability).
You have the right to object at any time to the processing of your personal data, which is necessary in case of legitimate interests, including profiling based on legitimate interests.
You have the right to file a complaint with us, the Data Protection Inspectorate or the court if you find that your rights have been violated in the processing of personal data. The contacts of the Data Protection Inspectorate can be found on their website: https://aki.ee
You can contact us with a request or objection: piia.laksjarve@datavie.eu. We will respond to you no later than one month after receiving the request or objection. If necessary, we can extend this period by two months, taking into account the complexity and amount of the request or objection. In this case, we will inform you about the extension of the deadline for submitting the answer and the reasons for the delay within one month of receiving your request or objection. Upon receiving your electronic request, we will also respond to you electronically, unless you prefer another way of receiving a response.
We have the right to reject your requests if we cannot identify you as a data subject.
If we do not apply measures in accordance with your request or objection, we will inform you of the reasons for not taking measures within one month of receiving your request or objection at the latest, and we will explain to you the possibility of filing a complaint with the supervisory authorities and using legal remedies.
VIII Other principles
DataVie OÜ has the right to update, specify and supplement the principles at any time, based on changes in legislation and personal data processing.
Last updated: 31.10.2025 22:09:09