Privacy Policy
This privacy policy describes how we collect, use, store, and share personal data that we receive in connection with providing our services: recruitment and HR services and career counseling.
1. General Information
1.1. This privacy policy page governs personal data collection, processing, and storage principles. Personal data is collected, processed, and stored by the data controller Connexa OÜ (hereinafter Connexa, we, or the data controller), by the General Data Protection Regulation (GDPR) of the European Union, the Personal Data Protection Act of the Republic of Estonia, and other applicable legislation.
1.2. Connexa is a company that offers recruitment, HR, and career counseling services. Its goal is to support organizations in HR matters, find employees, and provide career advisory services.
1.3. Connexa adheres to the principles of data processing set out in legislation, including lawfully, fairly, and securely processing personal data. The data controller confirms that data is used for specified and legitimate purposes.
1.4. Connexa considers data protection necessary when selecting technical cooperation partners and requires these partners to comply with data protection regulations.
1.5. in the context of this privacy policy, a data subject refers to a client or other natural person whose personal data is processed by the data controller.
2. Personal Data Processed
2.1. Connexa processes data provided directly by the data subject, data received from contractual partners, and data collected independently, including website and campaign analytics (LinkedIn, Connexa website, Google Analytics).
2.2. Connexa collects and processes the following personal data, which may include:
2.2.1. First and last name, email address, phone number, place of residence, user accounts on web platforms (e.g., LinkedIn, GitHub, Facebook, etc.), language skills, other skills listed in the CV (e.g., hobbies, interests, software skills), business and volunteer activities, membership in social organizations, job expectations (e.g. salary expectations, employer preferences), description of suitable job roles, references, work experience, salary information, education, additional training, professional profile (e.g. strengths, development needs, values, competencies), portfolio link or file, candidate test results, recruitment outcomes (e.g. participation, advancement, rejection, withdrawal, feedback), interview summaries and notes (including additional information shared during the interview). During the recruitment process, the recruiter (consultant) may add interview notes, profile explanations, email communications, and keywords to help easily locate the candidate’s profile.
2.2.2. The recruiting manager’s first and last name, job title, and contact details (phone number and email address).
2.2.3. Website traffic statistics – collected and analyzed using WordPress analytics tools and Google Analytics;
- Social media usage statistics;
- Website usage data is collected from user accounts or cookies.
2.3. Connexa also collects and processes data obtained during the career counseling process, including:
- Notes and summaries prepared by the career counselor about the client’s development, strengths, development needs, values, and competencies. Results from individual sessions and recommendations for the future career path. Data related to the advice and action plans developed during counseling, including career goals. Results and feedback from career counseling sessions. Information on the methods used.
3. Cookies
3.1. Cookies are small text files stored on the user’s device when visiting a website. They help retain information about user preferences and actions to provide a better user experience.
3.2. We use cookies to ensure the website’s technical functionality, analyze usage (e.g., using Google Analytics), improve the user experience, and perform targeted marketing.
3.3. Users can disable or restrict the use of cookies in their browser settings. However, this may affect the website’s full functionality.
3.4. Our website may use third-party cookies (e.g., Google Analytics) to collect aggregate data about user behavior. Users can install a browser add-on to restrict Google Analytics tracking if desired.
4. Purposes and Legal Bases for Processing Personal Data
4.1. We process personal data to provide and improve our services and to fulfill legal obligations.
4.2. Legal Bases:
4.2.1. We process data for which the data subject (e.g., website visitor or client) has given voluntary and informed consent. Consent may be withdrawn at any time.
4.2.2. We process personal data to perform a contract or take steps before agreeing to the data subject’s request.
4.2.4. We process data based on our legitimate interests, e.g., to improve service quality, for marketing purposes, to ensure the security of network and information systems, or to prevent fraud. Before processing, we assess whether our interest outweighs the data subject’s rights and freedoms.
4.3. Connexa’s Principles for Personal Data Processing
We adhere to the following principles:
- Processing is lawful, fair, and transparent;
- Data is collected for clearly defined and legitimate purposes;
- Processed data is relevant, limited in scope, accurate, and up-to-date;
- We ensure data security and the ability to correct or delete data according to legal requirements.
5. Disclosure of Personal Data
5.1. Connexa does not disclose, provide access to, or share personal data with third parties. Only we and authorized Connexa representatives (e.g., software developers and IT service providers) can access the data.
5.2. As part of the service, Connexa may share personal data with third parties, primarily employers who ensure adequate data protection and with whom confidentiality agreements have been concluded.
5.3. Partners may include government agencies, companies from Estonia, and other countries recognized by the European Commission as having adequate data protection.
5.4. Data may also be processed outside the EU if the service provider is in a non-EU country. In such cases, we ensure GDPR-compliant data protection standards.
6. Data Retention
6.1. Personal data is retained for up to 3 years after completing a recruitment or career counseling project, after which the data is deleted.
6.2. Contractual and accounting requirements store client data.
6.3. Website and social media usage statistics are retained according to the platform’s settings.
6.4. All user personal data is treated as confidential information.
6.5. Non-personally identifiable data may be retained indefinitely.
7. Rights of the Data Subject
7.1. Individuals whose data we process have the following rights:
- The right to access and review their data;
- The right to correct or supplement their data;
- The right to delete their data (unless prohibited by law);
- The right to receive information about the collection and processing of their data;
- The right to withdraw consent;
- The right to file a complaint with the Data Protection Inspectorate (www.aki.ee)
8. Questions and Changes
8.1. Connexa reserves the right to update this privacy policy unilaterally. All changes will be made available on the website, and the latest version will always be accessible.
8.2. If you have any questions about this privacy policy or how your data is processed, please get in touch with us at info@connexahr.com