Privacy Policy

1.1 This privacy notice describes how Vimekson OÜ (hereinafter referred to as “Vimekson”) processes the personal data of job applicants when a candidate applies directly to Vimekson for employment, through a recruitment service provider or platform, or when Vimekson invites a candidate to apply for a job through other means (e.g., when Vimekson receives candidate data from a third party).
1.2. Personal data refers to any information relating to an identified or identifiable natural person. The data controller for personal data is Vimekson OÜ, located at Laki 32, Tallinn, 12915, Estonia, email address info@vimekson.ee.
1.3. Vimekson adheres to applicable laws and regulations regarding the processing of personal data, including the General Data Protection Regulation (Regulation (EU) 2016/679, GDPR) and the Data Protection Act. Vimekson has implemented appropriate technical and organizational measures to ensure the security of personal data processing.

2.1. Vimekson may process the following personal data about the candidate:
2.1.1. Identity information, including name, personal identification code, date of birth, gender, and identification document details;
2.1.2. Contact information, including address, phone number, and email address;
2.1.3. Data on the candidate’s qualifications, education, and previous work experience;
2.1.4. Data from job interviews and information disclosed during the interview;
2.1.5. Video camera recordings of the candidate if the candidate visits Vimekson’s premises during the application process;
2.1.6. Other personal data voluntarily provided by the candidate to Vimekson (e.g., CV, letters of recommendation) that Vimekson becomes aware of during communication with the candidate or for which the candidate has given consent for processing.

3.1. Vimekson processes the candidate’s personal data for the following purposes:
3.1.1. Communication with the candidate;
3.1.2. Assessment of the candidate’s background and skills suitability;
3.1.3. Preparation for the conclusion of an employment contract, service contract, or other agreement with the candidate;
3.1.4. Fulfilling Vimekson’s legal obligations;
3.1.5. Protection of Vimekson’s premises and property;
3.1.6. Preparation, submission, or defense of legal claims;
3.1.7. Other purposes for which the data subject has given consent.
3.2. Depending on the purpose of processing personal data, the processing may be based on one of the following legal grounds:
3.2.1. Consent of the data subject (Article 6(1)(a) of the GDPR);
3.2.2. Taking pre-contractual measures at the request of the data subject (Article 6(1)(b) of the GDPR);
3.2.3. Fulfillment of Vimekson’s legal obligations (Article 6(1)(c) of the GDPR);
3.2.4. Vimekson’s legitimate interests (Article 6(1)(f) of the GDPR).

4.1. Vimekson only discloses personal data to individuals who need it for the purposes specified in point 2. These individuals primarily include Vimekson employees. Additionally, Vimekson may need to share candidate’s personal data with certain service providers, such as recruitment, IT, accounting, or legal service providers. In certain cases, Vimekson may also disclose candidate’s personal data to public authorities or courts if necessary for the legitimate interests or legal obligations of Vimekson.

5.1. Vimekson retains personal data only for as long as necessary to fulfill the purpose for which they were processed or as required by applicable laws and retention periods. Once Vimekson no longer needs the personal data and retention is not required by law, the data will be erased.

6.1. Candidates have the following rights as data subjects, subject to the conditions and limitations set forth in applicable laws:
6.1.1. The right to receive confirmation from Vimekson regarding the processing of their personal data and to access their personal data.
6.1.2. The right to rectify inaccurate personal data.
6.1.3. The right to erasure of personal data.
6.1.4. The right to restriction of processing of personal data.
6.1.5. The right to object to the processing of personal data.
6.1.6. The right to data portability.
6.1.7. The right to withdraw consent at any time, if the processing of personal data is based on the data subject’s consent.
6.1.8. The right to lodge a complaint with the Data Protection Inspectorate (address: Tatari 39, 10134 Tallinn, email: info@aki.ee; phone: +372 627 4136, website: www.aki.ee) or to seek remedies through the courts if the data subject believes that Vimekson has violated the requirements for the processing of personal data.

7.1. If you have any questions or complaints regarding the processing of personal data or if you wish to exercise your data subject rights, please contact Vimekson by email at info@vimekson.ee.