Thank you for your interest in working at SRINI!
Before you continue with the application process, we would like to explain how we process your personal data during recruitment. This is the information that the General Data Protection Regulation (Article 13 GDPR) requires us to provide to you at the first point of contact.
01Who processes your personal data?
The controller of your personal data is SRINI OÜ (A. H. Tammsaare tee 60, 11316 Tallinn, Estonia). We have appointed a data protection contact person whom you can contact directly on any data protection matter: andmekaitse@srini.ee.
02What data do we process and why?
Assessing your application
To carry out the application process and assess your suitability, we process the personal data contained in your CV and other application documents, including contact details, information on your education and work experience, and information collected during the recruitment process, such as the results of interviews or test assignments.
Legal basis: taking steps at your request prior to entering into a contract (Article 6(1)(b) GDPR).
Background check
To verify a candidate’s suitability, before making a job offer we carry out a background check to the extent appropriate for the position – verification of identity, a review of employment history, contacting referees and, for roles that require access to client data or the production environment, also verification of education and qualifications. We do this to protect our clients’ data and information systems (including source code) and to make sure that the candidate is suitable for the specific position. We contact referees only after we have informed you in advance and you have provided their contact details.
Legal basis: our legitimate interest (Article 6(1)(f) GDPR). We have assessed that such a check is necessary and proportionate and is limited to the information needed to perform the duties of the position.
Criminal records check
If a position requires a particularly high level of trust, for example an administrator, management or information security role, a check of criminal records data may be necessary. Before carrying out such a check, we will ask for your separate consent and explain why it is necessary for the specific position. We do not retain a copy of the extract. We document only the fact that the check was carried out, its date and its result. You may withdraw your consent at any time, but in that case we may not be able to make you a job offer. The need for a background check may also arise from law (e.g. the Emergency Act); in that case, separate consent is not required.
03Who can see your data?
Your data can be accessed only by the Management Board of SRINI OÜ, HR staff on a need-to-know basis and the selection panel for the specific vacancy. We store application documents in the Teamdash recruitment platform, and correspondence takes place in the Microsoft 365 environment. We have concluded a data processing agreement (Article 28) with both service providers. Data is generally processed in the EU or EEA; for Microsoft services, the EU Standard Contractual Clauses and the EU–US Data Privacy Framework apply. We do not disclose your data to clients or other third parties.
04How long do we keep your data?
If no employment relationship is established, we retain application data for up to one year from the end of the recruitment process in order to protect our rights in the event of possible claims. After that, we delete the data. If you would like us to keep your data for future vacancies, we will ask for your separate consent – which you may withdraw at any time.
If an employment relationship is established, the data is transferred to the employment records and the terms of our employee privacy notice, which you will receive before the contract is concluded, will apply.
05Your rights
You have the right to access your data, to request the rectification of inaccurate data or the erasure of data, to restrict processing, to receive your data in a machine-readable format and to object to processing based on legitimate interest (Articles 15–21). To exercise your rights, please contact andmekaitse@srini.ee – we will respond within one month at the latest. If you believe that your rights have been violated, you have the right to contact the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee).
06Good to know
Providing personal data is voluntary, but without the data required for the application we cannot process your application or, where appropriate, make you a job offer. Recruitment decisions are made by people – we do not use automated decision-making or profiling of candidates.
If you have any questions, please contact us at andmekaitse@srini.ee.
Good luck with your application!