Kvalifits

Last updated:

← Home

Privacy policy

This document describes how the Kvalifits team (“we” or “the platform”) processes personal data in the Kvalifits service. We take privacy seriously and process data in line with applicable Estonian law and, where relevant, the EU General Data Protection Regulation (GDPR).

Purpose and controller

Kvalifits is a pre-launch skills-based recruitment platform. A legal entity has not yet been registered, so there is no registry code, legal address or VAT number to publish. Until registration, the Kvalifits team processes personal data as needed to operate this site. For privacy matters use the contact form on the Contact page.

If you are in the EU, you have GDPR rights including access, rectification, erasure, restriction, objection where applicable, and the right to lodge a complaint with a supervisory authority (in Estonia, the Data Protection Inspectorate).

Data we collect

Depending on whether you use the platform as a job seeker, employer, or both, we may process:

  • Account data: name, email, password hash (not the plain password), account type and settings.
  • Profile data: for job seekers e.g. education, experience, skills, languages, target roles; for employers company name, contact person, job posting content.
  • Documents and evidence: certificates, licences or other files you choose to upload.
  • Communications: messages or requests sent through the platform where that feature exists.
  • Technical data: IP address, browser, device type, logs (e.g. sign-in time), information from cookies as described in our cookie policy.
  • Usage analytics: page views and interactions where we use analytics (only with consent or another lawful basis as stated).

How we use data

We process personal data only for defined purposes:

  • Providing and securing your account (contract; legitimate interests).
  • Operating the platform: profiles, listings, matching, notifications (contract).
  • Improving quality, support and troubleshooting (legitimate interests or contract).
  • Legal compliance including retention where the law requires.
  • Email marketing only with separate consent or where permitted by law.

Legal bases

Processing may rely on: performance of a contract with you; our legitimate interests (e.g. security and development) balanced against your rights; your consent (e.g. non-essential cookies or marketing); or legal obligation.

Retention

We keep data only as long as needed for the purpose, unless a longer period is required by law.

When you close an account, we delete or anonymise personal data within a reasonable time, except where we must retain data by law or for resolving disputes.

Sharing

We do not sell your personal data. Limited sharing may occur with:

  • Processors (e.g. cloud, email) under agreements and our instructions.
  • If you are a job seeker, profile information may be visible to employers using the platform, subject to your choices and product design.
  • Authorities when required by law or to protect legitimate interests.

Transfers outside the EEA

If we use providers outside the EEA, we implement appropriate safeguards (e.g. standard contractual clauses) where required.

Your rights

You may request access, rectification, erasure (where applicable), restriction, object to processing based on legitimate interests, and withdraw consent where processing is consent-based.

See /en/andmekaitse for how to submit requests. Contact: the contact form on the Contact page.

Cookies and analytics

We use strictly necessary cookies (authentication, session, language). Analytics load only with consent when enabled in the product. The detailed list and consent UI share the same technical configuration — see the Cookie policy (/en/kupsised).

Security

We apply technical and organisational measures to protect data. No online service can guarantee absolute security.

Changes

We may update this policy. Material changes will be communicated on the platform or by email where appropriate.

Contact

Privacy: the contact form on the Contact page. General: the contact form on the Contact page.

This text describes the current pre-launch service and is not a substitute for legal advice. It will be updated with the registered operator’s details and reviewed before commercial launch.