Privacy Policy

T&A Nordic is the data controller responsible for your personal data. If you have questions about this policy or your data, contact us at: hello@darbs-norvegija.lv

When you submit a job application through our platform, we collect:

- Full name, email address, phone number, age, and nationality

- Work experience, skills, and professional qualifications

- Language proficiency levels

- Industry preferences and skill assessments

- Photographs that demonstrate your work experience (1-5 photos)

- CV/Resume document (if provided)

- IP address and browser information (for security and analytics)

We do NOT collect sensitive personal data such as health information, political opinions, or religious beliefs. The one identity document we handle is described in section 2.1: a photo of your ID card or passport, collected only if you choose to upload it, and used only to verify EU citizenship.

We place only EU citizens with Norwegian employers. To confirm citizenship, you can upload a photo of your ID card or passport with your application.

- Voluntary: the upload is optional. Your application works without it.

- Purpose: we use the document for one thing only — checking that you are an EU citizen. Nothing else.

- Storage: the file goes into a private, encrypted storage area that is never publicly accessible. Only T&A Nordic staff can open it, through short-lived secure links.

- Never shared: employers, recruitment partners, and any other third party never see the document. They only see a "verified" mark once we have checked it.

- Retention and deletion: we keep the document while your application is active and delete it when your data is deleted. You can ask us to delete it at any time at hello@darbs-norvegija.lv.

- Legal basis: your consent (Article 6(1)(a) GDPR), given by the act of uploading. You can withdraw it at any time by asking us to delete the document.

We process your personal data for the following purposes:

- Job placement: Matching you with suitable job opportunities in Norway

- Communication: Contacting you about job opportunities, application status, and updates

- Partner sharing: Sharing anonymized data (first name, age, nationality, industry, skills - NO email, phone, last name, or CV) with recruitment partners and employers in Norway to facilitate job placement

- Service improvement: Analyzing aggregate data to improve our services

- Legal compliance: Meeting our legal obligations under employment and data protection laws

We process your data based on:

- Consent (Article 6(1)(a) GDPR): You give explicit consent when submitting your application and checking the consent box

- Legitimate interest (Article 6(1)(f) GDPR): Processing necessary for our legitimate business interests in providing job placement services

- Contractual necessity (Article 6(1)(b) GDPR): Processing necessary to fulfill our job placement services

We may share your data with:

- Recruitment partners and employers in Norway: Only anonymized data (first name, age, nationality, industry preferences, skills, language levels). We NEVER share your email, phone number, full name, or CV without your explicit additional consent.

- Service providers: Supabase (database hosting), Cloudinary (photo storage), email service providers - all bound by data processing agreements.

- Legal authorities: When required by law.

- Identity documents (ID/passport photos) are never shared with partners, employers, or any other third party under any circumstances.

We do NOT sell your personal data to any third party.

We implement appropriate technical and organizational measures to protect your data:

- All data is stored in encrypted databases (Supabase with AES-256 encryption at rest)

- Data transmission is encrypted via TLS/SSL (HTTPS)

- Access to personal data is restricted to authorized administrators only

- Row Level Security (RLS) policies enforce data access controls at the database level

- Regular security reviews and updates

We retain your personal data for:

- Active applications: As long as your application is active and you are seeking employment

- Placed candidates: Up to 24 months after successful placement for follow-up and compliance

- Inactive applications: Up to 12 months. After this period, we will contact you to ask if you want to renew your application or have your data deleted.

- You may request deletion at any time (see Your Rights below).

You have the following rights regarding your personal data:

- Right of access: Request a copy of all data we hold about you

- Right to rectification: Request correction of inaccurate data

- Right to erasure: Request deletion of your data ("right to be forgotten")

- Right to restrict processing: Request that we limit how we use your data

- Right to data portability: Receive your data in a structured, machine-readable format

- Right to object: Object to processing based on legitimate interest

- Right to withdraw consent: Withdraw your consent at any time by contacting us

To exercise any of these rights, email us at: hello@darbs-norvegija.lv. We will respond within 30 days.

Your data is primarily stored in EU/EEA data centers (Supabase EU region). When data is shared with Norwegian partners, it remains within the EEA. If any data needs to be transferred outside the EEA, we ensure appropriate safeguards are in place (Standard Contractual Clauses or adequacy decisions).

Our website uses essential cookies for functionality and analytics cookies to understand how visitors use our site. Analytics data is anonymized and does not identify individual users. You can disable cookies in your browser settings.

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority:

- Latvia: Data State Inspectorate (Datu valsts inspekcija) - www.dvi.gov.lv

- Norway: Datatilsynet (Norwegian Data Protection Authority) - www.datatilsynet.no

- Poland: UODO (Urząd Ochrony Danych Osobowych) - www.uodo.gov.pl