T&A Nordic ("we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share your information in accordance with the EU General Data Protection Regulation (GDPR) and applicable Norwegian and Latvian data protection laws.
1. Data Controller
T&A Nordic is the data controller responsible for your personal data. If you have questions about this policy or your data, contact us at: hello@darbs-norvegija.lv
2. What Data We Collect
When you submit a job application through our platform, we collect:
- Full name, email address, phone number, age, and nationality
- Work experience, skills, and professional qualifications
- Language proficiency levels
- Industry preferences and skill assessments
- Photographs that demonstrate your work experience (1-5 photos)
- CV/Resume document (if provided)
- IP address and browser information (for security and analytics)
We do NOT collect sensitive personal data such as health information, political opinions, religious beliefs, or biometric data.
3. How We Use Your Data
We process your personal data for the following purposes:
- Job placement: Matching you with suitable job opportunities in Norway
- Communication: Contacting you about job opportunities, application status, and updates
- Partner sharing: Sharing anonymized data (first name, age, nationality, industry, skills - NO email, phone, last name, or CV) with recruitment partners and employers in Norway to facilitate job placement
- Service improvement: Analyzing aggregate data to improve our services
- Legal compliance: Meeting our legal obligations under employment and data protection laws
4. Legal Basis for Processing
We process your data based on:
- Consent (Article 6(1)(a) GDPR): You give explicit consent when submitting your application and checking the consent box
- Legitimate interest (Article 6(1)(f) GDPR): Processing necessary for our legitimate business interests in providing job placement services
- Contractual necessity (Article 6(1)(b) GDPR): Processing necessary to fulfill our job placement services
5. Data Sharing
We may share your data with:
- Recruitment partners and employers in Norway: Only anonymized data (first name, age, nationality, industry preferences, skills, language levels). We NEVER share your email, phone number, full name, or CV without your explicit additional consent.
- Service providers: Supabase (database hosting), Cloudinary (photo storage), email service providers - all bound by data processing agreements.
- Legal authorities: When required by law.
We do NOT sell your personal data to any third party.
6. Data Security
We implement appropriate technical and organizational measures to protect your data:
- All data is stored in encrypted databases (Supabase with AES-256 encryption at rest)
- Data transmission is encrypted via TLS/SSL (HTTPS)
- Access to personal data is restricted to authorized administrators only
- Row Level Security (RLS) policies enforce data access controls at the database level
- Regular security reviews and updates
7. Data Retention
We retain your personal data for:
- Active applications: As long as your application is active and you are seeking employment
- Placed candidates: Up to 24 months after successful placement for follow-up and compliance
- Inactive applications: Up to 12 months. After this period, we will contact you to ask if you want to renew your application or have your data deleted.
- You may request deletion at any time (see Your Rights below).
8. Your Rights Under GDPR
You have the following rights regarding your personal data:
- Right of access: Request a copy of all data we hold about you
- Right to rectification: Request correction of inaccurate data
- Right to erasure: Request deletion of your data ("right to be forgotten")
- Right to restrict processing: Request that we limit how we use your data
- Right to data portability: Receive your data in a structured, machine-readable format
- Right to object: Object to processing based on legitimate interest
- Right to withdraw consent: Withdraw your consent at any time by contacting us
To exercise any of these rights, email us at: hello@darbs-norvegija.lv. We will respond within 30 days.
9. International Data Transfers
Your data is primarily stored in EU/EEA data centers (Supabase EU region). When data is shared with Norwegian partners, it remains within the EEA. If any data needs to be transferred outside the EEA, we ensure appropriate safeguards are in place (Standard Contractual Clauses or adequacy decisions).
10. Cookies and Analytics
Our website uses essential cookies for functionality and analytics cookies to understand how visitors use our site. Analytics data is anonymized and does not identify individual users. You can disable cookies in your browser settings.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.
12. Complaints
If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority:
- Latvia: Data State Inspectorate (Datu valsts inspekcija) - www.dvi.gov.lv
- Norway: Datatilsynet (Norwegian Data Protection Authority) - www.datatilsynet.no
- Poland: UODO (Urząd Ochrony Danych Osobowych) - www.uodo.gov.pl
Contact Us
T&A Nordic
Email: hello@darbs-norvegija.lv
Website: www.darbs-norvegija.lv