Last update: May 2026
1. Introduction
S.P.K.T. OU. with registered address at 5-11 Lootsa, 11415,Tallinn Estonia (“we”, “us”) values your privacy and is committed to protecting your personal information. This privacy notice (the “Privacy Notice”) explains how we collect, use, and disclose your personal information in connection with our recruitment processes in our relationship with you as a job candidate. Please read it carefully to understand our practices regarding the processing of your personal data. As used in this Privacy Notice, “personal data” or “personal information” means any information that relates to, identifies, or reasonably could be used to identify an individual, directly or indirectly.
Please note that this privacy notice does not apply to information we process when you visit or interact with the website www.speakitjobs.com (the “Website”). For details on how we process personal data in relation to the Website, please refer to our Website Privacy Notice.
2. The information we collect about you
We may collect various types of personal data from you which we have grouped together as follows:
a. Identity Data, which includes your name, surname, title, place of birth and documents evidencing your identity.
b. Contact Data, which includes your email address or telephone number.
c. Qualifications and Working Experience Data, which includes your CV or résumé, details of your education, training, courses attended and internships, documents evidencing your right to work, and any personal data provided by you in your cover letter or during the application process. It also includes information obtained from CV libraries and professional social networks, as well as details about your availability and other relevant information such as your photograph, notes made by HR representatives, and information relevant to assessing your skills and employability.
d. Social Media Data, which includes your profile data on social media such as LinkedIn and other information you make public on or otherwise share with us from social media.
e. Contact Forms and Communications data, which includes any information you share with us when completing our contact forms at your sole discretion (for example using the “Contact” function on our Website). Please note that fields marked with an asterisk (*) are mandatory fields, because we need this information to respond to your request.
a. Marketing Communications Data which includes information about how you respond to our marketing campaigns when you sign up to receive our newsletters.
b. Sensitive Data, which includes, where applicable, information about alleged or proven criminal offences, in each case only where required or permitted by, and in compliance with, applicable law.
c. Financial Information, which includes bank account details, income, salary, tax information, national insurance number, invoicing, and payment records.
3. Sources from which we collect personal information
We collect your personal information in the following ways:
a. Direct interactions: We may collect some of the information listed above directly from you from the application forms or other materials you submit to us and your interactions with us via post, phone, email or otherwise.
b. Third parties: We may receive personal information about you from various third parties, including recruitment agencies, your current or past employer, academic institutions and training or certification providers, background check providers, job boards or other job posting websites.
c. Public sources: We may collect personal data you submit in publicly available sources, such as professional memberships or qualifications made publicly available on personal webpages, social media (e.g. LinkedIn) or directories and similar websites, all in accordance with applicable law.
4. Purposes of the processing of your personal information
We process your personal information for the purposes mentioned below:
● To process your job applications and facilitate the application process. This includes matching you with potential employers and arranging and conducting interviews.
● To offer or keep you informed about suitable or future job opportunities through email, phone, or other communication methods.
● To find appropriate candidates to fill our clients’ job openings.
● To respond to your requests or questions, or provide information when you contact us or make a request to us.
● To send you marketing communications about job postings, events, newsletters, and related communications.
● To enforce this Privacy Notice and our Terms & Conditions and to comply with any legal obligations or government-reporting obligations.
● To establish, exercise, or defend against legal claims.
● For our own business purposes, including to further develop, test and improve our existing or new systems/processes to better serve you.
● To diagnose, prevent, and respond to actual or potential illegal activities, or intellectual property infringement.
5. Our legal bases
To the extent required by applicable laws, we process your personal data only when:
● You provide your consent for a specific purpose: for example, when you allow us to send you direct marketing.
● It is necessary for the performance of a contract or pre-contractual steps: for example to take steps prior to entering an employment contract.
● It is necessary to comply with legal obligations: for example to provide accommodations during the recruitment process.
● It satisfies a legitimate interest which is not overridden by your data protection interests: for example, to understand and improve our recruitment process.
● It is used to protect your or others’ vital interests: for example, in rare life-threatening emergency cases.
Depending on the circumstances, we may rely on different legal bases when processing the same information for different purposes. If you reside outside the European Economic Area (“EEA”), Switzerland or the United Kingdom (“UK”), the legal bases on which we rely may differ from those listed above.
6. Sharing of your personal information
We may disclose your personal information to third parties where necessary for the performance of our services, to facilitate our processing of your data, or for other purposes set out in this Privacy Notice. Such disclosures may also involve the transfer of personal data outside the EEA.
When we transfer personal data outside the EEA, we will ensure that appropriate safeguards are in place in accordance with the “Transfers of your personal information” section of this Privacy Notice.
The parties to whom we may disclose your personal information include:
● Our contractors and/or employees: To provide our services to you, our employees and/or contractors may receive access to your personal data only on a need-to-know basis. Such employees and contractors abide by confidentiality obligations.
● Our service providers: We disclose certain categories of personal information to our authorized service providers to enable us to provide our services to you. These service providers may use your information only to perform these tasks on our behalf, such as marketing and advertising, hosting or supporting our IT systems. These service providers are subject to contractual and other legal obligations to preserve the confidentiality of your data and to respect your privacy, and will only have access to the data they need to perform their functions.
● Business partners who we partner with to jointly market our services.
● Prospective employers: We will share your data with clients of ours who are offering jobs or assignments you may be interested in, or who are interested in your profile.
● Professional advisors, such as lawyers, accountants, and auditors.
● Government or law enforcement authorities: We may share your data with government, police, regulators or law enforcement agencies authorities if, at our sole discretion, we consider that we are legally obliged or authorised to do so or it would be prudent to do so.
● Legal successors: We may disclose personal information to a buyer or other successor in the event of a merger, acquisition or sale or transfer of some or all our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding. Such transactions may be in our legitimate interest, particularly our interest in making decisions that enable our business to develop.
7. Communications about job opportunities
From time to time, we may send you information that we believe could be relevant or interesting to you. For example, when we have collected your contact details during a previous interaction, such as when you submitted a job application, CV or expressed interest in our services, we may communicate with you about other similar recruitment opportunities. This approach is helpful because it enables us to share information and suggest roles that may suit you, improving your chances of finding a new position.
Some communications require your explicit consent, while others are sent based on soft opt-in, which means we may contact you if you have previously interacted with us, unless you choose to opt out. For other electronic marketing, we will only contact you where you have given your explicit consent, in accordance with applicable laws. You can opt out at any time by clicking the “unsubscribe” link in our marketing messages.
Although we make every effort to respect your preferences, there is a small possibility that, after you have opted out, your details could be obtained again from public sources or third parties, resulting in unsolicited marketing communications. If this happens, we apologise and ask that you either use the “unsubscribe” link in that message or contact us directly at [email protected] so we can remove your details from our marketing lists.
8. Automated decision making/ profiling
We may use automated tools to support our recruitment processes, including to organise, assess, and match candidate profiles with relevant job opportunities based on criteria such as skills, qualifications, experience, location, and stated preferences. This processing may involve profiling, meaning that we analyse certain aspects of your professional profile in order to identify suitable roles or prioritise candidates. However, we do not make decisions based solely on automated processing that produce legal or similarly significant effects on you. Human review is always involved in recruitment decisions.
The use of these tools is based on our legitimate interest in improving the efficiency and effectiveness of our recruitment services, as well as taking steps at your request prior to entering into a potential employment contract.
You have the right to request further information about this processing, to object to such processing where applicable, and to challenge a decision, as described in the “Your Rights regarding your personal information” section of this Privacy Notice.
9. Transfers of your personal information
Your personal information may be transferred and processed in one or more countries, both within and outside the EEA, UK or Switzerland. Such transfers are necessary for various purposes, including the operation and provision of the services described in our Terms & Conditions and this Privacy Notice.
Whenever we transfer personal data outside the EEA or other jurisdictions with comprehensive data protection laws, we will ensure that such transfers are carried out in compliance with this Privacy Notice and applicable data protection legislation, and are based on appropriate legal transfer mechanisms.
Where applicable, we rely on adequacy decisions adopted by the European Commission, which confirm that certain countries provide a level of data protection essentially equivalent to that of the EEA. In other cases, we use standard contractual clauses approved by the European Commission (and the UK’s equivalent standard contractual clauses, where relevant), or we rely on other legal bases and derogations permitted under applicable data protection laws for transfers to third countries.
For further information, or to request a copy of our standard contractual clauses, please refer to the “Contact Us” section below for details on how to reach us.
10. Retention of your personal information
We will retain your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including to comply with any legal or regulatory obligations.
To determine the appropriate retention period, we consider several factors, including the nature of the personal data, the potential risk of harm from unauthorised use or disclosure, the purposes of processing, and whether those purposes could be achieved with less data or without processing personal data.
Where we process personal data on behalf of our clients, the applicable retention period will be determined by the respective customer’s retention policy and our contractual arrangements with that client. In all other cases, where we act as an independent controller, we will retain your personal data for up to 36 months from your last interaction with us, in order to consider you for relevant current and future job opportunities, as explained in the section “Communications about job opportunities” above.
Before the end of this period, we may contact you to ask whether you wish to remain in our candidate database. If you do not confirm your interest, we will delete your personal data, unless we are required to retain it for legal or regulatory purposes. You may also request deletion at any time.
When your personal data is no longer required for the purposes set out in this Privacy Notice, we will delete it from our systems. Where permissible, we will also delete your personal data upon your request, as described in the “Your Rights regarding Your Personal Information” section.
11. Security
We take appropriate measures to ensure that all personal data is kept secure including security measures to prevent personal data from being accidentally lost, or used or accessed in an unauthorised way.
We limit access to your personal data to those who have a genuine business need to know it. Those processing your information will do so only in an authorised manner and are subject to a duty of confidentiality. We also have procedures in place to deal with any suspected data security breach.
Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted through any online means, therefore any transmission remains at your own risk.
12. Your Rights regarding your Personal Information
Under applicable data protection laws, you have the following rights:
● Right to access your personal information: You are entitled to request information about the personal data we hold about you and how it is processed, as well as a copy of your information.
● Right to correct your personal information: You can rectify or update inaccurate personal data concerning you.
● Right to delete personal information: In certain circumstances you have the right to have your personal information deleted, subject to any legal obligations we may have to retain data.
● Right to data portability: You have the right to receive the personal data provided by you in a structured, commonly used, and machine-readable format and to transmit this personal data to another data controller.
● Right to restrict or object to the processing of your personal information: In certain circumstances you have the right to obtain restriction of the processing of your personal information, or to object to certain processing thereof on grounds relating to your particular situation, including the right to object to a decision based solely on automated processing/profiling, which produces legal effects or similarly significantly affects you, unless such processing is permitted by applicable law.
● Right to withdraw consent: You have the right to withdraw consent at any time where we are relying on consent to process your personal information. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.
If you want to exercise any of your rights, please contact us at [email protected], using ‘Privacy Request’ as the subject of your mail. Please note that we have one (1) month to respond to your request.
Prior to processing an access or deletion request, we may need to verify your identity and ensure your right to access or delete the information. This is an appropriate and reasonable security measure to ensure that personal data is not disclosed to any person who has no right to receive it or deleted in an unauthorized way.
Finally, you have the right to lodge a complaint with your local data protection authority.
13. Changes to this Privacy Notice
We may update this Privacy Notice from time to time. If we make important changes, we may attempt to inform you, but we also encourage you to review the latest version regularly, as any changes will apply to you. The date of the latest update will always be shown under the “Last Modified” section at the top of this Privacy Notice.
14. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Notice, or if you would like further information about how we protect your personal data, you can contact us at [email protected]. You may also contact our Data Protection Officer at [email protected].
