Privacy Policy

Last updated: 29 September 2026

This Privacy Policy explains how NY Recruitment OÜ processes personal data when you visit this website, contact NY Recruitment, or submit an application for a vacancy. It is intended to provide the information required by applicable data protection law, including the EU General Data Protection Regulation (GDPR).

1. Who is responsible for your personal data?

NY Recruitment OÜ is the controller of personal data processed for the purposes described in this policy.

2. What personal data may we process?

Depending on how you interact with us, we may process:

• name and contact details;
• telephone number and email address;
• LinkedIn profile or other professional profile information you choose to provide;
• CV/resume information, including employment history, education, skills, languages and professional qualifications;
• information you provide in a motivation or other recruitment communication;
• information relating to your recruitment preferences, availability and communication with us;
• technical information needed to operate and secure the website, such as basic server or security logs.

Please do not submit sensitive personal data unless it is genuinely necessary for a recruitment process and you are asked to provide it.

3. Why do we process personal data?

• Recruitment and candidate matching: to assess applications and consider candidates for suitable current or future recruitment opportunities.
• Communication: to respond to enquiries and communicate with candidates and clients.
• Recruitment services: to support recruitment processes and, where relevant, introduce suitable candidates to client organisations.
• Legal and administrative obligations: to keep records and comply with applicable legal obligations.
• Security and website operation: to maintain the security, availability and integrity of the website and application service.

4. Legal bases

Depending on the context, processing may be based on one or more of the following GDPR legal bases:

• Article 6(1)(b): processing necessary to take steps at your request before entering into a contract or, where applicable, to perform a contract.
• Article 6(1)(f): legitimate interests, including operating a recruitment business, assessing and communicating with candidates, maintaining appropriate recruitment records, and protecting the security of our systems, where those interests are not overridden by your rights and interests.
• Article 6(1)(c): compliance with a legal obligation where applicable.
• Article 6(1)(a): consent where we specifically ask for it. Where processing is based on consent, you may withdraw that consent at any time.

5. Applications and CVs

When you apply through this website, the information you submit is transmitted to NY Recruitment for recruitment purposes. The application may include your name, contact details, LinkedIn profile, motivation and CV/resume.

Submitting an open application means you are asking NY Recruitment to consider your profile for suitable recruitment opportunities. We do not guarantee that an application will result in an interview, introduction or employment.

6. Website analytics

This website uses Cloudflare Web Analytics to measure aggregated website usage, including visits and page views, and to understand website performance. The analytics service is designed not to use cookies or local storage to track individual visitors. Technical information associated with requests may be processed by Cloudflare to provide these statistics and operate the service. For further information, consult Cloudflare’s Privacy Policy.

7. Who may receive your data?

Access to personal data is limited to people and service providers who need the information for the purposes described in this policy. This may include NY Recruitment personnel or contractors and technology providers used to operate the website, email and application infrastructure.

Where a candidate is being considered for a specific role, relevant candidate information may be shared with the client organisation responsible for that vacancy, where this is necessary for the recruitment process and permitted by applicable law.

7. International transfers

Some technology or service providers used to operate digital services may process data outside the European Economic Area. Where a transfer of personal data to a third country takes place, NY Recruitment will use an applicable GDPR transfer mechanism and appropriate safeguards where required by law.

9. How long do we keep personal data?

We keep personal data only for as long as necessary for the relevant purpose. As a general recruitment practice, candidate information may be retained for up to 12 months after the last meaningful recruitment contact, unless a longer period is required or permitted by law, a recruitment relationship is continuing, or you have separately agreed to continued retention. We may retain limited records for longer where necessary to establish, exercise or defend legal claims or comply with legal obligations.

You may ask us to delete or update your profile at any time, subject to applicable legal requirements.

10. Your rights

Subject to the conditions and exceptions in the GDPR, you may have the right to:

• request access to your personal data;
• request correction of inaccurate or incomplete data;
• request deletion of your personal data;
• request restriction of processing;
• object to processing based on legitimate interests;
• receive certain personal data in a portable format;
• withdraw consent where processing is based on consent; and
• lodge a complaint with a data protection supervisory authority.

To exercise your rights, email info@nyrecruitment.com. We may need to verify your identity before fulfilling a request.

11. Supervisory authority

NY Recruitment OÜ is established in Estonia. You may contact the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) regarding data protection concerns. You may also have the right to complain to the supervisory authority in the EU/EEA country where you live or where you believe an infringement occurred.

Estonian Data Protection Inspectorate: www.aki.ee · info@aki.ee

12. Data Protection Officer

NY Recruitment OÜ has not appointed a Data Protection Officer (DPO). For privacy-related questions and requests, please contact info@nyrecruitment.com.

13. Automated decision-making

NY Recruitment does not use this website to make decisions about candidates based solely on automated processing that produce legal or similarly significant effects.

14. Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse or disclosure. No internet transmission or storage system can be guaranteed to be completely secure.

15. Changes to this policy

We may update this Privacy Policy when our services, processing activities or legal obligations change. The latest version will be published on this page with the date of the most recent update.