Privacy Policy
Last updated: September 4, 2026
Privacy Policy & GDPR Disclosure
Last updated: September 4, 2026. Effective for all EU candidates, corporate clients, B2B consultation inquiries, and platform visitors operating within the EEA, specifically governed under the jurisdiction of the Republic of Estonia.
Document Sections
1. Introduction & Data Controller
This Privacy Policy outlines how Virtuous Resettlement Advisors OÜ (“we”, “us”, “our”) collects, processes, stores, and protects personal data obtained from candidates, corporate clients, B2B partners, and website visitors.
Data Controller: Virtuous Resettlement Advisors OÜ
Registration Code: 17526108
Registered Address: Seebi tn 1-1501, 11316 Tallinn, Kristiine District, Harju County, Estonia
Official Contact Email: info@virtuousresettlement.eu
Data Privacy Officer / Enquiries: info@virtuousresettlement.eu
2. Information We Collect
We collect personal data necessary to facilitate international workforce mobility, candidate recruitment support, B2B partnerships, and corporate business consultancy services.
Candidate Applications & CV Data: Full name, date of birth, nationality, current location, phone/WhatsApp number, email address, job role, professional experience, educational qualifications, language proficiencies, driving license details, certificates, passport availability, CV uploads, and supporting documents.
Employer & B2B Partner Data: Company name, contact person name, email address, phone/WhatsApp number, business type, candidate market preferences, and corporate manpower requirements.
General Website Enquiries: Name, contact details, project timeline, operational scope, and message content submitted via contact forms.
Technical & Usage Data: IP address, browser type, device information, operating system, and website usage statistics collected via functional cookies and security analytics.
3. Purpose & Legal Basis for Processing (GDPR)
We process personal data strictly under valid lawful bases defined in Article 6 of the General Data Protection Regulation (GDPR):
Consent (Art. 6(1)(a)): When candidates or visitors voluntarily submit applications, CVs, contact forms, or consent to cookie storage.
Performance of a Contract (Art. 6(1)(b)): Processing necessary to evaluate candidate suitability for employer orders, execute B2B recruitment mandates, or fulfill business consultancy agreements.
Legal Obligation (Art. 6(1)(c)): Retaining corporate, financial, and tax records in compliance with Estonian statutory requirements.
Legitimate Interests (Art. 6(1)(f)): Ensuring platform security, preventing spam via Google reCAPTCHA, and managing operational communication.
4. How We Share & Transfer Personal Data
We strictly do not sell, rent, or commercialize personal data. Data is shared solely for operational recruitment and administrative functions:
Prospective Employers & Partners: Candidate CVs and professional profiles are shared with verified employers or recruitment partners only after initial screening for relevant job placements.
Third-Party Service Providers: Secure cloud hosting, file storage systems, and email dispatch networks operating under strict data processing agreements.
Legal & Regulatory Authorities: Disclosed only when strictly required by law or competent administrative bodies under applicable regulations.
International Transfers: Where cross-border recruitment requires transferring candidate details outside the European Economic Area (EEA), we ensure appropriate safeguards are enforced (such as Standard Contractual Clauses – SCCs).
5. Document Security & Storage
We implement strict organizational and technical security measures to protect personal data. Candidate CVs, identification documents, and sensitive attachments are uploaded to restricted, encrypted storage servers and are never made publicly accessible.
6. Data Retention Periods
Candidate Applications & CVs: Retained for up to two (2) years from submission to match candidates with active workforce vacancies, or until consent is explicitly withdrawn.
B2B & Employer Inquiries: Retained for the duration of the commercial relationship plus applicable statutory audit periods.
Financial & Corporate Records: Retained for seven (7) years in alignment with Estonian accounting and tax standards.
7. Your Privacy Rights (GDPR Chapter III)
Under European data protection law, you hold the following rights:
Right of Access (Art. 15): Request confirmation and copies of your personal data held by us.
Right to Rectification (Art. 16): Request correction of inaccurate or incomplete personal data.
Right to Erasure (Art. 17): Request permanent deletion of your data (“Right to be Forgotten”).
Right to Restriction (Art. 18): Request restriction of data processing under specific conditions.
Right to Data Portability (Art. 20): Request transfer of your data in a structured, machine-readable format.
Right to Object (Art. 21): Object to data processing based on legitimate interests.
To exercise any of these rights, contact our privacy team at info@virtuousresettlement.eu.
8. Complaints & Supervisory Authority
If you believe your data processing violates privacy laws, you have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon):
Address: Tatari 39, 10134 Tallinn, Estonia
Email: info@aki.ee
Website: www.aki.ee