Privacy Notice for Candidates

Privacy Notice for Candidates

Last updated: 8 October 2026

This notice explains how personal data is processed when you contact Emplava about a job vacancy or submit an application through emplava.com.

1. Data controller

Controller: Valerii Bondarenko
Contact: bartelbi06@gmail.com

2. What data we process

Depending on how you contact us, we may process your first name, surname, telephone number, optional message, the vacancy you contacted us about, page language, time of submission, and internal recruitment status. The CRM may also record the recruiter and recruitment team responsible for your inquiry.

The website and hosting layer may process technical data needed for security and operation, such as IP address, request identifiers and server/security logs. The application form uses temporary anti-abuse and delivery-control data to prevent duplicate or automated submissions.

Please do not include special-category or highly sensitive personal data in the optional message unless it is genuinely necessary and specifically requested.

3. Why we use your data

We use personal data to respond to your inquiry, manage your application, communicate with you, route the inquiry to the responsible recruiter, assess and match your interest to a relevant vacancy, maintain recruitment records, secure the service, prevent abuse, and establish or defend legal claims where necessary.

4. Legal basis

The main legal basis is our legitimate interest under Article 6(1)(f) GDPR in operating the recruitment process, responding to candidates, managing recruitment inquiries and protecting the service against abuse. Where processing is required by law, Article 6(1)(c) GDPR may also apply.

5. Who may receive your data

Your data may be accessed by authorised people working on recruitment for Emplava. Where necessary for the vacancy you are interested in, relevant information may be disclosed to a prospective employer or recruitment partner involved in that recruitment. Data may also be processed by hosting, CRM and IT service providers acting on our behalf, and may be disclosed to public authorities or professional advisers where required by law or necessary to protect legal rights.

6. International transfers

The website and CRM use hosting services provided by DreamHost. Current hosting may involve processing in the United States. Where GDPR requires safeguards for such transfers, DreamHost’s data processing terms provide for the European Commission’s Standard Contractual Clauses.

7. How long we keep data

We keep candidate and inquiry data for as long as reasonably necessary to handle the recruitment process and related communication. After that, data may be retained only for as long as needed to comply with legal obligations or to establish, exercise or defend legal claims. Records are reviewed and should be deleted or anonymised when they are no longer necessary. Short-lived technical anti-abuse data is retained only temporarily.

8. Your rights

Subject to the GDPR and applicable law, you may have the right to access your data, correct inaccurate data, request deletion, request restriction of processing, object to processing based on legitimate interests, and receive data in a portable form where the legal conditions for portability are met.

You may also lodge a complaint with a competent data protection supervisory authority, in particular in the EU/EEA country of your habitual residence, place of work, or the place of the alleged infringement.

9. Required and optional information

First name, surname and telephone number are required to submit the application form. The message field is optional. If required information is not provided, the form cannot be submitted and we may be unable to contact you about the vacancy.

10. Automated decision-making

The application form does not make decisions producing legal or similarly significant effects solely by automated means.

11. Contact

For privacy questions or to exercise your rights, contact bartelbi06@gmail.com.