Applicant privacy
ROYAL BALTIC&CO OÜ
Tallinn, Kesklinna linnaosa, V. Reimani tn 7a-8, 10124
info@royal-baltic.eu
Purpose and information
We process your name, contact details, desired role, message and CV to review your application and contact you. Required fields are needed for this review; phone and message are optional. Please do not submit identity documents or special categories of personal data.
Legal basis
We review your application to take steps at your request before entering into a contract (GDPR Article 6(1)(b)); German employment privacy law, including BDSG section 26, additionally applies where relevant. Abuse prevention relies on our legitimate interest in form security (Article 6(1)(f)). The checkbox acknowledges this notice; it is not marketing or talent-pool consent.
Access and processors
Only authorised administrators handling recruitment may access applications. Vercel and Supabase provide hosting and storage as described on our subprocessors page. See our general privacy notice for transfers and safeguards. CVs are not shared with LinkedIn; sharing a vacancy opens LinkedIn only when clicked.
Retention
Applications are reviewed regularly and flagged for deletion 180 days after submission. You may request earlier deletion. We do not enrol applicants in a talent pool. Rate limiting uses hashed IP and email values; expired entries are cleaned on the next request once older than 24 hours.
Your rights
Contact info@royal-baltic.eu to request access, correction, deletion, restriction or, where applicable, portability, or to object to processing based on legitimate interests. You may complain to a supervisory authority, including Estonia’s Andmekaitse Inspektsioon or the authority where you live. We do not make automated recruitment decisions.