Recruitment privacy notice
Effective from 9th of September 2026.
This Recruitment Privacy Notice (“Privacy Notice”) describes how Scoro Software OÜ and its subsidiaries and affiliates (“Scoro”, “us” or “we”) process the personal data of candidates that apply to a position (“you”) or other data subjects like referrals in connection with Scoro’s recruiting processes.
Please read this Privacy Notice prior to submitting your personal data to us. Kindly note that by submitting your personal data to us we consider that you have read through and confirm your understanding of this Privacy Notice and agree to the use of your personal data as set out herein.
We are the controller of your personal data. Our contacts are as follows: Scoro Software OÜ, Endla 15, Tallinn 10122, Estonia, registry code 10806081, info@scoro.com. Contact of our data protection officer at privacy@scoro.com.
1. Personal data we collect about you
During the recruiting process, we may ask for submission of different information that enables us to assess your suitability for certain positions. You are not required to provide any requested information to us, but failing to do so may result in not being able to continue your candidacy for the job. Categories of personal data we collect are listed below with the purpose of processing such personal data.
2. The lawful bases for processing (purpose of personal data collection)
2.1. Performance of contract with the candidate or taking steps to enter into a contract (article 6(1) b)
We process the personal data on this legal ground to enter into an employment contract or for taking measures prior to concluding of such contract based on your request.
Purposes of processing. We process your personal data for the purpose of the recruitment process and for concluding an employment contract.
Categories of personal data. Identification data (your full name, date of birth, personal ID, picture of your ID card or passport), contact data (address, e-mail address, phone number), banking data (IBAN number for salary payments), employment data, data in your CV and motivation letter, e.g information about your education and trainings and language skill.
Results of the tests made in the recruitment process.
2.2. Legitimate interests
In some cases, we rely on our legitimate interests when processing your personal data. You have the right to ask for clarifications regarding the processing based on the legitimate interests by sending the request to us at details below. You also have the right to send the objection, if you find that processing of your data for the purposes provided below prejudices your rights.
(a) Purposes of processing. We process personal data for the purpose of verifying the data submitted by you and carrying out reference checks and/or conducting background checks (where applicable) and for the purpose of business management and administrative purposes, including maintaining our IT systems, record-keeping and improving our recruitment and business practices.
(a) Categories of personal data. Candidate’s identification data, data on the CV. For recommendations from the candidate we process the recommender’s name, phone number/email address. We assume that the candidate has obtained the consent from the recommender prior to sharing the data with us
(b) Purposes of processing. Having someone to call in case of an emergency regarding the employee
(b) Categories of personal data. Emergency contact’s name, phone number, and relation to the employee.
(c) Purposes of processing.Processing personal data with an AI tool to make the recruitment process more efficient.
(c) Categories of personal data. Candidates' identification data, data on the CV, transcribed version of interviews, communication summaries, communication with the candidate (e.g in email form).
2.3. Consent (article 6(1) a)
In some cases we process your personal data based on your consent. You have the right to withdraw your consent at every moment via email to our Data Protection Officer at privacy@scoro.com
3. Sources of your personal data
We usually collect personal data directly from you when you apply for a position with us or when we contact you with a possible job offer. In addition, we collect your personal data independently through different channels (e.g., via LinkedIn, other social media profiles, professional recruiting firms, from online job sites). We also may collect your personal data from third parties, such as professional recruiting firms, your references, prior employers, Scoro employees with whom you have interviewed or have recommended you for a vacancy, and employment background check providers, to the extent that this is permitted by applicable law.
If your candidacy has been proposed by a recruitment services provider, then the recruitment services provider has been the controller of your data upon proposing your candidacy. In such a case, please reach out to the recruitment services provider to find out more about how they process your personal data.
We collect your personal data via email, via phone, in person at interviews and/or by any other method.
4. Data recipients
Your personal data may be accessed by Scoro employees and third-party service providers (“Service Provider”), such as:
recruiters, interviewers and management working in the country of location of available position in Scoro;
recruitment software (e.g Teamtailor)
licensors and maintainers of IT systems, technical support staff;
consultants that may assist us in recruiting talent, administering and evaluating pre-employment screening and testing, and improving our recruiting practices.
Scoro is the controller of your personal data and the Service Provider is the authorized processor of your personal data. If we transfer your personal data to the Service Provider, we transfer personal data only to our authorized processors with whom we have previously entered into a data processing agreement. We require and expect from our Service Providers to be careful and ethical in the processing of Personal Data, to follow the Scoro privacy policy and to keep your personal data safe.
5. Transfer of your personal data
Kindly note that Scoro is active worldwide, which means that, among other things, your personal data may be transferred to Scoro HR teams (including Service Providers) located outside of the European Union for the purposes described above. We are using recruitment software Teamtailor; please find their privacy policy here.
However, we only transfer and store your personal data outside the EU where we have a lawful basis to do so, including to a recipient who is: (i) in a country which provides an adequate level of protection for personal data; or (ii) under an instrument which covers the EU requirements for the transfer of personal data outside the EU.
6. Data retention
If you accept an offer of employment by us, any relevant personal data collected during your pre-employment period will become part of your personal records and will be retained in accordance with specific country requirements.
If we do not employ you, we may nevertheless continue to retain and use your personal data, based on your consent, for a period of time (which may vary depending on the country) for system administration purposes, to consider you for potential future roles, and to perform research. You will receive an email from us asking permission to retain your data for 24 months. If you do not give us permission, your data will be deleted from the software we use for recruitment.
7. Your rights
You have the following rights in relation to your personal data:
the right of access to your personal data: you have the right to know whether Scoro processes your personal data and what is the purpose of processing your personal data
right to rectification of your personal data: you have the right to request rectification of the personal data concerning you if the data are inaccurate or incomplete.
right to withdraw your consent given for the processing of personal data
right to erasure of your personal data („right to be forgotten“): in some cases, you have the right to demand erasure of the personal data concerning you, for example in case you withdraw your consent and there are no other legal grounds for the processing of the data.
right to the restriction of processing: in some cases, you have the right to restrict the processing of the personal data concerning you for a certain time (e.g. if you have objected to the processing of personal data).
right to object to the processing of your personal data: you have the right to object to the processing of personal data, which is processed based on legitimate interest, including profiling. Upon objection, we will no longer process the personal data unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms.
right to data portability: if the processing of your personal data is based on your consent or the contract with us and the data processing is carried out by automated means, then you have the right to receive the data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format. Also, you have the right to claim to transmit those data to another service provider if it is technically possible.
file a complaint with a supervisory authority
If you would like to make a request or have a question about the personal data we have collected about you, please contact our data protection officer at privacy@scoro.com.
If you would like to make a request or have a question about personal data we have collected about you, please contact our data protection officer at privacy@scoro.com.
If you would like to file a complaint with the Data Protection Inspectorate, you can find the contact details at www.aki.ee.
This Recruitment Privacy Notice is valid from 8th of January 2023. In case this Recruitment Privacy Notice has been confirmed by you on another date, this Recruitment Privacy Notice shall be deemed to be communicated to you from the date of such confirmation. Should you wish to access our previous versions of Recruitment Privacy Notice, please reach out to the Data Protection Officer (privacy@scoro.com).
