Recruitment privacy notice

Effective from the 24th of July 2024.

This Recruitment Privacy Notice (“Privacy Notice”) describes how Scoro Software OÜ and its subsidiaries and affiliates (“Scoro”, “us” or “we”) process the personal data of candidates we contact and applicants that apply to a position (“you”) in connection with Scoro’s recruiting processes.

Please read this Privacy Notice prior to submitting your personal data to us. Kindly note that by submitting your personal data to us, we consider that you have read through and confirmed your understanding of this Privacy Notice and agree to the use of your personal data as set out herein.

We are the controller of your personal data. Our contact information is Scoro Software OÜ, Endla 15, Tallinn 10122, Estonia, registry code 10806081, info@scoro.com. You can also contact our data protection officer at privacy@scoro.com.

Personal data we collect about you  

During the recruiting process, we may ask you to submit information that enables us to assess your suitability for certain positions. You are not required to provide any requested information, but failing to do so may result in not being able to continue your candidacy for the job. The categories of personal data we collect are listed below with the purpose of processing such personal data.
 

The lawful bases for processing (purpose of personal data collection)

1. Performance of a contract with the candidate

We process the personal data on this legal ground to enter into an employment contract or take measures before concluding such a contract based on your request.

Purposes of processing. We process your personal data for the purpose of the recruitment process and for concluding an employment contract.

• Categories of personal data. Identification data (your full name, date of birth, personal ID, picture of your ID card or passport), contact data (address, e-mail address, phone number), banking data (IBAN number for salary payments), employment data, data in your CV and motivation letter, e.g. information about your education and trainings and language skill. Results of the tests made in the recruitment process. 

2. Legitimate interests 

In some cases, we rely on our legitimate interests when processing your personal data. You have the right to ask for clarifications regarding the processing based on legitimate interests by sending the request to us at the details below. You also have the right to send an objection if you find that processing your data for the purposes provided below prejudices your rights. 

Purposes of processing. We process personal data for the purpose of verifying the data submitted by you and carrying out reference checks and/or conducting background checks (where applicable) and for the purpose of business management and administrative purposes, including maintaining our IT systems, record-keeping and improving our recruitment and business practices.

• Categories of personal data. Candidate’s identification data, data on the CV.

  For recommendations from the candidate, we process the recommender’s name, phone number, and email address. We assume that the candidate has obtained consent from the recommender prior to sharing the data with us.

Purposes of processing. Having someone to call in case of an emergency regarding the employee.

• Categories of personal data. Emergency contact’s name, phone number, and relation to the employee.

3. Consent 

In some cases, we process your personal data based on your consent. You have the right to withdraw your consent or ask for clarifications at every moment via email to our Data Protection Officer at privacy@scoro.com

Purposes of processing: Making gifts to employees' children and adapting our workspace in case the employee has dietary restrictions or other health issues.

• Categories of personal data: Identification data (name, date of birth) of employee’s children. Allergies or other health data that the employer should know

Purposes of processing: To keep your contacts in case there is a suitable vacancy.

• Categories of personal data: Data in your CV and data acquired during your previous recruitment process.

Purposes of processing: to summarize your CV and video interviews. For this, Scoro uses an AI assistant. 

• Categories of personal data: Information was added to the CV and content of the video interview.

Sources of your personal data

We usually collect personal data directly from you when you apply for a position with us or when we contact you with a possible job offer. In addition, we collect your personal data independently through different channels (e.g., via LinkedIn, other social media profiles, professional recruiting firms, from online job sites). We also may collect your personal data from third parties, such as professional recruiting firms, your references, prior employers, Scoro employees with whom you have interviewed, and employment background check providers, to the extent that this is permitted by applicable law.

If your candidacy has been proposed by a recruitment services provider, then the recruitment services provider has been the controller of your data upon proposing your candidacy. In such a case, please reach out to the recruitment services provider to find out more about how they process your personal data.

We collect your personal data via email, phone, in-person interviews and/or by any other method.

Data recipients

Your personal data may be accessed by Scoro employees and third-party service providers (“Service Provider”), such as:

1. recruiters, interviewers and management working in the country of location of available position in Scoro;
2. licensors and maintainers of IT systems, technical support staff;
3. consultants that may assist us in recruiting talent, administering and evaluating pre-employment screening and testing, and improving our recruiting practices.

 Scoro is the controller of your personal data, and the Service Provider is the authorized processor of your personal data. If we transfer your personal data to the Service Provider, we transfer personal data only to our authorized processors with whom we have previously entered into a data processing agreement. We require and expect our Service Providers to be careful and ethical in the processing of Personal Data, to follow the Scoro privacy policy, and to keep your personal data safe.

Transfer of your personal data

Kindly note that Scoro is active worldwide, which means among other that your personal data may be transferred to Scoro HR teams (including Service Providers) located outside of the European Union for the purposes described above. We are using the recruitment software Teamtailor. Please find their privacy policy here.

However, we only transfer and store your personal data outside the EU where we have a lawful basis for doing so, including to a recipient who is: (i) in a country that provides an adequate level of protection for personal data; or (ii) under an instrument which covers the EU requirements for the transfer of personal data outside the EU.

Data retention

If you accept an offer of employment by us, any relevant personal data collected during your pre-employment period will become part of your personal records and will be retained in accordance with specific country requirements.

If we do not employ you, we may nevertheless continue to retain and use your personal data, based on your consent, for a period of time (which may vary depending on the country) for system administration purposes to consider you for potential future roles and to perform research. Thereafter, we retain your personal data for two years from the unsuccessful recruitment.

Your rights

You have the following rights in relation to your personal data:

1. the right of access to your personal data: you have the right to know whether Scoro processes your personal data and what is the purpose of processing your personal data
2. right to rectification of your personal data: you have the right to request rectification of the personal data concerning you if the data are inaccurate or incomplete.
3. right to withdraw your consent given for the processing of personal data
4. right to erasure of your personal data („right to be forgotten“): in some cases, you have the right to demand erasure of the personal data concerning you, for example in case you withdraw your consent and there are no other legal grounds for the processing of the data.
5. right to the restriction of processing: in some cases, you have the right to restrict the processing of the personal data concerning you for a certain time (e.g. if you have objected to the processing of personal data).
6. right to object to the processing of your personal data: you have the right to object to the processing of personal data, which is processed based on legitimate interest, including profiling. Upon objection, we will no longer process the personal data unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms.
7. right to data portability: if the processing of your personal data is based on your consent or the contract with us and the data processing is carried out by automated means, then you have the right to receive the data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format. Also, you have the right to claim to transmit those data to another service provider if it is technically possible.
8. file a complaint with a supervisory authority

If you would like to make a request or have a question about the personal data we have collected about you, please contact our data protection officer at privacy@scoro.com.

If you would like to file a complaint with the Data Protection Inspectorate, you can find the contact details at www.aki.ee. 

This Recruitment Privacy Notice is valid from the 24th of July, 2024. In case this Recruitment Privacy Notice has been confirmed by you on another date, this Recruitment Privacy Notice shall be deemed to be communicated to you from the date of such confirmation. Should you wish to access our previous versions of the Recruitment Privacy Notice, please contact the Data Protection Officer (privacy@scoro.com).