We handle the applications, passports and diplomas of real people. Below, in plain words: what we collect, why, where it goes and how to have it deleted.
The data controller is SolidForce OÜ, registry code 17512046, address Erika tn 13a-113, Tallinn, Harju maakond, Eesti.
For anything concerning this data: info@solidforce.eu, +372 5851 4457.
We process data under the EU General Data Protection Regulation (GDPR) and the Estonian Personal Data Protection Act.
From the application form - what you entered yourself:
Files you attached: CV, diplomas, certificates, copies of documents. None of them are mandatory.
Technical records created automatically:
We keep the IP address and browser details for one reason: to be able to prove a year later that it was you who gave consent, and when. They are used for nothing else.
We do not collect data on health, criminal record, religion, origin or political views, and we ask you not to include such information in the form or the files.
Finding you work - the reason you filled in the form. Basis: your consent, and once negotiations start, preparation of a contract.
Contacting you: confirmation that the form arrived, questions about your experience, suitable vacancies, notices when the status of your application changes.
Passing your candidacy to an employer - only with your separate consent for each employer, see section 4.
Protection against abuse: rate limiting on forms and file checks so that the form cannot be used to upload malware.
Meeting a legal requirement, should one be addressed to us.
Your data does not reach an employer automatically. The application goes only to SolidForce staff.
Before we show your application to a particular employer, we ask you separately and name them. Refusing costs you nothing: you stay in our database and in the running for other vacancies.
Besides employers, the data is accessible to:
We do not sell data, do not pass it to advertising networks and do not use it for profiling.
Data is not transferred outside the European Economic Area. If an employer is located outside it, we ask separately and explain what that means.
The application and files - 12 months from the last activity on your application. Activity means a message from you, a new application, or contact from us.
If nothing happens in that time, the data is deleted without a reminder.
Consent records - text version, date, IP - are kept for the same period: without them we cannot show we were entitled to keep the rest.
You can ask us to delete everything sooner at any time, see section 7.
Once a day we make an encrypted backup of the database and files so nothing is lost if something fails. Backups are kept for 14 days: deleted data, including data deleted at your request, disappears from them after that period, and we do not use it in the meantime.
Files live outside the public part of the site. There is no direct link to your CV: every request for a file checks that it comes from a signed-in member of staff.
Staff passwords are stored as irreversible hashes, and sign-in is protected by attempt limits.
The connection to the site is encrypted. Servers are located in the European Union.
Only staff who need access for their work have it, and every status change is recorded with the name of the person who made it.
For any of these, an e-mail to info@solidforce.eu is enough - from the address you gave in the form.
We answer within one month. If the question is complex and needs longer, we will tell you before the month is out.
If our answer does not satisfy you, you may turn to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee) or to the supervisory authority of your country of residence.
The public part of the site works without cookies. Language is chosen by the page address rather than a marker left in your browser, so there is nothing to track you with.
One technical cookie is set when SolidForce staff sign in to the closed part of the site. It does not concern candidates.
The Meta counter (Facebook pixel) is switched on only with your consent, which we ask for on your first visit. Until you answer, no third-party script is loaded at all. The counter sets a cookie and passes details of the visit to Meta Platforms Ireland, which may process them outside the European Economic Area; we need it to see which adverts candidates come from.
Declining breaks nothing: the site works in full. You can change your mind at any time - clear the site data in your browser and we will ask again.
The document has a version and a date, shown at the top of this page. The consent you gave is tied to a specific version, and we store its number together with your application.
If we change something substantive - the data we collect or how long we keep it - we will write to everyone whose application we hold.
