Privacy Policy

Last updated: April 2026

Petronord OÜ (registry code: 16961397, hereinafter “Petronord”, “we”, “us”, or “our”) is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your personal information in compliance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and Estonian data protection legislation.

1. Data Controller

The data controller responsible for your personal data is:

Petronord OÜ
Registry code: 16961397
Address: Tallinn, Estonia
Email: info@petronord.ee
Phone: +372 5633 1925

2. Personal Data We Collect

We collect the following categories of personal data depending on how you interact with us:

2.1 Contact Information (Employers)

Company name
Contact person name
Email address
Phone number
Project details and workforce requirements

2.2 Job Applicant Data

Full name
Email address and phone number
Profession and work experience
Education and certifications
Expected salary
Curriculum Vitae (CV) — PDF, DOC, DOCX files
Work photographs — JPG, PNG files
Additional information provided voluntarily

2.3 Technical Data

IP address
Browser type and version
Device information
Pages visited and time spent
Referral source

3. How We Use Your Data

We process your personal data for the following purposes:

Service delivery — To respond to staffing inquiries, match workers with positions, and manage employment relationships
Recruitment processing — To evaluate job applications, verify qualifications, and contact candidates about suitable opportunities
Communication — To respond to your inquiries and provide information about our services
Legal compliance — To comply with employment laws, tax regulations, and other legal obligations
Website improvement — To analyze website usage and improve our online services

4. Legal Basis for Processing (GDPR Article 6)

We process your personal data based on the following legal grounds:

Consent (Art. 6(1)(a)) — When you submit a contact form or job application, you consent to our processing of your data for the stated purposes. You may withdraw consent at any time.
Contractual necessity (Art. 6(1)(b)) — Processing necessary for the performance of a contract or to take steps at your request prior to entering into a contract (e.g., staff leasing agreements, employment contracts).
Legal obligation (Art. 6(1)(c)) — Processing required to comply with employment laws, tax obligations, and regulatory requirements in Estonia, Finland, Sweden, Norway, and Denmark.
Legitimate interest (Art. 6(1)(f)) — Processing necessary for our legitimate business interests, such as improving our services, ensuring website security, and preventing fraud.

5. Data Storage and Retention

Your personal data is stored on secure servers within the European Union. We retain your data for the following periods:

Contact inquiries — 2 years from the last interaction
Job applications — 3 years from submission (to match candidates with future opportunities)
Employment records — As required by local employment and tax laws (typically 7-10 years)
Website analytics — 26 months

After the retention period expires, your data is securely deleted or anonymized.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encrypted data transmission (SSL/TLS), access controls and authentication, regular security audits, employee training on data protection, and secure file storage for uploaded documents.

7. Data Sharing and Third Parties

We do not sell, trade, or rent your personal data to third parties. We may share your data with:

Client companies — When you apply for a position, we share relevant professional information with the hiring company (with your consent)
Government authorities — When required by law (tax authorities, labor inspectorates)
Service providers — Web hosting, email services, and IT support providers who process data on our behalf under data processing agreements

8. International Data Transfers

As we operate across Estonia, Finland, Sweden, Norway, and Denmark, your data may be transferred between these countries. All transfers occur within the EEA and are subject to GDPR protections. We do not transfer data outside the European Economic Area.

9. Your Rights Under GDPR

You have the following rights regarding your personal data:

Right of access (Art. 15) — Request a copy of your personal data
Right to rectification (Art. 16) — Request correction of inaccurate data
Right to erasure (Art. 17) — Request deletion of your data (“right to be forgotten”)
Right to restriction (Art. 18) — Request limitation of data processing
Right to data portability (Art. 20) — Receive your data in a structured, commonly used format
Right to object (Art. 21) — Object to processing based on legitimate interest
Right to withdraw consent — Withdraw previously given consent at any time

To exercise any of these rights, please contact us at info@petronord.ee. We will respond to your request within 30 days.

10. Cookies

Our website uses cookies to improve functionality and user experience. For detailed information about the cookies we use, please see our Cookie Policy.

11. Children’s Privacy

Our services are not directed at individuals under 18 years of age. We do not knowingly collect personal data from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last updated” date. We encourage you to review this policy periodically.

13. Supervisory Authority

If you believe your data protection rights have been violated, you have the right to file a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon):

Website: www.aki.ee
Email: info@aki.ee
Phone: +372 627 4135

14. Contact Us

For any questions about this Privacy Policy or your personal data, please contact:

Petronord OÜ
Email: info@petronord.ee
Phone: +372 5633 1925

Privacy Policy | Petronord OÜ