Privacy Policy
This Policy explains what data worktoeu.com collects about you, why, who it is shared with and how long it is kept. We have described what actually happens rather than offering generic wording: every item here corresponds to a specific field in our database.
1. Who processes your data
1.1. The data controller is [COMPANY NAME], IDNO [NUMBER], address: [ADDRESS], Republic of Moldova.
1.2. Contact for data protection matters: [REQUESTS EMAIL], phone [PHONE].
1.3. Processing is governed by the personal data protection law of the Republic of Moldova and, as regards data processed in connection with employment in European Union states, by the EU General Data Protection Regulation (GDPR).
2. What data we collect
2.1. What we collect depends on what you do on the site.
- Applying to a vacancy: your name, phone number, the text of your comment, and the vacancy you applied to.
- Registration and account: email address, first name, last name, your password as an irreversible hash, and optionally phone number, date of birth, citizenship and city.
- Signing in with Google or Telegram: your profile identifier at that service, email address, first and last name, and a link to your profile picture where the service provides them.
- Contact form enquiry: name, email, phone, subject and message text.
- Callback request: name and phone number.
- Employer request: company name, website, country and city, contact person and position, phone, email, description of the staff required and any comment.
- Saved vacancies: the list of vacancies you have marked.
- Technical data on any request: IP address, browser User-Agent string, date and time. These are recorded to protect against automated submissions and abuse.
3. What we do NOT collect
3.1. We do not request or store copies of passports, diplomas, medical certificates or other documents through the site. Where such documents are needed for employment, they are provided directly to the employer or through a manager, outside the site.
3.2. We do not store passwords in plain text β only an irreversible cryptographic hash from which the password cannot be recovered.
3.3. We do not store bank card details: the site accepts no payments. Services for job seekers are free.
3.4. We do not collect data on health, criminal records, religious or political beliefs, ethnicity or other special categories of data.
3.5. We do not use automated decision-making or profiling: your application is assessed by a person.
4. Why we process data and on what basis
4.1. The legal basis is stated for each purpose.
- Passing your application to an employer and assisting with placement β performance of the contract concluded by acceptance of the public offer.
- Creating and running your account, signing in, recovering access β performance of the contract.
- Responding to your enquiry through the contact forms β performance of the contract, or your consent given by submitting the form.
- Protecting the site against automated submissions, password guessing and abuse (recording IP addresses and limiting request frequency) β our legitimate interest in keeping the service secure.
- Loading the embedded Google map on the contacts page β your consent given through the cookie banner. Without consent the map is not loaded.
- Keeping records of processed requests to demonstrate good faith in the event of a dispute β our legitimate interest.
5. Who we share data with
5.1. We do not sell or share data with third parties for advertising. Sharing occurs only in the cases listed.
- The employer whose vacancy you applied to β your name, phone, comment and qualification details needed to consider your application.
- Our partner [PARTNER NAME, KRS/NIP], Republic of Poland, involved in arranging employment β the same details, where your application concerns one of its vacancies.
- Our hosting provider [HOSTING NAME], which hosts the site and database β under a data processing agreement.
- Google LLC β when you use Google sign-in and when the embedded map loads, if you have consented.
- Telegram β when you use Telegram sign-in, and for internal notifications to our managers about new requests.
- Public authorities β only on a reasoned request in the cases provided for by law.
6. Transfers outside the Republic of Moldova
6.1. Your data is transferred to European Union states, primarily the Republic of Poland, because that is where the employers and the partner arranging employment are located.
6.2. European Union states provide a level of data protection comparable to the requirements of Moldovan law.
6.3. The transfer is made on the basis of performance of our contract with you β without it, employment abroad is impossible by its very nature.
6.4. [FOR THE LAWYER: verify whether the supervisory authority must be notified of the cross-border transfer, and confirm that a data processing agreement is in place with the Polish partner.]
7. How long we keep data
7.1. We do not keep data longer than necessary for the purposes for which it was collected.
- Account β for as long as you use it. When you delete your account, the account data and saved list are deleted immediately.
- Vacancy applications β 3 years from submission. This period allows the circumstances of a placement to be evidenced in any dispute.
- Contact form enquiries and callback requests β 1 year.
- Employer requests β 3 years from the last interaction.
- Verification codes and sign-in tokens β until expiry, after which they are deleted automatically.
- Technical records used to prevent abuse β 24 hours.
- After these periods, data is deleted or anonymised.
8. Your rights
8.1. You have the right, at any time, to:
- obtain confirmation of whether we process your data, and a copy of it;
- request correction of inaccurate or incomplete data;
- request erasure of your data where the basis for processing no longer applies;
- request restriction of processing while your objection is being considered;
- receive your data in a machine-readable format or ask for it to be transmitted to another controller;
- object to processing based on our legitimate interest;
- withdraw consent previously given β this does not affect the lawfulness of processing before withdrawal;
- lodge a complaint with the data protection supervisory authority of the Republic of Moldova.
9. How to exercise your rights
9.1. You can delete your account together with your saved list yourself, in the Profile section of your personal area.
9.2. You can also change your first name, last name, email, phone and language there.
9.3. You can withdraw consent for external content at any time via the "Cookie settings" link at the bottom of any page.
9.4. For all other requests, write to [REQUESTS EMAIL]. We respond within 30 calendar days of receipt.
9.5. To protect your own data, we may ask you to confirm your identity before providing information or acting on a request.
10. How we protect data
10.1. The site runs over HTTPS: data between your browser and the server is encrypted in transit.
10.2. Passwords are stored as an irreversible salted hash and cannot be recovered, even by us.
10.3. Verification codes and automatic sign-in tokens are stored only as hashes and have a limited lifetime.
10.4. Access to the administrative area is protected by separate authentication and granted to a limited group of staff.
10.5. No system guarantees absolute security. In the event of a breach creating a risk to your rights, we will notify you and the supervisory authority within the periods required by law.
11. Cookies
11.1. The site uses cookies. Those necessary for it to work are always set; the rest only with your consent.
11.2. A full list, with purpose and lifetime, is set out in the separate Cookie Policy.
12. Children's data
12.1. The site is intended for people aged 18 and over. We do not knowingly collect data from minors.
12.2. If you become aware that a minor has given us their data, please tell us at [REQUESTS EMAIL] and we will delete it.
13. Changes to this Policy
13.1. We may amend this Policy. The current version is always published on this page, with the date of the last change shown at the top.
13.2. We will notify registered users by email of material changes affecting their rights.
14. Contacts
14.1. Controller: [COMPANY NAME], IDNO [NUMBER], [ADDRESS].
14.2. Data protection enquiries: [REQUESTS EMAIL].
14.3. Data protection supervisory authority of the Republic of Moldova: [AUTHORITY NAME AND ADDRESS β confirm current details].