Table Of Contents

Surfshark Privacy Notice for Recruitment Purposes

Surfshark Privacy Notice for Recruitment Purposes

Last updated: 2023/01/12

At Surfshark, we understand the importance of information security, thus, here you can find our Privacy Notice for Recruitment Purposes (hereinafter – Privacy Notice), which describes how Surfshark (companies including Surfshark B.V. (the Netherlands), netflow, UAB (Lithuania), Radically Better Internet Poland Sp. z o.o. (Poland), depending on which company you are applying to work for) processes data in the context of recruitment.

If you have any questions or comments about how Surfshark processes your personal data or if you want to exercise your privacy rights, you are always welcome to contact us at [email protected].

See the respective sections below for more information about what personal data we process, how long we store it, and for what purposes it is used.

To assess your application to our open positions

When you apply for an open position, for example, via our website or via LinkedIn, you will be asked to fill in a form by providing the following personal data: your full name, email address, phone number, link to your LinkedIn (or Github) profile, your CV and a free-form comment from you.

We will also process the following information about you: your communication with us, the position you applied to, qualifications, information relating to your employment history, your skills and experience, your preferred salary, the non-disclosure agreement and any information it contains, job interview notes, tasks performed by you during the recruitment process, other information you might provide us with.

The legal basis for processing your data is:

  • when you apply for an open position – our intention is to enter into a contract;
  • when you allow us to contact you with job offers in the future – your consent.

Your personal data processed for this purpose will be kept until the end of the recruitment process. If you agree to be contacted with job offers in the future, your data will be kept for 3 years.

To contact you via social media such as LinkedIn

When you publish your information on LinkedIn, we might contact you with a job opportunity if we think you might be a fit for an open role we have. We will then process your personal data provided in your LinkedIn profile, such as your full name, position, employment history, and other information that you provided in your LinkedIn profile.

The legal basis for processing your data is our legitimate interest to reach out to you and offer you a job opportunity.

Your personal data processed for this purpose will be kept until the end of the recruitment process. If you agree to be contacted with job offers in the future, your data will be kept for 3 years.

To handle your data privacy requests

As explained below, you have certain rights regarding the processing of your personal data. To satisfy your requests, we need to collect certain personal data included in your request, such as your full name, your request itself and other information.

In case you decide to exercise your rights under applicable data protection laws, we will process the personal data related to your request for 2 years after your request is fulfilled.

The legal basis for data processing is our legitimate interest to defend our rights and interests in case of a dispute and to ensure accountability.

To solve a dispute between us

In case there is an ongoing dispute between us or if there is a good chance that a dispute might be raised, we will process your data that is needed to defend our rights and interests. We will only store your data for this purpose when there’s an objective reason to believe that a dispute might arise or if a dispute has already been raised.

The legal basis for data processing is our legitimate interest to defend our rights and interests in case of a dispute.

Your personal data processed for this purpose will be kept until applicable limitation periods set in relevant laws expire.

You may provide us with your data through our website’s career page, online job site, via email, in person at interviews and/or by other methods.

Data from other sources

During the recruitment process, we receive personal data from sources other than you directly, including:

  • LinkedIn Corporation (United States)
  • MeetFrank OÜ
  • CV Bankas
  • Recruitment agencies
  • Github
  • Lever, Inc.
  • Our employees (in case they refer you for a job)

Data sharing

We may share your data with other group companies if we see that you could be a great fit for an open position they have. We have a legitimate interest to hire the best candidates and find a role they are most fit for.

In order to manage our processes efficiently, we may also share your data with our third-party service providers. In particular, we share your data with:

  • Communication service providers
  • IT, web hosting, and cloud service providers
  • Recruitment service providers
  • HR management tools
  • Social media
  • If applicable, law enforcement, courts, lawyers, and supervisory authorities

In case the service provider is located outside the European Economic Area, we apply appropriate safeguards, such as entering into Standard Contractual Clauses approved by the European Commission.

Information security measures

We take information security very seriously. We implement appropriate measures to protect the information from loss, misuse, and unauthorized access or disclosure. Nonetheless, given the nature of communications and information processing technology, we cannot guarantee that information, during transmission through the Internet or while stored on our systems or otherwise in our care, will be absolutely safe from intrusion by others.

Your rights

Here you can find some additional information about your privacy rights. We apply the highest standard of privacy protection despite the jurisdiction you come from.

We use the services of service providers some of which are located outside the European Economic Area. These locations may have different data protection rules compared to the place of your habitual residence. Nonetheless, we ensure an adequate level of data protection, for instance, by entering into the EU standard contractual clauses.

Also, please note that we do NOT sell your data.

Furthermore, you have some additional rights:

  • right to receive confirmation whether we process information about you;
  • right to get a copy of your personal data processed by us;
  • right of rectification of your personal data;
  • right of erasure of your personal data;
  • right to restrict the processing of your personal data;
  • data portability;
  • right to object to the processing of your personal data;
  • right to withdraw your consent;
  • file a complaint with supervisory authorities.

If you would like to exercise any of these rights or have any questions or comments, you can always contact us at [email protected].

Updates of this Privacy Notice

We may occasionally update our Privacy Notice. When we post changes to this Privacy Notice, we will revise the “last updated” date at the top. We recommend that you check this page from time to time to inform yourself of any changes.