Privacy policy

The controller is AN Recruitment OÜ, Sepapaja tn 6, 15551 Tallinn, Estonia. It operates under the brand AIN Recruitment and is represented by its management board member Alexander Nürenberg. You can reach us at info@ainrecruitment.eu.

This policy applies to the website ainrecruitment.eu. How our platform processes data is governed by the licence agreement and the data processing agreement with each customer.

The website itself sets no cookies and stores nothing on your device. Only Vercel's security check can set a cookie (see Visiting the website). All files, the fonts included, come from ainrecruitment.eu itself. When you open a page, it loads nothing from other servers.

Through this website we do not track you on other websites, and we do not build profiles. We make no automated decisions about you (Art. 22 GDPR).

The website is hosted by Vercel Inc. in the US. Vercel delivers the pages through data centres in many countries.

When you open a page, Vercel processes the data that is technically needed for it: your IP address, the date and time, the address you opened, the page you came from, and your browser and operating system. We use this data to deliver the pages. It also helps us fend off attacks and find errors.

Vercel deletes the logs we see in our Vercel account after one day.

If Vercel considers requests a possible attack, for example because very many come from one address, it briefly shows a security check instead of the page. Your browser solves this check by itself. Vercel then stores a cookie in your browser so that the check does not appear again for one hour. The cookie only protects the website and is strictly necessary for that (§ 25(2) no. 2 TDDDG, German law on device storage).

Separately, Vercel processes usage data as a controller in its own right. Vercel uses it to run and improve its service and for its own analytics. Vercel's own privacy policy applies to this.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is to run the website securely and reliably.

The form sends your name, your email address, your company, your message if you write one, and whether you would like a call or a demo.

To stop spam, it also sends two technical details. The first is a hidden field that people do not see and therefore leave empty. The second, sent only when JavaScript runs, is how long the page was open before you sent it. If the hidden field is filled in or the enquiry arrives less than three seconds after the page was opened, we discard it. The form also sends the language of the page, so that the confirmation appears in your language.

A function at Vercel in Frankfurt checks your details. Brevo then sends them as an email to our mailbox info@ainrecruitment.eu, which is hosted on Google Workspace. The website itself does not store your enquiry. We keep the enquiry in our mailbox. We store your details, without the message, as a contact in Brevo, as described below. If sending fails, we log the error without the content of your enquiry.

Brevo stores every email with its content (name, email address, company, message) in its sending log and deletes it after one month.

We use your details to answer your enquiry. We delete your enquiry and our replies 12 months after the last message. If this results in a contract or in correspondence that we are legally required to keep, we keep it for as long as the law requires.

We also store your details from the form (name, email address, company, topic, language and date of the enquiry) as a contact in our Brevo account. This lets us follow up on your enquiry and contact you personally about what we offer. We also record how your enquiry reached us: the page on which you sent the form and the campaign parameters of the link (utm_source, utm_medium, utm_campaign). Where there are none, we record only the name of the website you came from, for example www.google.com. We use this to see which channels lead to enquiries. Nothing is stored in your browser for this. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is to build business relationships with companies. We delete the contact if you object, and at the latest three years after your last enquiry. This time limit does not apply if you have confirmed news emails. In that case we delete the contact after you withdraw your consent. We only send you advertising emails with your consent.

Providing your details is voluntary. Without the required fields of the form (marked *), however, we cannot answer your enquiry.

The legal basis is Art. 6(1)(b) GDPR if your enquiry is aimed at a contract, otherwise Art. 6(1)(f) GDPR. In that case our legitimate interest is to answer enquiries.

If you tick the box for news in the form, Brevo sends you an email with a confirmation link. Only after you click it do we add you to the mailing list. For this, Brevo stores the time of your sign-up and of your confirmation. This confirmation email contains a counting pixel, and its links are routed through Brevo. Brevo counts opens and clicks anonymously and does not link them to you. In our news emails, Brevo measures whether an email was opened and which link was clicked, so that we can see what interests you.

The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time via the unsubscribe link in every email or by emailing info@ainrecruitment.eu. We then remove you from the mailing list. We keep the proof of your consent for up to three years.

If you write directly to info@ainrecruitment.eu, we process your email in Google Workspace in order to reply. The legal basis and retention period are the same as for contact form enquiries that we keep in our mailbox. In this case we do not add you as a contact in Brevo.

We count page views with Vercel Web Analytics. When a page is opened, a small script from ainrecruitment.eu reports its address, the page you came from, the date and time, your browser, operating system and device type. From your IP address, Vercel derives your approximate location, down to the city at most.

When you send the form, the script only reports that a form was sent, without its content. From the addresses we remove all parameters except the campaign parameters (utm_source, utm_medium, utm_campaign), which show which link you came through.

The script sets no cookies and stores nothing on your device. Vercel recognises several page views by the same visitor from a hash. This is a string that Vercel calculates from the request. Vercel discards this hash after 24 hours. We only see aggregated figures, never individual visitors.

You can object to the measurement at any time: if your browser sends the Global Privacy Control or Do Not Track signal, the website does not count your page views. You can also block the script in your browser, for example with a content blocker. Without JavaScript, no measurement takes place. All content and the form also work without JavaScript.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is to see which pages are read and how visitors find us, so that we can improve the website.

These service providers process data on our behalf and on our instructions. We have a data processing agreement with each of them (Art. 28 GDPR). The exception is the usage data that Vercel processes as a controller in its own right (see Visiting the website).

Vercel Inc., USA: hosting, server logs, the contact form function (in Frankfurt) and audience measurement.

Sendinblue SAS (Brevo), France: sending emails (contact form and news) and our contact list. Brevo stores the data in the EU.

Google (Google Workspace): our mailbox.

We only pass your data on to anyone else if a law requires us to.

Vercel Inc. and Google LLC are based in the US. Both are certified under the EU-US Data Privacy Framework. The European Commission decided on 10 July 2023 that certified companies protect data adequately (Art. 45 GDPR). You can find the decision on the Data Privacy Framework on EUR-Lex.

You can check the certification in the official list: Vercel's entry, Google's entry.

If data reaches further countries outside the EU, the European Commission's Standard Contractual Clauses apply (Art. 46(2)(c) GDPR). They are part of our contracts with Vercel and Google. You can find Decision (EU) 2021/914 on the Standard Contractual Clauses on EUR-Lex. We will send you a copy of the clauses on request.

You have the right to:

• access your data (Art. 15 GDPR)
• have inaccurate data corrected (Art. 16 GDPR)
• have your data erased (Art. 17 GDPR)
• restrict processing (Art. 18 GDPR)
• receive your data in a common format (Art. 20 GDPR)
• object (Art. 21 GDPR, see below)
• withdraw your consent at any time with effect for the future (Art. 7(3) GDPR). Processing before the withdrawal remains lawful.

To use them, write to info@ainrecruitment.eu.

You can complain to a data protection supervisory authority. The authority responsible for us is the Estonian Data Protection Inspectorate, Andmekaitse Inspektsioon (AKI), Tatari 39, 10134 Tallinn, www.aki.ee.

You can also contact any other supervisory authority, in particular in the country where you live or work (Art. 77 GDPR).