Candidate Privacy Policy
SIA "IT Camp" · Effective from 20 October 2026
This policy explains how SIA “IT Camp” handles the personal data of job candidates: people who apply for our vacancies, people we contact about job opportunities, and people who agree to stay in our candidate database. Our policy for clients (companies that use our recruitment services) is published separately: Client Privacy Policy.
1. Who we are
The controller of your personal data is SIA “IT Camp”, reg. No. 40103908693, legal address: Kaivas iela 50 k-2, dz. 24C, Riga, LV-1021, Latvia.
For any question about your data, write to info@itcamp.lv or call +371 26884088.
2. What data we process
We process only the data we need to assess you for a job:
- Contact details: name, surname, email, phone number, city of residence.
- Professional information: CV, work experience, education, skills, languages, certificates you choose to share.
- Links you provide: LinkedIn, GitHub, portfolio or other professional profiles.
- Selection information: interview notes, completed test tasks, your salary expectations and availability.
- References: only if you give us the referee’s contact details and agree that we contact them.
- Communication: emails and messages between you and our recruiters.
Please do not send us your photo, date of birth, personal identity code, passport copy, or information about your health, religion, family status or other sensitive matters. We do not need this data to assess your application. If you send it anyway, we will not use it and will delete it.
3. Where we get your data
- From you: when you apply through cv.lv or other job portals, through the form on itcamp.lv, by email, or during interviews.
- From public professional profiles: for example LinkedIn, when we search for candidates for a specific vacancy. In this case we tell you who we are and where we found your profile in our first message, and at the latest within one month.
- From recommendations: when someone recommends you to us. We inform you about this when we first contact you.
4. Why we process your data and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Assessing you for a specific vacancy: reviewing your CV, interviews, test tasks, feedback | Steps taken at your request before entering into a contract (Art. 6(1)(b)) and our legitimate interest in running the recruitment process (Art. 6(1)(f)) |
| Keeping your profile in our candidate database to offer you other suitable vacancies | Your consent (Art. 6(1)(a)) |
| Sharing your CV with a specific employer (our client) | Your consent, asked separately before each transfer (Art. 6(1)(a)) |
| Contacting you about a vacancy after finding your public professional profile | Our legitimate interest in finding suitable candidates (Art. 6(1)(f)) |
| Defending against possible legal claims related to the selection | Our legitimate interest (Art. 6(1)(f)) |
| Meeting legal obligations, for example answering requests from authorities | Legal obligation (Art. 6(1)(c)) |
Is providing data required? We cannot consider you for a vacancy without your CV and contact details. Your consent to the candidate database is voluntary: if you say no, it does not affect your participation in the current selection.
5. Who we share your data with
- Employers (our clients). We send your CV and our interview summary to an employer only after you have agreed to it for that specific company and vacancy. From that moment the employer processes your data as a separate controller under its own privacy policy, and only for that selection.
- Service providers that help us run our work, for example our applicant tracking system, email and cloud storage providers. They process data only on our instructions and under data processing agreements.
- Authorities and courts, only when the law requires it.
We never sell your data and never share it with employers without your consent.
6. Transfers outside the EU/EEA
We store and process your data in the EU/EEA. Our service providers, including our applicant tracking system and email provider, also store candidate data in the EU/EEA. If this ever changes, we will transfer data outside the EU/EEA only with the safeguards required by the GDPR (an adequacy decision of the European Commission or Standard Contractual Clauses) and will update this policy.
7. How long we keep your data
| Situation | Retention period |
|---|---|
| You applied for or were considered for a specific vacancy | 6 months after the selection closes, then deleted |
| You agreed to stay in our candidate database | 12 months from the date of your consent. One month before the end we ask whether you want to extend for another 12 months. If you do not reply within 2 weeks, we delete your data |
| You were hired by our client through IT Camp | Basic placement record (name, position, employer, start date) for the duration of our contract with the client and up to 5 years after, as needed for accounting and legal claims |
| You asked us to delete your data or withdrew your consent | Deleted within one month, unless we must keep certain data by law |
When we delete your data, we delete it from all our systems, including email.
8. No automated decisions
All decisions about candidates are made by our recruiters. We do not use automated decision-making, profiling or artificial intelligence to score or reject candidates.
9. How we protect your data
Access to candidate data is limited to IT Camp employees who need it for their work. We use secure systems with access control and encryption, and we regularly review our security measures.
10. Your rights
You have the right to:
- access your data and receive a copy;
- correct inaccurate or outdated data;
- delete your data;
- withdraw your consent at any time, without affecting processing that took place before;
- object to processing based on our legitimate interest;
- restrict processing in certain cases;
- data portability: receive the data you provided in a common electronic format.
How to use your rights: write to info@itcamp.lv from the email address you used in your application. If you write from a different address, we may ask you to confirm your identity. We answer within one month. In complex cases this can be extended by two more months, and we will tell you if that happens. Using your rights is free of charge.
11. Complaints
If you believe we process your data unlawfully, please contact us first at info@itcamp.lv. You also have the right to lodge a complaint with the Data State Inspectorate of Latvia (Datu valsts inspekcija): www.dvi.gov.lv, pasts@dvi.gov.lv, Elijas iela 17, Riga, LV-1050.
12. Changes to this policy
We may update this policy. The current version is always available at itcamp.lv/candidate-privacy. If changes are significant, we will inform candidates in our database by email.
Effective from: 20 October 2026