fbpx

Privacy Notice

Effective from: 29 June 2026

1. General information

This Privacy Notice provides an overview of how Tripod companies process personal data obtained from candidates, clients, cooperation partners, our website (tripod.ee) and/or third parties in order to provide various services and technical solutions.

Tripod companies in Estonia, Latvia and Lithuania are the controllers of your personal data unless expressly stated otherwise. Depending on where our services are provided, one of the following companies is the controller of your personal data (hereinafter Tripod, we, us):

  • Tripod Grupp OÜ, registry code 10736400, Piipheina tee 1, 11913 Tallinn, Estonia,
  • Tripod SIA, registry code 40203438399, Audēju iela 15, Centra rajons, Rīga, LV-1050, Latvia
  • People Link UAB, registry code 302423888, Konstitucijos pr. 7, LT-09308 Vilnius, Lithuania.

If you have any questions about this Privacy Notice or the processing of your personal data, you may contact us at any time at andmekaitse@tripod.ee.

2. Personal data collected, purposes of collection and legal basis

We process your personal data in accordance with this Privacy Notice, the terms applicable to our services and applicable law, including the European Union General Data Protection Regulation.

Personal data means any information relating to an identified or identifiable individual. Personal data may also include various indirect data which, when combined, can be used to identify a specific person.

For the purposes described in sections 2.1.1–2.1.2, Tripod processes your personal data as a controller jointly with the Tripod client in connection with recruitment for a specific position.

Where Tripod acts as a processor, or in connection with the purposes described in sections 2.1.1–2.1.2, this Privacy Notice should be read together with the privacy notice of the relevant company (Tripod’s client) on whose behalf the personal data is processed.

2.1. Recruitment

Tripod is a leading recruitment company with 16 years of experience in the recruitment sector. Tripod’s strong reputation is based on identifying and placing top talent in positions across a wide range of industries. This section provides potential candidates with an overview of how Tripod processes their personal data when recruiting talent for Tripod’s clients.

2.1.1 Public job advertisements

Companies may contact us to help them find suitable candidates through public job advertisements. Tripod may therefore collect personal data directly from jobseekers (including from public sources such as LinkedIn) or contact suitable candidates to invite them to apply for an advertised position. The personal data collected may include name, contact details (such as phone number and email address), cover letter, education and previous work experience (CV), and other information relevant to assessing suitability for the position.

We ask candidates to provide only the personal data necessary to assess their application for a specific position and to avoid providing unnecessary personal data, particularly special categories of personal data or other sensitive information. We recommend that application documents do not include information about health, religious or political beliefs, or other unnecessary personal data such as date of birth, age, personal identification code, marital status or number of children, unless providing such information is justified and necessary for the specific position. We help companies assess candidates’ suitability and qualifications for a position. As part of the assessment, we may conduct background checks and request references.

Tripod processes personal data on the basis of the legitimate interests of Tripod and its client in finding a suitable person for a position, or on the basis of the candidate’s consent (for example, to contact previous employers or to process special categories of personal data or other information voluntarily disclosed by the individual).

2.1.2 Executive search

Executive search is a recruitment method in which Tripod identifies qualified and experienced specialists working in different companies. The aim is to encourage a specialist to join our client. Executive search is particularly suitable for recruiting executives or specialists in fields where suitable candidates are difficult to find through traditional recruitment methods. For example, technology professionals often do not actively apply for jobs but are approached about new opportunities based on their professional networks and LinkedIn profiles.

During an executive search process, a company contacts Tripod, provides a description of the vacant position and specifies the skills and knowledge expected from a suitable candidate. Tripod then begins searching for suitable candidates. We collect personal data in various ways, including from public job advertisements, social media platforms, professional networks and referrals. We may also collect personal data directly from candidates by phone or email, through interviews or application forms, unless our client requires the recruitment process to remain confidential at the initial stage.

If our client wishes to conduct the search confidentially, we identify candidates with the required skills and knowledge and present a list of candidates to the client. The client then decides which candidates to contact, with whom information about the vacancy may be shared, and whose potential interest in the role should be explored.

Personal data processed as part of an executive search may include name, contact details (phone number and email address), education and previous work experience (CV), and other information relevant to the position, in order to identify suitable candidates and assess the knowledge and skills required for the role.

We process candidates’ personal data on the basis of the legitimate interests of Tripod and its clients in finding a suitable person for a position.

2.1.3 Talent database

Tripod’s talent database contains information about people with potential sector-specific skills, knowledge and qualifications. Its purpose is to enable Tripod to quickly and easily introduce suitable candidates to clients for vacant positions. The talent database may include different types of personal data, such as name, contact details, previous work experience (CV), education, skills and other information relevant to job searching. This data may be collected directly from the individual or from other sources, such as LinkedIn, company websites, employment portals, business cards and referrals.


Tripod processes personal data stored in the talent database on the basis of the individual’s consent, where the person has agreed during a recruitment process that Tripod may retain their personal data for future job opportunities; or on the basis of Tripod’s legitimate interest in maintaining an overview of specialists active in the labour market and quickly introducing suitable candidates to clients for vacant positions, as well as the legitimate interest of potential jobseekers in reaching suitable career opportunities and advancing their careers.

2.2 Assessment services

Assessment services are an important part of the recruitment process and help organisations evaluate candidates’ suitability for specific positions. These services include various methods and tools designed to assess candidates’ skills, abilities, personality and potential.

Assessment services are provided on behalf of Tripod’s clients, meaning that Tripod acts as a processor and the relevant company acts as the controller. The legal basis for processing is determined by Tripod’s client.    

The personal data processed depends on the assessment service used, but generally includes demographic data (age, gender or occupation), contact details (name, email address or phone number) and responses to assessments:    

  • Aptitude tests: these tests measure candidates’ cognitive abilities, such as verbal and numerical reasoning, logical thinking and problem-solving;
  • Personality tests: these tests measure candidates’ personality traits, such as extraversion, conscientiousness and emotional intelligence;
  • Work simulations: these assessments replicate real work situations and allow candidates to demonstrate their skills and abilities in a realistic environment;
  • Work sample tests: candidates are asked to complete a specific task or project related to the position for which they are applying;
  • Interviews: these interviews are designed to assess candidates’ past behaviour and how it relates to the position for which they are applying;
  • Reference checks: former employers or colleagues are contacted to verify the candidate’s work experience, performance and other relevant information;
  • Security and authentication measures: activation of video and screen sharing during testing, and test portal login details (personal identification code and phone number).


The assessments are intended to evaluate work-related suitability and competencies and are not designed to assess a person’s health status or provide diagnoses. In general, recruitment decisions based on assessment results are more objective and reliable than decisions based solely on a candidate’s CV, cover letter or interview performance. By using assessment services, companies can identify the most qualified candidates and reduce the risk of costly recruitment mistakes.

2.3 Surveys

Surveys are quantitative assessments of different situations or processes. We may collect personal data through questionnaires, interviews or online surveys. The data collected may include demographic data (such as age, gender or occupation), contact details (such as name, email address or phone number) and survey responses. Depending on the purpose of the survey, the data may be processed in different ways. For example, it may be analysed to identify trends, behavioural patterns or insights related to the research question.

Tripod conducts surveys on behalf of its clients, meaning that Tripod acts as a processor and the relevant company acts as the controller. The legal basis for processing is determined by Tripod’s client. Surveys involving personal data are intended to help analyse the work environment, including employee satisfaction, customer satisfaction, feedback and similar topics.

2.4 Training and development

Tripod provides various additional services that help people develop and succeed in their careers. These include training, supervision, coaching and outplacement counselling.

Each service is different, and the amount and type of personal data needed and processed varies depending on the intended outcome. In most cases, individuals have full control over which personal data is processed during training and development activities.

For these purposes, we may process personal data such as name, contact details, previous work experience, education and skills. In general, the legal basis for processing is determined by Tripod’s client as the purchaser of the service. Where processing is based on consent, consent may be obtained during a conversation, for example at a physical or virtual meeting between the coach and the client.

2.5 Direct marketing

Tripod may periodically send you information that we believe may be of interest to you, or ask for your assistance in connecting other candidates and companies. In particular, we may process your contact details to promote our recruitment services or send information about reports, offers, networks, client events and general industry developments that we believe may interest you.

For this purpose, we process your data on the basis of your consent or, in the case of an existing business client, on the basis of our legitimate interest in promoting Tripod’s business activities (including reliance on the direct marketing exception provided for in the Electronic Communications Act).

2.6 Webinars and conferences

Tripod organises webinars, client events and conferences that may be of interest to labour market participants. To organise and conduct these events, we process participants’ personal data, including names, contact details, photographs and video recordings, and sample test results. Photographs and video recordings may be used in Tripod’s marketing activities in public channels. The legal basis for processing is your consent or Tripod’s legitimate interest in marketing its activities, introducing its services and developing client relationships.

2.7 Use of social networks

To manage and administer Tripod’s social media accounts (such as Facebook and LinkedIn), Tripod processes personal data that you voluntarily provide, including your social media profile name, profile picture, public comments posted on Tripod’s accounts, and the enquiries or text you submit where relevant.

We process this personal data on the basis of your consent, given through your active participation (for example, when submitting an enquiry or commenting on a post), or on the basis of Tripod’s legitimate interest in communicating with our followers. Such personal data is retained for as long as the relevant social media account remains active. You may delete traces of your own activity at any time.

Tripod may also remove your activity from its accounts at its discretion if the content you provide breaches the terms of the social media platform or Tripod’s rights or interests. With regard to personal data processed on social networks, you should also review the Privacy Notice of the relevant social media platform.

2.8 Cookies

Cookies are text files containing small amounts of information that are sent to your browser and stored on your computer, mobile phone or other device when you visit a website. Each time you return to the website, cookies send information back to it. You may accept, reject, manage and/or delete cookies according to your preferences.

The processing of personal data through cookies is primarily based on your consent, given through the website’s cookie banner and adjustable at any time, or on Tripod’s legitimate interest in using necessary cookies that enable our website to function properly.

Please note that you can delete all cookies stored on your computer and configure most browsers so that cookies are not stored. However, disabling cookies may prevent you from using many functions necessary for the website to operate. For more information about cookies, visit aboutcookies.org, where you can find detailed and independent information on how to disable cookies through your browser settings and remove cookies stored on your computer. Instructions for removing cookies from a mobile phone should be available in your phone’s user guide.

For further information, please see our Cookie Policy at https://tripod.ee/en/cookies/

2.9 Compliance with legal obligations

In certain cases, Tripod processes your personal data to comply with legal obligations. In such cases, we process personal data only to the extent necessary to fulfil those obligations. This may include, for example, compliance with accounting and employment law requirements, responding to requests from supervisory authorities, complying with occupational health and safety requirements, and processing data related to work ability assessments (including support person data to the extent necessary to enable a support person to participate in a recruitment process).

2.10 Service improvement and analysis

Tripod may process your personal data to test, analyse and improve its services. Where possible, we use anonymous data for these purposes. In certain cases, however, it may be necessary to process personal data. Where personal data processing is necessary, we apply appropriate technical and organisational security measures to reduce potential risks to your rights and freedoms. For example, we use pseudonymisation and restrict access to personal data to employees who need it for their work duties. The legal basis for processing is Tripod’s legitimate interest in improving and developing the quality of its services and analysing how they operate.

2.11 Provision of services to clients


Tripod processes personal data to provide services, enter into and perform contracts, manage client communications, and administer and invoice for services.


For these purposes, we may process the following personal data relating to a client representative: name, contact details, position and employer information, contract data, payment and billing information, communication history and data related to use of the service.

The legal basis for processing is the performance of a contract or taking steps at the request of an individual client prior to entering into a contract. When processing the data of business client contact persons, the legal basis is Tripod’s legitimate interest in managing client relationships and providing services. In some cases, we also process personal data to comply with legal obligations, such as accounting and tax requirements.


2.12 Implementation of security measures

To ensure the security of the website, assessments and office, Tripod processes website usage and log data (including IP addresses), authentication and access data, and access control data (such as entry logs and office visit times). The legal basis for processing is Tripod’s legitimate interest in ensuring the security of its information systems and office in order to protect its assets and associated persons.

2.13 Protection of legal claims

In certain cases, it may be necessary to retain personal data referred to in this Privacy Notice for a longer period to the extent necessary to establish, exercise or defend legal claims and resolve disputes. In such cases, the processing is based on Tripod’s legitimate interest in protecting its rights and managing legal claims effectively.

3. Retention of personal data

Tripod retains your personal data only for as long as necessary to fulfil the relevant purposes or comply with legal obligations, such as accounting and reporting requirements.

When we no longer need your personal data, we delete it appropriately and securely. To determine an appropriate retention period, we consider the following factors:

  • the amount and nature of the personal data;
  • the sensitivity of the personal data;
  • the risk of potential harm arising from unauthorised use or disclosure of the personal data;
  • the purposes for which the personal data is processed;
  • whether those purposes can be achieved by other means; and
  • applicable legal requirements.

Where technically possible, your personal data is automatically anonymised after a certain period. For example, in the case of assessment services, personal data is automatically anonymised two years after completion of the assessment.

Where we act as a processor for our clients, we retain your personal data in accordance with the retention periods established by those clients.

4. Sharing and transfer of data

All data provided by you or collected by us, including data collected through cookies, may be processed by all Tripod companies and shared with third parties (processors) that provide services to us and act on our behalf. These may include companies providing marketing or advertising services, data management services, IT services, accounting services and similar services. Tripod ensures that such processing by third parties has a valid legal basis and complies with lawful instructions and applicable law.

Personal data may also be transferred to third parties acting as independent controllers, processors or recipients. The third parties with whom we may share personal data include:

  • Tripod Group companies and our subsidiaries;
  • companies to which we provide our services;
  • the police, law enforcement authorities, tax authorities and other public authorities where required by law;
  • our professional advisers, such as lawyers and accountants;
  • service providers offering information technology and systems administration, translation, marketing, accounting, postal or courier services, event organisation and coordination, or other services;
  • authorised cooperation partners or other persons or entities for the purpose of obtaining feedback or references in connection with services provided to you (where necessary, we will verify your consent to being contacted);
  • other persons or companies where necessary to provide our services to you as effectively as possible.

Please note that we may also share your personal data with competent public authorities where this is expressly required by applicable law.

Third countries. Tripod does not transfer your personal data to third countries (countries outside the European Union / European Economic Area) unless this is considered necessary. Where a transfer to a third country is necessary, Tripod applies all safeguards required under applicable law, including, where necessary, the European Commission’s standard contractual clauses or other appropriate safeguards, to ensure an adequate level of protection for personal data. You have the right to obtain information on whether your personal data is transferred to third countries, which safeguards are applied to such transfers and, where appropriate, further information about those safeguards.

5. Security

Tripod implements appropriate organisational and information security measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised access or disclosure.

We store your personal data on secure computer servers. Access to personal data is limited to persons who have a business need to process it in connection with their duties (such as employees, representatives, contractors and other third parties), all of whom are also subject to confidentiality obligations.

We have procedures in place to detect and respond to personal data breaches and will notify you and, where necessary, the relevant supervisory authority if we are legally required to do so.

6. Your rights

You may exercise the following rights at any time in relation to the processing of your personal data:

  • Right of access: you have the right to request access to your personal data. This includes information on whether we process your personal data, which categories of personal data we process, and the purposes and legal basis for the processing.
  • Right to rectification: you have the right to request the correction of inaccurate or incorrect data.
  • Right to object: you have the right to object to the processing of your personal data where the processing is based on our legitimate interests.
  • Right to erasure: you have the right to request the deletion of your personal data, for example where the processing is no longer necessary for the purposes for which the data was collected or where you believe that our processing is unlawful.
  • Right to data portability: where we process your personal data on the basis of your consent or for the performance of a contract, you may request to receive your personal data in a structured, commonly used and machine-readable format. You may also request that the personal data be transmitted to another controller. Please note, however, that such a transfer is possible only where technically feasible.
  • Right to restriction of processing: in certain cases, you may request that the processing of your personal data be restricted.
  • Right to withdraw consent: where the processing of personal data is based on your consent, you have the right to withdraw that consent at any time.

Please note that some of the rights listed above may be restricted in the context of our legitimate interests or legal obligations, particularly in connection with the exercise of legal remedies or compliance with legal requirements.

We ensure that our processes are designed so that no decision is made about you solely on the basis of automated processing, including profiling, where such a decision would produce legal effects or similarly significantly affect you. Where your personal data is processed automatically to any extent, we provide you with the opportunity to request human intervention in the relevant processing operation.

If you have any complaints about how we process your personal data, or simply wish to learn more about our data processing activities, you may contact our data protection specialist at any time at: andmekaitse@tripod.ee; Tripod Grupp OÜ, Lõõtsa 1a, 2nd floor, 11415 Tallinn, marked “Data Protection Specialist”.

You have the right to lodge a complaint with the Estonian Data Protection Inspectorate if you believe that your personal data is being processed unlawfully or that we have infringed your rights as a data subject. The contact details of the Estonian Data Protection Inspectorate are available at www.aki.ee.

7. Changes

Tripod may, due to new features or requirements, modify, supplement or remove any part of this website, its content and/or these privacy terms, in whole or in part, at its discretion and at any time. Changes to the privacy terms take effect on the date they are published. To stay informed of changes, you should review the privacy terms regularly.

This Privacy Notice has been prepared in Estonian and translated into English. In the event of any dispute, the Estonian-language version of the Privacy Notice is legally binding.

8. Contact details  

For further information about the website, Tripod or your personal data, please contact us at andmekaitse@tripod.ee.

Contact details of Tripod companies and partners:

Tripod Grupp OÜ

Address: Lõõtsa 1a, 1st floor, 11415 Tallinn, Estonia

E-mail: tripod@tripod.ee

Telephone: +372 5559 2765

Tripod SIA

Address: Audēju iela 15, Centra rajons, Rīga, LV-1050, Latvia

E-mail: info@tripodlink.lv

Telephone: +371 279 98 661

People Link UAB

Aadress: Konstitucijos pr. 7, Vilnius, Lithuania

E-mail: info@peoplelink.lt

Telephone: +370 5 248 7265

Ask Us