Last updated: 30 September 2026

This Privacy Policy explains how Datarob OÜ (“Datarob”, “we”, “us” or “our”) collects, uses, shares and protects personal data when you visit datarob.com (the “Site”), contact us, or are considered for or introduced to one of our engagements. Datarob and Hiretop are brands of Datarob OÜ. We process personal data in accordance with the EU General Data Protection Regulation (“GDPR”) and the applicable data protection laws of the Republic of Estonia.

Please read this policy carefully. If you do not agree with it, please do not use the Site or submit your personal data to us.

1. Who we are (data controller)

The controller of your personal data is Datarob OÜ, Sakala tn 7-2, 10141 Tallinn, Estonia. For any question about this policy or about how we handle your data, contact us at [email protected].

2. Personal data we collect

We collect only the data we need for the purposes described below:

  • Contact and enquiry data — when you submit a form or email us: your name, email address, phone number, country, company, the content of your message and any file you choose to attach.
  • Business relationship data — if we work together: contact details of your representatives, contract, billing and correspondence data.
  • Candidate data — if you are an engineer who works with us or applies to: your CV, skills, experience, education, languages, rate expectations, availability and interview notes.
  • Technical data — when you visit the Site: IP address, browser and device type, pages requested, referring page and the date and time of the request. This data is processed by our hosting provider to deliver and secure the Site.

We do not intentionally collect special categories of personal data (such as health data or political opinions). Please do not include such information in your messages or attachments.

3. How and why we use your data

  • To respond to your enquiry and discuss, scope and prepare a potential engagement — legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in responding to business enquiries (Art. 6(1)(f) GDPR).
  • To provide our services and manage the business relationship, including invoicing — legal basis: performance of a contract (Art. 6(1)(b) GDPR).
  • To match engineers with client engagements, including sharing anonymized or, with the engineer’s agreement, full profiles with prospective clients — legal basis: consent (Art. 6(1)(a) GDPR) and steps prior to a contract (Art. 6(1)(b) GDPR).
  • To operate, secure and improve the Site, including preventing spam and abuse and measuring aggregate traffic — legal basis: our legitimate interests (Art. 6(1)(f) GDPR).
  • To comply with legal obligations, such as accounting and tax requirements — legal basis: legal obligation (Art. 6(1)(c) GDPR).

We do not sell your personal data, and we do not use it for automated decision-making or profiling that produces legal or similarly significant effects for you.

4. Engineer profiles published on the Site

Engineer profiles and CVs shown on the Site are anonymized: they show only an initial, the country, skills, experience and indicative rate, and exclude contact details and other directly identifying information. These pages are excluded from search engine indexing. Engineers may ask us at any time to update or remove their profile by writing to [email protected].

5. Service providers we use

We share personal data only with trusted providers that process it on our behalf, under appropriate data processing terms, and only to the extent necessary:

  • Cloudflare, Inc. — hosting, content delivery, security and privacy-friendly, cookie-less web analytics that reports aggregate traffic.
  • Formspree, Inc. — processing and delivery of form submissions. Formspree may use Google reCAPTCHA to protect forms from spam, which involves Google processing technical data about your visit.
  • Google (Google Fonts) — delivery of web fonts used on the Site, which requires your browser to connect to Google’s servers.
  • Calendly, LLC — scheduling of introductory calls. When you book a call, Calendly processes your name, email address and the details you enter in the booking form.
  • Clutch — an embedded widget displaying our public review rating, loaded from Clutch’s servers.
  • Email and business software providers — to receive, store and answer your messages and run our business.

We may also disclose personal data to professional advisers, auditors, or public authorities where required by law, and to a successor entity in the event of a merger, acquisition or similar transaction.

6. International transfers

Some of our providers are located, or process data, outside the European Economic Area, including in the United States. Where this happens, we rely on appropriate safeguards such as the EU–US Data Privacy Framework, the European Commission’s Standard Contractual Clauses, or another lawful transfer mechanism.

7. Cookies and similar technologies

Datarob does not set advertising or marketing cookies. Our analytics are cookie-less and do not track you across websites. Our hosting provider may set strictly necessary cookies to protect the Site against bots and abuse. Embedded third-party content, such as the Clutch widget or reCAPTCHA on the form provider’s page, may set its own cookies under that provider’s privacy policy. You can block or delete cookies in your browser settings; some features may then not work as intended.

8. How long we keep your data

  • Enquiries that do not lead to a business relationship: up to 24 months after our last contact.
  • Client and contract data: for the duration of the relationship and afterwards for as long as required by law — accounting records are kept for 7 years under Estonian law.
  • Candidate data: for as long as you wish to be considered for engagements, and in any case no longer than 36 months after our last contact, unless you ask us to delete it sooner.

When data is no longer needed, we delete or anonymize it securely.

9. How we protect your data

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure, including encrypted connections (HTTPS), access controls, and limiting access to people who need it for their work. No method of transmission or storage is completely secure, but we work to protect your data and review our measures regularly.

10. Your rights

Under the GDPR, you have the right to:

  • access the personal data we hold about you;
  • have inaccurate data corrected or incomplete data completed;
  • have your data erased (“right to be forgotten”);
  • restrict the processing of your data;
  • object to processing based on our legitimate interests;
  • receive your data in a portable format;
  • withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, email [email protected]. We will respond within one month, and may ask you to verify your identity. You also have the right to lodge a complaint with a supervisory authority — in Estonia, the Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee) — or with the authority in your country of residence.

11. Children

The Site and our services are intended for businesses and professionals. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us and we will delete it.

12. Third-party websites

The Site contains links to other websites, such as LinkedIn, Clutch and hiretop.com. We are not responsible for the privacy practices of third-party websites, and we encourage you to read their privacy policies.

13. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services or legal requirements. The updated version will be published on this page with a new “Last updated” date. Where changes are significant, we will take reasonable steps to inform you.

14. Contact

Datarob OÜ
Sakala tn 7-2, 10141 Tallinn, Estonia
[email protected]