Privacy policy
How Workpermitly OÜ processes personal data (GDPR).
Last updated: August 2026
Controller
Workpermitly OÜ, Tallinn, Estonia. Contact: hello@workpermitly.com.
Data we collect
Account data (name, email, language, account type), application data (personal details, passport data, addresses, employer and working conditions) and uploaded documents.
Purpose and legal basis
We process data to perform our service contract (GDPR art. 6(1)(b)) and to meet legal obligations. Special categories are processed only with your explicit consent.
Sharing
Data is shared only with parties linked to your application (e.g. your employer if you linked to them) and with authorities (PPA, Unemployment Fund) for filing. We use trusted processors for hosting and AI checks.
Retention
Application data is retained up to 5 years after the procedure ends, unless law requires otherwise.
Your rights
You may access, rectify, erase, restrict and port your data. Write to hello@workpermitly.com. You may lodge a complaint with the Estonian Data Protection Inspectorate.
Security
Documents are stored in private encrypted storage with strict role-based access.