Website Privacy Notice

Effective date: 16 July 2026

Controller

HR Potentials OÜ
Sepapaja tn 6, Lasnamäe linnaosa, 11415 Tallinn, Harju maakond, Estonia
Registry code 16472557
gdpr@hrpotentials.com

HR Potentials OÜ is the controller for personal data processed through this public website and for direct website-related inquiries.

Scope

This notice covers:

  • visits to www.hrpotentials.com;
  • direct email inquiries initiated through the website;
  • the technical operation and security of the public website.

This notice does not cover:

  • candidate assessment processing;
  • assessment monitoring or proctoring;
  • candidate pools;
  • ATS applications;
  • client-controlled assessment procedures;
  • app.60.hrpotentials.com.

Separate notices or contractual documents apply to those activities.

Data collected

1. Information sent voluntarily by email

If you contact HR Potentials by email, we may process:

  • name;
  • email address;
  • organization;
  • role;
  • message content;
  • attachments or other information you choose to provide.

2. Technical information needed to deliver and secure the website

We may process standard technical and request information generated by the hosting or delivery environment, such as:

  • date and time;
  • requested page;
  • browser or device information where present;
  • error and security information.

3. Browser preferences

The public website currently stores the following first-party preferences in your browser:

  • theme preference in localStorage;
  • pricing-country preference in localStorage.

These values remain in your browser and are used to provide the display or pricing-context functionality you requested.

HR Potentials processes personal data for the following purposes:

  • answering inquiries and taking steps requested before entering a B2B relationship, where applicable;
  • managing business correspondence and potential client or partner relationships;
  • operating, securing, troubleshooting, and improving the website;
  • meeting legal obligations;
  • establishing, exercising, or defending legal claims where necessary.

The relevant legal bases may include:

  • steps at the request of the data subject before entering a contract, where applicable;
  • legitimate interests in responding to business inquiries, operating and securing the website, and maintaining business records;
  • legal obligation where applicable.

Analytics and tracking

HR Potentials does not currently activate Google Analytics or other non-essential marketing or behavioral tracking on the public website.

No active Meta Pixel, LinkedIn Insight Tag, Hotjar, Clarity, or similar tracker is currently confirmed for this public website.

HR Potentials may introduce optional analytics in the future only after updating this notice and implementing any consent controls required by applicable law.

Cookies and local storage

The current public website does not intentionally use non-essential tracking cookies.

It does use first-party browser storage for:

  • theme preference;
  • pricing-country preference.

These preferences are stored in localStorage rather than for cross-site tracking. You can clear them through your browser settings.

Recipients and service providers

Personal data may be accessed by:

  • authorized HR Potentials personnel;
  • hosting, technical, security, and email service providers where necessary;
  • professional advisers or public authorities where legally required.

Where required, service providers are used subject to appropriate contractual and security safeguards.

International transfers

Where a service provider processes personal data outside the European Economic Area, HR Potentials will use an applicable transfer mechanism and safeguards required by data-protection law.

Retention

  • Business email inquiries are retained only as long as necessary to respond, manage a potential or existing B2B relationship, meet legal or accounting obligations, and handle possible claims.
  • Technical logs are retained according to the operational and security settings of the relevant hosting and technical services.
  • Browser preferences remain until you clear them or browser storage is reset.

Rights

Subject to applicable data-protection law, you may have the right to request:

  • access;
  • correction;
  • deletion;
  • restriction;
  • objection;
  • portability where applicable;
  • withdrawal of consent where processing is based on consent.

You also have the right to lodge a complaint with a supervisory authority. The Estonian supervisory authority is the Estonian Data Protection Inspectorate.

Requests relating to this notice can be sent to gdpr@hrpotentials.com.

Security

HR Potentials applies proportionate technical and organizational measures intended to protect personal data, but no website or transmission method can be guaranteed to be absolutely secure.

Changes

HR Potentials may update this Website Privacy Notice from time to time. The current effective date will be shown on this page.