Privacy policy

The data controller is NIKTO TRAILERS d.o.o., which operates under the EuroStaffing Group brand. For any question about your data, you can contact us here:

• If you apply for a job: name, email, phone, date of birth, address, experience, education, languages, driving licence, availability, your answers to the job’s questions and the CV you upload.
• If you create an account: your email and the history of your applications and their status.
• During the selection process: the team’s notes on your interviews and, if you are hired, what we need to coordinate your start, such as travel and arrival.
• If you register your company: the company name, the name, job title, email and phone of the contact person, and the information about the vacancies you send us.
• When you browse: your IP address and the technical data that servers log to serve and protect the website, and the cookies described in the cookie policy. If you accept analytics or advertising, also which pages you visit, which ad brought you here, your type of device and browser, your approximate location and an identifier for your browser.

We do not need data about health, religion, trade union membership, ethnic origin or other special categories. Please leave them out of your CV; if we receive them, we do not use them.

• Managing your application and the selection process: reviewing your profile, talking to you, arranging interviews and telling you how it is going. Legal basis: the pre-contractual steps you request by applying (Article 6(1)(b) GDPR) and your consent (Article 6(1)(a)).
• Presenting your application to the employer of the job you apply for. Legal basis: Article 6(1)(b), because it is the service you ask us for.
• Keeping your account and suggesting other jobs that match your profile while we keep your data. Legal basis: the service of your account (Article 6(1)(b)) and our legitimate interest in offering you similar work (Article 6(1)(f)). You can object at any time.
• Coordinating your start if a company hires you. Legal basis: Article 6(1)(b).
• Managing our relationship with client companies and their accounts. Legal basis: the contract with the company (Article 6(1)(b)) and our legitimate interest in communicating with their contact persons (Article 6(1)(f)).
• Protecting the website and its users: stopping abusive submissions and logging which team member views or exports personal data. Legal basis: legitimate interest (Article 6(1)(f)).
• Meeting legal obligations, such as keeping proof of your consent or handling your rights. Legal basis: Article 6(1)(c).
• Measuring how the website is used with Google Analytics, to improve it, only if you accept analytics. Legal basis: your consent (Article 6(1)(a)).
• Measuring our ads and showing our job offers on Google, Facebook and Instagram to people who have visited us, only if you accept advertising. If you also apply, we send Meta your email, phone number, name and country in encrypted form (Meta cannot read them, only compare them with those of its accounts), the identifiers in its cookies and the IP address and browser you applied from, and later the steps of your application (for example, that we interviewed you), to find out which ads bring in applications. You can withdraw this permission at any time in the cookie settings. Legal basis: your consent (Article 6(1)(a)).
• Showing Loom videos, only if you accept. Legal basis: your consent (Article 6(1)(a)).

The fields marked as required in our forms are needed to process your application or registration; without them we cannot do so.

We do not make decisions based solely on automated processing: a person on our team reviews every application.

• Employers: when we present your application, they receive the information needed for that job’s selection process and may use it only for that process. If you are hired, they also receive what is needed to sign your contract.
• Providers that process data on our behalf: Supabase (database, files and account sign-in, with servers in Frankfurt, Germany), Vercel (website hosting, running in Frankfurt) and our email provider. They act as processors and cannot use your data for their own purposes.
• Loom, only if you accept video cookies and play a testimonial.
• Google and Meta, only if you accept analytics or advertising. Google Ireland Limited processes Google Analytics data on our behalf. For advertising, Google Ireland Limited (Google Ads) and Meta Platforms Ireland Limited (Facebook and Instagram) also use the data as controllers, under their own privacy policies; for the collection on our website and the transmission to Meta, Meta and we are joint controllers.
• Authorities, when the law requires us to.

We do not sell your data.

We store your data on servers in the European Union. Some providers, such as Supabase, Vercel, Loom, Google and Meta, belong to groups based in the United States and may access it to provide their service. Those transfers rely on the European Commission’s standard contractual clauses or on the EU-US Data Privacy Framework, depending on the provider.

If we ever presented your application to a company outside the European Economic Area, we would tell you first and apply the safeguards the GDPR requires.

• Applications and candidate account: for as long as the selection process lasts and then up to 24 months from your last activity, meaning your last application or your last sign-in. After that, we delete or anonymise your data.
• If you are hired through us: for as long as the employment and tax laws that apply to your start require.
• Proof of your consent: for as long as we process your data and then for the period in which claims can be made.
• Company contact persons: for as long as the relationship with the company lasts and the legal periods that follow.
• Form draft: stays only in your browser until you send the application or delete it.

You can ask us to delete your data before these periods end.

You can ask us at any time for:

• Access: to know what data about you we process and get a copy.
• Rectification: to correct data that is inaccurate or incomplete.
• Erasure: to delete your data when it is no longer needed or you withdraw your consent.
• Restriction: to stop using it while a complaint is resolved.
• Portability: to receive the data you gave us in a structured format.
• Objection: to stop using it where the legal basis is our legitimate interest, for example to suggest other jobs.
• Withdrawing your consent, without affecting what we processed before.

To exercise them, email us at admin@eurostaffinggroup.com, call us on +385 92 492 3083 or send a letter to Trdice 4, 10000 Zagreb, Croatia. We reply within one month and may ask you to confirm your identity.

If you think we have not handled your data properly, you can complain to the Croatian Personal Data Protection Agency (Agencija za zaštitu osobnih podataka, Selska cesta 136, 10000 Zagreb, azop.hr) or to the data protection authority of the country where you live.

This website is intended for people aged 18 or over. If you are under 18, please do not send us your data.

We protect your data with technical and organisational measures: encrypted connections, files in private storage, team access by invitation only and a log of who views or exports personal data.

If we change this policy, we will publish the new version on this page with its date. If the change is significant and you have an account, we will let you know.