Privacy Policy

Magnetic Enginestands OÜ and other entities within the Magnetic Group (collectively referred to as "Magnetic Group", "we", or "us") are committed to protecting and respecting your privacy. This Privacy Policy outlines how and when we collect, use, and share your personal data, and informs you of your rights in accordance with applicable data protection laws.

This Privacy Policy applies to personal data submitted through the website www.magneticenginestands.com (the “Website”). The Website is managed by Magnetic Enginestands OÜ, registry code 17176772, located at Väike-Sõjamäe 1A, 11415 Tallinn, Estonia, which acts as the data controller, unless stated otherwise. For certain processing activities, other Magnetic Group companies may act as joint controllers or processors.

Please read this Privacy Policy carefully before submitting any personal data via the Website.

This Privacy Policy is provided in accordance with Article 13 of the General Data Protection Regulation (EU) 2016/679 (“GDPR”).

1. Information we collect

1.1. Information you provide directly

We may collect personal data when you voluntarily submit it through the following forms on the Website:

• “Contact Us” form

• “Job Application” form

• “Newsletter Subscription” form

Depending on the form, we may collect:

• Name, email address, phone number

• Job title, company name, postal address

• Curriculum vitae (CV), cover letter, certificates, references

• Any other information you provide voluntarily in connection with your inquiry or application

We do not knowingly collect personal data from children under the age of 16 without parental consent. If you are under 16 years of age, please ensure that your parent or legal guardian has given consent before submitting any personal data.

1.2. Information collected automatically

When you browse the Website, we may collect the following data automatically:

• IP address

• Device and browser type

• Your interactions with the Website (e.g. page visits, time spent)

Our Cookie Policy is located here: https://magneticenginestands.co/cookies-policy 

2. Purposes and legal basis of processing

We process personal data for the following purposes and on the corresponding legal bases:

Providing your data is voluntary, but failing to do so may prevent us from responding to your requests or delivering the services you seek.

You may withdraw your consent at any time by contacting dpo@magneticgroup.co. Withdrawal will not affect the lawfulness of processing based on consent before withdrawal.

3. Recruitment data processing

3.1. What We Collect

When you apply for a role, either with Magnetic Enginestands or another Magnetic Group entity, we may collect:

• Identification details (name, contact information)

• Employment and education history (CV, qualifications)

• References (if provided)

• Additional voluntary information submitted in your application

We do not use fully automated decision-making in recruitment that produces legal or similarly significant effects.

3.2. Purpose of recruitment data processing

Your personal data is processed to:

• Assess your suitability for a role

• Contact you during the hiring process

• Comply with applicable employment laws

• Retain your application for future opportunities (with consent)

Recruitment processes may be conducted by another Magnetic Group entity acting as data processor or joint controller, depending on the hiring structure.

3.3. Data retention

Unless you consent to longer storage, your recruitment data will be kept for up to 12 months after the end of the recruitment process. If you are hired, your data will be transferred to your personnel file and subject to the relevant employee privacy policy.

3.4. Use of BambooHR

We use BambooHR, a third-party HR software provider, as a data processor for managing recruitment. BambooHR may process data outside the EEA. In such cases, we rely on Standard Contractual Clauses (SCCs) or equivalent safeguards as required by GDPR.

BambooHR’s privacy policy is available at: https://www.bamboohr.com/privacy-policy

4. Sharing your personal data

We may share your data with:

• Other companies within the Magnetic Group for internal administrative purposes, including recruitment or contract fulfilment

• Third-party service providers (e.g. IT, HR, legal advisors), bound by data processing agreements under Article 28 GDPR

• Government authorities, courts, or regulators if legally required

• Successors or acquirers in the context of corporate restructuring

• Other parties, where personal data is anonymised or aggregated

5. International data transfers

Personal data is primarily processed within the European Economic Area (EEA). However, due to the global nature of our operations, including our corporate ownership structure and the presence of group entities and service providers in third countries such as China, Malaysia, and the United States, we may transfer personal data outside the EEA.

In all such cases, we ensure that the transfer is lawful and that appropriate safeguards are implemented in accordance with Chapter V of the GDPR, including, where applicable:

• An adequacy decision by the European Commission, recognising the third country as ensuring an adequate level of data protection;

• The use of Standard Contractual Clauses (SCCs) adopted by the European Commission;

• Other legally permissible safeguards as defined under Article 46 GDPR.

We ensure that such transfers are limited to what is necessary for the performance of our legitimate business activities, including HR, IT administration, and service provision.

Where applicable, we also ensure that data subjects are provided with enforceable rights and effective legal remedies.

You may request more information about international data transfers and obtain a copy of the relevant safeguards by contacting us at dpo@magneticgroup.co.

6. Data retention period

We retain personal data only as long as necessary for the purposes for which it was collected:

• Contact inquiries: up to 12 months after resolution

• Newsletter subscriptions: until you unsubscribe

• Recruitment: up to 12 months, or longer with consent

• Contractual or legal purposes: as required by applicable law (e.g. accounting, tax)

7. Data Security

We implement technical and organisational measures in accordance with Articles 25 and 32 GDPR to ensure the protection of personal data, including:

• Secure access controls and encrypted storage

• Data minimisation principles

• Regular system monitoring and backups

While we do our best to protect your data, no system is entirely immune to security risks. As a result, while we strive to protect the information we maintain, we cannot ensure or warrant the security of any information that you transmit to us.

8. Your rights under GDPR

You may exercise the following rights under Articles 15–22 of the GDPR:

• Right of access (Article 15)

• Right to rectification (Article 16)

• Right to erasure (Article 17)

• Right to restrict processing (Article 18)

• Right to data portability (Article 20)

• Right to object (Article 21)

• Right not to be subject to automated decision-making (Article 22)

You may contact us to exercise these rights at dpo@magneticgroup.co

or by post at:

Magnetic Enginestands OÜ
Väike-Sõjamäe 1A, 11415 Tallinn, Estonia

We will respond within one month of receiving your request, which may be extended by two further months in complex cases. You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate or your local supervisory authority (Article 77 GDPR).

9. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The most current version will always be available here: https://magneticenginestands.co/privacy-policy.

Continued use of the Website after such updates constitutes acceptance of the revised policy.

10. Contact

For questions or concerns about this Privacy Policy or your personal data, please contact:

dpo@magneticgroup.co
Magnetic Enginestands OÜ

Väike-Sõjamäe 1A, 11415

Tallinn, Estonia