Who we are
HirePoint is a trading name of LTD Tergis Khma, a company registered in Georgia under identification number 406 284 943. LTD Tergis Khma is the controller of the personal data described in this document, for the purposes it determines.
- Registered address: Apartment 86, Building 13, Vazisubani 1st Microdistrict, Isani-Samgori District, Tbilisi 0152, Georgia
- Business address: Kostava 14, Stamba, D Block, Tbilisi, Georgia
- Privacy requests: privacy@hirepoint.ge
We have not designated a Data Protection Officer. The address privacy@hirepoint.ge is our contact point for privacy questions and requests; it is not a Data Protection Officer contact.
HirePoint provides recruitment and talent sourcing services and does not act as an Employer of Record or payroll provider. Professionals introduced through our services enter into contractual arrangements directly with client companies. HirePoint does not employ candidates or professionals.
Who this notice covers
This notice applies to candidates and professionals whose personal data we process for recruitment and related support — including people who submit a profile through our website, people we contact about opportunities, and professionals introduced to client companies. It supplements our Privacy Policy.
Applicable law
We process personal data in accordance with the Law of Georgia on Personal Data Protection. The EU General Data Protection Regulation (GDPR) does not apply to all of our activities automatically. It may apply where we offer our services to individuals in the European Union or process their personal data in that context — for example, when we correspond with EU-based client companies about candidates. Where the GDPR applies, we describe the corresponding legal bases and rights below.
Where we get your data
We may obtain your personal data:
- directly from you — through our professional form, by email or during our conversations;
- from LinkedIn and other professional networking or job platforms where you have made your profile available;
- from referrals by people who know you;
- from other lawful recruitment sources, such as public professional profiles.
Where we obtain your data from a source other than you, we will tell you this when we first contact you, or otherwise within the period required by applicable law, and point you to this notice.
Personal data we process
Depending on how you interact with us, this may include your name and contact details; role or specialisation; years of experience; LinkedIn profile or CV and its contents, such as work history, skills, education and languages; information you share during the recruitment process, such as availability, expectations and motivation; our interview and assessment notes; and records of your consents and our communications.
We do not ask for special categories of data, such as health information, as part of recruitment. Please do not include such information in your CV unless it is necessary. If a benefit you choose (for example, health insurance) requires such data, it is collected by or for the relevant partner only as needed to arrange that benefit.
Purposes and legal bases
For each purpose, we rely on the legal grounds available under Georgian law and, where the GDPR applies, the corresponding basis under Article 6 GDPR.
| Purpose | Legal basis |
|---|---|
| Reviewing your profile and assessing your suitability for current opportunities | Our legitimate interest in conducting recruitment; or steps taken at your request when you apply |
| Communicating with you about relevant opportunities and the recruitment process | Our legitimate interest in conducting recruitment |
| Keeping your profile in our talent network to contact you about future opportunities | Your consent, given through the optional box on our professional form or otherwise in writing |
| Sharing your profile with a specific client company | Your specific consent, obtained before each disclosure |
| Supporting your Individual Entrepreneur registration and providing accounting consultations, at your request | Performance of our arrangement with you, or steps taken at your request |
| Arranging an optional benefit you choose with a partner | Steps taken at your request and, where required, your consent |
| Keeping records and meeting legal obligations; establishing, exercising or defending legal claims | Compliance with legal obligations; our legitimate interests |
We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects.
Your consent and choices
Submitting our professional form means you acknowledge that we will process your professional information to assess relevant opportunities and communicate with you, as explained in this notice. It does not mean you agree to your profile being shared with any client company.
- Sharing with clients: before we share your profile with a client company, we will tell you about the intended recipient and the opportunity, and ask for your specific consent. We record this consent.
- Talent network: keeping your profile for future opportunities is optional and based on your consent. If you do not give it, we use your data only for the opportunity you applied for and our related communication.
- Benefits: optional partner benefits are separate choices. Choosing one is never a condition of recruitment.
- Withdrawing consent: you can withdraw any consent at any time by emailing privacy@hirepoint.ge. This does not affect processing carried out before the withdrawal.
Who we share your data with
- Client companies — only with your specific consent, as described above. Once a client receives your profile, it processes your data as an independent controller under its own privacy notice.
- Benefit partners — such as insurers, coworking spaces or fitness providers, when you choose a benefit. We share only the data necessary to arrange it, with consent where required. Partners process your data under their own terms.
- Professional advisers and public authorities — where necessary or legally required.
We use the following service providers:
- Web3Forms — receives form submissions from our website, delivers them to our email inbox and keeps a submission history for up to 30 days.
- Netlify — hosts this website and may process visitors’ IP addresses and related technical data in server logs.
- Google Fonts — provides the fonts used on this website and receives visitors’ IP addresses when the fonts are requested.
- Google Workspace (including Gmail and Google Drive) — provides our business email and is used to store information after we receive it.
Depending on their actual role and the contractual terms that apply, these providers may act as processors on our behalf or as independent controllers of some data (for example, data they process for their own security or service-improvement purposes). Their own privacy notices apply to such processing.
International transfers
Our client companies are mainly based in the European Union and the United States, so sharing your profile with a client (with your consent) may involve transferring your data outside Georgia.
Some of our service providers, and some recipients such as client companies, may process personal data outside Georgia or the European Economic Area, including in the United States.
Where applicable law requires safeguards for such transfers, we will make the transfer only on the basis of a lawful transfer mechanism, such as an adequacy decision or appropriate contractual clauses offered by the provider. You can contact privacy@hirepoint.ge for more information about the mechanism that applies to a specific transfer.
How long we keep data
We keep personal data only for as long as it is needed for the purposes described in this document, or for longer where this is permitted or required by law — for example, to meet accounting obligations or to establish, exercise or defend legal claims. When data is no longer needed, we delete it or make it anonymous. If you have consented to remain in our talent network, we keep your profile until you withdraw that consent or until it is no longer relevant, and we review profiles periodically.
Security
We take steps intended to protect personal data in a way that is appropriate to its nature and the risks involved, including limiting access to personal data to people who need it for the purposes described in this document, and using the account security features offered by our service providers.
No method of transmission over the internet or of electronic storage is completely secure, so we cannot guarantee absolute security.
Your rights
Depending on the applicable law and the circumstances, you may have the right to:
- Access — ask whether we process your data and receive a copy of it.
- Rectification — ask us to correct inaccurate or incomplete data.
- Erasure — ask us to delete your data.
- Restriction — ask us to limit how we use your data.
- Objection — object to processing based on our legitimate interests.
- Portability — where processing is based on consent or a contract and carried out by automated means, receive your data in a structured, commonly used format.
- Withdrawal of consent — where we rely on consent, withdraw it at any time. This does not affect processing carried out before the withdrawal.
These rights are not absolute and may be limited where the law allows, for example where we must keep certain data to comply with a legal obligation.
How to make a request
- Email privacy@hirepoint.ge.
- Tell us what your request is about and give us enough information to locate your data (for example, the email address you used and approximately when you contacted us).
- We may ask you to verify your identity when this is reasonably necessary to protect your data.
- We will respond within the time limits set by applicable law.
- If we cannot fully meet your request — for example, if we must keep certain data to comply with a legal obligation — we will explain the reason and any relevant retention requirement.
Complaints
If you have concerns about how we handle your personal data, please contact us first so that we can try to resolve them. You also have the right to lodge a complaint with the Personal Data Protection Service of Georgia. Where the GDPR applies, you may also lodge a complaint with the data protection supervisory authority in the EU member state where you live, work, or where the alleged infringement took place.
Changes to this notice
We may update this notice from time to time, for example when our services or the technologies we use change. The date at the top of this page shows when it was last updated. Where changes are significant, we will take reasonable steps to bring them to your attention.
Questions about this document? Email privacy@hirepoint.ge.