This notice explains how personal data is handled in connection with the services described on this website and in the Terms of Service, in line with the Law of Georgia on Personal Data Protection.
1. Who is responsible
The controller of personal data is Oleksandr Shchegolskyi, Individual Entrepreneur registered in Georgia (Registration No. 302324866), Georgia, Tbilisi, Chugureghi district, c. Dadiani St., N7 (plot N038/044), commercial space Nb229.
Contact for all data protection requests: contact@shchegolskyi.com.
2. What data is processed
- Clients and their contacts: name, business details, email, phone or address, correspondence, invoices and documents needed to provide the agreed services.
- Candidates in recruitment: name, contact details, CV, work history, qualifications, interview notes and any other information the candidate or the Client provides for the selection process.
- Third-party data supplied by Clients: data contained in documents, correspondence or records the Client asks to be processed as part of the services.
- Website visitors: this website does not use cookies, analytics or tracking. The hosting provider may record technical data such as IP addresses in server logs.
3. Why it is processed
- To agree, perform and invoice the services requested by the Client.
- To run recruitment on the Client's instruction, including sharing suitable candidates' data with that Client.
- To keep accounting and tax records required by the laws of Georgia.
- To reply to enquiries sent by email.
Personal data is not used for direct marketing without separate, explicit consent, and it is not sold.
4. Legal grounds
Data is processed where it is necessary to conclude or perform a contract, to meet legal obligations, on the basis of consent (in particular, a candidate's consent to be put forward to a Client), or where there is a legitimate interest that does not override the rights of the person concerned.
5. Who receives the data
- The Client for whom a recruitment or other service is performed, to the extent needed for that service.
- Subcontractors engaged to help perform the services, who are bound by confidentiality and receive only the data they need for their task.
- Service providers used to run the business, such as email hosting, electronic document signing, AI-based software tools and banking providers.
- Public authorities, where required by law.
Personal data is entered into AI-based tools only when a task requires it and, where possible, in anonymised form. Some of these providers may store data outside Georgia. Transfers are made only where permitted by the Law of Georgia on Personal Data Protection.
6. How long data is kept
- Client records, contracts and invoices: for the period required by Georgian tax and accounting rules.
- Candidate data: for the duration of the recruitment process and up to 12 months afterwards, unless the candidate agrees to a longer period or asks for earlier deletion.
- Email enquiries that do not lead to a contract: up to 12 months.
7. Your rights
You may ask to access, correct or delete your personal data, to restrict its processing, to receive a copy, and to withdraw consent at any time. Requests are answered by email to contact@shchegolskyi.com.
You may also complain to the Personal Data Protection Service of Georgia.
8. Changes to this notice
This notice may be updated. The current version is always published at shchegolskyi.com/privacy.