Recruitment Privacy Notice

_{Last update: May 2026}

We are Jobbatical OÜ, an Estonian company with registry code 12671900, address Estonia, Tallinn, Narva mnt 7b, 10117 (Jobbatical, we, us and our). We provide employee relocation and settle-in services (the Service) at the click of a button through our online platform at app.jobbatical.com (the Platform).   

The terms “Talent” or “you” refer to the natural person who receives our Services and accepts these Terms of Service (the Terms). If the Services extend to your family members, “you” and “your” shall include those family members. 

By accepting these Terms and using our Services, you confirm that you have carefully read, understood and agree to be bound by these Terms, forming a legally binding agreement between you and Jobbatical (the Agreement).

1. Scope of Services

1.1. Service categories. The Services provided by Jobbatical may include:

• Immigration Services: assistance with employment registration, residence permits, visas, local address registration, tax residency setups, and destination country labor tax overviews.
• Settle-in Services: assistance with accommodation, guidance on local healthcare, where applicable, opening a local bank account.
• Other: any other relocation-related services explicitly agreed upon between you and Jobbatical.

1.2. Case-specific scope. The exact scope of your Services is defined and agreed upon through your interactions with the Platform or via direct communication with our team.

1.3. Information restrictions. Any instructions, timelines, or document requirements provided by us apply strictly to your specific case. You agree not to disclose this operational information to any third party without our prior written consent.

1.4. Third-party dependencies. You acknowledge that the final outcome of the Services often depends on third-party government authorities and is outside of Jobbatical's direct control. We do not guarantee visa or permit approvals. Any timeframes provided are estimates only. Jobbatical will use its best efforts to process your case efficiently and without unnecessary delays.

2. User account and Platform use

2.1. Registration. To access the Services, you must log in to the Platform and accept these Terms. You confirm that all information provided during registration is accurate, true, and complete. Creation of the user account is required to submit Service-related information. Certain features of the Platform can only be used by logging in to your account. There may be other features of the Platform in the future which can only be used by logging in to your account.

2.2. Account security. You are solely responsible for maintaining the confidentiality of your login credentials. You must notify us immediately if you suspect unauthorised access to your account.

2.3. Platform restrictions. You agree not to:

• use the Services for any unlawful, obscene or immoral purpose or for soliciting others to perform any unlawful or immoral acts;
• violate any international or local laws and regulations in connection with the use of Services;
• in connection with the use of Services, harass, abuse, insult, harm, defame, slander, disparage, intimidate, or discriminate based on gender, sexual orientation, religion, ethnicity, race, age, national origin or disability;
• submit any false or misleading information in connection with the use of the Services;
• upload or transmit viruses or any other type of malicious code, malware, ransomware, spyware or similar technologies that may compromise the confidentiality, integrity or availability of the Services or Platform, or that affect the functionality or operation of the Services or Platform;
• spam, phish, pharm, pretext, spider, crawl, or scrape;
• attempt to gain unauthorised access to, assess, probe, scan, test, exploit, or compromise the Services or the Platform, including any systems, networks, infrastructure, or data, whether for the purpose of identifying security vulnerabilities, or otherwise, except where explicitly authorised in writing;
• interfere with, bypass, disable, degrade, overburden, or circumvent any security controls, safeguards, monitoring mechanisms, access controls, or technical and organisational measures implemented to protect the Services or the Platform;
• reverse engineer, decompile, disassemble, decode, or otherwise attempt to derive the source code, object code, underlying architecture, algorithms, data structures, or security mechanisms of the Services or the Platform, except to the extent such restriction is prohibited by applicable law;
• engage in any activity that undermines or poses a risk to the confidentiality, integrity or availability of the Services, Platform, or related information assets;
• transfer your account to another party.

3. Confidentiality

3.1. Definition. You must keep confidential non-public information you obtain through or in connection with the Services or the Platform, including but not limited to technical information, security features, system design, documentation, pricing, internal processes, and any other information that is not publicly available ("Confidential Information").

3.2. Use restrictions. You may use Confidential Information solely to receive the Services in accordance with these Terms. You may not disclose, share, publish, copy, or make such information available to any third party without Jobbatical's prior written consent.

3.3. Notification. You must immediately notify Jobbatical if you become aware of any unauthorised access to Confidential Information, your account, or the Platform.

3.4. Exceptions. Confidential Information does not include information that becomes publicly available through no fault of yours, was already lawfully known to you, or was received independently from a third party without confidentiality restrictions.

3.5. Survival. This confidentiality obligation survives the termination of this Agreement.

4. Processing of Personal Data

Your personal information collected during the provision of Service shall be processed in accordance with the Platform Privacy Notice (available at: https://www.jobbatical.com/privacy-notice).

5. Fees, expenses and payments

5.1. Service fees. The Service is subject to a fee, which is disclosed to you by us during the service ordering process. Please ensure that you check carefully before confirming your purchase.

5.2. Direct invoicing. Unless your employer is designated as the default payer under a separate agreement, Jobbatical will invoice you directly for the Services.

5.3. Third-party expenses. Jobbatical may pay expenses to third parties on your behalf (e.g. government fees, translation services, accommodation costs). If the employer does not cover specific third-party expenses, or if you are the primary client ordering the Services, you agree to reimburse Jobbatical for the full amount upon receipt of an invoice.

5.4. Expense management fee. For every individual third-party expense paid by Jobbatical on your behalf, an administrative expense management fee of 25 EUR / 25 GBP / 25 USD (depending on the country of service) will be applied to cover administrative and operational costs.

5.5. Payment terms. All invoices for Service fees are issued as advance payments and are due within 10 calendar days from the invoice date. Jobbatical reserves the right not to initiate or proceed with any Services until the corresponding invoice has been paid in full. Late payments may be subject to interest at a rate of 0.066% of the delayed amount per day of delay.

5.6. Non-refundability of expenses. Once Jobbatical has processed a payment to a government authority or another third party involved in the provision of Services, that amount and the associated expense management fee are non-refundable, regardless of the application outcome.

5.7. Service cancellations. Any cancellation of a Service case by you, and any subsequent refunds or remaining payment liabilities where you are the direct payer, shall be exclusively governed by the Case Cancellation Policy set forth in Annex A of these Terms.

5.8. Service suspension. If you fail to settle outstanding invoices by the due date, Jobbatical reserves the right, upon prior notice, to suspend your access to the Platform and suspend the provision of Services until all outstanding amounts are paid in full.

6. Liability and indemnification

6.1. Technical limitations. We will put our skills to the most effective use and take the utmost care in providing the Services as may reasonably be expected from us. We aim to comply with any deadline agreed with you to the extent it is in our control. We agree to apply our best efforts in providing the Services to you. You, however, acknowledge that the provision of our Services may still be affected by impacts that cannot always be completed or anticipated due to the complex nature of the technology environment. This being the case, you agree that we will be offering our Services as a best effort to avoid (a) any interruption, discontinuance, suspension or other type of unavailability of the Platform or Service; (b) any interruption or cessation of transmission to or from the Platform or Service; (c) any bugs, viruses, Trojan horses or the like, which may be transmitted to or through the Platform; (d) deletion of, corruption of, or failure to store any content or data; (e) the incompatibility of technologies used for accessing the Platform.

6.2. Accuracy of information and documentation. You are solely responsible for the accuracy and authenticity of all data and documents you submit. If Jobbatical pays a third-party fee based on incorrect details provided by you, you remain liable for the lost fee and any additional costs required to correct the application. Furthermore, Jobbatical is not liable for service failures or delays caused by incomplete information or missed actions on the part of you, your family members, your employer, or government authorities.

6.3. Limitation of liability. To the maximum extent permitted by applicable consumer law, Jobbatical's total liability under this Agreement shall be limited to the total amount of Fees actually paid by you directly to Jobbatical for the specific Service in question. Jobbatical shall not be liable for any indirect, consequential, or non-proprietary damages. The limitations of liability set out in these Terms do not apply in cases of gross negligence or intentional misconduct by Jobbatical.

6.4. Government authority decisions and delays. While Jobbatical provides expert guidance, the final decision on any immigration or relocation application rests solely with the competent government authorities. A rejection or delay by such authorities does not constitute a failure of Service by Jobbatical and does not entitle you to a refund of Service Fees, third-party expenses, or expense management fees.

6.5. Indemnity. You agree to compensate Jobbatical and its partners for any damages, losses, or legal costs resulting from your breach of this Agreement or applicable laws.

7. Termination and deletion of your account

7.1. Duration. This Agreement is valid for an unspecified term starting from your acceptance of these Terms.

7.2. Ordinary termination. Either party may terminate this Agreement without cause by giving one-month prior written notice to the other party.

7.3. Termination for cause. You may terminate this Agreement immediately if we breach our obligations and fail to remedy the breach within 14 days of receiving your written notice. We may terminate this Agreement immediately if you provide fraudulent information, are unauthorised to use the Services, or fail to remedy a contractual breach within 14 days of our notice.

7.4. Accrued obligations. Termination does not release either party from financial or operational obligations that arose before the termination date.

7.5. Deletion of account and data retention. Following termination, we reserve the right to delete your user account. Your personal data and files will be retained for as long as necessary to satisfy legal, tax, accounting, or reporting requirements, and to defend against potential legal claims in accordance with statutory limitation periods under applicable laws.

8. Governing law and jurisdiction

8.1. Governing law. This Agreement is governed by the laws of the Republic of Estonia.

8.2. Jurisdiction. Any disputes arising from this Agreement shall be settled in the Harju County Court in Tallinn, Estonia. If you are a consumer residing within the European Union, this choice of jurisdiction does not deprive you of mandatory local consumer protections, including your right to bring legal proceedings in your country of domicile.

9. Final provisions

9.1. Immediate performance and cancellation terms. By purchasing the Services and paying the advance fee, you hereby expressly request and authorise Jobbatical to begin the performance of the Services immediately. You explicitly acknowledge and agree that once Jobbatical begins performance, your statutory consumer right of withdrawal is modified. In the event that you cancel or withdraw from the Services at any time, for any reason, the milestone and refund schedules set forth in Annex A (Case Cancellation Policy) shall apply as your sole and exclusive remedy, superseding any other statutory or general refund claims.

9.2. Changes to the Terms. We reserve the right to modify these Terms to reflect changes in our Services, operational costs, or regulatory requirements. We will notify you of any updates via email. If you do not agree to the changes, you may terminate this Agreement within 14 days of the notice, with the agreement concluding 30 days later. Continued use of the Platform constitutes acceptance.

________________________________________________________________________________________

Annex A – Case Cancellation Policy

Applicable strictly to Services ordered directly by the Talent

1. Scope

This Case Cancellation Policy applies strictly and exclusively to individual Talents who purchase and pay for Jobbatical Services directly. This Policy does not apply to any Services ordered, managed, or funded by an employer.

2. Cancellation milestones and refund schedules

Because Jobbatical incurs immediate administrative, operational, and document-review costs upon the creation of a case, refunds or remaining fee liabilities are calculated based on the progression of the case at the exact timestamp the cancellation notice is received by Jobbatical:

• Milestone 1: case added but not activated. If a Service case has been created or ordered on the Platform but Jobbatical has not yet initiated internal processing, assigned a dedicated specialist, or opened communication, the Service fee is 100% refundable.
• Milestone 2: case activated and initial communication done. Once Jobbatical has activated the case in our system, assigned an immigration/relocation specialist, and initiated the initial outreach or kick-off communication to you, 25% of the Service fee is non-refundable. You will be refunded for 75% of the Service fee.
• Milestone 3: active preparation of application documents. Once Jobbatical has actively begun preparing, reviewing, translating, or structuring your application documents, information, or relocation files (prior to final submission readiness), 50% of the Service fee is non-refundable. You will be refunded for 50% of the Service fee.
• Milestone 4: application ready for submission or submitted. Once the application file is complete, ready for submission to the respective government authorities, or has already been submitted, the Service fee is 100% non-refundable. No refunds or credits will be issued under any circumstances.

3. Paid third-party expenses

In accordance with Section 5.6 of the main Terms, any third-party fees (such as government state fees, translation costs, accommodation costs) that have already been paid or irrevocably committed by Jobbatical to external partners prior to cancellation are completely non-refundable, regardless of the cancellation milestone reached.

‍

_{Effective as of November 1, 2025}

We are Jobbatical OÜ, an Estonian company with registry code 12671900 (Jobbatical, we, us and our). We provide employee relocation and settle-in services (the Services) at the click of a button through our online platform at app.jobbatical.com (the Platform).

The term “Client” or “you” refers to a legal entity named as a Client in a respective order form signed by Jobbatical and the Client (the Order Form). The term “Talent” refers to a candidate or an employee whom the Client wishes to relocate from one country to another for the employment purpose by using our Services.

Jobbatical and the Client are hereinafter collectively referred to as the “Parties” and separately as a “Party”

By signing the Order Form and using our Services, you confirm that you have carefully read and understood these Terms & Conditions (the Terms) and agree to be bound by these Terms. These Terms, the Personal Data Processing Agreement, and the respective Order Form compile together a legally binding agreement between the Client and Jobbatical (the Agreement) that shall govern the provision of Services ordered under that Order Form.

1. The Services

1.1. The exact scope and description of Services that we provide to you are specified in the Order Form(s) signed between you and Jobbatical.

1.2. We make all reasonable efforts to ensure that all general descriptions of the Services correspond to the actual service package chosen by you. There may, however, be minor variations from descriptions of the Services, but such variations will not significantly change the essence of the service package chosen by you.

2. User Account and Use of the Platform

2.1. To use the Service, you must register via Platform. By doing so, you confirm that (i) any registration information you submit is true, accurate and complete (ii) the legal entity that you represent has full legal capacity and (ii) you have the full authority to enter into the Agreement on behalf of that legal entity.

2.2. To register as a user, you must provide us the following information concerning the Client: business name, registry code or number, VAT number, address and name, e-mail address and other requested information about the legal entity and the contact person of the Client.

2.3. You are liable for maintaining confidentiality of your username and password. You must immediately notify us if you believe the security of your account has been compromised.

2.4. Creation of the user account is required to submit Service-related information, monitor the status of Service cases and generate Service reports. These features of the Platform can only be used by logging in to your account. There may be other features of the Platform in the future which can only be used by logging in to your account.

2.5. You shall not:
- use the Services for any unlawful, obscene or immoral purpose or for soliciting others to perform any unlawful or immoral acts;
- violate any international or local laws and regulations in connection with the use of Services;
- in connection with the use of Services, harass, abuse, insult, harm, defame, slander, disparage, intimidate, or discriminate based on gender, sexual orientation, religion, ethnicity, race, age, national origin or disability;
- submit any false, inaccurate or misleading information in connection with the use of the Services;
- upload or transmit viruses or any other type of malicious code that will or may be used in any way that will affect the functionality or operation of the Services or Platform;
- spam, phish, pharm, pretext, spider, crawl, or scrape;
- interfere with or circumvent the security features of the Services or the Platform or any technical measures used to provide the Services or any related website;
- transfer your account to another party.

3. Scope and Provision of Services

3.1. We will provide you the Services which you have selected, or which have otherwise been specified in the Order Form(s) as part of the Service tier/bundle or individually.

3.2. The specific scope and volume of Services is specified in the Order Form. In respect of each Talent, we will provide you only those Services that are included in the scope of the respective Service tier or individual Service that you have selected for that Talent.

3.3. Upon initiating a relocation case on the Platform you may be requested to provide an initial introduction of the Talent and/or his family members, including Talent’s name and e-mail address.

3.4. In the course of provision of the Services we will contact the Talent and if necessary, Talent’s family members and ask for additional information via the Platform account which they are requested to create.

3.5. By submitting initial information about the Talent in respect of whom you have ordered the Services, you warrant that you have been granted all authorisations, consents and permits required by law to submit Talent’s and/or his/her family member’s data to us for the purposes of providing the Services.

3.6. You agree that any information provided by us in connection with the performance of any Service, for example, information about actions to be taken or documents to be submitted by you or the Talent in connection with the Service applies only in relation to specific Talent or his or her family member being subject to respective Service and the specific case at hand. Under no circumstances are we liable for the use of such information by any other party and for any other purpose.

3.7. You acknowledge and understand that the final result of the provision of Services may be outside of our control. For example, we cannot provide any guarantee concerning the final decision made by the authorities, and we are not responsible for the outcome if you or the Talent has provided incomplete or incorrect information. Any time estimation provided by us is for informative purposes only. Regardless of the foregoing, we shall use our best effort, in every reasonable way, to achieve the most beneficial result to you without any unnecessary delays.

3.8. You agree to provide such co-operation and any necessary information as we may reasonably request in all matters relating to the Service. Failure to provide requested information in a timely manner may result in delays or limitations in the delivery of the Service.

3.9. In the event that any of your parent companies, subsidiaries, affiliates or other related entities uses our Services, such use shall be subject to our prior approval. You hereby agree to take full responsibility for any actions or omissions of any of such entities. You ensure that each of such companies complies with these Terms, and you will be liable for any losses, damages, costs, or expenses incurred by us as a result of any act or omission by any of your group companies.

3.10. We may accept commissions or referral fees from third parties.

3.11. We reserve the right to change any part of Terms in case (i) we improve our Services and/or develop new features (ii) we otherwise change the scope or nature of our Services or our related practices (iii) there is a change in costs, expenses, risks and/or liabilities relating to the provision of Services (iv) the purpose of the change is to clarify any of the parties’ rights and obligations relating to the Services and/or (v) there are other objective reasons of whatsoever nature. We will notify you of each such change via e-mail or by posting revised terms on our Platform. If you do not agree to the change of Terms, you have a right to terminate the Agreement within 14 days as of our notification by sending us a termination notice in which case Agreement terminates after 30 days of receipt of your notice. Your continued use of Platform and/or the Service after we have notified you about the changes constitutes your acceptance to those changes.

3.12. For the avoidance of doubt, we are also entitled to change the fees stipulated in the Order Form from time to time. We will notify you about such changes through our Platform or by email. Section 3.11 shall apply in such cases.

4. Fees

4.1. Services provided under the Agreement and respective fees shall be subject to the Order Form(s) in force.

4.2. Any expenses for the services (such as state fees, translation costs, legalisation fees, accommodation costs) are paid separately in addition to the service fees.

4.3. An expense management fee applies for all expenses. The fee shall be 5% of the expense amount if the Client has ordered a separate service for expenses, and 10% if the Client has not ordered such service, or if the remaining balance in the ordered service is insufficient to cover the relevant expenses, unless a different fee or arrangement has been agreed in the Order Form. Unless otherwise agreed in an Order Form, this fee shall be invoiced separately.

5. Confidentiality

5.1. Each Party acknowledges that it may receive or gain access to non-public, confidential, or proprietary information of the other Party in connection with the Agreement (the Confidential Information). Each Party agrees to keep such information strictly confidential and not to disclose it to any third party without the prior written consent of the disclosing Party, except as permitted below.

5.2. Confidential Information includes, but is not limited to, technical data, know-how, trade secrets, business plans, pricing, strategies, customer or partner information, employee or Talent data, IT systems and security measures (including cyber security measures) in use by the Party, any non-public contractual terms, and all other information disclosed in any form that a reasonable person would consider confidential.

5.3. Confidential Information does not include information that:

1. was already lawfully in the receiving Party’s possession before disclosure;
2. becomes publicly available through no fault of the receiving Party;
3. is lawfully disclosed to the receiving Party by a third party without breach of confidentiality; or
4. is independently developed by the receiving Party without reference to the disclosing Party’s Confidential Information

5.4. A Party may disclose Confidential Information to its employees, (sub)contractors, advisers, or affiliates on a strict need-to-know basis, provided such recipients are subject to confidentiality obligations no less protective than those in this Agreement.

5.5. Upon termination of the Agreement or upon the disclosing Party’s request, the receiving Party shall promptly return or destroy all Confidential Information, unless retention is required by law or necessary to comply with obligations under the Agreement.

6. Privacy

6.1. In the course of provision of Services, we will collect and process personal data disclosed directly by the Talent or his family member or by you. The data processing for which Jobbatical is the controller of personal data is described in Jobbatical’s privacy notice, which is accessible on our [link: website]. The data processing for which Jobbatical is the processor of personal data is subject to a data processing agreement (DPA), which forms an integral part of the Agreement.  Explanatory information about data processing roles can also be found under Privacy and Security.

7. Liability and Indemnification

7.1. We will put our skills to the most effective use and take the utmost care in providing the Services as may reasonably be expected from us. We aim to comply with any deadline agreed with you to the extent it is in our control. We agree to apply our best efforts in providing the Services to you. You, however, acknowledge that the provision of our Services may still be affected by the impacts that cannot always be completed or anticipated due to the complex nature of the technology environment. This being the case, you agree that we will be offering our Services as a best effort to avoid the following:

• any interruption, discontinuance, suspension or other type of unavailability of the Platform or Service;
• any interruption or cessation of transmission to or from the Platform or Service;
• any bugs, viruses, Trojan horses or the like, which may be transmitted to or through the Platform;
• deletion of, corruption of, or failure to store any content or data.

7.2. We are not liable for any breach or damages that is caused by (i) incorrect, incomplete or misleading information provided by you, the Talent, his family members and/or any other third party, or (ii) any failure or delay by you, Talent, his family members and/or any other third party to perform the actions required to be taken in order to achieve the purpose of the respective Service.

7.3. We are liable for any breach of this Agreement only to the extent the breach is intentional or grossly negligent.

7.4. Our liability in respect of any Service provided to you shall be limited to the total amount of fees you have actually paid for such Service.

7.5. We shall not be liable for any damages other than direct proprietary damages.  

7.6. Any limitations of our liability set out in these Terms shall not apply in case of any intentional breach of the Agreement by us.

7.7. You hereby agree to compensate us as well as any persons that we have engaged in the provision of the Services for any damages and costs incurred as a result of your breach of this Agreement or applicable laws, including, without limitation, your failure to obtain consents and authorisations from the Talent and/or his family members required for the provision of Service.

8. Termination and Deletion of Your Account

8.1. The Agreement is for an unspecified term.

8.2. Either Party may unilaterally terminate this Agreement at any time and without providing any reason for termination by giving the respective other Party one-month prior notice.

8.3. You may immediately unilaterally terminate the Agreement by giving us a notice if we have breached this Agreement and have not remedied the breach within 14 days after the receipt of your relevant notice.

8.4. We may immediately unilaterally terminate the Agreement by giving you a notice thereof if you (i) have provided morally inappropriate, fraudulent, misleading or inaccurate information and/or (ii) are not eligible or authorized to use the Services and/or or (iii) have breached the Agreement and have not remedied the breach within 14 days after the receipt of our relevant notice.

8.5. If a Party terminates the Agreement during the time any Services are being provided with respect to any Talent, we shall complete the provision of such Services, unless the parties agree otherwise. 

8.6. We do not have an obligation to refund you any fees paid for any Services if either Party terminates this Agreement, except in case we terminate this Agreement without providing any reasons, or if you terminate the Agreement due to our material breach.

8.7. After the termination of the Agreement we have the right to delete your account. Your data and any data concerning the provision of Services, including reports generated in the course of provision of Service will be stored in our database in personalized format for up until the expiry of the claims arising from the contract - 3 years.

9. Governing Law and Jurisdiction

9.1. The Agreement is governed by Estonian laws.

9.2. Any disputes arising from this Agreement shall be settled in the Harju County Court in Estonia.

*Terms & conditions till <31-10-2025> are here

Last update: April 8, 2026

A word from our COO

Jobbatical is a leading provider of relocation services, helping companies hire top talents from anywhere in the world.
‍
Our paperless process is powered by our own software application. We proudly serve around 600 companies as their primary relocation partner. At Jobbatical, safeguarding sensitive information and customer data is integral to our business. We rely heavily on our Relocation Case Management Software, prioritizing the confidentiality, integrity, and availability of our applications. Our primary objective is to protect our customers' data and Information and Communications Technology (ICT) assets. We are committed to continuous security improvements and adhere to Information Security Management Systems across all levels of our organization. This includes all employees, core business processes, and the ICT systems supporting our Jobbatical application. To ensure the highest standards of information security, we are an ISO27001 standard certified company. This standard guides us in establishing, implementing, controlling, assessing, maintaining, and improving our documented Information Security Management System (ISMS). By choosing appropriate security measures, we aim to safeguard information and provide confidence to our stakeholders.

In this page we have curated a collection of documents that cover various aspects of our program, policies, architecture, tests, and more. These resources are designed to provide comprehensive information. If you have any additional inquiries, please don't hesitate to contact us.

Ronald Hindriks
^COO

Data protection

Respecting personal data protection rights is our priority which is why we have created documentation and implemented internal processes to meet the GDPR requirements, validated by our ISO/IEC 27701 certification.

What is our data processing role?

Our company is a Controller

Although we offer our services through our own technically advanced cloud-based platform, we are not a typical SaaS service provider in relation to our relocation service.

Based on our assessment, we have concluded that we are a separate controller of personal data of talents and their family members when providing relocation services because we determine the means and purposes of data processing. Such data processing is described in our privacy notice. For specific data types, please see “talent data” and “talent family member data” (this includes the talent’s or his or her family member’s first name, last name, date of birth, personal ID code, nationality, passport data, photo, etc) in our privacy notice.

Our role as a controller primarily arises because of following:

• Even though the business client initially orders and pays for the service, a direct relationship between us and the talent is still established during the provision of the service. Additionally, a power of attorney may be requested from the talent (or his or her family member) directly,
• There are no specific instructions from the business client on what data to collect from the talent (and his/her family member) and how exactly the relocation services should be provided,
• In general, most of the personal data is collected directly from the talent (i.e., business clients are not generally involved in the collection and submission of personal data to us),
• The business client is usually kept informed of the process and receives the notification once the relocation is completed, but the business client has no significant influence on us and the provision of services in general. On the other hand, we have a significant independence in providing the service – we determine exactly how (by using what means) we process personal data in order to achieve the intended purposes.

Our Company is a Processor

When it comes to the processing of personal data of our platform users designated by our business clients, we consider ourselves as a data processor.  Such processing is regulated by the data processing agreement (DPA) appended to our service agreement or terms of service. The DPA concerns only the processing of the names, emails, phone numbers and job titles of our business clients’ employees who are using our platform (e.g., HR manager who has access to the platform and who initiates the talent relocation), but not the talents (i.e., current or future employees who need to be relocated) and their family members.

In a nutshell, a typical process looks like this:

‍

While this is a description of our typical process, depending on the client and the processes agreed with the client, relevant legal documentation may need to be customized accordingly. Please feel free to talk to our growth team so that we can find a solution that suits your business in the best possible way.

We are also ISO/IEC 27701 (Privacy Information Management System) certified, which further demonstrates a high level of protection of personal data.

Should you have any questions regarding the data processing, please feel free to contact our DPO: [email protected].

What about the (sub)processors?

All our (sub)processors are thoroughly assessed to ensure they meet the same or more stringent data protection and security standards. The list of processors used by Jobbatical is available to clients and selected prospects subject to NDA.

Release Date: 23.04.2026

‍
PERSONAL DATA PROCESSING AGREEMENT

We are Jobbatical OÜ, an Estonian company with registry code 12671900 (Jobbatical, we, us and our), address Narva mnt 7b, 10117 Tallinn, Estonia. We operate an online platform at https://app.jobbatical.com (the Platform) to provide certain services relating to relocation of employees/future employees, as well as their family members from one country to the place of employment in another country (the Services).

The term “Client” or “you” refers to a legal entity named as a Client in the service agreement signed by Jobbatical and the Client (the Service Agreement). This personal data processing agreement (the DPA) is part of a Service Agreement between Jobbatical and the Client (each also a Party and collectively the Parties).

In connection with the provision of the Services under the Service Agreement, Jobbatical processes certain personal data on behalf of the Client. To ensure the secure, correct and lawful processing of personal data, the Parties have agreed to supplement the Service Agreement and enter into this DPA as part of the Service Agreement.

This DPA applies to the processing of personal data of platform users designated by the Client for the purposes further described in Annex A of the DPA. For the processing of personal data relating to relocated employees and their family members, Jobbatical acts as an independent controller, and for this processing the Privacy Notice applies.

In case of a conflict between any other document forming part of the Service Agreement and this DPA regarding the processing of personal data, the DPA shall prevail and apply.

1. GENERAL PROVISIONS

1.1 The terms used in the DPA are used in the meaning given to them in Article 4 of the General Data Protection Regulation (EU) 2016/679 of the European Parliament and of the Council (the GDPR) or in the meaning given to them in the Service Agreement.  

1.2 In the context of Article 28 of the GDPR, Client is the data controller of the personal data transferred or made available to Jobbatical in the course of the use of the Platform by the Client’s designated users and Jobbatical is the data processor.

2. GENERAL OBLIGATIONS OF JOBBATICAL

2.1 Jobbatical shall process personal data only in accordance with the applicable law, the terms of the Service Agreement, including the terms of this DPA.

2.2 Jobbatical shall process personal data only for the purposes described in Annex A to this DPA.

2.3 Jobbatical shall process personal data in accordance with the documented instructions of the Client, including those in this DPA.

2.4 Jobbatical has designated, and shall maintain where required by applicable law, a competent data protection officer in accordance with the applicable law

2.5 Jobbatical shall keep records of all the data processing activities carried out on behalf of the Client. The records of data processing activities shall comply with the requirements set forth in Article 30 (2) of the GDPR.

2.6 Upon the respective request by the Client, Jobbatical shall make available to the Client the records described in section 2.5 regarding the personal data processed on behalf of the Client immediately and free of charge but not later than within fifteen (15) business days as of the respective request by the Client.

2.7 Jobbatical shall, taking into account the nature of the processing, provide reasonable cooperation to assist the Client by appropriate technical and organizational measures, in so far as is possible, to respond to any requests from individuals or applicable data protection authorities relating to the processing of personal data under the DPA. In the event that any such request is made directly to Jobbatical, Jobbatical shall not respond to such communication directly without Client's prior authorization, unless legally compelled to do so. If Jobbatical is required to respond to such a request, Jobbatical shall promptly notify the Client and provide it with a copy of the request unless legally prohibited from doing so.

2.8 Jobbatical shall assist the Client in ensuring compliance with the obligations pursuant to Articles 32 to 36 of GDPR taking into account the nature of processing and the information available to Jobbatical.

3. GENERAL OBLIGATIONS OF THE CLIENT

3.1 The Client warrants that upon transferring any personal data to Jobbatical, the Client has an appropriate legal basis to submit such personal data to Jobbatical.

3.2 The Client warrants that upon transferring any personal data to Jobbatical, Jobbatical is entitled to further process such personal data for the purposes of performing the Service Agreement.

3.3 The Client warrants that upon transferring any personal data to Jobbatical, all personal data submitted by the Client to Jobbatical is accurate, true, relevant and necessary with reference to the performance of the Service Agreement.

4. CONFIDENTIALITY

4.1 Jobbatical shall ensure the confidentiality of the personal data processed on behalf of the Client.

4.2 Jobbatical shall ensure that no unauthorized third parties can access the personal data processed on behalf of the Client.

4.3 Jobbatical shall ensure that all the representatives, employees of Jobbatical and other persons who through Jobbatical come into contact with the personal data processed on behalf of the Client are subject to the confidentiality obligation assumed under a contract or the law and Jobbatical shall ensure that their representatives, employees and other persons acting for their benefit maintain the full confidentiality of the personal data.

4.4 Jobbatical shall ensure that all the representatives and employees of Jobbatical who come into contact with the personal data processed on behalf of Client have received appropriate training and instructions for the processing of personal data in accordance with the Service Agreement, the DPA and the applicable law.

5. SECURITY MEASURES

5.1 Jobbatical shall ensure the security of personal data processing for the purposes of protecting personal data from accidental or unauthorized processing, disclosure or destruction by implementing measures required under Article 32 of GDPR.

5.2 Taking into account the state of the art and costs of implementation, and the nature, scope, context and purposes of the personal data processing as well as the risk to the rights and freedoms of natural persons, of varying likelihood and severity, that may result from personal data processing, Jobbatical shall apply appropriate technical and organizational measures upon personal data processing to ensure the security of personal data. A more detailed description of technical and organisational measures is provided in Annex B to this DPA.        

6. AUDIT

6.1 The Client shall have the right, once in every twelve (12) months upon the provision of fifteen (15) business days' prior written notice to audit Jobbatical’s operations relevant to the performance of the DPA. If the date proposed by the Client is not suitable for Jobbatical, the Client can appoint another date that cannot be later than fifteen (15) business days from the original date. The audit methodology will be specified between the Parties before the audit is carried out. The Client shall be responsible for the costs of the audit.

6.2 The audit must be performed on a business day during the working hours of Jobbatical, and it must not unreasonably disturb Jobbatical's course of business or jeopardise the confidentiality of any third party's information in Jobbatical's possession. Jobbatical undertakes to co-operate in good faith with the Client, contribute to inspections and audits by the Client, and provide the Client with such information relating to this DPA that the Client may reasonably request in order to demonstrate that it has acted in compliance with the GDPR.

7. PERSONAL DATA BREACH

7.1 In case of a personal data breach Jobbatical shall as immediately as possible notify the Client of this. Jobbatical shall send to the Client a notification about the personal data breach, which shall include the following information:

7.1.1 a description of the nature of the personal data breach, including where possible, the categories and approximate number of data subjects concerned and the categories and approximate number of personal data records concerned;    

7.1.2 the name and contact details of the data protection officer or other contact person of Jobbatical if applicable;

7.1.3 the likely consequences of the personal data breach, incl. the likely consequences to data subject;

7.1.4 measures taken or proposed to be taken by Jobbatical to address the personal data breach or measures to mitigate its possible adverse effects.

7.2. Jobbatical shall send the notification specified in section 7.1 to the Client immediately and if possible, not later than within 48 hours as of the occurrence of the personal data breach.

7.3. In case and insofar as Jobbatical is not able to submit the information described in section 7.1 to the Client within the term set forth in section 7.2, Jobbatical may submit the information to the Client in phases but without undue further delay accompanied by a justification of the delay.

7.4. Jobbatical shall cooperate fully with the Client for the purposes of preventing personal data breaches. If a personal data breach occurs, Jobbatical shall cooperate fully with the Client to address the personal data breach as efficiently and quickly as possible and/or mitigate its possible adverse effects.

7.5. Jobbatical shall document all personal data breaches, including the facts relating to the personal data breach, its effects and the remedial action taken.

8. RETURN, DELETION AND DESTRUCTION OF PERSONAL DATA

8.1. Upon each request of the Client and/or after the termination of the Service Agreement, Jobbatical shall delete all personal data processed on behalf of the Client within fourteen (14) calendar days, unless Jobbatical has a legal basis to retain certain data.

9. SUBPROCESSORS AND TRANSFER OF PERSONAL DATA TO THIRD COUNTRIES

9.1. The Client grants Jobbatical a general authorization to subcontract the personal data processing conducted under this DPA to subprocessors provided that:

9.1.1. the engagement of the subprocessor is necessary for the provision of the Services;

9.1.2. Jobbatical has entered into a written agreement containing data protection obligations no less protective than those in this DPA. Jobbatical shall be liable for any breaches by the subprocessor in accordance with the terms of this DPA;

9.1.3. Jobbatical will evaluate the security, privacy and confidentiality practices of a subprocessor prior to selection to establish that it is capable of providing the level of protection of personal data required by this DPA. When the personal data is transferred outside the European Economic Area, Jobbatical shall ensure that either the personal data is transferred to a country in relation to which the European Commission has decided that the country ensures an adequate level of protection or if there is no adequacy decision about the country, territory or sector for the transfer, Jobbatical shall ensure the transfer is subject to appropriate safeguards listed in the GDPR.

9.2. The list of subprocessors approved by the Client at the time of the conclusion of this DPA is set out in Annex C to this DPA. Jobbatical shall inform the Client of any intended changes concerning the addition or replacement of other subprocessors, thereby giving the Client the opportunity to object to such changes. The Client is considered to have agreed with the changes in subprocessors provided that the Client has not submitted its objection within ten (10) business days as of the receipt of the notice.

9.3. If Jobbatical uses subprocessors, Jobbatical shall assume full liability for the subprocessor to process personal data in accordance with the applicable law and this DPA.

10. LIABILITY AND COMPENSATION FOR DAMAGE

10.1. Jobbatical shall assume liability for damage, administrative fines or any other claims with regard to Jobbatical’s violation of the Service Agreement, the DPA or requirements of the applicable law.

10.2. Jobbatical shall not be liable in any case for an administrative fine imposed on the Client, damage caused to the Client or a claim submitted with regard to the Client if these are based on a violation by the Client and/or if Jobbatical has not committed such violation.

10.3. The Client shall assume liability for damage, administrative fines or any other claims with regard to the Client’s violation of the Service Agreement, the DPA or requirements of the applicable law.      

11. VALIDITY

11.1. The DPA shall be valid from the moment of conclusion of the Service Agreement until Jobbatical is processing personal data on behalf of the Client or until the end of the term of the Service Agreement, whichever is the later.

12. FINAL PROVISIONS

12.1. The DPA shall be governed by the laws of the Republic of Estonia.

12.2. Disputes arising from the DPA shall be resolved by negotiations or in Estonian courts, Harju County Court being the court of first instance.

________________

ANNEX A to the DPA

1. PURPOSE OF DATA PROCESSING

Provision of the relocation services to the Client in accordance with the Service Agreement.

2. DATA SUBJECTS

The Platform users designated by the Client.

3. CATEGORIES OF PERSONAL DATA

Name, surname, email address, phone number (if provided).

4. PROCESSING OPERATIONS

Jobbatical processes the personal data in the Platform to allow the Client’s employees and other contractors, if applicable, to use the Platform in relation to fulfilment of the Service Agreement.

5. PROCESSING PERIOD

The term of the Service Agreement and maximum fourteen (14) days after the termination of the Service Agreement, unless pursuant to applicable law Jobbatical has the right or obligation to retain data for a longer period.

________________

ANNEX B to the DPA – Technical and organizational measures

1. INFORMATION SECURITY PRACTISES AND PRINCIPLES

 1. Jobbatical shall ensure methodological and purposeful information security management in its organisation, preferably based on a widely accepted standard (such as ISO/IEC 27001, CIS Security Controls, Estonian national information security standard E-ITS), ensuring:

    1. information security risk management;

    2. assigned information security roles and responsibilities;

    3. access management;

    4. information security incident management;

    5. endpoint security management;

    6. cryptography management;

    7. periodic review of information security measures.

 2. Jobbatical’s personnel must have completed information security training at least once a year or ensure information security competence in other ways (such as maintaining information security certificates).

 3. Jobbatical shall implement the information security management requirements throughout its relevant supply chain to the extent that may affect the Client’s personal data.

 4. The Client has the right to audit Jobbatical’s information security management system and information security measures to the extent that may affect the Client’s personal data.

2. INFORMATION AND ACCESS MANAGEMENT

 1. Jobbatical must prevent unauthorized access to confidential information.

 2. Documentation must be marked with classification labels if specific instructions have been received from the Client.

 3. Information stored in the Client’s information systems and intended for processing strictly there may not be copied into Jobbatical’s systems unless otherwise agreed.

 4. Managing access to confidential information must be based on need-to-know and the principle of least privilege.

 5. Confidential information may only be transmitted over the Internet in an encrypted form (such as encrypted e-mail attachments, HTTPS web sessions, TLS protected collaboration tools, VPN connections).

 6. Confidential information may only be stored in an encrypted form (such as full hard disk encryption, encrypted files, encrypted database).

 7. Jobbatical shall immediately notify the Client of the need to close the user account if any of Jobbatical’s personnel is no longer involved in the performance of the Services.

3. INFORMATION SECURITY INCIDENT MANAGEMENT

 1. Jobbatical must notify the Client within 48 hours of any registered information security incident that may affect the Client’s personal data.

 2. The notification shall contain detailed information on the nature, extent and technical characteristics of the incident enabling the Client to implement additional measures to protect the personal data.

 3. Information about information security incidents is considered confidential and must be transmitted in an encrypted form.

 4. Jobbatical shall not take actions on public communication to the extent that allows identifying the Client and its security measures.

 5. Jobbatical shall fully cooperate with the Client in handling information security incidents, including analysis, isolation and restoration of the normal situation.

 6. Contact persons for reporting information security incidents and transmitting encrypted messages are: "dpo @ jobbatical.com" for Jobbatical. The Client shall notify Jobbatical of its contact details for such purposes.

‍

Last update: May 12, 2026

Urgency Service : Terms of service

1. Scope of Urgency Service 

By selecting the Urgency Service, you instruct Jobbatical to prioritize the management of the specified case based on a "first-in-line" principle. This internal prioritization ensures that Jobbatical personnel initiates and executes all procedural actions within their control with priority.

Territorial Scope: this service is currently available only for cases involving the United Kingdom, Spain, and Germany.
‍

‍2. Eligibility and Fees

• Trigger: This service is applicable if the requested travel or employment start date is, in general, less than 3 weeks from the date of case initiation.‍
• Service Charge: A non-refundable fee of 500 EUR/GBP/USD (depending on the country of application) (the "Urgency Fee") shall be applied for this expedited internal handling.

Additionally, depending on the country, type of the case and the requested travel or employment start date, Jobbatical team will assess for "service urgency" and urgency fee may be applied; Please refer the table below for the same:

3. Limitation of Liability

You acknowledge and agree to the following:

• Internal Scope only. The Urgency Fee covers Jobbatical’s internal administrative priority. It does not, and cannot, influence the processing speeds, decision-making timelines, or any decisions or requirements of government authorities, or third-party entities.
  
• No Guarantee of Outcome. First-in-line prioritization does not guarantee a successful application outcome or the achievement of the planned travel/start date.
  

External Factors. Delays caused by authorities’ appointment availability, public holidays, or requests for additional documentation/information by authorities are outside the scope of this service and do not entitle you to a refund.

29 May 2025

‍

En Jobbatical, estamos comprometidos con la transparencia y la equidad en la gestión de cancelaciones de servicios y reembolsos. Por favor, revisa cuidadosamente esta política antes de adquirir nuestros servicios.

Al contratar nuestros servicios, aceptas los términos que se detallan a continuación.

‍

1. Política General

Esta política de reembolsos se aplica exclusivamente a los servicios relacionados con solicitudes de ciudadanía española adquiridos a través del sitio web de Jobbatical.
Debido a la naturaleza de nuestros servicios, en los que se invierten tiempo y recursos desde las primeras etapas del proceso, ofrecemos una política de reembolso escalonada según el nivel de avance del servicio. Por favor, lee lo siguiente detenidamente antes de continuar.

‍

2. Elegibilidad para Reembolso (Si Cancelas el Servicio)

Si decides cancelar el servicio de ciudadanía española después de la compra, tu elegibilidad para un reembolso dependerá del trabajo que ya se haya realizado. Los reembolsos están disponibles bajo las siguientes condiciones:

• Dentro de las 24 horas posteriores a la compra del servicio (y antes de que se haya iniciado cualquier trabajo) – 100% de reembolso
• Después de que nuestro equipo te haya enviado un primer mensaje o guía – 75% de reembolso
• Después de que hayas recibido formularios o documentos para firmar – 25% de reembolso
• Después de que tu solicitud haya sido presentada ante las autoridades españolas – 0% de reembolso

Para solicitar la cancelación y el reembolso, debes notificarnos a través del medio de contacto indicado más abajo en la sección “Contáctanos”. La aprobación se basará en el registro documentado del progreso de tu caso.

‍

3. Derecho de Desistimiento

De acuerdo con la legislación de protección al consumidor en España (Real Decreto Legislativo 1/2007, Ley General para la Defensa de los Consumidores y Usuarios), tienes derecho a desistir de un contrato de servicios en un plazo de 14 días naturales desde la compra.

Al aceptar esta política de reembolso, reconoces expresamente que:

• Consientes el inicio inmediato del servicio antes de que finalice el período de desistimiento de 14 días.
• Comprendes que tu derecho de desistimiento dentro de los 14 días sigue siendo válido, ya que el servicio se encuentra en curso y no se completará dentro de ese plazo.
• Si ejerces tu derecho de desistimiento durante los 14 días, aceptas pagar un importe proporcional correspondiente a la parte del servicio ya prestado, según nuestra política de reembolso escalonada.

‍

4. Resultados y Responsabilidades

Aunque nos comprometemos a ofrecer servicios precisos, completos y puntuales, el resultado final de cualquier solicitud depende exclusivamente de las autoridades gubernamentales españolas.

No tenemos control sobre los plazos de resolución, solicitudes de documentación adicional, ni sobre la aprobación o rechazo de tu solicitud.

Por lo tanto, no podemos ni garantizamos un resultado exitoso, y no se emitirán reembolsos en caso de que tu solicitud sea denegada, retrasada o afectada por decisiones de terceros.

También es tu responsabilidad:

• Proporcionar información y documentación completas y veraces
• Responder a las solicitudes en tiempo y forma
• Verificar que cumples con los requisitos antes de realizar la compra (puedes consultar las condiciones en nuestro sitio web)

El incumplimiento de estas responsabilidades puede afectar negativamente el avance o resultado de tu solicitud. En tales casos, Jobbatical no está obligado a emitir ningún reembolso, independientemente del progreso del servicio.

Tu pago por el servicio de solicitud de la nacionalidad española cubre la preparación y presentación de tu solicitud, basada en la documentación e información que tú proporciones.

Ten en cuenta que este pago no incluye:

• Ningún servicio más allá de la presentación inicial, como recursos o comunicaciones adicionales con las autoridades en caso de que la solicitud sea rechazada, ni
• asistencia para obtener la documentación requerida. Deberás recopilar tú mismo/a estos documentos, ya que contar con la documentación adecuada es esencial para poder obtener la nacionalidad.

‍

5. Circunstancias No Reembolsables

No se otorgarán reembolsos si:

• Tu solicitud es rechazada, retrasada o denegada por las autoridades gubernamentales españolas
• No proporcionas la documentación requerida o no respondes a las solicitudes de información
• Cambias de opinión después de que el servicio haya avanzado más allá de las etapas iniciales
• El servicio ya ha sido completamente prestado o la solicitud ya fue presentada
• No estás satisfecho con el resultado debido a factores fuera de nuestro control.

‍

6. Comentarios y Resolución de Problemas

Valoramos la transparencia y la satisfacción del cliente. Si tienes dudas o comentarios sobre tu experiencia, te animamos a contactarnos en [email protected] para que podamos abordar el problema y buscar una solución justa siempre que sea posible.

‍

7. Contáctanos

Para solicitudes de reembolso, cancelaciones de servicios u otras consultas, por favor comunícate con nosotros. Estamos aquí para ayudarte.
Nombre: Jobbatical OÜ
Dirección registrada: Narva mnt 7b, 10117 Tallin, Estonia
Correo electrónico: [email protected]
También puedes contactarnos a través de la plataforma de Jobbatical iniciando sesión y comenzando un chat.

‍

29 May 2025

‍

At Jobbatical, we are committed to transparency and fairness in how we handle service cancellations and refunds. Please review this policy carefully before purchasing our services. 

By engaging our services, you agree to the terms outlined below. 

‍

1. General Policy

This refund policy applies exclusively to services related to Spanish citizenship applications purchased from Jobbatical website. 

Due to the nature of our services where time and resources are invested early in the process, we offer a tiered refund policy based on the stage of service delivery. Please read the following carefully before proceeding. 

‍

2. Refund Eligibility (If You Cancel the Service)

If you choose to cancel your Spanish citizenship service after purchase, your eligibility for a full refund will depend on how much work has already been completed. Refunds are available under the following conditions: 

• Within 24 hours of service purchase (and before any work has started) – 100% refund.
• After our team has sent you an initial message or guidance – 75% refund.
• After you have received forms or documents for signature – 25% refund. 
• After your application is submitted to the Spanish authorities - 0% refund. 

To request cancellation and a refund, you must notify us via a contact brought out below under section “Contact Us”, and approval will be based on the documented process of your case. 

‍

3. Right of Withdrawal

In accordance with Spanish consumer protection law (Royal Legislative Decree 1/2007, Ley General para la Defensa de los Consumidores y Usuarios), you have the right to withdraw from a service contract within 14 calendar days of purchase.

By agreeing to this refund policy, you expressly acknowledge that: 

• You agree to the immediate start of the service before the end of the 14-day withdrawal period. 
• You understand that your right of withdrawal during the 14 days remains valid because the service is ongoing and will not be fully performed within the withdrawal period. 
• If you exercise your right of withdrawal within the 14-day period, you agree to pay a proportional amount corresponding to the part of the service already performed, according to our tiered refund policy. 

‍

4. Results and Responsibilities 

While we are committed to providing accurate, thorough and timely services, the final outcome of any application is at the sole discretion of Spanish government authorities. 

We have no control over the timeline, requests for additional documentation, or approval or rejection of your application. 

Accordingly, we cannot and do not guarantee a successful outcome, and no refunds will be issued in cases where your application is denied, delayed, or otherwise affected by third-party decisions.

It is also your responsibility to: 

• Provide complete and accurate information and documentation
• Respond to requests in a timely manner
• Ensure personal eligibility before purchase. You can take a look at the conditions on our website. 

Failure to meet these responsibilities may negatively affect the progress or outcome of your application. In such cases, Jobbatical is not required to offer any refund, regardless of how far the service has progressed.  

Your payment for the Spanish citizenship service covers the preparation and submission of your application based on the documentation and information you provide. 

Please note that this payment does not include: 

• any services beyond the initial submission, such as filing appeals, or further communication with the authorities if the application is rejected and
• assistance with obtaining required documentation. You will need to collect these yourself, as having the right documents is essential for obtaining citizenship. 

‍

5. Non-Refundable Circumstances

Refunds will be not granted, if: 

• Your application is rejected, delayed, or denied by Spanish government authorities. 
• You fail to provide required documentation or respond to information requests. 
• You change your mind after services have progressed beyond initial stages. 
• Services were fully rendered or an application was submitted. 
• You are dissatisfied with the result due to factors outside our control. 

‍

6. Feedback and Issue Resolution

We value transparency and customer satisfaction. If you have concerns or feedback about your experience, we encourage you to contact us at [email protected], so we can address the issue and find a fair solution wherever possible. 

‍

7. Contact Us

For refund requests, service cancellations or other inquiries, please reach out to us. We are here to help. 

Name: Jobbatical OÜ

Registered address: Narva mnt 7b, 10117 Tallinn, Estonia. 

Email: [email protected]

You may also contact us via Jobbatical platform by logging in and starting a chat. 

Date: April 8, 2026

‍
This privacy notice (hereinafter “notice”) explains how Jobbatical OÜ (hereinafter “we” or “us”) processes personal data of employees or future employees of our business clients (hereinafter “talents”) and their family members in relation to our services. 

Our services include immigration services (such as registration of employment, assistance on applying the residence permit or visa, applying for personal identification number, registration of a place of residence, registration of tax residency and overview of labour taxes) and settle-in services (such as search for accommodation, family doctor, assistance on opening bank account, entering into phone service provider agreement etc.) that we provide for the relocation of talents and their family members from one employment place to another (hereinafter “relocation services”).

This notice also describes how we process personal data of visitors of our website www.jobbatical.com (hereinafter “website”), representatives of our potential and current business clients, and other individuals who contact us through the contact form on the website, by email or other means of communication (hereinafter “you” or the “data subject”).

This notice describes the processing of personal data by us as a data controller. This means that we individually or along with others determine the purposes and means of the processing of personal data.

‍

‍‍

1. DATA CONTROLLER

Name: Jobbatical OÜ.
Registry code: 12671900.
Address: Narva mnt 7b, 10117 Tallinn, Estonia
Email: [email protected].
Contact details of data protection officer: [email protected].  

‍‍

2. PERSONAL DATA WE PROCESS

“Identification data” – this includes your first, last name and position in the company. This data is collected directly from you, or from the representative of the company you work for. We may also collect this information from public registers, such as business register, for the purposes of concluding a service contract with the company you represent.

“Contact data” – this includes your email address and phone number. This data is collected directly from you, or from the representative of the company you work for. We may also collect this information from public registers, such as business register, for the purposes of concluding a service contract with the company you represent.

“Talent data” – this includes the talent’s first name, last name, date of birth, personal ID code, nationality, passport data, photo, place of residence, e-mail address, phone number, country of destination, name and other details of the employer, place of work, occupation, education, criminal background, marital status, data concerning family members and other data that is relevant and is requested by relevant authorities, institutions and other involved persons during the provision of requested relocation services or that is necessary to provide our platform services (e.g., your account credentials). The personal data is collected from our business client (i.e., talent’s current or future employer) upon creation of a talent user account and/or directly from the talent. 

“Talent family member data” – this includes the first name and last name of the talent’s family member, as well as his or her date of birth, personal ID code, nationality, passport data, photo, place of residence, e-mail address, phone number, country of destination, name and other details of the employer, place of work, occupation, education, marital status, and other data that is relevant and is requested by relevant authorities, institutions and other involved persons during the provision of requested relocation services. The personal data is collected mainly from the talent but can also be collected directly from the talent’s family member or from our business client (i.e., the talent’s current employer or future employer).

“Company data” – this includes the name of the company you represent, and other details, such as registry code and address (where relevant). This data is collected directly from you or from the representative of the company you work for. We may also collect this information from public registers, such as business register, for the purposes of concluding a service contract with the company you represent.

“Communication data” – this includes personal data contained in the correspondence you have with us. This data is collected when you contact us or when we contact you.

“Contract data” – this includes the date and the number of a contract (where relevant), as well as the written contract document. This data is generated upon conclusion of the contract or during its performance.

“Website visit data” – this includes personal data which is collected and further processed upon visiting and using our website. Depending on the particular cookie we use, the types of personal data may include different online identifiers, such as IP address, device fingerprints, client identifier or session ID. Please see more information regarding cookies and other tracking technologies in section 7 of this notice.

‍‍

3. THE PURPOSES AND THE LEGAL GROUNDS FOR THE PROCESSING OF PERSONAL DATA

‍

3.1 Consent

We process your personal data based on your consent for the purposes described below. You always have the right to withdraw the consent given for the use of cookies by changing your preferences though the website. To withdraw your consent to receive newsletters, you can click on the unsubscribe link at the end of the newsletter or send us an e-mail using the contact details described in section 1 of this notice. Withdrawal of the consent does not affect the legality of the processing of your personal data prior to withdrawal.

‍

3.2 Contract

We process your personal data necessary for the performance of a contract to which you are the party or to take steps at the request of the data subject prior to entering into a contract for the purposes described below.

‍

3.3 Legal obligation

We process your personal data on this legal ground if the legal obligation for processing arises from the law.

‍

3.4 Legitimate interests

We process your personal data based on our legitimate interests for purposes described below. You have the right to ask clarifications regarding the processing based on the legitimate interests. You also have the right to send the objection, if you find that processing of your personal data for the purposes provided below prejudice your rights. Please see section 1 of this notice for our contact details.

‍

4. CATEGORIES OF RECIPIENTS OF PERSONAL DATA AND TRANSFER OF PERSONAL DATA TO THIRD COUNTRIES

In some cases, we may transfer your personal data to certain recipients who are categorized as follows:

4.1 Partners who provide the services to us, and who process the personal data on our behalf (data processors), e.g.:

(a) providers of various ICT services (including providers of website hosting services and other providers of cloud services);

(b) various contractors (IT development, support, accounting, partners providing relocation services).

4.2 Independent controllers of personal data:

(a) local or government authorities and institutions who are involved in relocation process (e.g., immigration authorities, etc.);

(b) our business clients who are or will be the employers of the talent, or who also need to process talent family member data for their own purposes;

(c) providers of employer of record (EOR) or similar services who we cooperate with together with our business clients;

(d) banks and other financial institutions, our attorneys, auditors, etc.

4.3 Public authorities and supervisory bodies, e.g., court, law enforcement authorities, Data Protection Inspectorate. We transfer your personal data to public authorities and supervisory bodies only if the law requires it. 

Unless necessary for the provision of services, we do not transfer your personal data outside of the European Union (EU) or the European Economic Area (EEA), nor to such third country or international organization, the level of data protection of which the European Commission has not considered adequate. If your personal data is transferred outside of the EU or EEA, such transfer of personal data will take place only upon appropriate legal basis.

For such transfers, we ensure a high level of protection by relying on:

• Adequacy Decisions: Transfers to countries recognized by the European Commission as providing an adequate level of data protection.
• EU-U.S. Data Privacy Framework: For transfers to certified service providers in the United States.
• Standard Contractual Clauses (SCCs): For other regions, we use the latest SCCs adopted by the European Commission, supplemented by Transfer Impact Assessments (TIAs) and technical safeguards to ensure your data remains protected against unauthorized access.

You have the right to get additional information about the transfer of your personal data by sending us the relevant request using the contact details described in section 1 of this notice.  

‍

5. RETENTION OF PERSONAL DATA

We retain your personal data for the period necessary for the achievement of purposes stated in this notice or until the law requires it. 

For example, we will retain accounting source documents for seven years as of the end of the financial year during which the source document was recorded in the accounts.

As an authorized representative of your employer or potential employer, we may have a legal obligation under local immigration laws to retain documents and data proving your legal basis for employment. These records are preserved for the specific duration required by the applicable laws. 

Specific terms of retention can be exercised by accessing your personal data. Please see the explanation in the section “Your rights regarding the personal data”.

‍

6. YOUR RIGHTS REGARDING THE PERSONAL DATA

Right of access to your data: you have the right to know, whether personal data concerning you are being processed or not, what is the purpose of processing and what are the categories of personal data. Besides, to whom the personal data is disclosed (including specific recipients or categories of recipients in third countries), for how long the personal data is retained and what are your rights concerning rectification, erasure and restriction of the processing.

Right of rectification: you have the right to demand rectification of the personal data concerning you if the data are inaccurate or incomplete.

Right of erasure: in some cases, you have the right to demand erasure of the personal data concerning you, for example in case when you withdraw your consent and there are no other legal grounds for the processing of the personal data.  Please note that we may be legally required to retain certain data to comply with immigration or accounting laws.

Right to restrict the processing: in some cases, you have the right to restrict processing of the personal data concerning you for a certain time (e.g., if you have objected to the processing of personal data).

Right to object: you have the right to object to the processing of personal data, which is processed based on the legitimate interest, including profiling. Upon objection, we will no longer process the personal data unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms.

Right to withdraw consent: where processing is based on your consent, you have the right to withdraw it at any time. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.

‍

Right to data portability: if processing of your personal data is based on your consent or the contract with us and the data processing is carried out by automated means, then you have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format. Also, you have the right to claim to transmit those personal data to another service provider if it is technically possible.

Right to turn to us, supervisory authority, or a court: if you want to exercise the above-mentioned rights, please send us and email using the contact details described in section 1 of this notice. If you find that your rights have been breached, you have the right to turn to the Data Protection Inspectorate (Andmekaitse Inspektsioon) or your local supervisory authority in the EU and/or court. The contact details of the Data Protection Inspectorate are available at www.aki.ee.

‍

7. COOKIES AND OTHER WEB TECHNOLOGIES

We use all the cookies and other web technologies, except the strictly necessary cookies, with your prior consent. You always have the right to withdraw the consent by changing your preferences via our website. In case the strictly necessary cookies process your personal data, we rely on legitimate interests in processing of such data (see section 3.3 above that explains our legitimate interests).

We use first-party cookies (such cookies are created and stored directly by us), but also third-party cookies (i.e., the cookies that are created and stored by third-party service providers, such as Google). 

We may use both session cookies and persistent cookies. Session cookies or non-persistent cookies are cookies that exist only temporarily while you browse our website. Your web browser should delete these cookies when you close your browser. However, persistent cookies use expire on a specific date or after a period of time specified by the third party or us.

For your convenience, we have categorized the cookies we use on our website by their purposes as follows:

Strictly necessary : These cookies are used to enable the basic functionality of the website, which means that without these cookies our website would not function as it should. Due to the nature of such cookies, and in accordance with applicable law, we are entitled to use them without your prior consent. However, if these cookies process personal data, we rely on our legitimate interests upon processing of such data.

Marketing: These cookies are used to deliver advertising that is more relevant to you and your interests. Marketing cookies are used only based on your prior consent.

Analytics: These cookies are used to understand how this website performs, how visitors interact with the site, and whether there may be technical issues. Analytics cookies are used only based on your prior consent.

Hereunder we have listed all the cookies used on our website:

‍

8. AMENDMENT OF THIS NOTICE

We have the right to amend this notice unilaterally. The amended version of the notice will be published on our website.