Privacy Policy

This document describes how Boosta collects, uses, and protects the personal data of website users.

Last updated: 21.07.2026

This Privacy Policy outlines how Boosta Inc OÜ (“Boosta”, “we”, “us”, or “our”) collects, uses, stores, and protects your personal data when you visit our website at boosta.com (the “Website”) and interact with our services, forms, and features available through it, including any linked microsites operated under the Boosta brand.

Data Controller Information:

  • Company Name: Boosta Inc OÜ
  • Registration Office: Harju maakond, Tallinn, Kesklinna linnaosa, Narva mnt 7-636, 10117, Estonia
  • Contact Email: pr@boosta.com
  • Career Enquiries: cv@boosta.com

If you do not agree with the terms set out in this Policy, please refrain from using our Website.

This Privacy Policy is available in English and Ukrainian. In the event of any discrepancy in interpretation between these versions, the English version shall prevail.

Depending on how you interact with our Website, we collect personal data across the following categories:

  • Data collected: Full name, email address, phone number, location, work history, resume/CV, LinkedIn profile, portfolio, cover letter, and any interview notes.
  • Source: Submitted directly via our CV Submission Form, or through our integrated Applicant Tracking System (ATS).
  • Purpose: To evaluate your candidacy, process your job application, arrange interviews, and add you to our internal Talent Pool for future relevant vacancies.
  • Data collected: Email address, name, job category/industry preferences.
  • Source: Submitted directly via our CV Submission Form or through our integrated Applicant Tracking System.
  • Purpose: To send you periodic updates, career opportunities, company news, and industry reports.
  • Redirection to Affiliated websites: Please note, that when you click on specific investment or partnership opportunities on our Website, you will be redirected to the dedicated websites to complete the application forms. Any personal data submitted through those forms is collected and processed in accordance with the privacy policies available on those external websites.
  • Purpose: To evaluate potential business opportunities, respond to your inquiries, and establish pre-contractual discussions.
  1. Events & CSR Programs
  • Data collected: Full name, email address, phone number, telegram, company/affiliation (if provided).
  • Source: Submitted via event registration forms on our Events Calendar page.
  • Purpose: To manage event attendance, send event-related communications, and share updates about our CSR initiatives and annual reports.
  • Legal basis: Consent (Art. 6(1)(a)), or legitimate interest in organizing an event you registered for (Art. 6(1)(f)).
  • Data collected: IP address, browser type, operating system, referral links, and pages visited.
  • Purpose: To maintain Website security, optimize layout performance, and understand user interaction. (For detailed information, please read our Cookie Policy).

We process your personal data only when we have a valid legal basis under Article 6 of the General Data Protection Regulation (GDPR):

Purpose of Processing

Type of Data

Legal Basis (GDPR Art. 6)

Recruitment & Hiring

CV, Application Details

Contract / Pre-contractual steps (Art. 6(1)(b)) or Legitimate Interest (Art. 6(1)(f))

Talent Pool Retention

CV, Contact Details

Consent (Art. 6(1)(a))

Job Alerts & Newsletters

Email Address

Consent (Art. 6(1)(a))

Business Inquiries

Contact & Company Data

Legitimate Interest (Art. 6(1)(f)) or Pre-contractual steps (Art. 6(1)(b))

Website Security & Analytics

IP Address, Log Data

Legitimate Interest (Art. 6(1)(f)) or Consent for non-essential cookies

Event Registration & CSR Communications

Name, Email, Phone number, Telegram, Affiliation

Consent (Art. 6(1)(a)) or Legitimate Interest (Art. 6(1)(f))

3a. AUTOMATED DECISION-MAKING IN RECRUITMENT

As part of our recruitment process, we may use our Applicant Tracking System (ATS) to automatically sort, filter, or rank applications based on criteria such as keyword matching, experience level, or stated qualifications.

  • This processing does not result in decisions producing legal or similarly significant effects without human involvement: all shortlisting and hiring decisions are reviewed and made by a member of our recruitment team.
  • You have the right to request human review of, and to contest, any automated filtering applied to your application by contacting pr@boosta.com or cv@boosta.com.
  • We do not use fully automated decision-making, as defined under Article 22 GDPR, to reject candidates without human review.

 

We do not sell your personal data. We may share your information with trusted third parties under strict confidentiality agreements:

  1. Applicant Tracking System (ATS) Providers: For processing and tracking recruitment applications seamlessly. When you proceed to submit your application, you will be redirected to our ATS provider, Greenhouse Software, Inc., a specialized third-party recruitment platform governed by its own privacy policy. We encourage you to review that provider’s privacy notice before submitting your application.
  2. Service Providers & Cloud Hosting: Hosting infrastructure, email distribution platforms, and customer support software.
  3. Corporate Group & Affiliates: Affiliated entities under the Boosta ecosystem for internal operational purposes.
  4. Legal Compliance: Authorities or legal counsel when mandated by applicable laws or court orders.

When transferring data outside the European Economic Area (EEA), we ensure appropriate safeguards are implemented in compliance with Chapter V of the GDPR, such as EU Standard Contractual Clauses (SCCs) or reliance on adequacy decisions (including the EU-U.S. Data Privacy Framework). In light of ongoing regulatory and judicial scrutiny of the EU-U.S. Data Privacy Framework, we additionally rely on Standard Contractual Clauses as a supplementary safeguard for relevant transfers, and we will update our transfer mechanisms without undue delay should the adequacy status of the Framework change.

We retain your personal data only as long as necessary to fulfill the purposes outlined in this Policy:

  • Job Application Data: Retained for the duration of the recruitment process. If added to our Talent Pool with your consent, data is stored for up to 2 years or until consent is withdrawn.
  • Subscription Data: Stored until you unsubscribe or withdraw your consent.
  • Business Inquiries: Retained for the duration of the commercial relationship or up to 3 years following last contact.
  • Technical & Analytics Data: Retained in accordance with the retention periods set out in our Cookie Policy, and in any event no longer than necessary for security and analytics purposes.

If you are an EEA resident, you possess the following rights regarding your personal data:

  • Right of Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Request correction of inaccurate or incomplete data.
  • Right to Erasure (“Right to be Forgotten”): Request deletion of your personal data where grounds apply.
  • Right to Restrict Processing: Limit how we process your data in specific scenarios.
  • Right to Data Portability: Receive your data in a structured, machine-readable format.
  • Right to Object: Object to processing based on legitimate interests or direct marketing.
  • Right to Withdraw Consent: Revoke your consent at any time without affecting prior lawful processing.

To exercise any of these rights, please contact us at pr@boosta.com.

You have the right to lodge a complaint with your local Data Protection Authority. Our lead authority is:

  • Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon)
  • Website: https://www.aki.ee/en

 

6a. CHILDREN’S PRIVACY

Our Website and services are not directed to, and are not intended for use by, individuals under the age of 16 (or the applicable age of digital consent in their jurisdiction). We do not knowingly collect personal data from children. If you believe a minor has provided us with personal data, please contact us at pr@boosta.com so that we can delete it.

In addition to California residents’ rights under the CCPA/CPRA, residents of other U.S. states with comprehensive privacy laws in effect (including but not limited to Virginia, Colorado, Connecticut, Utah, Texas, and Oregon) may have similar rights to access, correct, delete, and opt out of the processing of their personal data. Boosta does not sell or share personal data for cross-context behavioral advertising as defined under applicable state laws. To submit a request, email pr@boosta.com with the subject line “US Privacy Inquiry”.

Our Website contains links to external websites, ATS portals, and social media platforms. We are not responsible for the privacy practices or content of third-party websites. We encourage you to review their respective privacy notices upon leaving our site.

We may update this Privacy Policy periodically to reflect operational, legal, or regulatory changes. Updated versions will be published on this page with a revised “Last Updated” date.

Contact Us:

For questions regarding this Privacy Policy, please write to:

  • Email: pr@boosta.com
  • Postal Address: Boosta Inc OÜ, Harju maakond, Tallinn, Kesklinna linnaosa, Narva mnt 7-636, 10117, Estonia