Candidates' privacy policy

CANDIDATES’ PRIVACY POLICY

This Candidates’ Privacy Policy (hereinafter referred to as the Policy) describes the processing of personal data of employee candidates and provides information on what data of the candidates are collected and processed and on what grounds, what the data are used for, how long they are stored, what rights the candidates have, and other relevant information.

The personal data of the candidates are processed in accordance with the General Data Protection Regulation (EU) 2016/679 (hereinafter referred to as the GDPR), the Law on Legal Protection of Personal Data as well as other legislation in this area.

Who is the data controller?

Attention! The controller of the personal data is the company to which you are applying.

 Hereinafter either company is referred to as the Company.

What data do we process and why (for what purpose)?

    1) Purpose: to carry out the selection procedure for filling (a) post(s) and to evaluate your candidacy.

    Grounds for legal processing:

• Your consent* given at the time of submitting the personal data.

* Please be informed you that you can revoke your consent at any time by contacting the data controller or the data protection officer appointed by the data controller by email [email protected].

Categories of personal data being processed:

• General information about the candidate: the candidate’s name, surname, date of birth or age, place of residence or address of residence, email address and/or telephone number, information on the candidate’s work experience (place of employment, period of employment, position, responsibilities and/or achievements), information on the candidate’s education (educational institution, period of study, completed education and/or qualification), information on further training (received training, certificates awarded), information on language skills, information technology skills, and other competencies, desired salary, a photograph, a link to the LinkedIn profile and the information contained therein as well as any other information that you provide in your CV, your letter of motivation or other application documents;
• Recommendations, employers’ feedback: the person recommending the candidate or giving feedback about the candidate, their contact information, the content of the recommendation or feedback. We can only contact your current employer with your separate consent;
• Candidate evaluation information: a summary of the interview with the candidate, insights and opinions of the person(s) carrying out the selection, the candidate’s test results.

Submission of personal data is not mandatory, but without the submission of personal data, your candidacy will not be considered and you will lose the chance to participate in the selection for the desired post.

Retention period: six months from the end of the selection.

    2) Purpose: administration of the database of potential candidates.

If we select another candidate, you can consent to your data being included in the database of potential candidates and to us contacting you in the future if necessary.

  Grounds for legal processing:

• Your consent^*;

* Please be informed you that you can revoke your consent at any time by contacting the data controller or the Data Protection Officer appointed by the data controller by email [email protected].

 Personal data being processed: all personal data referred to in paragraph 1 may be processed for this purpose.

Retention period of the personal data: two years from giving consent or until you withdraw your consent, whichever is the earlier.

You are not obliged to give consent and to submit the data, but you will lose the chance to participate in future selections.

From what sources do we collect your personal data?

Usually, we receive your data directly from you, when you respond to our job advertisement and/or send us your CV and/or other application documents (letter of motivation, etc.).

We may also obtain information about your candidacy, your CV and/or other application documents from job search portals and employment agencies, the career social network LinkedIn where you post your personal data publicly, our employees (our referrals program).

We may also obtain certain information about you from third parties, e.g. from people recommending you, from your current or former employers. However, we will only collect such information if you give us your consent to contact the employer your indicated and/or another person to receive a recommendation or feedback about you.

In what cases and to which third parties do we disclose your data?

We may transfer your data to third parties who assist us in the selection of candidates or who provide candidate selection and evaluation services as well as other necessary services to us. Such persons may include personnel selection and/or evaluation service providers, database software providers, database administration service providers, data centre, hosting and cloud service providers, etc. In each case, we provide the data processor with only the amount of data necessary to carry out a specific order or to provide a specific service. The data processors used by us may only process your personal data according to our instructions and they may not use the data for other purposes or transfer them to other persons without our consent. In addition, they must ensure the security of your data in accordance with existing legislation and written agreements concluded with us.

In certain cases, according to our legitimate interest in evaluating a candidate, we may transfer your candidacy and your data to Euroapotheca (more details: www.euroapotheca.lt) and to companies of the Vilniaus prekyba group (www.vilniausprekyba.lt) that participate in the process of evaluating employee applications and (or) in the career decision-making process.

In exceptional cases, the data may be transferred to competent public authorities or law enforcement authorities, e.g. the police, law enforcement or supervisory authorities, but only upon their demand and only when required by existing legislation or in cases and according to procedures provided for in the legislation to guarantee our rights, to lodge and defend legal claims.

The data controller will never transfer personal data outside the EU/EEA.

What rights do you have?

The right to access your personal data processed by us: You have the right to receive our confirmation that we process your personal data as well as the right to access your personal data processed by us and information about the purposes of data processing, categories of data being processed, categories of data recipients, data processing period, and sources of data.

The right to rectify personal data: If the data provided to us in your application documents have changed or if you think that the information that we process about you is inaccurate or incorrect, you have the right to request that this information be changed, revised or rectified.

The right to withdraw consent: You have the right to withdraw your consent at any time and to demand that further processing of personal data, which is carried out with your consent, be stopped.

The right to erasure (the right to be forgotten): In certain circumstances specified in the data processing legislation (when personal data are processed unlawfully, the grounds for processing the data disappeared, etc.), you have the right to ask that we erase your personal data.

The right to limit data processing: In certain circumstances specified in the data processing legislation (when personal data are processed unlawfully, you dispute the accuracy of the data, you have objected to data processing based on our legitimate interest, etc.), you also have the right to limit the processing of your data.

The right to data portability:  You have the right to transfer the data that we process by using automated tools (applies only to your data processed in the candidate database) to another data controller. We will provide you with the data you wish to transfer in a machine-readable format normally used by our systems and, and if you wish and if it is technically possible, we will send the data directly to another data controller specified by you.

The right to lodge a complaint: If you believe that we process your data in breach of the requirements of data protection legislation, we always ask you to contact us directly first. If you are not satisfied with our solution to the problem or if, in your opinion, we do not take the action necessary according to your request, you will have the right to lodge a complaint with the supervisory authority of the Republic of Lithuania, i.e. the State Data Protection Inspectorate (L. Sapiegos Str. 17, Vilnius; telephone (8 5) 271 2804, 279 1445; email: [email protected]).

Procedure for handling requests

We will be obliged to verify your identity upon receipt of your request for data or in order to implement your other rights. Once we have verified your identity, we undertake to provide you with information on the action we have taken in response to your request without undue delay, but in any event no later than 30 days following the receipt of your request.

If your request is made by electronic means, we will give you an answer by electronic means as well, unless it is not possible (e.g. due to a particularly large volume of information) or if you ask us to reply in another way.

Final provisions

We will notify you of any material changes by posting a notice on our website. All changes to this Policy will be effective from the date of publication: below you can see when this Policy was last updated.

Last updated: 13/05/2022