PRIVACY POLICY

1.1. The data controller is Ipra LT Ltd. (hereinafter referred to as the Company), entity code 305920824, registration address Liubčios g. 8, Vilnius.

1.2. Data Subject refers to any natural person whose data is processed by the Company. The Data Controller shall only collect the data of the Data Subject that is necessary for the performance of the Company’s activities and/or for visiting, using, or browsing the Company’s websites, social network accounts, etc. (hereinafter referred to as the Website). The Company ensures that the personal data collected and processed shall be secure and used only for the specific purpose.

1.3. Personal data shall mean any information relating, directly or indirectly, to a data subject whose identity is known or can be established, directly or indirectly, by reference to the data concerned. Processing of personal data means any operation carried out on personal data (including the collection, recording, storage, editing, modification, granting of access, submission of requests, transmission, archiving, etc.).

1.4. Consent means any freely given and informed indication by which the data subject agrees to the processing of his or her personal data for a specified purpose.

3.1. By providing personal data to the Company, the data subject consents to the Company’s use of the collected data for the purpose of fulfilling its obligations to the data subject in the provision of the services expected by the data subject.

3.2. The Company shall process personal data for the following purposes:

3.2.1. Providing recruitment and consultancy services. For this purpose, the following personal data of clients (applicants applying for vacancies) shall be processed:

Name/names, surname/surnames, date of birth/age, residential address, telephone, e-mail, information on the client’s/applicant’s education (educational institution, period of training, education and/or qualifications obtained), information on the client’s/applicant’s work experience (workplace, period of work, position, responsibilities and/or achievements), information on language skills, information technology, driving skills, other competences, other information provided by the person in his or her CV, cover letter or other application documents, references from employers, and feedback: the persons recommending or giving a reference, their contacts, and the content of the recommendation or reference.

Clients/applicants can register for the Company’s services on the Company’s website www.ipra.lt. At the time of registration/account creation, customers/applicants provide the Company with the following personal data: email and password.

Personal data shall be kept until the date of expiry of the selection for the position in question.

The legal basis for processing is the necessity to perform a contract to which the client is a party as a data subject or to take action at the client’s request prior to entering into a contract with the client (Article 6(1)(b) of the GDPR), and the consent of the data subject (Article 6(1)(a) of the GDPR).

3.2.2. Ensuring business continuity and business continuity. The following data shall be processed for this purpose:

Personal data of suppliers/natural persons processed for the purpose of concluding and performing contracts are as follow: name/names, surname/surnames, personal identification number or date of birth, place of residence/address, telephone, e-mail, place of work, position, signature, business certificate data, such as type of activity, group, code, name, periods of activity, date of issue, and amount, number of the certificate of individual activity, data on whether the data subject is a VAT payer, bank account and bank, amount of the service/product, currency and other data provided by the person himself or herself, which the Company receives in accordance with the legislation in the course of the Company’s business and/or which the Company is obliged to process by law and/or other legislation.

For the purpose of concluding and executing contracts, the following data shall be processed for the representatives of the suppliers: name/names, surname/surnames, telephone, email, company name, address, position, details of the authorisation (number, date, date of birth of the authorised person, and signature).

Contracts, VAT invoices and other related documents shall be stored in accordance with the deadlines set out in the Index of General Document Storage, approved by Order of the Chief Archivist of Lithuania.

The legal basis for processing is the necessity to perform a contract to which the client is a party as a data subject or to take action at the client’s request prior to entering into a contract with the client (Article 6(1)(b) of the GDPR), and the consent of the data subject (Article 6(1)(a) of the GDPR).

3.2.3. Managing enquiries, comments and complaints. The following data shall be processed for this purpose:

Name/names, surname/surnames and/or username, email, telephone, address, the subject of the enquiry, comment or complaint, the text of the enquiry, comment or complaint.

Data on enquiries, comments and complaints shall be kept for 1 calendar year from the date of their submission.

The legal basis for processing data is that the processing is necessary for the purposes of the legitimate interests of the controller or of a third party, unless such interests are overridden by the interests of the data subject or by the fundamental rights and freedoms of the data subject, which make it necessary to ensure the protection of the personal data, in particular, in the case of a child (Art. 6(1) (f) of the GDPR), and the data subject has given his or her consent (Art. 6(1) (a) of the GDPR).

3.2.4. Games and competitions. The following data shall be processed for this purpose:

Name/names, surname/surnames and/or username, telephone, email, and residential address.

The personal data of unsuccessful participants shall not be stored.

The personal data of the successful participants shall be stored until the prize is collected.

The legal basis for processing is the data subject’s consent (Article 6(1)(b) of the GDPR).

3.2.5. Direct marketing. For this purpose, the following data shall be processed:

Name/names, surname/surnames, email, and telephone.

The data shall be kept for 5 years after the date of consent. This period may be extended if the personal data are used or may be used as evidence or as a source of information in a pre-trial or other investigation, including an investigation carried out by the State Data Protection Inspectorate (SDPI), in a civil, administrative or criminal proceeding, or in any other cases established by law. In that case, personal data can be stored for as long as necessary for the processing of these data and shall be destroyed immediately when they are no longer needed.

The legal basis for processing is the data subject’s consent (Article 6(1)(a) of the GDPR) and the need to pursue the legitimate interests of the Company to improve its activities and business success rates (Article 6(1)(f) of the GDPR).

3.2.6. Other purposes for which the Company has the right to process the data subject’s personal data where the data subject has expressed his or her consent, where the processing is necessary for the Company’s legitimate interest, or where the Company is obliged to process the data by the relevant legal acts.

4.1. All information submitted by you on the social media (including notifications, use of Like and Follow, and other communications) is controlled by the relevant social network manager.

4.2. Our Company currently has an account on the social network Facebook. Its privacy policy is available at https://www.facebook.com/privacy/explanation.

4.3. Our Company currently has an account on the social network Instagram. Its privacy policy is available at https://help.instagram.com/519522125107875;

4.4. Our Company currently has an account on the social network LinkedIn. Its privacy policy is available at https://www.linkedin.com/legal/privacy-policy.

4.5. We recommend you to read third-party privacy notices and contact your service providers directly, if you have any questions about how they use your personal information.