POLICY ON THE PROCESSING OF PERSONAL DATA OF PERSONS PARTICIPATING IN EMPLOYEE SELECTION PROCESS

The Policy on the Processing of Personal Data of Persons Participating in Employee Selection Process at UAB Ovoko sets out the conditions for the processing of personal data when you participate in UAB Ovoko employee selections and is intended to inform you about the processing of your personal data.

Personal data shall be collected in accordance with the requirements of the applicable legislation of the European Union and the Republic of Lithuania, as well as the instructions of controlling authorities. All reasonable technical and organisational measures are in place to protect the data we collect about you from loss, unauthorised disclosure, use and alteration.

DATA CONTROLLER AND CONTACT DETAILS OF THE DATA PROTECTION OFFICER

The data controller of your personal data is UAB Ovoko, legal entity code 304401253, operating at: Žirmūnų st. 70 – 701, LT-09124 Vilnius, tel. No. +370 673 34330, e-mail [email protected].

You can contact the Data Protection Officer of UAB Ovoko at [email protected].

FOR WHAT PURPOSES AND WHAT PERSONAL DATA WE PROCESS

For the purpose of employee selection, we may process the following personal data about you: name, surname, date of birth, address, telephone number, education, qualifications, date of application, e-mail address, work experience, information about former employers, information about references, references from former employers, information published on your account on social networks for professional purposes such as Linkedin, information about your preferred working conditions, other data you provide in your CV, other necessary data which will be indicated on your application.

WHAT ARE THE LEGAL BASES ON WHICH WE PROCESS PERSONAL DATA

In the event that personal data is processed in connection with the organisation of a specific selection for a vacancy, we shall process your personal data on the basis of a legitimate interest in selecting the most suitable candidate in accordance with Article 6(1)(f) of Regulation (EU) 2016/679.

In the event that you wish to be invited to participate in our selections in the future, we shall process your personal data with your consent in accordance with Article 6(1)(a) of Regulation (EU) 2016/679.

FOR HOW LONG DO WE STORE YOUR PERSONAL DATA

In the event that personal data is processed in the context of a specific selection for a vacancy, we shall keep your personal data for the duration of the selection process and for 1 month after the selection process.

If you consent to the processing of your personal data for the purpose of inviting you to take part in our future selections, we shall retain your personal data for 2 years after the receipt of your consent, and we shall retain your consent to the processing of your personal data for 2 years after the end of the processing based on the consent.

WHERE DO WE OBTAIN YOUR PERSONAL DATA

We shall process your personal data that we receive directly from you when you provide it to us by post, e-mail or other means.

We may receive information about you from people who have referred you to us, job search portals such as CV bankas or similar.

In addition, we may obtain information about you from publicly available sources, such as social networks for professional purposes, such as Linkedin, and link it to other information that we obtain from or about you.

In order to have a legitimate interest in properly assessing your candidature and selecting the candidate best suited for the position/job offered, we may seek references from your former employers and ask for information about your qualifications, professional abilities and business characteristics. If you do not agree thereto, please inform us thereof using the contact details provided above.

TO WHOM WE PROVDE YOUR PERSONAL DATA

We may provide your personal data to courts, controlling public authorities in cases prescribed by law. In the event of a dispute and in order to protect our legitimate interests, we may disclose your personal data to dispute resolution authorities, attorneys, lawyers.

We shall provide/may provide personal data to service providers (data processors) acting on behalf of UAB Ovoko and under our instructions, providing information technology infrastructure, software and its maintenance and administration, electronic communications, data centres, cloud computing, consulting and other services. Other data processors may be used if necessary.

In addition, your personal data shall be made available to the data processor, Employ, Inc., a provider of recruitment management system services based in the United States of America. In this case, the protection of personal data shall be ensured in accordance with Article 45(1) of the General Data Protection Regulation (GDPR) and the European Commission’s Decision of 10 July 2023 on the adequacy of the EU-US Data Privacy Framework.

WHAT RIGHTS DO YOU HAVE

You shall have the following rights in relation to your personal data, which are enforceable to the extent set out in Regulation (EU) 2016/679:

• To know about the processing of personal data;
• To request that UAB Ovoko grants access to the personal data processed;
• To request the rectification of incorrect, inaccurate or incomplete data;
• To request erasure of your personal data;
• To request the restriction of the processing of your personal data where the processing of your personal data does not comply with the requirements of the legislation or where there is another legal basis;
• To request the transfer of personal data to another data controller or to provide it directly in a form that is convenient for you (applicable to personal data that you have provided yourself and that we process by automated means on the basis of your consent);
• To object to the processing of personal data;
• To withdraw your consent to the processing of your personal data at any time, without affecting the lawfulness of the processing based on your consent prior to the withdrawal of your consent;
• To file a complaint with the State Data Protection Inspectorate (L. Sapiegos st. 17, 10312 Vilnius, ada.lt) or to apply to the court for redress if you believe that your personal data is being processed unlawfully or your rights are being violated. In all cases, please contact us before making a complaint so that we may find a suitable solution together.

To exercise your rights as a data subject, UAB Ovoko. The request must specify which of the above rights you wish to exercise and to what extent. When contacting UAB Ovoko, you may submit a free-form application or an application on a form approved by UAB Ovoko.

You must provide proof of personal identity when applying to exercise your rights as a data subject. You may verify your personal identity in the following ways:

• by applying in person and upon provision of a personal identity document;
• by post and upon provision of a copy of your personal identity document;
• by submitting the application electronically, by signing it with a qualified electronic signature, or by forming it by electronic means which ensure the integrity and irreplaceability of the text;
• from the same e-mail address that was used to provide the personal data and/or to communicate with the company;
• in any other way allowing UAB Ovoko to verify the personal identity of the data subject.

The requirement to confirm your personal identity shall not apply if you request information on the processing of personal data in accordance with Articles 13 and 14 of Regulation (EU) 2016/679.

If UAB Ovoko has any doubts about your personal identity or if we are unable to establish your personal identity on the basis of the information provided, UAB Ovoko may request additional information necessary to unambiguously confirm the personal identity of the data subject.

UAB Ovoko shall provide information on the action taken in response to the request no later than one month after receipt of the request. In the case of complex or multiple requests, this term may be extended by a further two months if necessary, depending on the complexity and number of the requests. In any case, UAB Ovoko shall inform you of the extension and the reasons for it within one month from the date of receipt of the request. If UAB Ovoko decides not to implement the request, it shall inform you thereof immediately, but at the latest within one month of receipt of the request. You may appeal to the State Data Protection Inspectorate and seek other remedies.

If you have any questions about the processing of your personal data, please contact us using the contact details provided above.