Privacy Policy for Candidates

We are seeking candidates for the available vacancies, and we care about your privacy and the security of your personal data. Therefore, in this Privacy Notice for Candidates (hereinafter – Privacy Notice), we provide you with information on how NARESTA, UAB (hereinafter – we, the Company, or the Data Controller) processes your personal data upon receiving your application and your consent.

Who will be the controller of your personal data?

Private Joint Stock Company “NARESTA” established in the Republic of Lithuania, legal entity code 122596696, address: Kareivių g. 11B, LT-09109 Vilnius, the data collected and processed in the Register of Legal Entities of the State Enterprise Centre of Registers.

Contact details of the person responsible for data protection: e-mail atranka@naresta.lt, address Kareivių g. 11B, LT-09109 Vilnius, Lithuania.

For what purpose your personal data is collected?

Assessment and selection of a candidate for a position offered by the Company;

To offer a job in the future;

To be retained and evaluated for future job selections, when a Candidate submits his/her data for not a specific selection.

Your consent (Article 6(1)(a) of the GDPR) that you give, for example, when you (i) receive an offer of a job interview (ii) send us your CV or other information, (iii) tick the box agreeing to the retention of your personal data after the recruitment has been completed, even if you have not been selected for the specific position we have advertised for. You may change your mind and withdraw your consent at any time by notifying us. If you do not consent to the processing of your personal data, or if you withdraw your consent at the time of selection for the proposed position, the Company may not be able to assess your suitability for the position, and your application may be rejected.

Our legitimate interest (Article 6(1)(f) of the GDPR) to assess your skills, qualifications, experience, suitability for certain job positions, to select the best candidate by administering a database of candidates.

What personal data we will process?

Identification data: name, surname, date of birth (optional);

Contact details: e-mail, telephone No.;

Education and activity data: Education (including courses and certificates, language skills), career information (past/present employers, job title, nature of work, brief description of position);

Other data: Curriculum vitae, motivation letter (optional), salary expectations (optional), contact information for references (optional), notes taken during the interview process (including your evaluation), results of tests and/or practical exercises, URL link to social networking accounts (optional), photo (optional), information about the job you want (working hours, location, etc.), other information you provide in your CV or cover letter, your publicly available data, the name, title and contact details of the person making the recommendation.

How will we get your personal data?

The Company will receive your data directly from you. The Company may also receive them from persons who have recommended you, recruitment companies, Company employees and other persons who recommend candidates. The Company, when receiving data from sources other than you, considers that these entities have provided you with all the necessary information about the processing of your data, have informed you about the possible transfer of your data to the Company, with the purpose that the Company will process your data for the purpose of the selection process for the job(s) and the assessment of your candidacy. Please be informed that we may collect your personal data relating to your qualifications, professional abilities, and personal qualities as a Candidate from your former employer, unless you have objected to this. In other cases, the Company will only process your personal data from other sources with your separate consent. For example, the Company will only check your references or seek feedback from your current employer if you give the Company your consent to contact your current employer and/or another person.

How long do we store your personal data?

Your personal data will be stored for the duration of the specific selection for the offered position and for 6 (six) months after the end of the selection, unless you have given your consent to the further storage of your personal data;

If you have not been selected by the Company for a specific position offered, but you have consented to the processing of your personal data for the purpose of a future job offer, your personal data will be processed for a period of 2 (two) years after the selection;

If you have submitted your personal data for a reason other than a specific selection, the Company will retain your personal data for 2 (two) years;

You may withdraw your consent at any time by submitting a written request (including electronic manner) to the Company. By withdrawing a given consent, your personal data will no longer be used for the above purposes.
The date of termination of the selection shall be deemed to be the date of the conclusion of the contract of employment for the position in question, or the Company’s decision to terminate the selection. Your personal data will be destroyed (e.g. deleted) at the end of the data retention period. If you withdraw your consent to the processing of your personal data, it will be deleted immediately after the withdrawal of your consent, even if the data retention period has not yet expired.

To whom can we provide personal data?

Your data may be transferred by the Company to third parties who assist the Company in the selection of candidates or who provide the Company with services related to the selection, assessment and internal administration of candidates, such as communication and IT service providers, providers of virtual meeting organisation programmes, recruitment service providers. Each of the data processors engaged by the Company may only process your personal data in accordance with the Company’s instructions. In addition, they must ensure the safety of your data in accordance with applicable legislation and written consents concluded with a Company; Data may also be provided to competent government agencies, such as law enforcement agencies or supervisory authorities, but only upon their request and only when required by applicable law or in the cases and procedures provided for by law in order to ensure the rights of the Company, the safety of the Company’s customers, employees and resources, and to assert, present and defend legal claims.

How will we store your data?

We have implemented the necessary physical and technical measures to protect personal data, such as access control, data availability restrictions, virus protection, and others.

What rights do you have?

As a data subject, you have the following rights under the GDPR:

to access personal data and receive information about their processing;
rectify personal data if it has changed or is inaccurate or incorrect;
erase the data (right to be forgotten) unless we are obliged to keep them;
restrict processing where the conditions set out in the GDPR apply;
the right to data transfer, if there are grounds for data transfer provided for in the GDPR;
to object to the processing of your personal data where it is processed for legitimate interests;
lodge a complaint with the data protection supervisory authority if you believe that we are processing your data improperly.

If you wish to exercise your rights, you can contact us at atranka@naresta.lt.

To ensure maximum security, in certain cases we will only be able to process your request after verifying your identity. This may include, for example, asking you to provide a personal document or other information.

We do not normally charge any fee for exercising your rights. However, the law allows us to charge a reasonable fee or to refuse to comply with your request if it is manifestly unfounded or excessive.

Upon receipt of your request or instruction regarding the processing of your personal data, we will provide you with a response within 1 month of the date of your request and will carry out the actions specified in the request or inform you why we refuse to do so. If necessary, this period may be extended by a further 2 months, depending on the complexity and number of requests. In such case, we will inform you of the extension within 1 month from the date of receipt of the request.

If you believe that your rights have been violated under the GDPR, you can lodge a complaint with our supervisory authority, the National Data Protection Inspectorate. For more information and contact details, please visit the Inspectorate’s website (https://vdai.lrv.lt/). We aim to resolve all disputes promptly and peacefully, so please contact us first.

Where can you find more information?

For more information about our processing of personal data and the exercise of your rights, please refer to our Privacy Policy, which can be found online at https://naresta.lt/privatumo-politika/ or by contacting us at atranka@naresta.lt.

This Privacy Notice is subject to change. We will announce the changes in a new version of the Privacy Notice for Candidates on our website.

If you submit your personal data in connection with a job offered by the Company or on your own initiative for purposes other than a specific selection, we will consider that you have read the Privacy Notice for Candidates and that you consent to our processing the personal data you have provided for the purpose of the evaluation and selection of the Candidate. If we do not select you for a specific job offer, we will ask for your consent to assess your candidature for future job openings.