CANDIDATE EMPLOYEE PERSONAL DATA PROCESSING POLICY

The purpose of the Candidate Employee Personal Data Processing Policy (the ‘Policy’) is to inform you about how UAB Corpus A conducts the processing of personal data of its candidates, the data that is collected and the purposes for which they are used, the storage durations, and so on. We expect you to reach this information carefully.

1. What is the purpose of us processing your personal data?
Purpose number one is to recruit skilled, motivated, and appropriate employees.
Purpose number two (statistical) is to predict the situation on the labour market.

2. What kind of your personal data do we process, and why?
Personal data are any information that can be used to identify a person as well as any information about a person who has already been identified.
Candidate data (candidate documents) are personal data contained in documents presented by yourself or obtained from third parties (your résumé, motivational letter, qualification documents, references, external candidate form, and so on).

3. From what sources do we obtain your personal data?
We usually obtain your data from yourself when you reply to the company’s job ad and submit your résumé, motivational letter, references from former employers or educational establishment, and qualification documents of your own free will.
We also obtain information that affects recruitment from entities that provide job search, recruitment and/or agency services, such as the Labour Exchange of the Republic of Lithuania, employment agencies, job search websites, specialised career social media, such as LinkedIn.
Furthermore, with your consent, we obtain references or feedback from persons who recommend you, including your current and/or former employers and colleagues.

4. For how long do we store your personal data?
We can process your candidate data that we obtain directly from you:
A) Until the end of the recruitment procedure for which you submitted your candidate data, i.e. we usually destroy your candidate data within 10 days of the end of the recruitment procedure, unless another legal ground to process your personal data arises during that time.
B) Until you file a request to discontinue the processing of your personal data obtained on the basis of your consent.
C) For five years after the date of your consent.

IMPORTANT. First, we will always ask you for how long we can process your data when we obtain the data directly from you.
Second, if you do not provide a clear answer for how long we can process your candidate data, we usually store the data for two months after the date of receipt thereof.
Third, in any case, we will store your consent to process your candidate data for up to 10 years if we believe it to be necessary for the purposes of our defence against any potential claims, complaints, or lawsuits made against us.
If we obtain information about you as a candidate or other candidate documents from the Labour Exchange of the Republic of Lithuania, employment agencies, job search portals, career social media (such as LinkedIn), and/or similar job search, recruitment, and/or agency service providers, we will presume that you have been fully informed about the processing of your data and you have given your consent to process your personal data to the relevant entity, which consent will also cover the right to submit your data to potential employers (including ourselves).

IMPORTANT: obtained in this manner, your candidate data will usually be processed for two months from the date they are obtained.

5. When and how do we disclose your personal data?
We can transfer your candidate data to third parties – legal entities that help us in the recruitment process or providers of services relating to recruitment, candidate evaluation, and internal administration.
Such legal entitles potentially include personnel recruitment and/or evaluation service providers, suppliers of database software, database administration service providers, data centre, hosting (server), and cloud service providers, and so on.
We can transfer your candidate data to companies that we work with on contractual basis. In any case, we will only do this with your consent.
We can also release your personal data to competent authorities or law enforcement institutions such as the police, law enforcement agencies or regulatory bodies, but only subject to their request and only when we are obligated to do so under the applicable regulations or in the cases and in the manner outlined in the legislation.

6. In what territories and jurisdictions do we process your personal data?
We process your personal data exclusively on the territory of the European Union. We currently do not intend to and do no transfer your personal data to processors or recipients in third countries.

7. What rights regarding the processing of your personal data do you have and how can you exercise them?
First. The right to access your personal data under processing: you have the right to know whether we are processing your personal data as well as the right to access your personal data that we process and information about the purposes of the processing, the categories of the data processed, the categories of data recipients, the period of processing, and the sources of the data.
Second. The right to demand rectification of your personal data: if the data you submitted to us in your candidate documents or if you see that your personal data that we are processing are inaccurate or incorrect, you have the right to demand that this information be amended, updated, or rectified
Third. The right to be forgotten. The right to withdraw your consent: you have the right to withdraw your consent at any time and demand that the processing of your personal data done on the grounds of your consent be terminated if no other legal grounds for processing your personal data exist.
Fourth. The right to restrict data processing: you have the right to restrict the processing of your personal data where the processing of your personal data is done illegally, you contest the accuracy of the data, you have filed an objection to processing your personal data on the grounds of our legitimate interest, and in other cases set forth in the legislation.
Fifth. The right to data portability: you have to request that the data that we subject to automated processing exclusively in the candidate data registry of the company be transferred to another data controller. We will present the data that we process and you request to be transferred in a commonly used and machine-readable format, and will transfer the data directly to another data controller as may be specified and requested by you, if technologically possible.
Sixth. The right to file a complaint: if you believe that we are processing your personal data in violation of the requirements of data protection laws, we will kindly ask you to contact us first and foremost at Gabijos g. 52, LT-06157 Vilnius; phone: +370 640 26733; e-mail: duomenuapsauga@CorpusA.lt. If you are not satisfied with the problem solution proposed by us or if you think we are not taking the necessary steps to address this issue, you will always have the right to file a complaint with the regulatory body, which in Lithuania is the State Data Protection Inspectorate (A. Juozapavičiaus g. 6, LT-09310 Vilnius; phone: (8 5) 271 2804, 279 1445; e-mail: ada@ada.lt).

8. How do we address complaints?
Once we receive your request to access personal data or exercise your other rights, we will always identify the applicant first. We will do this to protect the data of all of our candidates from unauthorised disclosure. To this end, we may ask you to produce valid identification.
Once we receive your request to erase your candidate data submitted to us with your consent, we will do this without undue delay, provided the request to terminate data processing is sent from the same e-mail address from which the consent was given to us.
Once we receive your request to exercise any of your rights and satisfy ourselves as to your identity, we will, without undue delay and in any case within one month of the date of receipt of your request, provide you with information about the steps we took as per your request. Considering the complexity and volume of requests, we will have the right to extend the one-month period for up to two additional months by giving you notice to the effect by the end of the first month and stating the reasons for the extension.
If your request is submitted electronically, we will give you our answer via electronic channels as well, unless this is impossible (such as by virtue of the high volume of information) or you instruct us to reply otherwise.
If we identify any circumstances that legally prevent us from satisfying your request, we will give you a written and well-reasoned notice to the effect.

9. How can you contact us?
By e-mail at: info@CorpusA.lt
By phone at: +37 700 33390
At our address at Gabijos g. 52, LT-06157 Vilnius, c/o HR and Quality Department.

10. Are the data you submit to us secure?
Our suppliers are carefully screened and we expect them to use the appropriate measures to protect the confidentiality of your data and ensure the security of your personal information.
We employ technology and procedures to ensure security and protect your personal information from unauthorised access, use, or disclosure.
However, we are not able to guarantee the security of your own transmissions via web or mobile channels of communications, just like we are unable to guarantee the security of your data stored, for instance, on job search websites, specialised career social media such as LinkedIn; therefore, you are transmitting any information via the above channels to us or storing it in the aforementioned platforms exclusively at your own risk.

11. Can this Policy be amended?
Please note that this Policy may be amended, supplemented, and updated.
The latest version of the Policy is available on our website at all times.