We understand the special importance of protecting your personal data, so we shall collect and process only the data that is necessary for our operations. We shall process personal data in a lawful, transparent and fair manner, for pre-defined purposes, and only to the extent necessary to achieve the goals. When processing personal data, we shall strive to ensure that data is accurate, secure, confidential, properly stored and protected.

When processing your personal data, we shall comply with the General Data Protection Regulation (hereinafter referred to as “GDPR“), the Law on Legal Protection of Personal Data of the Republic of Lithuania, as well as the processing requirements for personal data set forth in other legal acts.

What is this document?

1. Privacy Policy (hereinafter referred to as the “Privacy Policy”) shall determine the terms and conditions of privacy for using the website www.cvbankas.lt (hereinafter referred to as the “Website”).

   1. Please read this Privacy Policy carefully to understand what practices shall apply for processing of your personal data. Having read this document, you will learn how we handle your personal data, where we obtain it and what your rights are, as a subject of personal data.

   2. If you use this Website, it means that you have read and accepted the Privacy Policy, and the methods and procedures for the processing of your personal data contained therein. If you do not agree with the Privacy Policy, you shall not have the right to use the Website.

   3. The term “personal data” used in this Privacy Policy means any information that enables to identify you, directly or indirectly. Personal data shall include surname, first name, date of birth, postal or email address, location data, and web identifier, your specific characteristics, etc.

   4. The Privacy Policy shall apply to any person who visits the Website, irrespective of whether or not he/she has registered with the Website, or to any actions that may be performed on the Website.

Who are we?

1. The website shall be managed and administered by UAB Diginet LTU, legal entity code 126222639, address Saltoniškių g. 9B, Vilnius.
2. Based on the provisions of the legislation, we are the controller of your personal data.

What principles do we follow?

1. When processing your personal data:
   1. We will comply with the existing and applicable laws, including GDPR.
   2. We will ensure that your personal data is processed in a manner that ensures proper security of personal data by applying appropriate technical or organizational measures, including protection against unauthorized or unlawful data processing, and against unintentional loss, destruction or damage.
   3. We will not disclose personal data to third parties, nor will disclose such data except as provided in the Privacy Policy or in the cases provided by law.
   4. We will keep them in a form, which permits your identification for no longer than is necessary for the purposes for which the personal data is processed.
   5. We shall take all reasonable steps to ensure that personal data, which is not accurate or complete, with regard to the purposes for which it is processed, will be immediately corrected, supplemented, their processing will be suspended or it will be destroyed.
   6. We will collect your personal data for specified, explicit and legitimate purposes and will not process it in a manner incompatible with those purposes, except to the extent permitted by law.
   7. We will process your personal data in a lawful, fair and transparent manner.

What are the purposes and bases for handling your personal data?

1. We shall handle your personal data for the following purposes:
   1. in order to provide you with services, upon registration or non-registration on our Website:
      1. we shall allow you to create an account (profile) on the Website, a resume (CV), a letter of motivation and post them on the Website;
      2. we shall publish job postings placed by users of the Website that are potential employers, recruitment or staffing agencies, and give you the opportunity to send them your CVs;
      3. we shall provide access to other paid or free Website services;
   2. to ensure the functionality of the Website, to improve it, to offer you better and customized services;
   3. to seek professional service quality, its development and assurance, and for the purpose of solving potential or emerging disputes;
   4. to provide you with our proposals and information about our goods and/or services, or persons and partners associated with us.
2. We shall collect and handle your personal data listed in the Rules and in this Privacy Policy on the following legal grounds:
   1. Your consent to the Terms and Conditions set forth in the Rules and this Policy.
   2. Our legitimate interest.
   3. Execution of legal obligations arising and applied to us.

How and what your personal data do we handle?

1. You provide us with your personal data and other information using the Website or upon registration on the Website.
2. We shall process your personal data when:
   1. You register for the Website as a candidate and provide us with:
      1. identification data (e.g. name, surname, date of birth, sex, place of residence, photo, etc.);
      2. contact data (e.g. e-mail address, telephone number, etc.);
      3. data on work experience (e.g. name of the current or former job, title of the job, working period in the current or former workplace, website of the workplace, job description, field of work, etc.);
      4. data on education (e.g. period of study, degree awarded, name of educational establishment, field of education, specialty, etc.);
      5. data on professional qualifications (e.g. information on courses attended (name, date, organizer, description), information on the course certificate obtained, etc.);
      6. data on memberships in organizations other than trade union memberships (e.g. name of organization, membership period, duties, achievements, etc.);
      7. details of personal qualities, skills, experience and benefits (e.g. language proficiency, computer literacy, driving license, leisure time, etc.);
      8. data of the nature of job advertisements (e.g. preferred area of work, desired duties, etc.);
      9. a letter of motivation;
      10. payment data for services ordered on the Website (e.g. payment method, order number, bank account number or electronic money institution, telephone number, SMS message with payment information, etc.).
   2. You shall use the Website without registering and provide us with:
      1. identification data (e.g. name, surname);
      2. contact data (e.g. email address);
      3. resume (CV), a letter of motivation;
      4. data on the payment for services ordered on the Website (e.g. payment method, telephone number, SMS with payment information, etc.);
   3. You shall register for the Website as a representative of a potential employer, recruitment or staffing agency:
      1. identification data (e.g. name, surname);
      2. contact data (e.g. email address, phone number).
   4. When you use our Website, certain data shall be automatically transferred to us after your visit to the Website. This data containing certain non-personal information shall be used to improve the content, functionality, and attractiveness of the Website, and may include:
      1. IP address, type of web browser used, number of visits, viewed Website pages, time spent on the Website, etc.).
   5. We shall obtain data from others in the manner established by law or this Privacy Policy.
3. We shall not request or handle your personal data of specific categories revealing your racial or ethnic origin, political opinion, religious or philosophical beliefs, or trade union membership, as well as health data or sex life, and sexual orientation. In the event you provide us with this information on the Website, your CV, or the Letter of Motivation, or otherwise when using the Website, this data will be deemed to have been provided with your consent. Accordingly, we will process your data along with the data you provided in the manner described in paragraph 2 of the Privacy Policy “How and what your personal data do we handle?”
4. You shall also provide us with your personal data by writing to us or by contacting our Customer Service Team and submitting your complaints about the Website or our services. After contacting us in writing or by e-mail or phone, we will store the correspondence or audio recording (conversation) data.
5. We may combine personal data received from you along with data we will collect from other public or accessible sources (e.g. we may combine the personal data provided by you with the data received using Website Cookies or with data lawfully obtained from third parties). By exercising your rights, you will always be able to obtain the correction of any inaccurate personal data.

Do we use your personal data for direct marketing?

1. Yes, we may use your personal data for direct marketing purposes to provide you with proposals and information about goods and/or services provided by us, the persons related to us and partners who we believe may be of interest to you. However, we will use your personal data for this purpose only with your consent.
2. For this purpose, we shall process the following personal data: name, email address, area of desired job, and job level, and the town of workplace.
3. You can allow us to use your personal data for direct marketing purposes. You can do this in this way:
   1. When signing up for the Website, tick the “I agree to receive offers by email” box or do not tick it;
   2. At any time after signing for the Website, in the section of your account “Ad Subscription”, tick the “I agree to receive offers via email” box;
   3. When you use the Website without signing up, when sending your resume (CV) tick the “I agree to receive offers by email” box or do not tick it.
4. We may combine the information available about you with information available to third parties in order to provide you with relevant offers.
5. If you give your consent to the use of your personal data for direct marketing purposes, we may use your personal data to analyse and improve the effectiveness of our websites, advertising and market research, and other business marketing and sales purposes. In this case, we will use your depersonalized data.
6. Even if you have given your consent to the processing of your personal data for direct marketing purposes, you may easily revoke this consent at any time for all or part of personal data processing operations. For this purpose you can:
   1. change your settings on the Website in the section ‘Ad Subscription’ indicating that you no longer wish your personal data to be used for direct marketing purposes, and tick the “Do not send offers” box, or
   2. inform about refusal in electronic notifications and/or offers in a manner specified (e.g. by clicking on the link in the notifications or offers “Cancel sending offers”, etc.), or
   3. send us a request to the email address provided in this Privacy Policy. Your name and surname, and other registration details (if any) must be clearly indicated in the request. If you wish to withdraw your consent in this way, we may ask you to provide documents proving your identity.
7. If you withdraw your consent, we will try to terminate the processing of your personal data for direct marketing purposes as soon as possible.
8. Withdrawal of consent shall not oblige us to destroy your personal data automatically or to provide you with information about any personal data we process, so you must provide such a request separately in order for us to perform these actions.

How do we use cookies?

1. We shall collect information about you using cookies and similar technologies. Cookies are small files that are temporarily stored on your hard disk drive that allow us to recognize you through other visits to the Website, save your personal browsing history, options, customize content, speed up searches on the Website, create a comfortable and friendly Website environment, and present it more efficiently and more reliably. Cookies mean common browsing practice on web pages that facilitate the use of the website.
2. Using cookies, we may collect the following information: IP address, browser type, demographic data, and, if you arrived at the Website from a third-party website, the URL of the page.
3. We shall use information obtained while using cookies for the following purposes:
   1. to ensure the functionality of the Website (for example, to enable you to use the Website personalization);
   2. to be able to improve and develop the Website in a way that better meets your needs;
   3. for service development and analysis for using the Website;
   4. targeted marketing orientation.
4. Without violating the law, we may combine the information obtained using cookies with information about you obtained by other means (e.g. information on the use of the Website, the personal data you provide).
5. The following cookies may be used on the Website:
   1. “technical cookies” that are necessary for the functioning of the Website;
   2. “functional cookies” that are not necessary for the functioning of the Website but which significantly improve its performance, quality and user experience;
   3. “analytical cookies” used to prepare statistical analysis of navigation methods used by the visitors of the Website; the data collected by these cookies shall be used anonymously;
   4. “targeted or promotional cookies” that are used to display proposals or other information that might be of interest to you;
   5. “social network cookies” that are necessary to use the Website information in your social profile account.
6. All information about cookies used on the Website, their purpose, validity and data used is available a https://www.cvbankas.lt/naudojimosi-taisykles.html#cookies_policy_terms​
7. You may give consent to the use of cookies in the following ways:
   1. without deleting them and/or changing the settings in your web browser so that it does not accept cookies;
   2. by clicking the “I Accept” box in the link on the cookies provided on the Website;
   3. by expressing consent during the creation of an account on the Website;
8. You may withdraw the consent to use cookies at any time. You can do this by clicking Manage preferenes or by changing the settings in your web browser so that it does not accept cookies. How to do this will depend on the operating system you are using and your web browser. Detailed information about cookies, their use, and opt-out options is available at http://AllAboutCookies.org or http://google.com/privacy_ads.html.
9. In some cases, especially when disabling, disagreeing to use or deleting technical and functional cookies, the internet browsing speed may be slowed down, the functionality of certain Website features may be limited, and access to the Website may be blocked.

To whom do we transfer your personal data?

1. We guarantee that your personal data will not be sold, provided or otherwise transferred to third parties without legitimate cause, and used for purposes other than those for which they were collected. We will not transfer your personal data in a way other than in accordance with this Privacy Policy. However, we shall reserve the right to provide information about you if we were required to do so in accordance with the law or if we were required to do so by legally acting law enforcement or prosecution authorities.
2. When you use the Website and provide us with the data referred to in paragraphs 2.1 and 2.2 of the Privacy Policy “How and what your personal data do we handle?”, you agree that we will handle them (collect, use, store) and pass it on to potential employers, recruitment or staffing agencies that have registered for the Website and posted job ads. You agree that potential employers, recruitment or staffing agencies, as independent data controllers, will use the data you submit for their own needs related to search for employees and their recruitment.
3. We can transfer your personal data to companies that help us to carry on activities as well as direct marketing. We shall demand from such partners that your data be processed only in accordance with the instructions provided by us, and applicable law that protects your data.
4. We may disclose the data collected about you to the following third parties:
   1. third-party service providers (e.g. technical service providers during the performance of our contracts with these service providers, including the provision of services related to sending newsletters or other marketing activities);
   2. third-party service providers whose services are generally used for data storage, telecommunications and website hosting purposes.
5. The availability of your data to the above-mentioned service providers shall be limited - they may not use this data for purposes other than the provision of services to us.

Data storage. How long do we store your personal data?

1. Data collected for the purpose specified in paragraph 1.1 of the Privacy Policy “What are the purposes and bases for handling your personal data?” when:
   1. you have provided them by registering with the Website, we will keep until you are registered with the Website, i.e. until you delete your account;
   2. you have provided them without having registered with the Website, we will keep for 5 (five) years.
2. Data collected for the purpose specified in paragraph 1.2 of the Privacy Policy “What are the purposes and bases for handling your personal data?”, we shall store for the term specified in the cookie notice referred to in paragraph 6 of this Privacy Policy “How do we use cookies?”.
3. Data collected for the purpose specified in paragraph 1.3 of the Privacy Policy “What are the purposes and bases for handling your personal data?”, we shall store until you are registered with the Website, i.e. as long as you do not delete your account, or withdraw you consent in a manner provided in paragraph 6 of this Privacy Policy “Do we use your personal data for direct marketing?”
4. Data collected for the purpose specified in paragraph 1.4 of the Privacy Policy “What are the purposes and bases for handling your personal data”, we shall keep for 1 (one) year from the date of receipt of relevant personal data.
5. We shall keep your personal data no longer than required by the purposes of data processing or provided by law if a longer time limit for storage is set therein.
6. We shall seek not to keep outdated, irrelevant personal data, and therefore having updated them (e.g. by revising your data in your account, changing information, etc.), only relevant information shall be kept. Historical information shall be stored, if necessary, in accordance with the legislation or for the performance of our activities.

How do we protect your personal data?

1. The data collected from you will be stored within the EU, but may be transferred or stored outside the EU. Our personnel or personnel of our suppliers operating outside the EU can also handle them. When we transfer your data outside the EU, we will take all necessary steps to ensure that your data is processed securely and in compliance with this Privacy Policy.
2. Unfortunately, the transmission of information over the Internet is not very secure. While we do our best to protect your personal data, we cannot guarantee the security of your data when you transfer it to the Website - you shall assume the risk of data transferring to the Website. When we receive your data, we will apply strict procedures and security measures to protect your data from unauthorized access.
3. If unlikely circumstances occur and we find out about a breach of security of your personal data, which may pose a serious threat to your rights or freedoms, will be promptly notify you as soon as we become aware of it and having determined which information was accessed.

External websites

1. Links to external sites may be provided on the Website, i.e. websites of our business partners or websites that promote our products and/or services. By following these links to any of the sites, please note that these sites and services accessible through them shall have their own privacy policies and we do not accept any responsibility or obligations for those policies or personal data collected on these sites or during the provision of services such as contact or location data. Please review these policies before submitting personal data on these sites or using any services.

What rights do you have?

1. When processing personal data, we ensure your rights under the GDPR and the Law on Legal Protection of Personal Data of the Republic of Lithuania. As a personal data subject, you shall have the following rights:
   1. be aware of (be informed) of the processing of your personal data;
   2. get acquainted with your personal data that we process;
   3. demand to correct or supplement, specify incorrect, inaccurate, and incomplete personal data;
   4. demand the destruction of personal data when it is no longer necessary for the purposes for which it was collected;
   5. demand the destruction of personal data if it is processed illegally or when you withdraw your consent to the processing of personal data or do not give such consent, which is necessary;
   6. disagree with the processing of personal data or withdraw consent previously given;
   7. demand the suspension of processing operations (except storage) of your personal data in case of disputes or if you need to verify the legitimacy of data processing, data accuracy as well as in cases where we no longer need your personal data, but you do not want us to destroy it;
   8. demand, if technically feasible, to submit your personal data collected in accordance with your consent or for the performance of the contract in an easy-to-read format or request that it be forwarded to another data controller.
2. We will endeavour to guarantee the exercise of your rights as a personal data subject and make it possible to enforce these rights effectively; however, we shall reserve the right not to execute your demands in order to ensure:
   1. execution of our legal obligations;
   2. State security or defence;
   3. public order, prevention, investigation, detection or prosecution of criminal offenses;
   4. important economic or financial interests of the State;
   5. prevention, investigation and detection of violations of official or professional ethics;
   6. protection of your or other persons’ rights and freedoms.
3. You may submit to us your demands relating to the implementation of your rights, personally, by mail or by electronic means. Upon receipt of your request, we may ask you to provide proof of identity, as well as any additional information we may require in connection with the request.
4. Upon receipt of your request, we will respond to you no later than 30 calendar days from the date of receipt of your demand and the date of submission of all the documents required to provide a response.
5. If we consider it necessary, we will suspend the processing of your data, except for their storage, until your request is resolved. Upon the lawful withdrawal of your consent, we will terminate the processing of your personal data immediately, but not later than within 30 calendar days, except as provided in paragraph 2 of this Privacy Policy “What rights do you have?” and legal acts, i.e. when we are obliged to continue processing your data according to the applicable legislation, our legal obligations, court rulings or binding instructions from the relevant institutions.
6. If we refuse to comply with your demands, we will clearly indicate the ground for such refusal.
7. If you do not agree with our actions or response to your request, you may appeal our actions and decisions to the competent public authority.

With whom can you file a complaint?

1. If you want to file a complaint against the processing of your personal data, you have to submit it in writing and provide as much information as possible using the contact details at the end of this policy document. We will cooperate with you and try to resolve all issues immediately.
2. If you believe your rights have been violated under the GDPR, you may lodge a complaint with our supervisory authority - the State Data Protection Inspectorate, although, first, we will try to resolve all disputes with you.

How will change this Privacy Policy?

1. All changes to our Privacy Policy will be posted on the Website. If required, you will be notified of them accordingly. New terms and conditions of the Privacy Policy may also be provided on the Website and you may need to read and accept them to continue using our Website and/or our services.

How to contact us?

1. Please send all documents related to this Privacy Policy to the following contacts:
   1. By post: UAB Diginet LTU, address: Saltoniškių g. 9B, Vilnius;
   2. By email: info@cvbankas.lt