Privacy Policy

• Gi Group Lithuania UAB, based in Vilnius, LT-08106, T. Narbuto st. 5

e-mail: lt.privacy@gigroup.com

• Grafton Lithuania UAB, based in Vilnius, LT-08106, T. Narbuto st. 5

e-mail: lt.privacy@gigroup.com

The Companies have entered into an agreement to assume joint controllership of the data processing, pursuant to Article 26 of the GDPR, under which a number of measures will be jointly established, in particular with regard to:

• Purposes and methods of processing of Personal Data;
• Procedures for providing timely feedback to requests by data subjects in the exercise of their rights;
• Security measures appropriate to the processing of Personal Data and data breach management procedures;
• Content of privacy notices.

You may also request to see the essential content of the joint controllership agreement by sending an e-mail to lt.privacy@gigroup.com

DATA PROTECTION OFFICER  (“DPO”)

e - mail: lt.dpo@gigroup.com

CATEGORIES OF PERSONAL DATA AND DATA SOURCES

For the purposes set out below, the Joint Controllers will collect the following categories of data: name, surname, password, date of birth, personal identification number, identity card number, address, e-mail address, telephone number, education, work experience, other additional life information provided in the description and/or information provided during an interview with one of our affiliates.

Special categories of data:

By responding to an advertisement or submitting a voluntary application, you will be given the opportunity to declare that you have a physical or mental disability, or that you are classified as a protected person, on data collection forms or during an interview at one of our branches. This information is likely to reveal your state of health and falls within the special categories of data referred to in Article 9(1) of the GDPR and will be processed in accordance with the relevant regulations in force.

The legal basis applicable to the processing of special categories of personal data concerning you is your explicit consent pursuant to Article 9(2)(a) of the GDPR.

Should you fail to give your consent, it will not be possible to process data concerning your membership of a protected category.

Regardless, please do not indicate any special categories of data in your curriculum vitae (personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, genetic data, biometric data intended to uniquely identify a natural person, data concerning a person's health or sex life or sexual orientation).

Personal data are collected in the following ways:

• Registration to the myGiGroup/myGrafton personal area carried out from the websites of the Companies (hereinafter also "Site") or via App;
• Websites of any third-party companies and social networks;
• E-mail;
• During an interview at one of the agencies;

WHY ARE YOUR PERSONAL DATA PROCESSED AND

WHAT IS THE CONDITION THATMAKES THE PROCESSING LAWFUL?

HOW LONG DO WE KEEP YOUR PERSONAL DATA?

1. PORTAL REGISTRATION

Your data are processed for registration in the myGiGroup/myGrafton personal area, to be carried out to create a personal profile on the portal that allows you to review our job offers and apply to them.

The legal basis applicable to the processing of your personal data for the Portal Registration Purpose, takes place because the processing is necessary for the performance of a contract pursuant to Article 6(1)(b) of the GDPR.

For 30 months since your last interaction with the Candidate personal area.  

2. APPLICATION TO A JOB OFFER AND CANDIDATE SELECTION PROCESS

Your data are processed both in case of application in response to a specific advertisement published on the Site and in case of voluntary application through the Site for the pursuit of the purpose of search and selection of candidates, in particular:

1. 1. for placement on a temporary basis at our client user company
   2. for direct placement at our third-party customer company
   3. for the implementation of measures or in the framework of collaborations and/or partnerships with public and private market operators.

The legal basis applicable to the processing of your personal data for the Information Purposes in is the execution of pre-contractual measures taken at your request pursuant to Article 6(1)(b) of the GDPR.

For 30 months since your last interaction with the Candidate personal area.  

3. INFORMATION PURPOSE

Your data are also processed to send you communications strictly related to the purpose of search and selection of candidates by traditional or automated contact methods, including communications relating to training initiatives strictly linked to a specific position, financed by our client companies or by interprofessional funds (together the “Information Purpose”).

The legal basis applicable to the processing of your personal data for the Information Purposes in is the execution of pre-contractual measures taken at your request pursuant to Article 6(1)(b) of the GDPR.

For 30 months since your last interaction with the Candidate personal area.  

4. PROPOSAL OF JOB OFFERS

Your data may be processed to propose searches and selections of personnel in line with your profile in order to provide job placement, including by sending job offers by traditional or automated contact methods.

The legal basis applicable to the processing of personal data concerning you  for the proposal of job offers purpose is your consent pursuant to Article 6(1)(a) of the GDPR.

Should you withdraw your consent to such processing, your data shall be processed exclusively in the context of the specific selections for which you have applied.

For 30 months since your last interaction with the Candidate personal area or until you withdraw your consent.

5. AGGREGATE ANALYSES

Your data may be processed:

1. for analyses of aggregate data for statistical purposes, not aimed at detecting the behaviour of data subjects and without direct effects on the data subjects, and for analyses of data for the purpose of verifying and forecasting business results and for internal and external auditing purposes, which do not affect the legal sphere of the data subjects. Such analysis activities may also be carried out through the use of IT and artificial intelligence tools;
2. in an aggregate manner for the maintenance and improvement of the systems used to perform the services, in a manner not aimed at detecting the behaviour of the persons concerned and without direct effect on them.

The legal basis applicable to the processing of your personal data for the Aggregation and Analyses purpose is the legitimate interest of the Company (maintenance and improvement of company systems) pursuant to Article 6(1)(f) of the GDPR.

For 30 months since your last interaction with the Candidate personal area or until you object to the processing.

6. LEGAL DEFENSE

Your data may also be processed to ascertain, exercise or defend a right of ours in court.

The legal basis applicable to the processing of your personal data for the legal defense purpose is the legitimate interest of the Companies (exercise or defence of a right in court) pursuant to Article 6(1)(f) of the GDPR.

For 10 years since your registration and kept for the duration of the litigation, until the time limits for appeals have been exhausted.

7. MARKETING

Your data may also be processed, with your consent, for the purpose of sending information and promotional communications relating to the services offered by the Companies (in particular, training initiatives, career development, coaching), or carrying out studies and statistical and/or market research relating to employment services, using both traditional and automated contact methods (e.g., e-mail, SMS, instant messaging systems, operator calls, paper mail).

The legal basis applicable to the processing of personal data concerning you is your consent pursuant to Article 6(1)(a) of the GDPR.

For 30 months since your last interaction with the Candidate personal area or until you withdraw your consent.

8. MARKETING OF OTHER GROUP COMPANIES

Your data may also be processed, with your consent, for the purpose of sending information and promotional communications relating to the services offered by other Group companies (in particular, training, career development, coaching, outplacement support, personnel search and selection and executive search initiatives), or the performance of statistical and/or market studies and research relating to employment services, using both traditional and automated contact methods (e.g., e-mail, SMS, instant messaging systems, operator calls, paper mail).

The legal basis applicable to the processing of personal data concerning you is your consent pursuant to Article 6(1)(a) of the GDPR.

For 30 months since your last interaction with the Candidate personal area or until you withdraw your consent.

After the aforementioned retention periods have elapsed, Personal Data will be destroyed, deleted or anonymised, subject to technical deletion and backup procedures.

NATURE OF DATA PROVISION AND CONSEQUENCES OF REFUSAL

The provision of the data marked with an asterisk in the registration form for the myGIGroup/myGrafton personal area is necessary to allow the Companies to complete your registration (Portal Registration purpose); therefore, any refusal to provide the requested data will prevent the Companies from completing your registration to myGIGroup/myGrafton.

The provision of the data marked with an asterisk in the data collection form on the Site or requested from the agencies is necessary to allow the Companies to pursue the search and selection purposes; therefore, any refusal to provide the requested data shall prevent the Companies from carrying out the search and selection activity and shall not allow your application to be taken into consideration.

The provision of data for the Marketing purposes is optional. Any refusal to provide data or consent will have no consequence on your registration to myGIGroup/ myGrafton and will not prevent the Companies from carrying out search and selection activities.

DATA RECIPIENTS

Your data may only be processed by employees of the company departments authorized to process them as they are assigned to the pursuit of the aforementioned purposes. These employees have received adequate operational instructions in this regard.

Your personal data may be communicated by the Companies, in pursuance of the purposes set out above, to the following entities:

• Client companies or entities;
• Ministry of Labour;
• Public bodies in the framework of the implementation of active labour policy paths or measures;
• Other market players in the case of partnerships;
• Legal advisors;
• Training organisations;
• Group companies.

Your personal data may also be processed by parties, expressly appointed as data processors, which provide the Companies:

• Site operation and maintenance services;
• Candidate database management and maintenance services;
• Archiving services;
• Communication mailing services;
• Market research services;
• Assessment and training service;
• Event organisation services;
• Marketing services.

An up-to-date list containing the addressees is available at our registered office or by sending a communication to the Companies to the e-mail address: lt.privacy@gigroup.com

Personal data provided by candidates will not be disseminated.

EXTRA EEA DATA TRANSFERS:

Your data may be transferred abroad to recipients referred to in the previous section outside the European Economic Area ('EEA'), and in particular to:

1. Argentina, the United Kingdom and Switzerland, whose level of data protection has been deemed adequate by the European Commission under Article 45 of the GDPR;
2. Brazil, China, Colombia, Hong Kong, India, Montenegro, Serbia, Turkey, Ukraine and the USA, subject to the Companies’ signature with the data importer of the Standard Contractual Clauses adopted/approved by the European Commission pursuant to Article 46(2)(c) and (d) of the GDPR.

In the absence of the aforementioned adequate guarantees, any transfers to non-EEA countries will be performed on the basis of the exceptions provided for under Art. 49(1)(b) and (c) of the GDPR. The data subjects will be specifically notified of such transfers.

The adequacy decisions can be consulted at the following link: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en

DATA SUBJECTS RIGHTS

Data subjects are granted the rights set out in Articles 15 to 22 of the GDPR, where applicable.

In particular, data subjects may request from the Data Controllers access to the data, their deletion, the rectification of inaccurate data, the integration of incomplete data, as well as the restriction of processing in the cases provided for in Article 18 of the GDPR.

Data subjects have the right to object, at any time, in whole or in part, to the processing of data necessary for direct marketing purposes and for the pursuit of the legitimate interests of the Data Controllers.

Data subjects also have the right to receive the data provided to data controllers in a structured, commonly used and machine-readable format, and, if technically feasible, to pass them on to another data controller without hindrance, if the conditions for exercising the right to portability set out in Article 20 of the GDPR  are met.

These rights may be exercised by writing by post to the addresses indicated above, or by e-mail to the following e-mail address: lt.privacy@gigroup.com. It is understood that where the request is made by electronic means, the information will be provided in a commonly used electronic format.

Data subjects have the right to lodge a complaint with the competent supervisory authority (in particular in the Member State where they habitually reside or work or in the State where the alleged infringement occurred).