We process personal data lawfully, transparently and fairly, for predefined purposes and only to the extent necessary to achieve the purposes. When we process personal data, we aim to keep it accurate, secure, confidential, properly stored and protected.
In processing your personal data, we comply with the requirements of the General Data Protection Regulation (“GDPR”), the Law on Legal Protection of Personal Data of the Republic of Lithuania, as well as the requirements for the processing of personal data set out in other legal acts.
What is this document?
1.1 By reading this privacy policy (hereinafter referred to as the “Privacy Policy”), you will learn how and for what purposes we process your personal data, where we obtain it, to whom we provide it and how we store it, and what are your rights as a personal data subject.
1.2 The Privacy Policy also sets out the privacy terms and conditions for the use of our website www.indigroup.lt (“the Website”) and our social networking accounts (Indigroup > Linkedin). Please read this Privacy Policy carefully, as each time you visit our Website and/or our social networking accounts, you agree to the terms of the Privacy Policy. If you do not agree to these terms and conditions, please do not visit our Website and/or social network accounts.
1.3 The Privacy Policy applies to persons who visit the Website and/or our social networking accounts, whether or not you are our customer, and to actions you may take on the Website and/or our social networking accounts.
1.4 For the purposes of this Privacy Policy, “personal data” means any information from which you can be identified, either directly or indirectly. Personal data includes your name, surname, email address, telephone number, location data and internet identifier, characteristics specific to you, etc.
Who are we?
2.1 The Website is managed and administered by Indigroup UAB, legal entity code 302482121, registered office address Konstitucijos pr. 20 LT-09308, Vilnius, contact address Konstitucijos pr. 20, Vilnius, e-mail kandidatai@indigroup.lt, contact telephone number for work +370 654 74 958.
2.2 In accordance with the provisions of the legislation, we are the controller of your personal data.
What principles do we follow?
3.1 In processing your personal data we:
- comply with the requirements of applicable and valid legislation, including the GDPR;
- process your personal data in a lawful, fair and transparent manner;
- collect your personal data for specified, clearly defined and legitimate purposes and will not further process it in a way that is incompatible with those purposes, except to the extent permitted by law;
- we will take all reasonable steps to ensure that personal data which are not accurate or complete in relation to the purposes for which they are processed are promptly rectified, supplemented or suspended processing or destruction;
- we will keep them in a form which permits your identification for no longer than is necessary for the purposes for which the personal data are processed;
- we will not disclose personal data to third parties or make them public, except as provided in the Privacy Policy or applicable law;
- we will ensure that your personal data is processed in such a way as to ensure, by appropriate technical or organisational measures, adequate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage.
For what purposes do we process your personal data?
4.1 We will process your personal data for the following purposes:
- to improve the Website, to offer you better and more tailored services;
- with your consent, to provide you with offers and information about our, our affiliates’ and partners’ goods and/or services;
- for other purposes where we are required to process your personal data by law or where there is a legitimate interest.
How do we collect and process your personal data?
5.1 We process your personal data obtained in the following ways:
- when you provide it to us (e.g. when you submit your CV);
- when you use the Website and/or our accounts (e.g. IP address, type of web browser used, number of visits, pages viewed on the Website, time spent on the Website, demographic data, information about subscribers referred via social networks, unique ID, etc.);
- when we receive your personal data from other persons in accordance with the law.
5.2 You provide us with your personal data and other information when using the Site and/or our accounts, registering, writing to us or communicating with our customer support team, complaining about our services or otherwise. If you contact us in writing or by email, we will retain the details of the correspondence.
5.3 The information you provide to us may include your name, email address, telephone number, the content of the message (e.g. recording the circumstances of the complaint).
5.4 When you use the Site and/or our accounts, certain non-personal information (e.g. IP address, type of web browser used, number of visits, pages viewed on the Site, time spent on the Site, demographic data, information about subscribers referred through social networks, unique IDs, etc.) is collected automatically. This information is used to improve the content, functionality and attractiveness of the Website.
5.5 We may combine the personal data we receive from you with data collected by us from other public or accessible sources. For example, we may combine the personal data you provide with data obtained through the use of cookies on the Site, data collected in the course of providing services to you, or with data lawfully obtained from third parties. In exercising your rights, you will always be able to request the rectification of erroneous personal data.
Do we use your personal data for direct marketing and what are the subscription rules?
6.1 No.
How do we use cookies?
7.1 We collect information about you using cookies and similar technologies. Cookies are small files that are temporarily stored on your device’s hard drive and allow us to recognise you on subsequent visits to the Site, save your personal browsing history, preferences, customise content, speed up searches on the Site, create a user-friendly and friendly Site environment, and present the Site in a more efficient and reliable manner. Cookies are a common practice on websites that make it easier to use the website.
7.2 We may collect the following information through cookies: IP address, type of web browser used, number of visits, pages viewed on the Site, time spent on the Site, demographic data, information about subscribers referred through social networks, unique ID.
7.3 We use the information we receive through cookies for the following purposes: to ensure the functionality of the Website (e.g. to enable you to use the Website’s personalisation); to improve and develop the Website to better meet your needs; for the development of services and analysis of the use of the Website; and for targeted marketing.
7.4 We may, without prejudice to the law, combine information obtained through the use of cookies with information obtained about an individual by other means (e.g. information about the use of the Site, personal data provided by you).
7.5. The Website may use the following cookies: technical cookies – cookies that are necessary for the operation of the Website; functional cookies – cookies that, although not necessary for the operation of the Website, significantly improve its performance, quality and user experience; analytical cookies – cookies that are used to prepare statistical analysis of the navigation methods of visitors to the Website; the data collected by these cookies is used anonymously; targeting or advertising cookies are cookies that are used to display offers or other information that may be of interest to you; social networking cookies are cookies that are necessary for you to be able to use the Site information in your social profile account.
7.6 Information about the cookies used on the Website, their purpose, validity and the data used is set out below:
- Cookie cookie_notice (domain – indigroup.lt), which is created upon entering the website and is valid for 1 year. Used to identify consent to the privacy policy.
- Cookie _ga (domain – indigroup.lt), created when accessing the website and valid for 1 year. Used to collect statistical information about website traffic.
- Cookie _gat_gtag_UA_* (domain – indigroup.lt), created when entering the website and valid for 1 minute. Used to collect statistical information about website traffic.
- Cookie _gat (domain – indigroup.lt), created when entering the website and valid for 1 minute. Used to limit the number of requests to doubleclick.net.
- Cookie _gid (domain – indigroup.lt), created when entering the website and valid for 1 day. Used to collect statistical information.
7.7 You can give your consent to the use of cookies in the following ways: by not deleting them and/or by not changing the settings of your web browser so that it does not accept cookies; by clicking on the “I agree” tag in the link (bar) about cookies on the Website or by browsing further.
7.8 You may withdraw your consent to our use of cookies at any time. You can do this by changing the settings on your web browser so that it does not accept cookies. How you do this depends on the operating system and web browser you are using. For detailed information on cookies, their use and how to refuse them, please visit allaboutcookies.org and google.com.
7.9 In some cases, in particular for technical and functional cookies, disabling, not accepting or deleting cookies may slow down the speed of your browsing on the Internet, restrict the functioning of certain functions of the Website, or block access to the Website.
Who do we provide your personal data to?
8.1 We guarantee that your personal data will not be sold, provided or otherwise transferred to third parties without lawful basis, or used for purposes other than those for which they were collected. We will not transfer your personal data in any way other than in accordance with this Privacy Policy and the law. However, we reserve the right to disclose information about you if we are required to do so by law or if we are requested to do so by lawful authorities or prosecuting authorities.
8.2 We may disclose the data we collect about you to the following third parties:
- third party service providers (e.g. technical service providers in the performance of our contracts with these service providers.
- third party service providers whose services we generally use for data storage, telecommunications and website hosting purposes.
8.4 The above service providers are limited in their ability to use your data and may not use it for purposes other than to provide services to us.
How long do we keep your personal data?
9.1 We will retain the data collected for the purposes set out in clause 4.1 (a) of this Privacy Policy for a maximum period of 2 years from the date of your consent.
9.2 We retain data collected for the purpose set out in paragraph 4.1 (b) of the Privacy Policy for a maximum period of 2 years from the date of your consent.
9.3 In any case, we shall not keep your personal data for longer than the purposes of processing or the legal regulations require, if they stipulate a longer retention period.
9.4 We aim not to store outdated, irrelevant personal data, so that only the most up-to-date information is stored when it is updated (e.g., revised, changed information, etc.). Historical information is retained where it is necessary for the purposes of the law or for the conduct of our business.
How do we store your personal data?
10.1 The data we collect from you will be located within the EU. It may also be processed by our or our suppliers’ personnel working within the EU.
10.2 Unfortunately, the transmission of information over the internet is not completely secure. Although we take great care to protect your personal data, we cannot guarantee the security of the data when you transmit data to the Website – you bear the risks associated with the transmission of data to the Website. Once we receive your data, we will apply strict procedures and security measures to protect your data from unauthorised access.
10.3 In the unlikely event that we become aware of a breach of security of your personal data which may pose a significant threat to your rights or freedoms, we will notify you immediately upon becoming aware of it and determining what information has been accessed.
External websites
11.1 The Website may contain links to external websites, such as those of our business partners or websites that advertise our goods and/or services. If you follow such links to any of these sites, please note that these sites and the services available through them have their own separate privacy policies and we do not accept any responsibility or liability for these policies or for the personal data, such as contact or location data, collected through these sites or services. Please review these policies before submitting personal data to these websites or using any services.
What rights do you have?
12.1 When processing personal data, we ensure your rights in accordance with the GDPR and the Law on Legal Protection of Personal Data of the Republic of Lithuania. As a data subject you have the following rights:
- to know (be informed) about the processing of your personal data;
- to have access to your personal data that we process;
- to request the rectification or supplementation, clarification of inaccurate or incomplete personal data;
- request the destruction of personal data when it is no longer necessary for the purposes for which it was collected;
- require the destruction of personal data if the processing is unlawful or where you withdraw or withhold your consent to the processing of personal data, which is necessary;
- to object to the processing of personal data or to withdraw your prior consent;
- require us to suspend (except for storage) the processing of your personal data in the event of disputes or to verify the lawfulness of the processing, the accuracy of the data, or where we no longer need your personal data, but you do not want us to delete it;
- require the provision, where technically feasible, of your personal data collected pursuant to your consent or for the performance of a contract, in an easily readable format, or request that it be transferred to another controller.
12.2 We will endeavour to guarantee the exercise of your rights as a data subject and to provide all the conditions for the effective exercise of those rights, but we reserve the right not to comply with your requests where necessary to ensure
- compliance with the legal obligations imposed on us;
- national security or defence;
- public order, the prevention, investigation, detection or prosecution of criminal offences;
- important economic or financial interests of the State;
- the prevention, investigation and detection of breaches of official or professional ethics;
- the protection of your rights and freedoms or the rights and freedoms of others.
12.3 You may submit claims relating to the exercise of your rights to us in person, by post or by electronic communication. Upon receipt of your request, we may ask you to provide us with proof of identity, as well as other additional information we require in connection with the request.12.4. Upon receipt of your request, we will respond to you no later than 30 calendar days from the date of receipt of your request and the date of submission of all the documents necessary for our response.
12.5 If we deem it necessary, we will suspend the processing of your data, other than storage, until your request is resolved. If you lawfully withdraw your consent, we will cease processing your personal data immediately, but no later than 30 calendar days, except in the cases set out in clause 12.2 of this Privacy Policy and in the cases provided for by law, i.e. where we are obliged to continue to process your personal data by applicable law, by a legal obligation incumbent on us, by a judicial decision or by a binding order from the authorities.
12.6 If we refuse to comply with your request, we will clearly state the grounds for such refusal.
12.7 If you disagree with our actions or our response to your request, you may complain about our actions and decisions to a competent public authority.
Who can you complain to?
13.1 If you wish to make a complaint about our processing, please submit it in writing, providing as much information as possible, using the contact details provided at the end of this policy. We will co-operate with you and endeavour to resolve any issues promptly.
13.2 If you believe that your rights under the GDPR have been infringed, you may lodge a complaint with our supervisory authority, the State Data Protection Inspectorate, for further information and contact details please visit the Inspectorate’s website (www.ada.lt). Although, first and foremost, we aim to resolve any disputes promptly and amicably with you.
How will this Privacy Policy be amended?
14.1 Any changes to our Privacy Policy will be posted on the Website. We will notify you of any changes where necessary. New terms of the Privacy Policy may also be posted on the Site and you may need to read and agree to them in order to continue using the Site and/or our services.
How do I contact us?
15.1 Please send all documents relating to this Privacy Policy to the contacts listed below:
- by post – UAB Indigroup, contact address Konstitucijos pr. 20, Vilnius;
- by e-mail – kandidatai@indigroup.lt.
