Privacy policy

In this Privacy and Cookie Policy ("Privacy Policy"), we provide you with a clear, comprehensible and comprehensive overview of our data processing practices, the conditions for processing personal data and the rights you have in relation to the collection and use of personal data.

Please read this document carefully, as each time you visit the www.hsg.lt website, you agree to the terms and conditions described in this Privacy Policy. The terms of this Privacy Policy apply each time you access the content and/or service we provide, regardless of the device (computer, mobile phone, tablet, TV, etc.) you are using.

This Privacy Policy is based on the European Union's General Data Protection Regulation 2016/679 (the "Regulation"), as well as other applicable data protection legislation, and therefore the terms used herein shall be understood as defined in the Regulation.

We confirm that the data of visitors to the www.hsg.lt website is collected in accordance with the requirements of the applicable legislation of the European Union and the Republic of Lithuania, as well as the instructions of the controlling authorities. We also take all reasonable technical and organisational measures to ensure that the data we collect about website visitors is protected against loss, unauthorised use and alteration.


Key terms

The terms used in this Privacy Policy (e.g. personal data, data subject, data controller, data processing) shall be understood as they are defined in Article 4 of the Regulation.

1.1 Privacy Policy means these personal data processing rules, which are posted on the website www.hsg.lt

1.2 Website means the website located at www.hsg.lt where customers and visitors of HSG Service UAB can leave a request.

1.3 Data Controller - a legal or natural person who, alone or jointly with others, determines the purposes and means of processing personal data. For the purposes of this Privacy Policy, the Data Controller is HSG Service UAB, legal entity code 303064484, registered office at Vilkpėdės g. 8, LT- 03151 Vilnius, Lithuania; contact email info@hsg.lt.

1.4 Data subject - any person who provides the controller with his/her personal data or about whom personal data are collected automatically when visiting the website.

1.5 Data Processor - a natural or legal person who assists the Data Controller, in accordance with the powers conferred by the Data Controller, in the fulfilment of the stated purposes.

1.6 Personal data - data from which a customer, website visitor or other person can be identified, including but not limited to: name, surname, personal identification number, email address, telephone number, etc.

1.7 Direct Marketing - activities designed to offer goods or services, discounts or to enquire about the goods or services offered to persons by post, telephone or other direct means.

1.8 Consent - a freely given act of the data subject by which he or she consents to the processing of personal data.

1.9 Supervisory Authority - the State Inspectorate for Personal Data Protection.


What data do we collect?

2.1 The personal data you choose to share with us:

2.1.1. by submitting a CV (with or without a cover letter):

2.1.1.1. name,

2.1.1.2. surname,

2.1.1.3. telephone number,

2.1.1.4. e-mail address,

2.1.3. if you choose to contact us (by email, phone or social media message), we will record the fact that you have contacted us and we may store the content of the communication together with your contact details and our responses.

2.3 Information from third party sources. We may obtain information about you from public and commercial sources (to the extent permitted by applicable law) and link it to other information we receive from or about you.


How do we collect your data?

3.1 We process your personal data collected in the following ways:

3.1.1. when you provide it to us. You provide us with your personal data when you send us your CVs, cover letters, apply for our job advertisements on job search portals, register on our websites, communicate with us by phone, email or during meetings, answer questionnaires we give you, complete assignments or take tests. If you contact us in writing or by email, we will keep the details of the correspondence.

3.1.2 When you use the websites we operate. When you use the websites we operate, certain information (e.g. Internet Protocol (IP) address, the device used, the web browser used, the number of visits, the pages viewed on our website, the amount of time spent on the website, the websites you visited before you accessed our website) is collected automatically.

3.1.3 Where we receive your personal data from other persons in accordance with the law and/or this Privacy Policy.


For what purposes do we collect your data?

4.1 We process your personal data for the following purposes:

4.1.1. If the processing of personal data is necessary for the performance of a contract (for example, a contract for the provision of services with the data subject), the processing is carried out on the legal basis provided for in Article 6(1)(b) of GDPR. The same applies to those processing operations which are necessary for the performance of the measures prior to the conclusion of the contract, for example, when making enquiries about our products or services.

For this purpose, we process your personal data obtained from yourself (e.g. data provided by you in your CV, data collected in the course of communication, etc.), collected through your use of our and other websites, and/or obtained from other persons (e.g. recommendations from current or former employers or acquaintances, recommendations from social networks, public information media, etc.).

4.1.2. for the purpose of administering the Candidate Database. After the end of the specific selection process to which you have submitted your data, we process your personal data in order to offer you future job and career opportunities, to find and select candidates who match the needs of our clients, and to assess the suitability of the candidates for the proposed job.

4.1.3 To administer the work activities of our employees. To the extent that we are obliged or permitted to do so by law, we process the personal data of our employees.

4.1.4. for the purpose of improving the websites we manage and to offer you a better and more personalised service. We use your personal data, including the personal data we receive when you use our websites, to improve and develop these websites and to offer you better and more personalised services. For this purpose, we use the personal data we receive from you, the personal data we receive from you when you use our websites and the personal data we receive from others. Please see section 3 of this Privacy Policy for information on how we use cookies and similar technologies.

4.1.5. for direct marketing purposes⃰ such as sending newsletters, providing tailored promotional advertisements and sending promotional notifications, evaluating and analysing our market, customers, products and services (including collecting your opinion on our products and services and organising customer surveys).

4.1.6. by completing the "Contact" message in the "Contact" section of the Website. For this purpose, in order to properly respond to your enquiry, we collect the data you fill in: your name, telephone number, email address.

4.1.7 Other ways with your consent.

⃰ Please be informed that you have the right to object to or withdraw your consent to the processing of your data for the purposes indicated above, marked with an asterisk, at any time.

4.2 We do not process your personal data for any other purposes that are incompatible with the purposes listed above.


Who do we provide your data to?

6.1 We guarantee that your personal data will not be sold, provided or otherwise transferred to third parties without lawful basis, or used for purposes other than those for which they were collected. We will not transfer your personal data in any way other than in accordance with this Privacy Policy and the law. However, we reserve the right to disclose information about you if we are required to do so by law or if we are requested to do so by lawful authorities or prosecuting authorities.


How long do we keep your data?

7.1 We will not keep your personal data for longer than the purposes of the processing or as required by law, unless a longer retention period is set out in the law.

7.2 We aim not to store outdated, irrelevant personal data, so that only the most up-to-date information is stored when it is updated (e.g. when you update your account, change your information, etc.). Historical information is retained if required by law or for the purposes of our business.

7.3 Personal data is protected against loss, unauthorised use and alteration. We have put in place physical and technical measures (password-protected access to computers and applications where personal data is stored; premises where equipment is located are locked and access is restricted to our company's employees and other persons with a legitimate reason to enter) to protect all information we collect for the purposes of providing our services. We remind you that while we take reasonable steps to protect your information, no website, online transaction, computer system or wireless connection is completely secure.

7.4 We will retain your data for a maximum of 3 years after the date of your last use of our services or content. After this period, the data will be deleted so that it cannot be recovered.


How do we store your personal data?

8.1 The data we collect from you will be located within the European Union, but may be transferred or stored outside the EU. It may also be processed by our staff working outside the EU. When we transfer your data outside the EU, we will take all necessary steps to ensure that your data is processed securely and in accordance with this Privacy Policy.

8.2 Unfortunately, the transmission of information over the internet is not completely secure. Although we take great care to protect your personal data, we cannot guarantee the security of the data when you transmit data to websites - you bear the risks associated with the transmission of data to websites. Once we receive your data, we will apply strict procedures and security measures to protect your data from unauthorised access.

8.3 In the unlikely event that we become aware of a breach of security of your personal data which may pose a significant threat to your rights or freedoms, we will notify you immediately upon becoming aware of it and identifying the information accessed.


External websites and social objectives

9.1 Websites may contain links to external websites, such as those of our business partners or websites advertising our services. If you follow such links to any of these sites, please note that these sites and the services available through them have their own separate privacy policies and we do not accept any responsibility or liability for these policies or for the personal data, such as contact or location data, collected by these sites or services. Please review these policies before submitting personal data to these websites or using any services.

9.2 All information you provide to us via social media (including messages, use of the "Like" and "Follow" boxes, and other communications) is controlled by the social network manager.

The Website provides links to our social media accounts. We currently have the following accounts:

9.2.1. on Facebook, whose privacy notice can be found at https://www.facebook.com/privacy/explanation ;

9.2.2. on LinkedIn, whose privacy notice can be found at https://www.linkedin.com/legal/privacy-policy .

We recommend that you read the privacy notices of third parties and contact the service providers directly if you have any questions about their use of your personal data.


Your rights

10.1 When processing personal data, we ensure your rights in accordance with the GDPR and the Law on Legal Protection of Personal Data of the Republic of Lithuania. As a personal data subject you have the following rights:

10.1.1. to know (be informed) about the processing of your personal data;

10.1.2. to have access to your personal data that we process;

10.1.3. to request the rectification or supplementation of, or the correction of, inaccurate or incomplete personal data concerning you;

10.1.4. request the destruction of personal data when it is no longer necessary for the purposes for which it was collected;

10.1.5. to request the destruction of personal data if they are processed unlawfully or where you withdraw or withhold your consent to the processing of personal data, which is necessary;

10.1.6. to object to the processing of your personal data or to withdraw your prior consent;

10.1.7. to request the suspension (other than storage) of the processing of your personal data in the event of disputes or to verify the lawfulness of the processing, the accuracy of the data, or where we no longer need your personal data, but you do not want us to delete it;

10.1.8. to request that, where technically feasible, your personal data collected pursuant to your consent or for the purposes of the performance of a contract be made available to you in an easily readable format or to request that it be transferred to another data controller.

10.2 We will endeavour to guarantee the exercise of your rights as a data subject and to provide all the conditions for the effective exercise of those rights, but we reserve the right not to comply with your requests where it is necessary to ensure:

10.2.1. compliance with legal obligations imposed on us;10.2.2. national security or defence;10.2.3. public order, or the prevention, investigation, detection or prosecution of criminal offences;

10.2.4. important economic or financial interests of the State;

10.2.5. the prevention, investigation and detection of breaches of official or professional ethics;

10.2.6. the protection of your rights and freedoms or the rights and freedoms of other persons.

10.3 You may submit claims relating to the exercise of your rights to us in person, by post or by electronic communication. Upon receipt of your request, we may ask you to provide proof of identity, as well as other additional information we require in connection with your request.

10.4 Upon receipt of your request, we will respond to you no later than 30 calendar days from the date of receipt of your request and the submission of all the documents necessary to respond.

10.5 If we deem it necessary, we will suspend the processing of your data, other than storage, until your request is resolved. If you lawfully withdraw your consent, we will cease processing your personal data immediately, but not later than 30 calendar days, except in the cases set out in clause 8.2 of this Privacy Policy and as provided for by law, i.e. where we are obliged to continue to process your personal data by applicable law, by a legal obligation incumbent on us, by a judicial decision or by a binding order from the authorities.

10.6 If we refuse to comply with your request, we will clearly state the grounds for such refusal.

10.7 If you disagree with our actions or our response to your request, you may complain about our actions and decisions to a competent public authority.


Where can you appeal?

11.1 For more information on any of the matters discussed in this Privacy Policy, please contact: HSG Service UAB by email at info@hsg.lt

11.2 If you wish to make a complaint about our processing of your data, please submit it in writing, giving as much information as possible, using the contact details at the end of this policy. We will co-operate with you and endeavour to resolve any issues promptly.

11.3 If you believe that your rights under the GDPR have been infringed, you may lodge a complaint with our supervisory authority, the State Data Protection Inspectorate, although we will endeavour to resolve any disputes with you first.


How will we change the privacy policy?

12.1 Any changes to the Privacy Policy will be posted on the website. We will notify you of any changes where necessary. New terms of the Privacy Policy may also be posted on the Websites and you may need to read and agree to them in order to continue using the Websites and/or our services. The date of publication of the Privacy Policy is 7 September 2023.

HSG Service UAB

Company code 303064484

Address.

Mob.: +370 674 95951

E-mail: info@hsg.lt