This Applicant and Candidate Privacy Policy (hereinafter – the Policy) sets out how we process the personal data of job applicants. It explains what data is collected and processed, the legal bases for such processing, the purposes for which the data is used, the retention periods, the rights of candidates, and other relevant information concerning the processing of personal data

Applicants’ personal data is processed in accordance with the General data rotection Rregulation (EU) 2016/679 (hereinafter referred to as the GDPR), the Law on Legal Protection of Personal Data, and other legal acts regulating this area.

1. Who is the controller of your personal data?

The controller of your personal data is UAB Yukon Advanced Optics Worldwide, legal entity code 300149641, address: Ateities g. 21C, LT-06326 Vilnius, data is collected and processed by the State Enterprise Centre of Registers in the Register of Legal Entities (hereinafter referred to as the Company or We).

Contacts of the person responsible for data protection: [email protected]

2. What data do We process and why (for what purpose)?

We process your personal data for the purposes listed below:

• Purpose: to carry out the recruitment process and assess your suitability for the position

Legal basis for the processing of personal data:

• Your consent (GDPR Article 6(1)(a)), given when you submit your personal data, for example by sending your CV, cover letter, or completing the application form on our website;
• Our legitimate interest (GDPR Article 6(1)(f)) in evaluating your skills, qualifications, experience, and overall suitability for a specific role, and in selecting the most appropriate candidate.

Categories of personal data processed: 

• General candidate information: first name, last name, date of birth or age, residential address (if such information was provided by the candidate), email address and/or telephone number, information on work experience (employers, periods of employment, duties, responsibilities, achievements), education details (educational institutions, study periods, qualifications obtained), professional development (training courses, certificates), language skills, IT skills and other competencies, desired salary, photograph, link to your LinkedIn profile and the information available there, as well as any other information provided in your CV, cover letter, or other application documents
• References and employer feedback: the identity and contact details of the person providing a reference or feedback, and the content of that reference or feedback. We will contact your current employer only with your explicit consent 

• Candidate assessment information: interview summaries, observations and assessments made by the person(s) conducting the recruitment, and the results of any candidate tests 

The provision of personal data is voluntary; however, if you choose not to provide it, We will be unable to assess your application and you will not be able to participate in the recruitment process for the position in question.

• Purpose: to maintain a database of potential candidates

If another candidate is selected for the position, you may choose to give your consent for us to retain your data in our database so that We may contact you regarding future opportunities.

Legal basis for the processing of personal data:

• Your consent.

Categories of personal data processed:

• General candidate information
• References and employer feedback;
• Candidate assessment information.

Providing consent and personal data for this purpose is optional; however, without it, you will not be considered for future recruitment processes.

Please note that you may withdraw your consent at any time by contacting us at [email protected].

3. Where do we obtain your personal data?

We obtain your personal data directly from you. We may also receive it from individuals who have recommended you, recruitment agencies, Company employees, or other persons referring candidates. When the Company receives personal data from sources other than you, We rely on the assumption that these persons have informed you about the processing of your data and about the possibility that your data may be transferred to the Company for the purposes of conducting the recruitment process and evaluating your candidacy.

Please note that We may collect personal data about your qualifications, professional skills, and work-related attributes from your former employer, unless you have objected to this. In all other cases, the Company will obtain and process personal data from third-party sources only with your explicit consent. For example, We will check the references you have provided or contact your current employer only if you have given us your consent to do so.

4. How long will We store your personal data?

Your personal data will be stored for the duration of the specific recruitment process and for 6 (six) months after its completion, unless you have consented to the further storage of your data.

If you were not selected for a particular position but have agreed to the processing of your personal data for the purpose of considering you for future job opportunities, your data will be retained for 2 (two) years after the end of the recruitment process.

5. Who can We share your personal data with?

We may transfer your data to third parties who assist us in the selection of candidates or who provide services related to selection, candidate assessment, and internal administration, such as communication and IT service providers, virtual meeting organization software providers, employee search and recruitment service providers. In each case, the data processors involved may only process your personal data in accordance with our instructions. In addition, they must ensure the security of your data in accordance with applicable laws and written agreements with the Company.

Your personal data may also be disclosed to competent authorities, such as law enforcement agencies or supervisory authorities, but only at their request and only when required by applicable law or in cases and in accordance with the procedure provided for by law in order to ensure Our rights, the safety of our customers and employees, and to assert, exercise, and defend legal claims.

6. How do We protect your personal data?

We have implemented the necessary physical and technical measures for the protection of personal data, such as access control, data accessibility restrictions, virus protection, and others.

What rights do you have?

As a data subject, you have the following rights under the GDPR:

• Right to access your personal data processed by us: You have the right to obtain confirmation from us as to whether We are processing your personal data, as well as the right to access your personal data processed by us.
• Right to rectify personal data: If the data you provided in your application documents has changed or you believe that the information We process about you is inaccurate or incorrect, you have the right to request that this information be changed, clarified, or corrected.
• Right to withdraw consent: You have the right to withdraw your consent at any time and request that We stop processing your personal data on the basis of your consent.
• Right to erasure (right to be forgotten): Under certain circumstances specified in data processing legislation (when personal data is processed unlawfully, the basis for data processing no longer exists, etc.), you have the right to request that We erase your personal data.
• Right to restrict data processing: Under certain circumstances specified in data processing legislation (when personal data is processed unlawfully, you contest the accuracy of the data, you have objected to the processing of data on the basis of our legitimate interest, etc.), you also have the right to restrict the processing of your data.
• Right to data portability: You have the right to transfer the data We process using automated means (applies only to your data processed in the candidate database) to another data controller. We will provide you with the data you wish to transfer in a format that is commonly used in our systems and can be read by a computer, and, if you wish and if technically possible, We will transfer the data directly to another data controller specified by you.
• Right to lodge a complaint: If you believe that We are processing your data in violation of data protection legislation, We always ask you to contact us directly first. If you are not satisfied with our proposed solution to the problem, you have the right to lodge a complaint with the supervisory authority, which in the Republic of Lithuania is the State Data Protection Inspectorate (L. Sapiegos g. 17, Vilnius; tel. (8 5) 271 2804, 279 1445; e-mail: [email protected]).

If you wish to exercise your rights, you can contact us by email [email protected].

Procedure for handling requests

Upon receiving a request to access your data or exercise any of your other rights, We must first verify your identity. After verification, We will provide information on the actions taken in response to your request without undue delay and, in any event, no later than 30 days from the date of receipt.

If necessary, this period may be extended by up to two additional months, depending on the complexity and number of requests. In such cases, We will inform you of the extension within one month of receiving your request.

If you submit your request electronically, our response will also be provided electronically, unless this is not feasible (for example, due to the volume of information) or unless you request another method of communication

Final provisions

All changes to this Policy shall take effect on the date of their publication.