Candidate privacy policy

1. General provisions

This Candidate Privacy Policy (hereinafter, the Policy) sets out and explains how Urbo bankas UAB, legal entity registration number 112027077, registered office address Konstitucijos pr. 18B, Vilnius (hereinafter, the Bank), processes your personal data submitted by you or collected during the recruitment process when you apply for a position as an employee or intern of the Bank.

The Bank processes your personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, GDPR), the Law of the Republic of Lithuania on the Legal Protection of Personal Data (hereinafter, the LLPPD), and other applicable legal acts.

This Policy may be amended, supplemented or updated. The current version of the Policy is published on the website www.urbo.lt/en

2. What personal data do we process?

The Bank processes the following personal data of individuals seeking employment or an internship with the Bank:

3. How long do we retain your personal data?

• The Bank ensures that your personal data remain confidential and are not used for purposes other than the implementation of the recruitment process.
• If, upon completion of the selection process for a specific position or internship, the Bank does not enter into an employment or internship agreement with you, and your consent for further processing of your personal data has not been obtained, the Bank will destroy all personal data collected for selection purposes upon completion of the selection process. The date of completion of the selection process shall be deemed to be the date on which an employment or internship agreement is concluded with the selected candidate for the advertised position.
• Your refusal to be included in the Bank’s candidate database or the withdrawal of consent previously given shall not prevent you from participating in any future recruitment process announced by the Bank for a specific position or internship for which you apply.
• Upon receipt of your written consent to include your personal data in the Bank’s candidate database, your personal data (curriculum vitae (CV) and other information obtained during the recruitment process) shall be retained for one (1) year from the date of completion of the selection process, for the purpose of providing you with information about future recruitment of employees or interns at the Bank.

Please also note that in certain cases your personal data may be retained for a longer period:

• where there are reasonable suspicions of unlawful activity and an investigation is being carried out;
• where personal data are necessary for the proper resolution of a dispute or complaint;
• where there are other grounds established by law.

4. How do we protect your personal data?

When processing your personal data, we implement a number of organisational and technical measures to protect your personal data against accidental or unlawful destruction, alteration, disclosure as well as from any other unauthorised form of processing. The Bank requires that the processors used by the Bank for the processing of your personal data or which have access to your personal data when providing services to the Bank take appropriate technical and organisational measures, which would ensure the security and integrity of your personal data.

5. From where do we obtain your personal data?

• The Bank obtains your personal data directly from you when you respond to a job or internship advertisement of the Bank and/or submit your curriculum vitae (CV) and/or cover letter and other application documents.
• The Bank may also obtain information about you, your curriculum vitae (CV) and/or other application documents from entities providing job search, recruitment and/or intermediary services, such as the Employment Service of the Republic of Lithuania, recruitment agencies, specialised career social networks (for example, LinkedIn) and/or career portals.
• Certain information may also be obtained by the Bank from third parties, such as persons providing recommendations, current or former employers (the Bank may contact your current employer only with your consent).

6.To whom do we disclose your personal data?

The Bank may transfer your personal data for processing to service providers engaged by the Bank (for example, information technology, accounting service providers, etc.). In accordance with applicable legislation, personal data may also be disclosed to state authorities and institutions, and other persons performing functions assigned to them by law (e.g., supervisory authorities, law enforcement authorities, tax administrators, lawyers).

7. What are your rights?

As a data subject whose personal data is processed by the Bank, you have the following rights:

• the right to access your personal data processed by the Bank and information on how they are processed;
• the right to request rectification or completion of inaccurate or incomplete personal data;
• the right to object to the processing of data;
• the right to request that the processing of your personal data be restricted for a legitimate reason;
• the right to withdraw consent to the processing of your personal data.. Such withdrawal of consent shall not affect the data processing carried out prior to withdrawal of such consent.
• the right to request the deletion of your personal data (“right to be forgotten”),
• the right to data portability;
• the right to file a complaint with the State Data Protection Inspectorate, if you believe that your personal data has been processed in violation of your rights and legitimate interests in the field of personal data protection. More information is available at https://vdai.lrv.lt/lt/.

The Bank provides the opportunity to exercise the above rights upon identification and verification of your identity. You may exercise your rights by submitting a written request to the Bank using the contact details specified in the section of this Policy entitled “Our contacts. Data Protection Officer”.

The Bank will provide you with information about the steps taken on receipt of your request to exercise the data subject’s rights within one (1) month from receipt of your request. The time limit for the Bank’s response may be extended for two (2) months, taking into account the complexity of the request and the number of requests received by the Bank. In any case, the Bank will inform you about the extension of the time period and the reasons for such extension.

The Bank may refuse to enable you to exercise the above rights in cases provided for by applicable law where it is necessary to ensure the prevention, investigation and detection of criminal offences, breaches of official or professional ethics, or the protection of the rights and freedoms of other persons, or where such rights cannot be exercised in accordance with the requirements of Regulation (EU) 2016/679. Where you submit a request to the Bank to exercise your right of access to your data and information on how they are processed, and request the disclosure of certain information constituting the Bank’s confidential information (for example, trade secrets), such information may be provided only to the extent that it does not prejudice the Bank’s interests or create a risk of such prejudice.

Further information on the exercise of data subject rights at the Bank is available in the Bank’s Privacy Policy.

8. Our contact details data protection officer

Urbo bankas UAB Konstitucijos pr. 18B, LT-09308 Vilnius Tel. 19 300 (for calls from Lithuania), +370 5 264 48 00 (for calls from abroad) Email: info@urbo.lt.

Contact details of the Bank are available on the Bank’s website at https://urbo.lt/lt/kontaktai.

If you have any questions regarding the information presented in this Policy or any other questions related to the processing of your personal data, please contact the Data Protection Officer of the Bank by any of the following means:

• by post: Konstitucijos pr. 18B, LT-09308 Vilnius;
• by email: dpo@urbo.lt

9. Miscellaneous

This Policy shall enter into force on 9th of February.

This Policy is published on the Bank’s website www.urbo.lt/en and may be reviewed and updated in light of changes in legislation and/or the Bank’s activities.