* Section 3.3 is not applicable in Estonia.

3.7. If we do not select you at the end of the selection process and do not conclude an employment contract with you, we will only process your personal data, which may be evaluated in the future in other selections carried out by the Apranga Group , if we have your explicit and unambiguous consent (Article 6(1)(a) of GDPR).
3.8. If you wish to change your consent to the processing of your personal data, for example, if you no longer wish to participate in other selections carried out by the Apranga Group, you may notify [email protected]. 
3.9. Please note that you have the right not to provide your personal data, but in this case, you will not be able to participate in the selection process for the open position in the Apranga Group.
3.10. Persons at least 16 (sixteen) years of age may apply for the open position in the Apranga Group of Companies. Upon identification that a person under 16 (sixteen) years of age has sent their CV, the Company reserves the right to destroy such personal data immediately and without complying with the retention periods provided for in this Candidate Privacy Notice. 
3.11. We also want to inform you that in order to improve the processes for candidates applying to vacancies within the Apranga group of companies and enhance efficiency, we can use artificial intelligence solutions in our Candidate recruitment system. These solutions will enable us to swiftly review and select the CVs you have submitted, carry out analysis, send automatic e-mails, and perform other related tasks. It’s important to emphasize that the AI solutions used will not have the capability to learn from the personal data you provide, and they will not be directly disclosed to third parties without a valid reason for processing this personal data. Ultimately, the final decision regarding your candidacy for a vacancy will always be made by an employee of our Apranga group of companies.
 

4. Where do we get information about you?

Most of the information is provided by you, but we may receive some information from:

4.1. employment agencies, job search, recruitment and/or placement companies;
4.2. career social networks (e.g. LinkedIn);
4.3. current or former employers, other people who have recommended you (we may contact a former employer after informing you in advance, and a current employer only with your consent);

5. To whom do we pass information about you?

We will only pass on information about you to the following entities where necessary and permitted by applicable law:

5.1. companies within the Apranga Group (if these companies are looking for employees who meet your qualifications and professional requirements, we will only transfer your data if we have your consent to share your personal data for future recruitment within the Apranga Group);
5.2. courts, regulatory, law enforcement and other public authorities;
5.3. third parties who provide services related to the selection, assessment and internal administration of candidates (e.g. information technology maintenance) in accordance with the Apranga Group’s instructions. In such cases, we only provide the data necessary to carry out our specific instructions or to provide specific services. We have written agreements with all service providers whereby they may only process personal data in accordance with the Apranga Group’s instructions.

6. Will your data be transferred outside the European Economic Area?

In most cases, personal data is processed and transferred within the territory of the European Economic Area, but where necessary for the provision of certain services, data may be transferred and processed outside of these territories where an adequate level of protection of personal data is observed. Where permitted by law and necessary for the reasons set out in point 5.3 of this Privacy Notice, we will only disclose information about you in accordance with the provisions of Chapter V of the GDPR.

7. What rights do you have?

The GDPR and other legislation gives you rights, sets out when you can exercise them, the procedures you must follow, and the exceptions in which you cannot exercise the rights granted. Where the law allows, you can:

7.1. have access to your personal data, i.e. to receive a notice confirming whether the Company processes your personal data and,  if it does, to request access to the data processed and the information relating to it;
7.2. ask us to correct inaccurate or incorrect information used or to supplement information where it is incomplete;
7.3. ask us to delete information we hold about you if we have used it unlawfully;
7.4. ask us to restrict the processing of the information we hold about you where you contest the accuracy of the data or object to the processing of the data, you object to the erasure of your data that is being unlawfully processed, or you need the data in order to assert, exercise, or defend legal claims;
7.5. object to the use of your data where we process your data for the legitimate interests of the Company and/or third parties; 
7.6. request us to transfer/receive data that you have provided to us under a contract or by giving your consent to processing and that we process by automated means in a commonly used electronic format;
7.7. object to the application to you of a fully automated decision, including profiling, where such a decision may have legal consequences or similar significant effects on you;
7.8. withdraw the consents you have given to us to use information about you where we are using the data on the basis of your consent.
7.9. lodge a complaint with a supervisory authority, in particular in the Member State where you are domiciled or where the alleged infringement of the GDPR has occurred, and seek judicial remedies. In the Republic of Lithuania, the supervisory authority is the State Data Protection Inspectorate (A. Juozapavičiaus g. 6, 09310 Vilnius; tel.: +370 271 2804, +370 279 1445; e-mail: [email protected]), in the Republic of Latvia, the supervisory authority is the Data State Inspectorate (Elijas iela 17, Riga, tel. +37167223131, e-mail [email protected]), in the Republic of Estonia, the supervisory authority is the Data Protection Inspectorate (Tatari 39, Tallinn, tel. +3726274135, e-mail  [email protected]).

8. How can you exercise your rights?

In order to exercise your rights as set out in Clause 7 of this Candidate Privacy Notice, you must:

8.1. personally deliver a request to exercise the rights of the data subject (hereinafter referred to as the Request)[1] to the Company’s headquarters or to the Data Protection Officer at the addresses set out in Clause 9 of this Privacy Notice (we will ask you to provide proof of identity when submitting the Request); 
8.2. send the Request to the Company or the Data Protection Officer at the postal addresses set out in Clause 9 of this Privacy Notice (please enclose a copy of your proof of identity with the Request);
8.3. submit a Request to the Company or the Data Protection Officer at the e-mail addresses specified in Clause 9 of this Privacy Notice (the Request submitted by e-mail must be signed with a secure qualified electronic signature);
8.4. If the Request is submitted through a representative, the Request must be accompanied by a document confirming the representation or a copy thereof, certified in accordance with the procedure established by law, and the contact details for the purposes of obtaining a response regarding the exercise of the Data Subject’s rights;
8.5. The Data Controller, upon receipt of the request and having assessed the specificity of its activities, the content of the request and the information available on the Data Subject, may additionally ask the Data Subject to identify himself or herself by additional means or methods, if there are any doubts as to the identification of the Data Subject;

[1] The recommended form for the Request for the Exercise of Data Subject Rights can be found at the following link.

9. Contacts for data controllers and the Data Protection Officer

If you have any questions, comments or complaints about how we collect, use and store information about you, or if you wish to exercise your rights as a data subject, you may contact the following data controllers, depending on which the Apranga Group company you are applying for:
 

Contact details of the Data Protection Officer of the Apranga Group: address - Ukmergės g. 362, Vilnius, Lithuania, e-mail [email protected], telephone number +370 5 2321015.