Privacy policy

This Privacy policy sets out the information we must provide under the EU General Data Protection Regulation No 2016/679 (the Regulation) about personal data processing.

Controllers that determine the purposes and means of processing your personal data: UAB ORASTA (company code 303195455, email info@orasta.net), hereinafter ORASTA.

This Privacy policy applies to natural persons when they visit our website, communicate with our company, or otherwise provide personal data in the situations described below. Please review the current version regularly — the content may change. Terms used here have the meanings defined in the Regulation.

The information below covers these processing purposes: recruitment and candidate database administration; email communication; use of cookies and website statistics; contact form enquiries; handling complaints and claims; concluding and performing contracts; direct marketing. This Privacy policy also describes your rights as a data subject, disclosure to recipients, and other conditions that apply to personal data processed for the purposes listed above.

When you visit this website and/or use the information on it and/or services provided by ORASTA, you acknowledge that you have read, understood and agree to this Privacy policy. ORASTA may update these provisions; when you visit the website you should check that you are familiar with the version in force at that time.

Recruitment and candidate database

If you send a CV, cover letter, references or other data in response to a job posting on our website or on a specialised recruitment site, the data you provide voluntarily (and related data described below) will be processed for recruitment.

For an open selection we process your data until we hire a candidate and their probation ends, or until we close the selection without hiring anyone — typically no longer than four months. With your consent, after the selection we may keep your CV and related data in a candidate database for 2 years so we can contact you about a new opening.

Processing is based on your consent to take part in the selection and, where given, to keep the data afterwards. Providing data is voluntary, but without it we cannot assess your application. You may decline storage after the selection — then we will delete the data and will not send future offers unless you apply again.

Under applicable law we may ask previous employers about your qualifications and professional qualities. We will not contact your current employer without your clear consent.

Email communication

The legal basis is your choice to communicate by email and provide data in that correspondence (consent). Contract performance and legal obligations may also apply. Your email address, message content and related data are handled proportionately. They are primarily visible to the person you write to; in limited cases other staff may see them for internal administration, substitution, or investigation of possible breaches of law or internal rules.

Cookies

This website uses cookies — small text files stored on your device. They help the site work smoothly and help us understand how the site is used so we can improve it. Details, categories and choices are described on the Cookie policy page. Cookie policy.

Website statistics (Google Analytics)

We use Google Analytics to compile anonymised statistics about how the website is used (for example which pages are viewed and how visitors find the site). It is purely for improving the website.

Google Analytics is loaded and its cookies (_ga and _ga_*) are set only after you accept optional cookies in the cookie notice. If you choose “Only essentials” or do not choose, it is not loaded and no analytics data is sent. The legal basis is your consent, which you may withdraw at any time by deleting the cookies in your browser and changing your choice in the cookie notice.

The data collected through Google Analytics is processed by Google, which acts as our data processor, and may be transferred outside the European Economic Area under the safeguards Google provides. More information: Google Privacy Policy.

Contact form

If you write to us through the contact form, we receive the data you enter: name, company (if given), email address, phone number (if given) and your message, together with your confirmation that you have read this policy. We use it only to answer your enquiry and to take steps you ask for before a contract. The basis is your consent and, where relevant, steps before concluding a contract. Providing the data is voluntary, but without a name, email address and message we cannot answer. We keep the data only as long as needed to handle the enquiry, and longer only if a contract is concluded or the law requires.

Hosting and service providers

The website runs on ORASTA’s business management system (Odoo). Servers and related IT services are provided by hosting and IT providers that process data on our behalf as data processors. Like most websites, the server automatically records technical data when a page is requested (for example IP address, date and time, requested page and browser type) for security and reliable operation. The essential cookies described in the Cookie policy (session, language, time zone and your cookie choice) are needed for the site to work.

Contracts

We process personal data to perform a contract to which you are a party, or to take steps at your request before a contract, and where we must meet legal duties (for example tax rules). Without the necessary data we cannot conclude or perform the contract.

Direct marketing

If you are our client or have asked to receive newsletters, your contact details may be used to send information about services, news, offers or events. Newsletter sending is based on consent, which you may withdraw at any time. Each email includes an opt-out; you can also contact us using the details on this site.

Complaints and claims

If you submit a complaint or claim by email, phone or otherwise, the data you provide voluntarily is processed to handle that complaint. The basis is consent to provide the data; if a dispute may arise or arises, continued storage may also be required by law.

Recipients

Your personal data may be disclosed to:

• IT, hosting, postal and courier providers;
• Google (website statistics, only after consent to optional cookies), see sections above;
• lawyers, consultants, auditors, bailiffs, debt-collection companies;
• law-enforcement and supervisory authorities, courts and other dispute bodies.

Principles we follow

When collecting and using personal data you provide or that we receive from other sources, we follow:

• lawfulness, fairness and transparency;
• purpose limitation;
• data minimisation;
• accuracy;
• storage limitation;
• integrity and confidentiality (appropriate security).

Your rights

You have the right to access your data and how it is processed; to rectify or complete incomplete data; to request erasure or restriction of processing (except storage where required); to data portability; to lodge a complaint with the State Data Protection Inspectorate (Lithuania); to withdraw consent and to object to processing.

To exercise these rights we must verify your identity. Without identification we cannot confirm that the requester is the data subject. Manifestly unfounded or excessive requests may be refused or subject to a fee as allowed by law.

Right to lodge a complaint

If you believe your personal data is processed unlawfully, you have the right to lodge a complaint with the supervisory authority — the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija): vdai.lrv.lt.

Categories of data

Depending on the purpose, we may process: name, personal identification number, date of birth, address, email, phone, payment account number, position; data related to services or equipment ordered; technical/connection data generated when using services; data collected via cookies and similar technologies on this website; call recordings when you call ORASTA or answer our calls (if recording is used); video data in ORASTA premises where CCTV applies.

Retention

We keep personal data no longer than needed for the purposes or required by law when a longer period applies. We aim not to keep outdated or unnecessary information and to keep client information accurate.

Cookie lifetimes are described in the Cookie policy; the lifetime of Google Analytics cookies is set by Google. Contact form enquiries are kept as described in the Contact form section.

How to contact us

To exercise your rights or ask about personal data processing, contact ORASTA by post (using the contacts on this website) or by email. Please state your name clearly and provide an identity document or sign the request with an electronic signature. info@orasta.net.