Effective from: 2026-09-15
This privacy policy explains how UAB "Investa Group" processes the personal data you provide when using the website investagroup.lt and filling in the candidate or contact form. We process data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR), the Law on Legal Protection of Personal Data of the Republic of Lithuania and the Law on Electronic Communications.
1. Data controller
UAB "Investa Group", company code 306406594, VAT number LT100016591117, address Savanorių pr. 176C, LT-03154 Vilnius, Lithuania. Email info@investagroup.lt, phone +370 687 70855. Company data is collected and stored in the Register of Legal Entities of Lithuania.
For any questions about personal data, please contact us using the details above.
2. What data we process, why and on what legal basis
| Purpose | Data | Legal basis | Retention period |
|---|---|---|---|
| Recruitment and employment (candidate form) | Full name, email address, phone number, city of residence, type of work of interest, CV and the information it contains | Your consent (Art. 6(1)(a) GDPR) and steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR) | 2 years from submission, or until you withdraw consent, if earlier |
| Sending job offers and information about employment opportunities | Full name, email address, phone number, type of work of interest | Your separate, optional consent (Art. 6(1)(a) GDPR) | Until consent is withdrawn, but no longer than 2 years from the last contact |
| Sharing candidate data with a potential employer (client) | Data from the form and CV needed for a specific job | Your consent (Art. 6(1)(a) GDPR). Before sharing your data with a specific employer, we will contact you and tell you who will receive it | For the duration of the recruitment for that position |
| Handling enquiries received via the contact form or email | Name, phone number, email, city, message content | Legitimate interest in responding to your enquiry (Art. 6(1)(f) GDPR) | 1 year from the last correspondence |
| Proof of consent and protection of the website against abuse | Date and time of submission, IP address, consent wording | Legal obligation to demonstrate consent (Art. 7(1), Art. 6(1)(c) GDPR) and legitimate interest in security (Art. 6(1)(f) GDPR) | As long as the related data is kept |
Data is deleted automatically once the retention period expires.
Mandatory and optional data. Fields marked with an asterisk are required so that we can assess your application or respond to your enquiry. Attaching a CV is optional. Consent to receive job offers is optional and does not affect the assessment of your application.
Special categories of data. Please do not include information about health, religious or political beliefs, ethnic origin or other special categories of data in your CV unless it is necessary for a specific job. If you provide such data, it will be processed only for recruitment and only on the basis of your explicit consent.
Source of data. We receive data directly from you.
3. Recipients
- Potential employers (our clients) in Lithuania and other European Economic Area (EEA) countries - only with your consent and after informing you.
- Data processors providing services to us under written contracts and only on our instructions: website hosting (server) and email service providers.
- Public authorities (e.g. law enforcement, tax, labour inspectorate) - only where required by law.
We do not sell personal data or share it with third parties for marketing purposes.
4. Transfers outside the EEA
We do not normally transfer data outside the EEA. If a job offer is outside the EEA, we would transfer data only with your explicit consent, after informing you of possible risks in advance and applying the safeguards set out in Chapter V GDPR (e.g. standard contractual clauses approved by the European Commission).
5. Automated decision-making
We do not make decisions based solely on automated processing, including profiling. Applications are assessed by our staff.
6. How we protect data
The website uses a secure HTTPS connection. Applications and CV files are stored on a server whose data folder cannot be accessed from the internet, and the administration area is password-protected. Data can only be viewed by authorised UAB "Investa Group" staff who need it for their work. We apply organisational and technical measures to protect data against unlawful destruction, alteration, disclosure or other unlawful processing.
7. Your rights
You have the right to:
- access your personal data and receive a copy;
- have inaccurate data corrected or incomplete data completed;
- have your data erased ("right to be forgotten");
- restrict processing;
- object to processing based on legitimate interest;
- data portability (receive your data in a structured, machine-readable format);
- withdraw your consent at any time by writing to info@investagroup.lt. Withdrawal does not affect the lawfulness of processing before withdrawal;
- lodge a complaint with the State Data Protection Inspectorate of Lithuania (L. Sapiegos g. 17, 10312 Vilnius, email ada@ada.lt, vdai.lrv.lt) or the supervisory authority of your country of residence.
Send requests to info@investagroup.lt. We will respond without undue delay and in any event within 1 month of receipt. This period may be extended by 2 further months for complex or numerous requests, in which case we will inform you. We may ask you to confirm your identity before handling a request.
8. Minors
The website and recruitment services are intended for adults (18 years and older). We do not knowingly collect data from persons under 18.
9. Cookies
Information about cookies is provided in the Cookie Policy. You can change your cookie choice at any time in the cookie settings.
10. Links to other websites
The website contains links to Facebook and Google Maps. Clicking them opens those companies' websites, which are subject to their own privacy rules. No plugins of these services are installed on our website and no data is sent to them unless you click the link.
11. Changes to this policy
This policy may be updated. The current version is always published on this page, with the effective date shown at the top.