Privacy Policy

Contact us

We prioritize the protection of your personal data. In our handling of personal information, we comply to the EU General Data Protection Regulation (referred to as the Regulation) and other legislation. This Privacy Policy outlines our commitment to these requirements by detailing how Nordbalance UAB processes personal data, the purposes of such processing, the recipients of the data, the rights of data subjects, and other essentials related to personal data management. In terms of the personal data processing described in this Privacy Policy, Nordbalance UAB acts as the data controller. Nordbalance UAB, registered under legal entity code 307052636, address: Dysnos g. 7-12, Vilnius, Lithuania. For any inquiries, you can reach us via email at info@nordbalance.lt (hereinafter referred to as the Company).

 

Job Candidate Selection and Candidate Database Management

 

If you have submitted your CV, cover letter, or any other documents to participate in a selection process, we will process the personal data you provided voluntarily, along with additional information listed below, for the purpose of employee selection. We will retain and process your personal data until we either hire a specific candidate and their probation period concludes or decide to terminate the selection process without making a hire. This will occur no longer than six months after we receive your data. If you consent, we may store your CV and other submitted information for one year following the completion of the selection process. This allows us to reach out to you with job offers or invite you to participate in future selection processes. If you have indicated that you prefer not to receive job opportunities from us in the future, we will retain your name, surname, and preference not to receive job offers for a period of three years. We will process your personal data based on your consent to participate in the selection process or to store your information in our candidate database. While providing your personal data is voluntary, please note that if you choose not to provide the requested information, we will be unable to evaluate your candidacy. Please be aware that, in accordance with data protection laws, we may contact your previous employers to request their feedback on your qualifications and professional abilities. However, we will not reach out to your current employer without your explicit consent. We may share your data with third parties who assist us in the selection process or provide related services, such as candidate assessment and internal administration. In these cases, we only share the minimum necessary data to complete the specific task or service. These data processors are required to process your personal information solely according to our instructions and for no other purposes. They must also ensure the security of your data in line with applicable laws and our data processing agreements.

 

Direct Marketing

 

If you are a customer of the Company or have given your consent to receive direct marketing materials, we will use your contact information to share updates about our products and services, news, and other promotional content. If you are a customer of the Company, we may send you direct marketing communications based on the rights granted by applicable legislation. You can opt out of this marketing by indicating your preference in the agreement you sign with us or by using the contact details provided in this Privacy Policy. Your personal data will be processed for direct marketing purposes for five years from the date of your consent or until the conclusion of your relationship with the Company. You also have the option to withdraw your consent or opt out at any time by reaching out to us using the contact information provided.

 

Administration of Complaints, Inquiries and Feedback

 

If you have submitted a complaint, feedback or inquiry to our Company, we will process the personal data you provided voluntarily for administrative purposes. In cases where your complaint involves a potential dispute, possible damage, or the fulfillment of legal obligations, your personal data may be retained for up to 10 years, in accordance with the general statute of limitations. If your data is not related to a dispute or legal obligation, it will be deleted after we respond to your correspondence. The processing of your personal data will be based on your consent. However, in certain situations, a legal requirement may necessitate the extended retention of your complaint.

Communication via e-mail

The processing of your personal data provided through electronic communication is based on your voluntary consent to communicate via e-mail. If you are communicating with employees of companies with which we have or may establish contractual relationships, the processing of your data may also be justified by legitimate interests. Additionally, certain data processing activities, such as tax reporting, may be required to fulfill legal obligations. Beyond facilitating the conclusion and execution of agreements, your data is also processed for internal administration purposes. Your e-mail address, the content of your correspondence, and related data are handled according to the principle of proportionality. Primarily, this information will be accessible to the individual with whom you are communicating directly. However, in some instances, other employees may review and process your correspondence, such as for workplace monitoring, investigating potential violations of laws or internal policies, implementing internal procedures, covering for absent employees, and similar situations.

 

Conclusion and Performance of Agreements with Individuals

 

We will retain personal data collected for the purpose of concluding and executing agreements with individuals for a period of 10 years after the end of the contractual relationship. Your personal data will be processed based on the performance of the agreement to which you are a party, as well as to take actions at your request prior to finalizing the agreement. We may request your consent for specific actions and may also need to comply with legal obligations, such as those related to tax regulations. For these purposes, we will process the personal data you provide both before and during the execution of the agreement. If you do not provide the necessary data, we will be unable to finalize and carry out the agreement.

Conclusion and Performance of Agreements with Legal Entities

 

To facilitate the conclusion and execution of agreements with legal entities, we will retain the personal data of their employees and representatives for 10 years following the end of the contractual relationship. The basis for this processing is our legitimate interest. Without processing the personal data of the representatives, we would be unable to finalize and execute agreements with the legal entities they represent.

 

Provision of Personal Data to Data Recipients

 

Your personal data, as processed for the purposes outlined in this Privacy Policy, may be shared with the following recipients:
 • archiving, reporting, accounting, IT, mail, and other service providers and subcontractors;
 • Notaries, attorneys, consultants, judicial officers, auditors, debt collection agencies, and debt buyers or assignees;
 • Law enforcement and regulatory authorities, courts, and other entities involved in dispute resolution, as well as individuals performing legally assigned functions;
 • Potential or existing successors of our business or part of it, along with their authorized consultants and other participants in any reorganization;
 As Nordbalance UAB, we may also transfer your data to other group companies for internal administrative purposes based on our legitimate interest.

 

Principles of Personal Data Protection

 

When collecting and using your personal data, whether provided by you or obtained from other sources, we adhere to the following principles:
 • Lawfulness, Fairness, and Transparency: Your personal data is processed in a lawful, transparent and fair manner.
 • Purpose Limitation: Personal data is collected for specific, explicit, and legitimate purposes, and is not processed in ways that are incompatible with those purposes.
 • Data Minimization: We ensure that personal data is adequate, relevant, and limited to what is necessary for the intended purposes.
 • Accuracy: The personal data we process is accurate and, where necessary, kept up to date.
 • Storage Limitation: Personal data is retained in a form that allows identification only for as long as necessary for the purposes for which it is processed.
 • Integrity and Confidentiality: We implement appropriate security measures to protect your personal data from unauthorized or unlawful processing, as well as from accidental loss, destruction, or damage, through suitable technical or organizational measures.

 

Implementation of Your Rights as a Data Subject

You have the following rights regarding your personal data:
 • Right of Access: You have the right to access your personal data and information about how it is being processed.
 • Right to Rectification: You can request corrections to any inaccuracies in the data we hold.
 • Right to Erasure: You may request the deletion of your personal data, in accordance with Article 17 of the Regulation.
 • Right to Restrict Processing: You have the right to request a restriction on the processing of your personal data or to have it not processed at all.
 • Right to Data Portability: You can request to receive your personal data that we process through automated means, which were from you with your consent or for the purpose of concluding an agreement.
 • Right to Object: You have the right to object to the processing of your personal data, as outlined in Article 21 of the Regulation, particularly when the data is processed based on legitimate interests.
 • Right to Withdraw Consent: If you have given consent for the processing of your personal data, you can withdraw that consent at any time.
 • Right to Lodge a Complaint: You have the right to file a complaint with the State Data Protection Inspectorate (L. Sapiegos g. 17, 10312 Vilnius).
To implement your rights as a data subject, it is essential to verify your identity. Without confirming your identity, we cannot ensure that the individual making the request is indeed the person whose personal data is being processed, which would prevent you from implementing your rights. We may refuse to process a request if it is clearly unfounded or excessive, or in other circumstances as outlined by legislation. In some cases, a fee may be charged for handling such requests. If you wish to exercise your rights as a data subject or have any questions regarding the processing of your personal data, please contact the Company using the details provided at the beginning of this Privacy Policy.
Please note that we may update this Privacy Policy in response to changes in legislation or the Company’s operations. We recommend that data subjects regularly visit the www.nordbalance.lt website to review the latest version of the Privacy Policy.

Updated: 15 December 2024