PERSONAL DATA PROCESSING POLICY

1. DEFINITIONS

   The definitions used in this Personal Data Processing Policy have the meaning given below:
   1. Personal data - any information about a natural person whose identity has been determined or whose identity can be directly or indirectly determined (data subject), e.g. by name and surname, date of birth, postal or email address, or by physical, physiological, genetic, psychological etc. features.
   2. Person - any natural person, whose Personal Data is processed (data subject), e.g. a candidate, an employee, or any other natural person.
   3. Controller - the controller of personal data is Finansinės Technologijos, JSC.
   4. Candidate - a natural person, whom the Controller has already contacted and who has agreed to collaborate with the Controller, has filled out the necessary forms and has provided their Personal Data required for the Controller to provide potential job offers, invite them to recruitment sessions and offer an employment contract if selected.
   5. Data processing - any action related to Personal Data, e.g. collecting, recording, sorting, structuring, storing, adapting or altering, viewing, using, disclosing, restricting, deleting or destroying etc.
   6. Supervisory Authority - an independent government authority responsible for the supervision of compliance with the Data Processing requirements, which also has other GDPR-defined rights and functions. The leading Supervisory Authority is the State Data Protection Inspectorate, a Lithuanian Government budget-funded establishment.

2. PERSONAL DATA PROCESSING PRINCIPLES

   In processing personal data, Finansinės Technologijos, JSC adheres to the following principles:
   1. Compliance with the General Data Protection Regulation (hereinafter - GDPR), the Law on Legal Protection of Personal Data of the Republic of Lithuania, as well as the personal data processing requirements stipulated by other legislation.
   2. Personal Data shall be managed in a legitimate, honest and transparent manner;
   3. Personal Data shall be collected for fixed, clearly defined and legitimate purposes;
   4. All reasonable means shall be taken to ensure that personal data that is not accurate or comprehensive, considering the purpose for which it is being processed, shall be immediately corrected, appended, or shall cease to be processed or shall be destroyed;
   5. Personal Data is stored in a form that allows determining the person’s identity for a time period that is only as long as necessary for the purposes for which the personal data is being processed;
   6. Personal Data shall not be supplied to third persons or published, excluding cases stipulated in the personal data processing policy or cases stipulated by legislation.
   7. It shall be ensured that personal data is processed in a way that, by applying appropriate technical or organisational means, ensures the proper safety of personal data, including protection from unauthorised or illegal data processing and from accidental loss, destruction or damage.

3. PURPOSES OF THE COLLECTION AND PROCESSING OF PERSONAL DATA

   Finansinės Technologijos, JSC processes data in the following ways:
   1. When a person submits it to our company themselves. A person submits their personal data to us when they send in CVs and cover letters or when they register on our website, communicate with us on the phone, by email or during meetings, fill out our questionnaires, perform tasks or tests. When a person contacts us by writing or email, we store the correspondence data.
   2. When a person uses our website. When a person uses our website, we receive certain information (e.g. the internet protocol (IP) address, the type of internet browser used, the number of visits, website pages viewed, time spent on the website etc.).
4. Finansinės Technologijos, JSC processes data for the following purposes:
   1. For the purpose of administrating the work and activities of the staff. The personal data of the employees of the company Finansinės Technologijos, JSC is processed under the procedure stipulated by the Employee Personal Data Protection Policy. For this purpose, the employee data is only stored for as long as is stipulated by legislation.
   2. For the purpose of selecting candidates for jobs available at the company, the data is processed in order to find candidates that meet the necessary requirements to work at the company, select the best ones and determine whether the candidates are suitable for the job offered.
      For that purpose, we process the data provided by the candidates themselves (e.g. data provided in CVs, data collected through communication etc.) or collected while using our website and (or) social media, means of public information etc.
      For that purpose, the personal data is stored for 12 months from the day when the person provided their data to us for the first time or renewed it unless a separate permission has been received from the person to keep the data longer.
   3. For the purpose of administrating the database of candidates for job positions at the company. After a specific recruitment in our company ends, for which the person had provided their data, the personal data is processed in order for the company to be able to offer the candidate jobs and career opportunities in the future, find candidates that meet the needs of the company, as well as select them and determine whether or not they are suitable for the job offered.
      For that purpose, the personal data is stored for 24 months from the day when the person provided their data to us for the first time or renewed it unless a separate permission has been received from the person to keep the data longer.
5. The company Finansinės Technologijos, JSC does not process personal data for any other purposes that would be incompatible with those listed above.

6. COOKIES

   1. Cookies are small files temporarily saved onto the hard drive of the user’s device that allow recognising the user during later visits to websites, storing the person’s browsing history and options, tailoring content, making searches within the websites faster, creating a convenient and friendly website environment that can be offered more effectively and reliably. Cookies are a common practice when browsing websites and make them easier to use.
   2. The information received through cookies is used to ensure the functionality of websites.
   3. All the information about the cookies used on the website, their purpose and duration of use is provided in the table below:

      Name of the cookie	Duration	Description
      PHPSESSID	Until the end of the session	This cookie recognises your unique session while you browse the website.

   4. You can cancel your permission given to us to use cookies at any time. You can do that by changing your browser settings to no longer accept cookies. The way to do that depends on the OS and the web browser you use. You can find comprehensive information about cookies, how they are used and how to block them at http://AllAboutCookies.org or http://google.com/privacy_ads.html .

7. PERSONAL DATA PROTECTION

   1. The company Finansinės Technologijos, JSC guarantees that personal data will not be sold, supplied or otherwise transferred to third persons without legal grounds, or used for any purpose other than what they had been collected for. The company Finansinės Technologijos, JSC does not disclose personal data in any way other than in accordance with this personal data processing policy and legislation.
   2. However, the company Finansinės Technologijos, JSC reserves the right to disclose information about a person if it is required to do so by law or if it were requested by legitimately acting institutions or institutions conducting criminal persecution.
   3. The company Finansinės Technologijos, JSC stores personal data for no longer than is required for the purposes for which the data is processed or is stipulated by legislation if the latter specifies a longer data storage duration. Clause 5 of the data processing policy specifies the duration of personal data storage for each individual purpose of the use of personal data.
   4. Data collected from persons by the company Finansinės Technologijos, JSC will be located within the territory of the European Union but may be transferred or stored outside the EU. It may also be processed by the staff of the company Finansinės Technologijos, JSC or its suppliers working from outside the EU. When transferring personal data outside the EU, all the necessary precautions will be taken to ensure that the personal data is processed securely and in compliance with this personal data processing policy.
   5. Upon learning about a violation of personal data security that could pose a threat to personal rights or freedoms, Finansinės Technologijos, JSC will inform you immediately upon receiving such knowledge and determining that access had been gained to such information.

8. RIGHTS OF THE DATA SUBJECT

   When processing your personal data, the company Finansinės Technologijos, JSC ensures your rights under the GDPR and the Law on Legal Protection of Personal Data of the Republic of Lithuania. The personal data subject has the following rights:
   1. to know (be informed) about the processing of their personal data;
   2. to review their personal data processed by the company;
   3. to demand to correct, append, or specify incorrect, inaccurate, incomplete personal data;
   4. to demand to destroy personal data it is no longer required for the purposes for which it had been collected;
   5. to demand to destroy personal data when it is being processed illegally or when the person cancels their permission to process personal data or does not give such a permission that is necessary;
   6. to not agree with the processing of their personal data or to cancel a prior permission;
   7. to demand to stop the actions of personal data processing (excluding storage) if disputes are underway or the legitimacy of data processing has to be reviewed, as well as in cases when the company no longer needs personal data but the person does not want it to be destroyed.
9. Demands pertaining to the implementation of the rights of a personal data subject may be posed to the company by email at info@financetechnology.eu . After receiving your request, the company may request documents proving your identity and additional necessary information related to the request.
   1. After receiving a demand from the personal data subject, the company Finansinės Technologijos, JSC shall respond to it no later than over 30 calendar days from receiving the demand and the day of receiving all the documents necessary for providing a response.
   2. If the personal data subject legitimately cancels their prior permission to process personal data, the company Finansinės Technologijos, JSC shall no later than within 3 business days cease the actions of processing such personal data, excluding cases when it is obligated to continue processing personal data under the applicable legislation, legal obligations, court rulings or mandatory orders received by the company from authorities.
   3. If a person would like to submit a complaint regarding the processing of data carried out by Finansinės Technologijos, JSC, they shall submit it by email atinfo@financetechnology.eu, specifying as much information as possible. The company Finansinės Technologijos, JSC collaborates with personal data subjects and strives to immediately resolve all issues.

Finansinės Technologijos, JSC will provide you with information on any issues covered by this Personal Data Processing Policy by email at info@financetechnology.eu, or over the phone: +37060306004.
The Personal Data Processing Policy was announced on 25 May 2018.