Privacy policy

1. Controller

MB “Eurodelt”, Žalumynų g. 10, Bartninkai, LT-70328 Vilkaviškio r. sav., Lithuania · email info@eurodelt.eu · phone +370 606 89822. We have not appointed a data protection officer, as we are not required to. For any data protection question, write to info@eurodelt.eu.

2. Visiting the website (hosting, server logs)

Our host automatically processes technical data sent by your browser: IP address, date and time, page visited, referrer URL, browser type and operating system – to deliver the website and keep it secure.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure, functioning website).

Host: UAB “Wacademy Global” (Getspace), Lithuania, as processor (Art. 28 GDPR); the servers are located in the EU (data centre in Germany).

Retention: log files are deleted once they are no longer needed to deliver and secure the website, unless needed to investigate a security incident.

Fonts and code libraries are loaded from our own server; no data is passed to third parties.

3. Staff enquiries via the form

We process: company, name, email, optionally phone, details of your need (job, number, start, duration, location, shift pattern, requirements, message), the page you send it from and any campaign parameters in the link (e.g. “utm_source”), as well as technical details of the submission: the address of the page you came from (referrer), the type of app or browser (e.g. Facebook, Instagram, TikTok or LinkedIn app), the landing-page address, the version of the notice you confirmed and whether you consented to campaign measurement.

Purpose: handling your request, preparing an offer, contacting you, email confirmation.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual steps); where you act for a company, Art. 6(1)(f) (legitimate interest in communicating with business clients).

Spam protection: we store a pseudonymised hash of your IP address (we do not store the address itself) to limit abusive repeat submissions and delete it after 30 days (Art. 6(1)(f)).

Retention: if no contract follows, we delete your request no later than 24 months after the last contact; if a contract follows, sections 5 and 9 apply.

4. Job applications via the website

We process: name, phone, preferred contact channel, preferred job, possible start date, languages, your message, the job you apply for, any campaign parameters and the technical details of the submission listed in section 3. Section 3 also applies to spam protection.

Purpose: running the application process, contacting you by phone, WhatsApp, Viber or email, matching you to a suitable job.

Legal basis: Art. 6(1)(b) GDPR (steps prior to an employment relationship).

We only share a profile with your qualifications and availability with a client company after discussing the specific job with you. Please do not send health data or other special categories of data; we do not need them.

Retention: we delete your application once it is no longer needed, at the latest 6 months after the end of the application process; with your consent to be considered for future jobs (Art. 6(1)(a)), up to 24 months – you can withdraw consent at any time. If employment follows, statutory retention periods for personnel records apply.

5. Contact by email, phone, WhatsApp or Viber

We process your details to answer your enquiry (Art. 6(1)(b) or (f) GDPR). Business correspondence is kept as long as commercial and tax rules require (in Lithuania generally up to 10 years for accounting records); other messages are deleted when no longer needed, at the latest after 24 months.

The WhatsApp and Viber buttons are plain links: clicking opens the service (WhatsApp Ireland Ltd. or Viber Media S.à r.l.), whose privacy policy then applies; data may be transferred outside the EU, in particular to the USA. No data is sent to these services before you click. The pre-filled message may contain a short campaign code (e.g. “fb-herbst”), which you can delete before sending.

6. Service providers (processors)

– An affiliated administration and IT company in Lithuania operates, on our behalf and instructions, our internal request and applicant management (database, routing, email dispatch; Art. 28 GDPR). Staff who handle your request are bound to confidentiality.
– Supabase Inc. (USA) – database for requests and applications (sub-processor); data stored in the EU (Stockholm, Sweden, and Frankfurt am Main, Germany); where access from the USA cannot be ruled out, it is based on the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR).
– Brevo (Sendinblue SAS, Paris, France) – confirmation and internal notification emails (sub-processor).
– UAB “Wacademy Global” (Getspace), Lithuania – website and email hosting.

7. Other recipients

Client companies where an assignment is planned (for candidates: profile after agreement; in temporary staffing, naming the employee in the staffing agreement is required by German law); authorities where we are legally obliged (e.g. Sodra, tax authorities, Federal Employment Agency, customs); tax advisers, auditors and lawyers bound by professional secrecy.

8. Transfers outside the EU

Only for the services in sections 5 and 6, based on an adequacy decision (e.g. the EU-US Data Privacy Framework where the provider is certified) or the EU Standard Contractual Clauses.

9. Clients

If you become a client, we process your contact persons’ details and contract, assignment and billing data to perform the contract (Art. 6(1)(b)) and meet legal obligations (Art. 6(1)(c)), for the term of the contract and thereafter as long as statutory retention obligations apply.

10. Your rights

You have the right of access (Art. 15 GDPR), rectification (16), erasure (17), restriction (18) and data portability (20), and you may withdraw consent at any time with effect for the future (Art. 7(3)). An email to info@eurodelt.eu is enough.

You may lodge a complaint with a supervisory authority (Art. 77). Ours is the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija), L. Sapiegos g. 17, LT-10312 Vilnius, Lithuania, www.vdai.lrv.lt; you may also contact the authority where you live or work.

11. Right to object (Art. 21 GDPR)

Where we process data on the basis of Art. 6(1)(f) GDPR, you have the right to object at any time on grounds relating to your particular situation. We will then stop processing unless we can demonstrate compelling legitimate grounds that override your interests, or the processing serves the establishment, exercise or defence of legal claims.

12. Obligation to provide data

We need the fields marked as required to handle your request or application; without them we cannot make an offer or contact you. All other information is voluntary.

13. No automated decisions

We do not make decisions based solely on automated processing, including profiling (Art. 22 GDPR).

14. Cookies

See Cookies.

15. Changes

We update this policy when the website or the law changes. Last updated: 23 October 2026.