GRIGEO PRIVACY POLICY

As one of the largest paper and wood industry groups of companies in the Baltic countries, the AB “Grigeo” group of companies recognises the importance of the protection of personal data and respects the right of each person to the protection of his/her personal data.

In this privacy policy (hereinafter referred to as “the Privacy Policy”), we provide information about how the companies of the AB Grigeo group of companies (AB “Grigeo”, legal entity code 110012450, registered office address: Vilniaus g. 10, Grigiškės, Vilniaus m. sav., Lithuania, AB “Grigeo Klaipėda”, legal entity code 141011268, registered office address: Nemuno g. 2, Klaipėda, Lithuania, UAB “Grigeo Baltwood”, legal entity code 126199731, registered office address: Vilniaus g. 10, Grigiškės, Vilniaus m. sav., Lithuania and UAB “Grigeo Recycling”, legal entity code 302529158, registered office address: Vilniaus g. 10, Grigiškės, Vilniaus m. sav., Lithuania) (hereinafter referred to as “the Grigeo Group of Companies”) process Your personal data, which You can provide on the website www.grigeo.lt of the Grigeo Group of Companies (hereinafter referred to as “the Website”), its social media accounts, when contacting us by e-mail or telephone, or visiting any office of a company within the Grigeo Group of Companies.

What kind of Your personal data do we collect?

When You visit any office of a company within the Grigeo Group of Companies, the Website, social media accounts, or contact us by e-mail or telephone, we can collect the following information:

  •  information which You provide to us seeking employment with a company within the Grigeo Group of Companies and which we will collect about You in order to evaluate You as an applicant (for more detail, see “Protection of applicants’ personal data”);
  • information which You provide to us seeking traineeship/internship in a company within the Grigeo Group of Companies, filling out a trainee/intern form on our Website (name, surname, address, telephone number, e-mail address, education institution, future speciality, year of study, study subject, preferred work location, department in which You want to take traineeship/internship, traineeship/internship starting date and its duration, additional experience, information on why You would like to take traineeship/internship in the company within the Grigeo Group of Companies, and the personal data provided alongside with the CV);
  • information which we collect using cookies (for more detail, see “What kind of cookies are used on this website?”).
  • information which You provide to us when placing Your inquiries, requests or complaints (name, surname, e-mail address, and the text of Your application). We will store those data within 2 (two) years from the day of receipt of Your application;
  • information which You provide to us seeking to participate in our tender procedures, promotions and/or lotteries (name, surname, e-mail address, telephone number, and other data which we will ask You to provide according to the rules of the tender procedure or promotion). We will store those data for the period established in the rules of the specific tender procedure, promotion and/or lottery based on Your consent which You express to us by providing Your personal data while seeking to participate in our tender procedures, promotions and/or lotteries;
  • data which You yourself provide to us voluntarily, by Your active actions (name, surname, comment, query, etc.) in our social media accounts (e.g. Facebook and LinkedIn). We will store those data within 2 (two) years from the day of their provision;
  • Your image data if You enter the field of view of video surveillance equipment when visiting an office of a company within the Grigeo Group of Companies. We process the video data of our employees and other persons who enter the field of view of video surveillance equipment on the basis of the legitimate interests pursued by us in order to secure their safety and security of assets. We will store those data within 14 (fourteen) calendar days;
  • any other Your personal data which You can provide to us at any time using the Website or when communicating with us. We will store those data within 2 (two) years from the day of their provision.

Protection of applicants’ personal data

When carrying out selection to vacant positions in the companies within the Grigeo Group of Companies, we will collect and process data which You will provide to us by filling out the form on our Website, data which you will provide to us by e-mail or by other means seeking to become employed with a company within the Grigeo Group of Companies, and data which we will lawfully receive from other persons in order to evaluate Your suitability as an applicant (personal information: preferred position, name, surname, date of birth, address, city, e-mail, telephone number; education: education institution and speciality; work experience: company, duration of employment (start and end dates), position, and nature of work; other information: information on whether You have a driver’s license, Your wishes and requirements for the future job, desired salary as well as data provided in the CV, motivation letter or other documents when applying for the job; information on Your evaluation as an applicant).

We collect and process your personal data submitted for participation in selection process to vacant positions in the companies within the Grigeo Group of Companies for the period of selection process on the basis of Your consent, which You express by sending your CV and other related documents to us or the employment services company.

In order to evaluate Your suitability as an applicant, we may address Your former employers seeking to obtain information about Your qualification, professional abilities, business qualities, and work assessment, so we will collect and process information which Your former employers will provide about Your qualification, professional abilities, and business qualities.

We promise that we will address Your current employers in order to obtain Your personal data related to your qualification, professional abilities, and business qualities only in exceptional cases and only if You clearly express in writing your consent regarding our addressing Your current employer.

In case You are not selected as the successful applicant, we will erase and destroy Your personal data within 10 (ten) working days after an employment contract is signed with the selected applicant, unless You clearly express in writing your consent to the storage of Your CV and other information provided by You during participation in the selection process by a specific company of the Grigeo Group of Companies after the day of Your participation in the selection process in order to offer You a job in future. In this case, we will store Your personal data for a period of not more than 2 (two) years from the end of the selection process.

What kind of cookies is used on Website?

A cookie means information sent by an internet server to an internet browser and which is stored at the browser. This information is sent to the internet server each time when the browser requests opening the page from the server. This allows the internet server to identify and monitor the internet browser.

Please find more information about the cookies used on the Website below:

Name of the cookie Purpose of the cookie Moment of creation Validity period Data used
PHPSESSID It is used to restore a terminated website browsing session of the user When entering the website Until the end of closing the website window Unique ID
_ga It is used to collect statistical information about the website traffic When entering the website 2 years Unique ID
_gat It is used to limit the number of calls to doubleckick.net When entering the website 1 minute Integer number
_gid It is used to collect statistical information When entering the website 24 hours Unique ID
frontend_language It is used to identify the website language at the customer side When entering the website 30 days Unique ID
Track Facebook pixel analytical tool cookie When entering the website 24 hours Unique ID

To whom can we disclose Your personal data?

We may disclose Your personal data to any company within the Grigeo Group of Companies.

We may also disclose your personal data to personal data processors which provide their services to us or perform work for us (information technology, software maintenance and administration service, security service, and document archiving service providers, etc.) and process Your data on behalf of a company within the Grigeo Group of Companies. The data processors have the right to process personal data only according to our instructions and only to the extent necessary. When engaging the data processors, we took all necessary measures in order to ensure that our data processors have also implemented appropriate organisational and technical measures ensuring the security of personal data and keep the personal data confidential.

We inform hereby that Your personal data will not be transferred to any third country and/or international organisation.

How will Your personal data that You provide to us via social media be used?

All information which You provide to us via social media (including messages, use of Like and Follow fields, and other communication) is controlled by the social network controller.

Now, we have the following accounts in social media:

We recommend You to read the privacy notices of third parties and contact the service providers directly in case You have any questions as to whether they use Your personal data.

How are Your personal data processed?

Your personal data will be processed in accordance with the requirements established by the Law of the Republic of Lithuania on Legal Protection of Personal Data and other legal acts.

Your personal data is processed only on the legal grounds defined by the legal acts regulating personal data protection – on the basis of Your consent and when the processing is necessary for the purpose of the legitimate interests  pursued by a company within the Grigeo group of companies (video surveillance).

When processing Your personal data, we implement appropriate organisational and technical measures that ensure the protection of the personal data against accidental or unlawful destruction, alteration and disclosure as well as against any other unlawful processing.

For how long to we store Your data?

We will store Your personal data during the periods established in the Privacy Policy. After the expiry of the personal data storage periods, the personal data will be erased and destroyed.

In those cases when Your personal data are contained in texts of respective documents (agreements, orders, requests, etc.), we will archive and store them in accordance with the terms specified in the Index of the General Document Storage Terms approved by an order of the Chief Archivist of Lithuania.

We promise that in all cases, we will store Your personal data not longer than it is required by the purposes of data processing or provided for by legal acts if they establish a longer data storage period.

What rights do You have?

You have the following rights:

  •  to file with us a written request to provide You with information as to whether data relating to You are being processed and, if such data are processed, You have the right to access Your personal data and the following information: the purposes of the processing; the categories of the respective personal data; the data recipients or categories of the data recipients to which Your personal data have been or will be disclosed; where possible, the expected storage period of the personal data or, if it is not possible, the criteria applied to determine that period;
  • to require the rectification of inaccurate or supplementation of incomplete personal data relating to You;
  • to require that we should erase Your personal data. Irrespective of the foregoing, this right is not absolute and it can be justified when at least one of the following reasons is available: the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed: You have decided to withdraw Your consent to the processing of Your personal data when Your personal data are processed exclusively on the grounds of the consent and there are no other grounds for the processing of Your personal data; Your personal data have been unlawfully processed; Your data must be erased when we are imposed the obligation to do so;
  • to require that the processing of Your personal data be restricted where one of the following applies: You contest the accuracy of the data, for a period enabling us to verify the accuracy of Your personal data; the processing of Your personal data is unlawful and You oppose the erasure of Your personal data and request the restriction of their use instead; we no longer need Your personal data for the purposes of the processing, but they are required by You for the establishment, exercise or defence of legal claims. Where the processing of Your personal data has been restricted, we can process such Your personal data, with the exception of storage, only with Your consent or for the establishment, exercise or defence of legal claims and/or for the protection of Your rights or the rights of another person or for reasons of public interest.
  • to request that we transfer Your personal data being processes to another data controller when it is technically possible;
  •  to file with us a complaint if You believe that Your rights, as those of a data subject, have been and/or may be infringed.

How can You implement Your rights?

In order to implement Your rights, please provide Your requests, complaints or claims to us in writing:

AB “Grigeo”

  •  by e-mail: info@grigeo.lt
  •  by post, to the following address: Vilniaus g. 10, Grigiškės, 27101 Vilniaus m. sav., Lithuania
  •  by visiting us in the office of AB “Grigeo” at the address: Vilniaus g. 10, Grigiškės, 27101 Vilniaus m. sav., Lithuania

AB “Grigeo Klaipėda”

  •  by e-mail: info.klaipeda@grigeo.lt
  •  by post, to the following address: Nemuno g. 2, 91199, Klaipėda, Lithuania
  •  by visiting us in the office of AB “Grigeo Klaipėda” at the address: Nemuno g. 2, 91199, Klaipėda, Lithuania

UAB “Grigeo Baltwood”

  • by e-mail: info.baltwood@grigeo.lt
  • by post, to the following address: Vilniaus g. 10, Grigiškės, 27101 Vilniaus m. sav., Lithuania
  • by visiting us in the office of UAB “Grigeo Baltwood” at the address: Vilniaus g. 10, Grigiškės, 27101 Vilniaus m. sav., Lithuania

UAB “Grigeo Recycling”

  • by e-mail: info.recycling@grigeo.lt
  • by post, to the following address: Vilniaus g. 10, Grigiškės, 27101 Vilniaus m. sav., Lithuania
  • by visiting us in the office of UAB “Grigeo Recycling” at the address: Vilniaus g. 10, Grigiškės, 27101 Vilniaus m. sav., Lithuania

We will reply to Your requests, complaints or claims in accordance with the procedure and within the time limits established by legal acts and will apply our best effort to provide You with information as soon as possible, but not later than within 30 days from the receipt of Your request.

If upon receipt of a request, complaint or claims we doubt the identity of the person addressing us, we have the right to request the addressing person to provide a personal identification document.

If we are unable to provide You with required information and/or if You have claims regarding the way how Your personal data are processed, You have the right to file an appeal with the State Data Protection Inspectorate.

How will we inform You about changes in the Privacy Policy?

We can update or amend this Privacy Policy at any time. Such an updated or amended Privacy Policy shall enter into force from the moment of its publication on our Website. You need to check the Website from time to time and make sure that the current version of the Privacy Policy satisfies You.

Having amended the Privacy Policy, we will inform You about essential, in our opinion, amendments by publishing them on the Website. In order to known when the Privacy Policy was amended last time, please check the “Update date” indicated at the bottom.

How to contact us?

If You have any questions relating to the terms and conditions of this Privacy Policy, please contact us by the following particulars, by calling us by the below phone number, or sending us an inquiry by e-mail or registered letter:

AB “Grigeo”
Legal entity registration number: 110012450
Registered office address: Vilniaus g. 10, Grigiškės, 27101 Vilniaus m. sav., Lithuania
Phone: +370 5 243 5801
E-mail: info@grigeo.lt
These provisions of the Privacy Policy shall be governed by the law of the Republic of Lithuania. Any disputes that arise in respect of these privacy provisions shall be resolved by means of negotiations and, in case of their failure, in the courts of the Republic of Lithuania in Vilnius.

The Privacy Policy was last updated on 24 May 2018.