We care about the protection of your personal data and, therefore, we process personal data in accordance with the requirements of the EU General Data Protection Regulation (hereinafter “the Regulation”) and other legal acts. In order to comply with the applicable requirements, in this Privacy Policy, we provide you with information about the processing of personal data by JTimber UAB, the purposes of the processing, the data recipients, the rights of the data subjects, and other conditions of the processing of personal data.
In relation to the processing of personal data described in this Privacy Policy, the status of data controller is held by JTimber UAB, legal entity code 306076207, registration address Dainavos g. 7, Vilnius, Lithuania, e-mail: info@jtimber.lt (hereinafter “the Company”).
If you have sent your CV, cover letter and/or other documents or information in order to take part in the advertised recruitment, the personal data you have voluntarily provided and the other personal data listed below will be processed for the purpose of carrying out the recruitment.
For the purpose of recruitment, we will process your personal data until we decide to recruit a specific candidate, his/her probationary period end, or we decide to close the recruitment without selecting any candidate, however, no longer than six months from the date of receipt of data.
If you give your consent, we will retain your CV and other data provided for the purpose of administration of the candidate database for a period of 1 year after the end of the recruitment process, so that we can contact you with a job offer or invitation for a new recruitment if we need to recruit a new employee. If you have expressed your preference that our company does not make future job offers to you, we will retain your name and information about your preference not to receive job offers for 3 years.
We will process your personal data on the basis of your consent to participate in the recruitment process or your consent to the retention of your data in the candidate database. Providing your personal data for the purpose of selection is voluntary, but if you do not provide the requested data, we will not be able to assess your eligibility.
Please note that your previous employers may be contacted and asked for their opinion on your qualifications, professional skills and personal qualities, in exercise the statutory right regulating protection of personal data. However, your current employer will not be contacted without your consent.
We may transfer your data to third parties who assist us in the selection of candidates or who provide us with services related to the recruitment, assessment and internal administration of candidates. In each case, we provide the data controller with only as much data as is necessary to execute a specific order or provide a specific service. The data processors we engage may process your personal data only in accordance with our instructions and may not use them for other purposes. Moreover, they must ensure the security of your data in accordance with applicable legislation and data processing agreements concluded with us. We may also provide your data to companies in our group that are involved in the assessment of employee candidates and/or career decision-making processes.
If you are a customer of the Company or have opted in to receive direct marketing materials, your contact details will be used to provide you with information about our goods and services, newsletters or other direct marketing information.
If you are a customer of the Company, direct marketing may be sent to you in accordance with your statutory rights. You may object to this marketing approach by indicating this in the agreement you sign with our company and by using the contact details provided in this Privacy Policy.
Your personal data will be processed for the purpose of direct marketing for a period of 5 years from the date of your consent or the end of the Company’s relationship with you.
Each e-mail sent to you will include an option to opt-out of direct marketing messages. You can also refuse or withdraw your consent by contacting us using the contact details provided by the Company.
If you have submitted a complaint, enquiry or feedback to our Company, the personal data you have voluntarily provided will be processed for the purpose of their administration.
If your complaint relates to a potential dispute, potential damage or the enforcement of other legal obligations, your personal data may be stored for a maximum period of 10 years, until the general limitation period expires. Unless the personal data relates to a potential dispute or the performance of a legal obligation, it will be deleted after the reply to your letter.
The processing of your personal data will be based on the expression of your free will, i.e., your consent, however, in certain cases, a legal act may become the basis for the continued retention of your complaint.
The processing of your personal data provided in the course of electronic communication is based on your free expression to communicate by e-mail and to provide certain data, i.e., your consent. If you communicate with the Companies as an employee of companies with which we have or may have a contractual relationship, the processing of your data in electronic communications may be based on legitimate interest. In addition, individual processing operations, such as tax returns, may also be based on the fulfilment of legal obligations.
In addition to the purpose of concluding and performing the agreement, your data shall also be processed for internal administration purposes.
Your e-mail address, the content of correspondence and related data are processed in accordance with the principle of proportionality. These data will be visible in particular to the person with whom you communicate directly by e-mail. However, in certain cases, your correspondence may be read and processed by other employees, for example, for electronic monitoring of the workplace, for the investigation of possible breaches of legislation or internal rules, for the enforcement of internal rules, for the replacement of an employee and for related purposes, and in similar situations.
When concluding timber purchase and sale agreements, JTimber UAB acts as a data controller when it is a party to the contract. In other cases, when it is not a party to the contract, JTimber UAB only acts as an intermediary in concluding contracts and acts as a data processor, while the data controller is the party to the contract.
Personal data processed for the purpose of concluding and executing a timber agreement shall be processed by JTimber UAB for 10 years from the end of the contractual relationship. In cases where data are submitted but no agreement has been concluded, the data will be deleted after the decision has been made or it becomes apparent that no agreement will be concluded. We will process your personal data on the basis of the performance of an agreement to which you are a party, as well as for the purpose of taking action at your request prior to the conclusion of the agreement. We may ask for your consent for certain individual actions, and we may be required to comply with legal obligations, such as those provided under tax legislation. For the purposes set out above, we will process the personal data that you directly provide before and during the conclusion of the agreement. If you do not provide this information, we will not be able to conclude and perform the agreement.
If we commission a logging service, we must provide a copy of the logging permit to the contractors who are logging the forest you are selling, so that they can verify that they are logging the forest for which the permit has been granted.
Personal data processed for the purpose of concluding and executing agreements with natural persons shall be retained for 10 years from the end of the contractual relationship. We will process your personal data on the basis of the performance of an agreement to which you are a party, as well as for the purpose of taking action at your request prior to the conclusion of the agreement. We may ask for your consent for certain individual actions, and we may be required to comply with legal obligations, such as those provided under tax legislation. For the purposes set out above, we will process the personal data that you directly provide before and during the conclusion of the agreement. If you do not provide this information, we will not be able to conclude and perform the agreement.
Personal data of counterparty employees and representatives processed for the purpose of concluding and executing agreements with legal entities shall be retained for 10 years from the end of the contractual relationship. The ground for data processing is legitimate interest. Without processing the personal data of a party’s representatives, we would not be able to conclude and perform an agreement with the legal entity they represent.
For the purposes of processing of personal data as set out in this Privacy Policy, the personal data processed may include
The Company is a member of the TMV Capital Group, so we may transfer your data to other companies in the group for the purpose of internal administration on the basis of legitimate interest.
Please be informed that personal data are entered into a project management system whose owner and licensor is based in the USA, and the data entered into the system are thus transferred to that country. Standard Contractual Terms and Conditions and certification under the EU-US Data Privacy Framework are used to ensure the security of data transfers and compliance with the Regulation.
We comply with the following principles when collecting and using the personal data you entrust to us, as well as data received from other sources:
We hereby inform you that you have the following data subject’s rights:
In order to exercise your rights as a data subject, it is necessary to establish your identity. If your identity has not been verified, it will not be possible to ascertain whether the person whose personal data is being processed is the person who is making the request, and therefore, your rights cannot be exercised.
A request from you to exercise your rights may be refused or an appropriate fee may be charged, if the request is manifestly unfounded or excessive, or in other cases provided for by law.
If you wish to exercise your data subject rights or have any other questions regarding the processing of your personal data, you can contact the Company using the contact details provided at the beginning of this Privacy Policy.
We have the right to update this Privacy Policy in light of changes in legislation, as well as changes in the Company’s operations. We recommend that data subjects regularly visit the website www.jtimber.lt to familiarised with the latest version of the Privacy Policy.
Last renewed on: 22 December 2023