KAUNAS UNIVERSITY OF TECHNOLOGY “WANTed” JOB AND INTERNSHIP OFFERS PLATFORM PRIVACY POLICY

In accordance with the European Union General Data Protection Regulation (hereinafter referred to as the GDPR, Regulation), the Law on Legal Protection of Personal Data of the Republic of Lithuania, and the Kaunas University of Technology Personal Data Processing Policy, approved by Rector’s Order No. A-394, this privacy policy of the Kaunas University of Technology WANTed job and internship offers platform provides information on how your personal data is collected, processed, stored, disclosed or transferred on the Kaunas University of Technology WANTed job and internship offers platform https://wanted.ktu.edu (hereinafter referred to as the Platform).

WHO ARE WE?

Kaunas University of Technology (hereinafter referred to as the University) is a state-owned institution of higher education located at K. Donelaičio g. 73, 44249, Kaunas, Lithuania, tel. +370 37 300 000, e-mail address ktu@ktu.lt. The platform is intended for companies to advertise internships, volunteer opportunities, and job positions offered to University students. WANTed career competence development program (hereinafter referred to as the program) includes various activities during which students learn to plan their studies in a targeted manner and develop competencies that meet labor market trends, thus actively planning and managing their career path.

The University’s designated data protection officer is responsible for the protection of personal data on the Platform and can be contacted by email at duomenu.apsauga@ktu.lt or at K. Donelaičio g. 73, LT 44249, Kaunas.

WHEN DO WE PROCESS YOUR PERSONAL DATA?

We collect and process your personal data only when it is necessary to achieve our legitimate purposes and when we have a legal basis for doing so. The University processes personal data on this Platform:

  • when you have given your consent to the processing of personal data for the specified purpose or purposes;
  • when it is necessary to perform a contract concluded with you or to take action at your request prior to the conclusion of the contract;
  • when we are required to process personal data by law;
  • when the processing of personal data is necessary for the legitimate interests of the University.

WHAT PERSONAL DATA DO WE PROCESS?

When you create a company account on our Platform, we process:

  • the name, surname, email address, and telephone number of the company representative;
  • company name, company code, VAT number, registered office address;
  • technical data (IP address).

The purpose of data processing is to register the Platform visitor as a user.
The legal basis for data processing is the consent of the Platform visitor, expressed by voluntarily providing their personal data.
The term of data processing is 18 months from the last visit to the Platform.

When you purchase a membership on our Platform, we process:

  • the first and last name of the company representative;
  • phone number;
  • e-mail address;
  • payment details (bank, payment card or account number). Once you have made the payment, we receive this information from your bank;
  • technical data (IP address).

The purpose of data processing is to pay for membership purchased on the Platform.
The legal basis for data processing is the conclusion and execution of a purchase and sale agreement/transaction between the user and the University.
The term of data processing is 10 years after the conclusion of the transaction.

When you use our Platform to contact us, we process:

  • your email address;
  • the text of the message, which may contain other information related to you.

The purpose of data processing is to communicate with buyers or visitors to the Platform.
The legal basis for data processing is the consent of the message sender, given by voluntarily submitting the data.
The term of data processing is 18 months from the date of submission of the message.

When you, as a student, log in to the Platform using the Kaunas University of Technology Single Sign-On (SSO) system with two-factor authentication, we process:

  • your email address;
  • voluntarily provided data:
  • phone number;
  • documents or links you submit to apply for a job or internship (CV, LinkedIn profile link).

The purpose of data processing is to register the Platform visitor as a Platform user.
The legal basis for data processing is the consent of the Platform visitor, expressed by voluntarily submitting their personal data. By submitting their data, students agree that it will only be visible (transferred) to those companies to which they decide to apply or transfer their information for application or networking purposes, in accordance with the Kaunas University of Technology personal data processing policy.

The data processing period is from the moment of official registration in the study program until the person is considered a student. Upon termination of studies, the University reserves the right to terminate the processing of personal data or to process it only to the extent necessary for the purposes specified in the legislation.

PROCESSING OF PERSONAL DATA ON THE PLATFORM USING COOKIES

When you visit the Platform, we process your IP address, network and location data when you provide it. This data is collected on the basis of your consent, using cookies and other similar technologies. For more information about the cookies used on the Platform, please see our Cookie Policy.

TO WHOM MAY WE TRANSFER YOUR PERSONAL DATA?

We may use third parties – service providers (data processors) – to process your personal data to help us provide services to you: companies that provide goods delivery services, data center services, or website hosting services; information technology infrastructure service providers, software developers, providers, maintainers, and developers, and other service providers to whom your personal data is disclosed only to the extent necessary for them to provide their services.

Our data processors may only process your personal data in accordance with our clear instructions or guidelines and may not use it for other purposes or transfer it to other persons. In each specific case, only the necessary personal data is provided to the data processor, i.e., only the personal data that is necessary to fulfill the specific processing purpose or provide the service. To ensure the security of your personal data, we only use data processors who undertake and are able to comply with appropriate data security requirements and confidentiality obligations.

WHERE DO WE PROCESS YOUR PERSONAL DATA?

We process your personal data only within the European Union/European Economic Area (EU/EEA). Currently, we do not transfer your personal data to third countries when processing it. If it becomes necessary to transfer your personal data to third countries, we will inform you before the transfer and ensure the legality and security of the transfer (application of the necessary transfer mechanisms and security measures).

WHAT ARE YOUR RIGHTS?

As a data subject, you have all the rights set out in the General Data Protection Regulation, which you can exercise by visiting the University or contacting us by email at duomenu.apsauga@ktu.lt:

  • know about the processing of your personal data – receive information about whether we process your personal data and, if such personal data is processed, the right to access your personal data. To exercise this right, registered users must contact us by email at wanted@ktu.lt;
  • request the correction of your personal data if you find that the personal data being processed is inaccurate – registered users can correct their personal data themselves by logging into their account on the Platform or by contacting us by email at wanted@ktu.lt;
  • request the suspension of personal data processing activities, except for storage, if, after reviewing your personal data, you find that the data is incorrect, incomplete, or inaccurate, or is being processed unlawfully;
  • submit a request to delete your personal data (“right to be forgotten”), except where your data must be stored in accordance with the legal obligations applicable to the University Platform or the establishment, exercise, or defense of legal claims. You can delete your account on the Platform by contacting us at wanted@ktu.lt;
  • object to the processing of your personal data when such data is processed or intended to be processed for the legitimate interests pursued by the University;
  • to receive personal data relating to you that you have provided to the Platform, processed by automated means and based on consent or a contract, in a commonly used computer-readable format, and to transfer it to another data controller (right to data portability), where technically feasible. To submit a request to transfer data, please contact us by email at wanted@ktu.lt.

You may exercise your rights yourself or through representatives. To exercise your rights, you must come to the University in person at K. Donelaičio g. 73, 44249, Kaunas, Lithuania, and submit a request, or you can submit your request by email to duomenu.apsauga@ktu.lt.When processing your request, we have the right and obligation to verify your identity, which we will always try to do in the simplest and most convenient way for you. When submitting your request, you can confirm your identity in one of the following ways:

  • if the request is submitted in person at the University – by presenting a document confirming your identity to our employee;
  • if the request is submitted by mail or through an authorized person, you must submit a notarized copy of your identity document along with it;
  • if the request is submitted by electronic means, it must be signed with an electronic signature or submitted from the email address you used to register on our Platform.

If there are reasonable doubts about the identity of the natural person submitting the request, the University has the right to request additional information necessary to confirm your identity (e.g., by asking a control question about what goods you have purchased recently, etc.).

The request must be clear and must include your first and last name, information about what rights you wish to exercise and to what extent, and information about how you would like to receive a response. If you submit your request electronically, the information will also be provided electronically, unless you request otherwise in advance.

We will endeavor to review your requests and provide you with information as soon as possible, but no later than 30 calendar days from the date of receipt of the request. If, due to certain circumstances, such as the complexity of the request (if it is necessary to seek assistance from data processors) or the number of requests being processed by the University, the University may not be able to review the request in time, and the review period may be extended for no more than two months, with prior notice to you.

Requests are processed and information and data are provided free of charge, However, we reserve the right in certain cases either to refuse to exercise your rights (where the request is unfounded or disproportionate, or repetitive), or to charge for the provision of information and data, taking into account the administrative costs of providing the information or notifications or actions requested, administrative costs, in accordance with legal requirements and the rates set by the University Rector (if there is clear abuse of the data subject’s rights, unjustified repeated requests for information, data, extracts, documents, etc.).

If you believe that the University’s actions or inaction violate your rights or legal requirements, you have the right to lodge a complaint with the supervisory authority – the State Data Protection Inspectorate.

VALIDITY OF THE PRIVACY POLICY

This Privacy Policy is approved and effective as of September 15, 2025. We reserve the right to review and update the Privacy Policy regularly or as necessary. We will notify you of any updates on our Platform.