Privacy policy

1. Controller

The controller for the processing of personal data on this website is:

UAB „Izotop“, Žaltyčio g. 11-2, Naujienos k., Marijampolė (Marijampolė municipality), Lithuania. E-mail: info@izotop.lt.

Please address data protection questions to the e-mail address above.

2. What we do in principle – and what we do not

This website is an information site with contact and request forms. We use no analytics or tracking services (no Google Analytics, no advertising pixels, no social media plug-ins). We use no cookies that require consent. Fonts are loaded from our own server. We do not sell data and do not pass it on for advertising purposes.

3. Hosting

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When the website is accessed, Vercel processes technically necessary data in server logs: IP address, date and time, page accessed, data volume transferred, browser type and operating system, referring page. This data is required to deliver the website and to ensure its security and stability.

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in the secure operation of the website). Vercel may process data in the USA; the transfer is safeguarded by the EU Commission’s standard contractual clauses and Vercel’s certification under the EU-U.S. Data Privacy Framework. Server logs are deleted by Vercel after a short time; details in Vercel’s privacy policy: vercel.com/legal/privacy-notice.

4. Request form for companies (“Request staff”)

When you request staff, we process the information you provide in the form: company, your name, telephone, e-mail, requested trades, number, start, duration, location, contract form, notes. We use this data exclusively to process your request, prepare an offer, clarify questions and – if a contract is concluded – handle the deployment. You receive an automatic confirmation by e-mail.

Legal basis: Art. 6 (1) (b) GDPR (pre-contractual measures and performance of a contract). We store the data while the request is being processed and for the duration of any subsequent contractual relationship; thereafter in accordance with statutory retention periods (generally up to ten years for business documents). If no contract is concluded, we delete the request no later than twelve months after the last contact, unless you consent to longer storage.

Form data is transmitted via an encrypted connection (TLS) and stored in our internal management system, which is operated on servers in the EU (Supabase; data centres in Frankfurt and Stockholm). The provider is Supabase Inc. (USA); a data processing agreement including EU standard contractual clauses is in place (Art. 28, Art. 46 GDPR). With the request we also store the address of the page from which you sent the form, including any campaign parameters (utm_*), to see through which channel requests reach us (Art. 6 (1) (f) GDPR). To prevent abuse we limit the number of submissions per connection; for this your IP address is processed briefly. The forms contain a field invisible to humans to ward off automated spam submissions; no additional personal data is collected in the process.

The confirmation of receipt and our internal notification are sent via the e-mail service provider Brevo (Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany) as processor.

5. Contact form and e-mail

If you use the short contact form or write to us by e-mail, we process your details (name, company, telephone, e-mail, message) to answer your message.

Legal basis: Art. 6 (1) (b) GDPR if the enquiry aims at a contract; otherwise Art. 6 (1) (f) GDPR (legitimate interest in answering enquiries). Deletion no later than twelve months after the end of the correspondence, unless statutory retention obligations prevent this.

6. Application form (“For candidates”)

If you apply via our form, we process name, telephone or WhatsApp number, trade, preferred interview language and – if provided – earliest start, in order to contact you and conduct an interview. Further data (qualifications, certificates, references) is collected only later in the process and only insofar as it is required to assess your suitability.

Legal basis: Art. 6 (1) (b) GDPR (initiation of an employment relationship) and, for inclusion in our candidate pool beyond the specific process, your consent under Art. 6 (1) (a) GDPR, which you give with the checkbox in the form. We delete application data no later than six months after the end of the process unless consent to longer storage exists. You may withdraw consent at any time.

7. Information by e-mail (optional consent)

In the forms for companies and for candidates you can – voluntarily and separately from the request – tick that IZOTOP may occasionally inform you by e-mail about news (for example new trades, changes in temporary-staffing or posting law, articles from “News”). Without this tick you receive only replies to your request from us.

Legal basis: your consent under Art. 6 (1) (a) GDPR and § 7 (2) no. 2 UWG (German Unfair Competition Act). We process your e-mail address, name and company as well as when and via which form you gave consent. Sending is handled by the service provider Brevo (Sendinblue GmbH, Berlin) as processor. You can withdraw your consent at any time with effect for the future – via the unsubscribe link in every e-mail or by message to info@izotop.lt. After withdrawal we remove your address from the list; we keep the record of consent for as long as is necessary to meet our accountability obligation.

8. WhatsApp

We offer you the option of contacting us via WhatsApp. WhatsApp is a service of WhatsApp Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, a company of the Meta group. If you write to us via WhatsApp, we process the content of your messages and your telephone number in order to answer your enquiry.

Please note: WhatsApp processes data on the use of the service (metadata such as telephone number, time, device data) according to its own rules and may transfer it to Meta companies, including in the USA. According to WhatsApp, the transfer is safeguarded by standard contractual clauses and the EU-U.S. Data Privacy Framework. The content of your messages is end-to-end encrypted. Details in WhatsApp’s privacy policy: whatsapp.com/legal/privacy-policy-eea.

We use a business WhatsApp account for communication and do not synchronise contact lists with WhatsApp. The legal basis is Art. 6 (1) (b) GDPR (contract initiation) or Art. 6 (1) (f) GDPR (legitimate interest in a fast form of communication chosen by you). If you do not wish to use WhatsApp, you can reach us at any time by e-mail or form. Please do not send confidential documents (ID cards, contracts, bank details) via WhatsApp; we will name a secure channel for them.

9. Disclosure of data

We disclose your data only where necessary to process your enquiry or perform a contract, or where we are legally obliged to do so. Recipients are:

• companies of the IZOTOP Group in Lithuania that conclude or perform the contract with you and, for applications, the company that is to become your employer (Art. 6(1)(b) GDPR; additionally (f) in conjunction with Recital 48 GDPR);
• technical service providers acting on our behalf and under our instructions (Art. 28 GDPR): Vercel Inc. (hosting, USA – see section 3), Supabase Inc. (database of our management system, servers in the EU – see section 4), Sendinblue GmbH, Berlin (“Brevo” – sending the confirmation of receipt and, only with your consent, the information under section 7);
• authorities where we are legally obliged to do so.

No disclosure for advertising purposes takes place.

10. Your rights

Under the GDPR you have the right of access to the data stored about you (Art. 15), rectification of inaccurate data (Art. 16), erasure where no retention obligations prevent it (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), objection to processing based on legitimate interests (Art. 21) and withdrawal of consent with effect for the future (Art. 7 (3)).

Right to object (Art. 21 GDPR): Where we process data on the basis of legitimate interests, you may object at any time on grounds relating to your particular situation.

The information in the forms is required to process your request; without it we cannot prepare an offer.

To exercise these rights, contact info@izotop.lt. You also have the right to lodge a complaint with a data protection supervisory authority – in Lithuania with the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija, VDAI), L. Sapiegos g. 17, Vilnius, or with the supervisory authority of your place of residence in Germany.

11. Data security

The website is delivered exclusively via HTTPS. Form data is transmitted encrypted. Only employees who process stored enquiries have access to them.

12. Changes

We adapt this policy when the website, our procedures or the legal situation change. The version published here applies.

Legal notice