Legal
Privacy Policy
How ALPROJECTS Group handles personal data collected through this website.
1. Who we are
ALPROJECTS, UAB (“ALPROJECTS Group”, “we”) is the controller of personal data collected through alprojects.eu.
- ALPROJECTS, UAB — Šilutės pl. 2, LT-92298 Klaipėda, Lithuania
- Email: info@alprojects.eu
- Phone: +370 636 63 744
2. What we collect
This website has no visitor accounts, no analytics and sets no cookies on visitors. Data reaches us in the following ways:
- Newsletter. If you submit the newsletter form, we receive the email address you enter, in order to send you company and project updates.
- Enquiries. If you use the enquiry form, or email or call us, we receive whatever you choose to send — typically your name, contact details, company, the content of your enquiry and any drawings you attach.
- Server logs. The site is hosted by Vercel. Vercel records technical request data, including IP address and browser user-agent, for security and reliability.
- Booking a call. If you open the scheduling calendar on the contacts page and book a slot, Calendly receives the name, email address and any notes you enter, together with your IP address and time zone.
- Job applications. If you send the careers form we receive the details you enter — name, contact details, discipline, certificates, availability and any notes — together with any CV or certificate documents you attach.
3. Third parties that receive data
- Vercel Inc. (USA) — website hosting and request logs. The forms are processed on Vercel servers in the EU (Dublin, Ireland).
- Plus Five Five, Inc. (USA), trading as Resend — delivers what you send through the enquiry, application and newsletter forms, including any documents you attach, to our mailbox. It sends from its EU region (Ireland).
- Calendly LLC — the scheduling calendar on the contacts page, and only if you choose to open it.
- Plausible Analytics — cookieless visit statistics. No cookies, no cross-site tracking and no personal data; we see page addresses, referrers and country, not people.
Vercel and Resend are US companies. Where personal data leaves the EU, the transfer is covered by the EU Standard Contractual Clauses in their data processing agreements; Resend also participates in the EU-U.S. Data Privacy Framework.
Simply browsing this site loads no third-party scripts, fonts, analytics or embeds. The typeface is served from our own domain, so reading these pages does not disclose your IP address to any advertising or analytics company.
The one exception is the scheduling calendar on the contacts page. It is supplied by Calendly LLC and is not loaded until you press “Open the calendar”. Until you do, no request is made to Calendly and they receive nothing about you. Once you open it, Calendly receives your IP address and sets its own cookies in order to run the calendar, and the details you submit if you book a slot. Calendly is a US company and transfers are covered by the EU Standard Contractual Clauses; see calendly.com/privacy. You can book a call by email instead if you prefer not to use it.
4. Recruitment data
Applications are held for 24 months from the date you send them, so that we can contact you when a project matches your discipline. You can ask us to delete them at any time by writing to info@alprojects.eu, and we will do so without needing a reason.
CVs and certificate documents are stored with the application and are seen only by the people resourcing projects. Apart from the service providers named in section 3, which handle them only to deliver them to us, we do not pass them to anyone, and we do not use them for anything other than recruitment.
5. Legal basis
- Consent (GDPR Art. 6(1)(a)) — newsletter subscription, job applications, and loading the scheduling calendar, which happens only when you press the button. You may withdraw it at any time.
- Legitimate interest (Art. 6(1)(f)) — responding to enquiries, and keeping the site secure and available.
6. How long we keep it
Job applications, including any CV and certificates, are kept for 24 months from the date you send them, or until you ask us to delete them.
Newsletter addresses are kept until you unsubscribe or ask us to remove them. Business correspondence is kept as long as needed for the enquiry or project and any statutory retention period that applies to it. Hosting logs are retained according to Vercel’s own schedule.
7. Your rights
Under the GDPR you may request access to your data, correction, erasure, restriction of processing, portability, and you may object to processing based on legitimate interest. Write to info@alprojects.eu and we will respond within one month.
You may also withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal (Article 7(3)).
We do not carry out automated decision-making or profiling, including in recruitment.
If you believe we have handled your data improperly, you may lodge a complaint with the Lithuanian State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija), L. Sapiegos g. 17, LT-10312 Vilnius, ada@ada.lt, vdai.lrv.lt.
8. Health data in applications
Some applicants choose to upload a medical or fitness certificate. This is health data and falls under Article 9 GDPR. We process it only where it is necessary for obligations in the field of employment and occupational health and safety law (Article 9(2)(b)), we store it separately from other application data, and access is limited to the people responsible for mobilisation.
9. Cookies
This website sets no cookies on visitors. It has no analytics, no advertising tags, no tracking pixels and no visitor accounts, so there is nothing to consent to and no cookie banner to dismiss. The only cookie the site sets is a sign-in cookie on the page our staff use to edit the website, which visitors never reach.
The one exception is the scheduling calendar on the contacts page. It is not loaded until you press the button that opens it; if you do, Calendly sets its own cookies at that point. Nothing is set if you do not.
10. How we protect it
This section describes how the site and our handling are designed. It is not a statement that we hold an ISO 27001 certificate or any other security attestation, because we do not.
- The site is served over HTTPS only, with HTTP redirected.
- It is a static site with no database and no visitor accounts. The page our staff use to edit it is password-protected.
- Form submissions are not stored on the website: they are delivered to us by email, and application documents are kept in the company mailbox, with access limited to the people resourcing projects.
- Access is removed when someone leaves the company or changes role.
11. Children
This website is not intended for persons under 16, and we do not knowingly collect their personal data.
12. Changes
If this policy changes, the revised version will be published on this page with a new date at the top.