Legal

Privacy Policy

How ALPROJECTS Group handles personal data collected through this website.

Last updated: 15 August 2026

1. Who we are

ALPROJECTS, UAB (“ALPROJECTS Group”, “we”) is the controller of personal data collected through alprojects.eu.

2. What we collect

This website has no visitor accounts, no analytics and sets no cookies on visitors. Data reaches us in the following ways:

3. Third parties that receive data

Vercel and Resend are US companies. Where personal data leaves the EU, the transfer is covered by the EU Standard Contractual Clauses in their data processing agreements; Resend also participates in the EU-U.S. Data Privacy Framework.

Simply browsing this site loads no third-party scripts, fonts, analytics or embeds. The typeface is served from our own domain, so reading these pages does not disclose your IP address to any advertising or analytics company.

The one exception is the scheduling calendar on the contacts page. It is supplied by Calendly LLC and is not loaded until you press “Open the calendar”. Until you do, no request is made to Calendly and they receive nothing about you. Once you open it, Calendly receives your IP address and sets its own cookies in order to run the calendar, and the details you submit if you book a slot. Calendly is a US company and transfers are covered by the EU Standard Contractual Clauses; see calendly.com/privacy. You can book a call by email instead if you prefer not to use it.

4. Recruitment data

Applications are held for 24 months from the date you send them, so that we can contact you when a project matches your discipline. You can ask us to delete them at any time by writing to info@alprojects.eu, and we will do so without needing a reason.

CVs and certificate documents are stored with the application and are seen only by the people resourcing projects. Apart from the service providers named in section 3, which handle them only to deliver them to us, we do not pass them to anyone, and we do not use them for anything other than recruitment.

5. Legal basis

6. How long we keep it

Job applications, including any CV and certificates, are kept for 24 months from the date you send them, or until you ask us to delete them.

Newsletter addresses are kept until you unsubscribe or ask us to remove them. Business correspondence is kept as long as needed for the enquiry or project and any statutory retention period that applies to it. Hosting logs are retained according to Vercel’s own schedule.

7. Your rights

Under the GDPR you may request access to your data, correction, erasure, restriction of processing, portability, and you may object to processing based on legitimate interest. Write to info@alprojects.eu and we will respond within one month.

You may also withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal (Article 7(3)).

We do not carry out automated decision-making or profiling, including in recruitment.

If you believe we have handled your data improperly, you may lodge a complaint with the Lithuanian State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija), L. Sapiegos g. 17, LT-10312 Vilnius, ada@ada.lt, vdai.lrv.lt.

8. Health data in applications

Some applicants choose to upload a medical or fitness certificate. This is health data and falls under Article 9 GDPR. We process it only where it is necessary for obligations in the field of employment and occupational health and safety law (Article 9(2)(b)), we store it separately from other application data, and access is limited to the people responsible for mobilisation.

9. Cookies

This website sets no cookies on visitors. It has no analytics, no advertising tags, no tracking pixels and no visitor accounts, so there is nothing to consent to and no cookie banner to dismiss. The only cookie the site sets is a sign-in cookie on the page our staff use to edit the website, which visitors never reach.

The one exception is the scheduling calendar on the contacts page. It is not loaded until you press the button that opens it; if you do, Calendly sets its own cookies at that point. Nothing is set if you do not.

10. How we protect it

This section describes how the site and our handling are designed. It is not a statement that we hold an ISO 27001 certificate or any other security attestation, because we do not.

11. Children

This website is not intended for persons under 16, and we do not knowingly collect their personal data.

12. Changes

If this policy changes, the revised version will be published on this page with a new date at the top.

Back to homepage