Privacy Policy

1. Who we are

ALPROJECTS, UAB (“ALPROJECTS Group”, “we”) is the controller of personal data collected through alprojects.co.

• ALPROJECTS, UAB — Šilutės pl. 2, LT-92298 Klaipėda, Lithuania
• Email: info@alprojects.eu
• Phone: +370 636 63 744

2. What we collect

This website has no user accounts, no analytics and sets no cookies of its own. Data reaches us in the following ways:

• Newsletter. If you submit the newsletter form, we receive the email address you enter, in order to send you company and project updates.
• Direct contact. If you email or call us, we receive whatever you choose to send — typically your name, contact details and the content of your enquiry.
• Server logs. The site is hosted on GitHub Pages. GitHub records technical request data, including IP address and browser user-agent, for security and reliability.
• Booking a call. If you open the scheduling calendar on the contacts page and book a slot, Calendly receives the name, email address and any notes you enter, together with your IP address and time zone.
• Job applications. If you send the careers form we receive the details you enter — name, contact details, discipline, certificates, availability and any notes — together with any CV or certificate documents you attach.

3. Third parties that receive data

• GitHub, Inc. — website hosting and request logs.
• Calendly LLC — the scheduling calendar on the contacts page, and only if you choose to open it.

Simply browsing this site loads no third-party scripts, fonts, analytics or embeds. The typeface is served from our own domain, so reading these pages does not disclose your IP address to any advertising or analytics company.

The one exception is the scheduling calendar on the contacts page. It is supplied by Calendly LLC and is not loaded until you press “Open the calendar”. Until you do, no request is made to Calendly and they receive nothing about you. Once you open it, Calendly receives your IP address and sets its own cookies in order to run the calendar, and the details you submit if you book a slot. Calendly is a US company and transfers are covered by the EU Standard Contractual Clauses; see calendly.com/privacy. You can book a call by email instead if you prefer not to use it.

4. Recruitment data

Applications are held for 24 months from the date you send them, so that we can contact you when a project matches your discipline. You can ask us to delete them at any time by writing to info@alprojects.eu, and we will do so without needing a reason.

CVs and certificate documents are stored with the application and are seen only by the people resourcing projects. We do not pass them to third parties, and we do not use them for anything other than recruitment.

5. Legal basis

• Consent (GDPR Art. 6(1)(a)) — newsletter subscription, job applications, and loading the scheduling calendar, which happens only when you press the button. You may withdraw it at any time.
• Legitimate interest (Art. 6(1)(f)) — responding to enquiries, and keeping the site secure and available.

6. How long we keep it

Job applications, including any CV and certificates, are kept for 24 months from the date you send them, or until you ask us to delete them.

Newsletter addresses are kept until you unsubscribe or ask us to remove them. Business correspondence is kept as long as needed for the enquiry or project and any statutory retention period that applies to it. Hosting logs are retained according to GitHub’s own schedule.

7. Your rights

Under the GDPR you may request access to your data, correction, erasure, restriction of processing, portability, and you may object to processing based on legitimate interest. Write to info@alprojects.eu and we will respond within one month.

You may also withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal (Article 7(3)).

We do not carry out automated decision-making or profiling, including in recruitment.

If you believe we have handled your data improperly, you may lodge a complaint with the Lithuanian State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija), L. Sapiegos g. 17, LT-10312 Vilnius, ada@ada.lt, vdai.lrv.lt.

8. Health data in applications

Some applicants choose to upload a medical or fitness certificate. This is health data and falls under Article 9 GDPR. We process it only where it is necessary for obligations in the field of employment and occupational health and safety law (Article 9(2)(b)), we store it separately from other application data, and access is limited to the people responsible for mobilisation.

9. Cookies

This website sets no cookies of its own. It has no analytics, no advertising tags, no tracking pixels and no user accounts, so there is nothing to consent to and no cookie banner to dismiss.

The one exception is the scheduling calendar on the contacts page. It is not loaded until you press the button that opens it; if you do, Calendly sets its own cookies at that point. Nothing is set if you do not.

10. How we protect it

This section describes how the site and our handling are designed. It is not a statement that we hold an ISO 27001 certificate or any other security attestation, because we do not.

• The site is served over HTTPS only, with HTTP redirected.
• It is a static site: no database, no user accounts and no login to compromise.
• Application documents reach us by email and are stored in the company account, access limited to the people resourcing projects.
• Access is removed when someone leaves the company or changes role.

11. Children

This website is not intended for persons under 16, and we do not knowingly collect their personal data.

12. Changes

If this policy changes, the revised version will be published on this page with a new date at the top.

Back to homepage