Service provider and data controller

GETTO is the brand and commercial identity used by MB DS Company. The service provider and controller of data submitted in candidate and employer enquiries is MB DS Company, legal entity code 308152066. Registered office: Gabijos g. 79-9, Vilnius, Lithuania. Company information is recorded in the Register of Legal Entities of the Republic of Lithuania. Contact email: getto.recruitment@gmail.com.

Privacy information

This policy covers visitors to gettowork.eu, candidates and employer representatives. MB DS Company processes contact details, enquiries and correspondence you provide. Candidate information also includes work experience, skills, qualifications and job preferences supplied in the form; employer information includes the representative’s details and staffing requirements. We receive information from you through Google Forms, email, telephone or another contact channel you choose.

Provide only information needed for recruitment or your enquiry. Do not send identity document copies, health information or other sensitive data unless necessity and lawful processing have been separately agreed. GETTO is not your employer: you enter into an employment contract directly with the employer.

Purposes and legal bases

A specific candidate enquiry or recruitment process. Information is used for registration, assessment against a specific opportunity, communication and recruitment coordination. Necessary processing relies on the legitimate interest in responding to a candidate-initiated enquiry and organising the recruitment they requested (GDPR Article 6(1)(f)), only where this interest is not overridden by the candidate’s rights and interests. You may object on grounds relating to your particular situation.

The long-term talent pool and future opportunities. Only with separate, freely given consent (GDPR Article 6(1)(a)) is your information included in the long-term GETTO talent pool, assessed for current and future potentially suitable opportunities and used to contact you about them. This consent is not a condition of participating in a specific recruitment process. Without it, information is not used to search for future opportunities.

Employer representatives and general enquiries. Contact details and enquiry content are used to respond, discuss staffing needs and administer cooperation, based on the legitimate interest in maintaining the business relationship initiated by the enquirer (GDPR Article 6(1)(f)). This basis applies only after assessing necessity and balancing individual rights. Submitting an enquiry is not consent to unrelated direct marketing.

Contracts and legal obligations. Where an individual is personally a party to a contract, data necessary to perform it or take steps they request before entering it is processed under GDPR Article 6(1)(b). This basis does not automatically cover a company representative; the legitimate interest described above applies to communications with representatives. Data necessary for specific accounting or other statutory obligations is processed under Article 6(1)(c) only where such an obligation actually applies. Only information necessary to establish or defend legal claims may be retained on the basis of a justified legitimate interest.

Consent and withdrawal

Talent-pool consent must be separate, informed and given by a positive action; the checkbox must not be preselected. You may decline or withdraw consent at any time by emailing getto.recruitment@gmail.com or replying to a GETTO message contacting you. State that you withdraw consent to the long-term talent pool. Withdrawal does not affect processing lawfully carried out before withdrawal. Processing for that purpose then stops; retention for another purpose requires a separate lawful basis, about which we will inform you.

Publication of this policy, submitting a form without a separate choice, silence or a message sent by GETTO does not constitute talent-pool consent. Previously collected information may be used for this purpose only where valid consent covering that purpose can be demonstrated.

Retention periods

Candidate / talent-pool data: with valid consent, 5 years from the candidate’s last activity or update to their information. Activity means a new application, an update made by the candidate, a reply to GETTO communication, participation in a new recruitment process or another clear action demonstrating continued interest in opportunities. The period restarts from such an action. A message sent by GETTO alone, an internal record change, an automated message or an erasure request does not extend it. New activity does not itself reinstate withdrawn consent or broaden its scope.

Without talent-pool consent, data for a specific recruitment process is kept until that process or your enquiry is completed; further retention requires a separate lawful purpose. The 2-year rule below may cover the record of a general enquiry, but does not justify retaining an entire candidate profile for future recruitment.

Employer enquiries: 5 years from the last active contact with the employer. An unanswered GETTO message alone does not restart the period. If a contractual relationship begins, contract, accounting and statutory records follow applicable legal retention requirements, rather than automatically following this enquiry period.

General enquiries: 2 years from the last contact or completion of the enquiry, whichever is later, unless another lawful basis justifies specific longer retention.

Accuracy and the need to retain information must be reviewed periodically; information no longer needed is deleted earlier. At expiry, information is deleted or irreversibly anonymised unless another lawful basis applies. This policy does not itself implement automatic deletion in Google Forms, email or other storage systems.

Recipients

Candidate information necessary for a specific opportunity or recruitment process may, with a lawful basis, be shared with potential employers and GETTO recruitment partners or intermediaries involved in that particular recruitment chain. This does not authorise unrestricted sharing of the entire talent pool. Before forwarding a profile, we will inform the candidate of the specific opportunity, recipient and scope of information; where consent is required, we will obtain it.

IT, hosting, email, forms and cloud providers may process information to the extent necessary to provide services on behalf of MB DS Company. Where a provider acts as a processor, terms meeting GDPR Article 28 are required. Employers and recruitment partners may act as independent controllers; roles and responsibilities depend on the actual process. Information is disclosed to authorised public authorities only where lawfully required.

International transfers

Specific job opportunities may be in other countries. Information is not automatically transferred to any country worldwide. Transfer or access from outside the European Economic Area requires both a lawful processing basis and compliance with GDPR Chapter V: an applicable adequacy decision or appropriate safeguards, or, exceptionally, a lawfully applicable derogation.

Before a transfer, the particular recipient, country, mechanism and any necessary supplementary measures must be established. This policy does not confirm that standard contractual clauses have already been signed or that a specific transfer mechanism has been implemented. You may request information about applicable safeguards and a copy by emailing us.

Your rights and contact

You may request access, rectification, erasure or restriction of processing. Where applicable, you may request portability, object to processing based on legitimate interests and withdraw consent at any time. Contact getto.recruitment@gmail.com. We respond under the GDPR, normally within one month, and notify you of any lawful extension. Identity verification is requested only to the extent necessary.

You may complain to the Lithuanian State Data Protection Inspectorate or another competent supervisory authority. Talent-pool consent is voluntary. Without information necessary for a specific enquiry or recruitment process, we may be unable to handle it; this does not make consent to the future talent pool mandatory.

Cookie settings

As checked on 25 September 2026, the public pages do not embed analytics, advertising or email marketing scripts. Candidate and employer Google Forms open in a new tab when you choose a form link; they are not embedded in this site. WordPress and caching tools may use technical cookies for sign-in, security and site operation. You can review, delete or block cookies in your browser settings. There is no separate optional-cookie consent control at present. Any future analytics or marketing tools must be assessed, documented and, where required, held back until consent is obtained.

Terms of use

The website describes GETTO recruitment services. Registering or contacting GETTO does not guarantee a job offer, selection or employment. Services are free for candidates. GETTO is not the employer in this model: the candidate agrees terms and signs an employment contract directly with the employer. Employer cooperation terms and fees are agreed separately for each project. Please provide accurate, up-to-date information.