Privacy policy
1. Who is this Privacy Policy for?
This privacy policy (hereinafter referred to as the "Privacy Policy") is intended to inform data subjects, including TeamFill Clients, Users, suppliers, partners, and applicants, about the processing and protecting of personal data by MB AIDA projektai (“we,” “us,”, “our”, “Company”), the operator of the TeamFill platform. The Policy provides a detailed overview of how we handle data within the TeamFill platform and outlines the responsibilities of all parties involved, including MB AIDA Projektai, Clients, and Users, in compliance with applicable privacy laws. Any person whose personal data we process is referred to in this Privacy Policy as a Data Subject.
Our primary role is as a data processor, handling data solely on behalf of our Clients, who serve as data controllers. This means that our Clients determine the purposes and means of processing personal data within TeamFill. We, as a processor, operate under the instructions of our Clients and do not independently access, control, or use Client data beyond the requirements necessary to deliver our service.
Our role as a data controller applies to specific activities, such as managing user accounts, providing technical support, and enhancing platform functionality. In these cases, we determine the purposes and means of processing personal data independently to ensure secure and efficient service delivery. As the data controller, we are responsible for safeguarding this data in compliance with applicable privacy laws and ensuring transparency in how we process and use user information.
2. About the Company
MB AIDA Projektai (“the Company”), operates the TeamFill SaaS platform, specializing in recruitment services. Our legal entity code is 305439680, with a registered office at Naugarduko g. 3-401, LT-03231 Vilnius, Republic of Lithuania. For any inquiries related to data protection, including exercising your rights as outlined in this Privacy Policy, please contact us via email at info@aidaprojektai.lt.
3. Definition of Personal Data
In this Privacy Policy, "Personal Data" refers to any information about a Data Subject that can identify them directly or indirectly and that is collected, stored, or otherwise processed electronically or in other formats. Examples of Personal Data include, but are not limited to, a Data Subject’s name, surname, address, email address, contact information, and other identifiers that may be collected to fulfill the purposes outlined in this Privacy Policy or in the Data Subject's specific consent or agreement with the Company.
When processing personal data, the Company is guided by Regulation (EU) No 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR), the Law on Legal Protection of Personal Data of the Republic of Lithuania, the Law on Electronic Communications of the Republic of Lithuania, and other legal acts regulating personal data protection.
Below you can find out how we process your personal data: what personal data we process, what are the purposes for such processing, how long we keep it and what rights Data Subjects have.
4. Processing Applicant Data through the TeamFill Platform
When recruitment is conducted by our Clients using the TeamFill platform, MB AIDA Projektai acts solely as a data processor. In these cases, Clients are responsible for providing adequate information to applicants regarding the processing of their personal data, as they function as the data controllers.
The Company has developed a smart video interview platform for applicant screening and shortlisting- the TeamFill platform. When the initial job interview is conducted via the TeamFill platform, no human recruiters are involved in the job interview and the answers given by the applicant during the screening process are primarily evaluated by artificial intelligence. The AI evaluates the answers given by the applicants according to predefined criteria such as completeness, accuracy, structure of the answers, coherence of language, whether the answer is supported by specific examples, etc. Specific evaluation criteria may also be specified before the start of the video interview or even when asking the specific interview question.
Here you can find a simplified explanation on how TeamFill works: the applicant answers the questions during the video interview > the applicant's video job interview is recorded > the audio is converted into text using the OpenAI API > the text is submitted to the GPT-4 model for evaluation > the GPT-4 model evaluates each of the applicant's answers on a score scale of 0 to 10 and the whole job interview on a score scale of 0 to 100; each score is explained and justified > the score received is sent to the server hosting the TeamFill platform > the interview score is reviewed and evaluated by the recruitment specialist > after the interview score has been reviewed, a decision is taken on whether the applicant is to be considered for the next stage of the selection process. Final decisions are always made by recruitment specialists and AI is only an advisory tool for assessing applicants!
Please note that the AI tool does not evaluate the whole video interview, but only the text of your answers. We also use AI to convert audio (speech) to text, therefore, we recommend that you speak as clearly as possible during the job interview. This will help you avoid situations where unclear speech leads to inaccurate speech-to-text conversion, which reduces the overall score of your interview.
The table below provides detailed information on the processing of applicants' personal data on the TeamFill platform:
Purpose: to remind applicants that they started but haven't completed an interview on the TeamFill platform
| Whose personal data do we process? | What personal data do we process? | What is the legal basis? | How long do we keep personal data? | Other comments |
|---|---|---|---|---|
| Applicants who have submitted initial information via TeamFill but have not completed the video interview | Name, email address, fact of incomplete job interview | Article 6(1)(f) GDPR (legitimate interest) | 1 day after the submission of data | The personal data is transferred to the data processor on whose servers the TeamFill database is hosted - DigitalOcean Holdings, Inc. |
Purpose: screening of applicants via the TeamFill platform (initial automated assessment of applicants)
| Whose personal data do we process? | What personal data do we process? | What is the legal basis? | How long do we keep personal data? | Other comments |
|---|---|---|---|---|
| Applicants who have chosen to apply through the TeamFill platform | Name, email address, personal data on CV (if CV submitted), video recording: image, voice, content (questions asked and answers given), audio recording: voice, content (questions asked and answers given), transcription: text of questions asked and answers given, position applied for, assessment criteria, evaluation of answers and the interview as a whole, justification for the evaluation | GDPR Article 6(1)(a) (consent) | 3 working days after the end of the selection procedure !!! | Personal data is transferred to the processors on whose servers the data is stored: 1. DigitalOcean Holdings, Inc. (stored in TeamFill database) 2. Amazon.com, Inc. (stored video and audio) |
Purpose: screening of applicants for clients via the TeamFill platform (evaluation of applicants' answers using AI)
It is only highlighted as a separate purpose for the sake of clarity on the categories of data to be transmitted to OpenAI and on the storage periods
| Whose personal data do we process? | What personal data do we process? | What is the legal basis? | How long do we keep personal data? | Other comments |
|---|---|---|---|---|
| Applicants who have chosen to apply through the TeamFill platform | Audio recording: voice, content (questions asked and answers given), transcription: text of questions asked and answers given, assessment criteria, evaluation of answers and the interview as a whole, justification for the evaluation | Article 6(1)(a) GDPR (consent) | 30 days after the transmission of the records to OpenAI !!! | The personal data is transferred to the data processor OpenAI, LLC. The data contained in the OpenAI system shall be retained for 30 days after transmission !!! |
6. Personal data of the users (Clients) of TeamFill
When you create user Client account of TeamFill platform, we, as the data controller, process your personal data as describes in the table below. We also collect certain information about your use of the platform for the purposes of ensuring and improving the functionality of the platform. For more information on this, please refer to the Cookies and other tracking technologies section of the Privacy Policy.
We are not the controller of the personal data that you yourself process through the TeamFill platform (personal data of applicants participating in the selection process, etc.). You are the controller of this personal data and we act as your data processor. If you wish to enter into an agreement with us regarding the processing of your personal data, please contact us at the email address indicated in the Privacy Policy.
Purpose: creating and managing a TeamFill account
| Whose personal data do we process? | What personal data do we process? | What is the legal basis? | How long do we keep personal data? | Comments |
|---|---|---|---|---|
| Client natural person | Name, email address, password, date and time the account was created, account plan, payments, information about the use of the values provided by the plan | Article 6(1)(b) GDPR (contract) where the client is a natural person | Registration data is kept until the end of the contract, plan usage data is kept for the duration of the specific plan | Personal data is transferred to the data processor on whose servers the TeamFill database is stored - DigitalOcean Holdings, Inc. |
| Employees or representatives of the clients (where clients are legal persons) | Name, email address, password, date and time the account was created, account plan, payments, information on the use of the plan values, employer | Article 6(1)(f) GDPR (legitimate interest), where the account is created for employees of the client legal person | Registration data is stored until the end of the contract with the customer or cancellation of the customer's user, plan usage data is stored for the duration of the specific plan | Personal data is transferred to the data processor on whose servers the TeamFill database is stored - DigitalOcean Holdings, Inc. |
7. Processing of personal data relating to the conclusion and performance of contracts with customers, suppliers, partners, etc. is not covered separately
Purpose: to conclude and perform contracts with suppliers, partners and other individuals
| Personal data | Legal basis | Storage period | Other comments |
|---|---|---|---|
| Name, surname, personal identification number, address, business licence/individual activity certificate number (for service providers), bank account number of the supplier, partner, etc. | Article 6(1)(b) GDPR (contract) | During the term of the Agreement | Personal data is transferred to data processors. |
Purpose: to conclude and perform contracts with clients, suppliers, partners and other legal entities
| Personal data | Legal basis | Storage period | Other comments |
|---|---|---|---|
| Name, title, position, basis of representation, email address, telephone number, content of correspondence of the employee of the supplier, partner, etc. (legal entity) | Article 6(1)(f) GDPR (legitimate interest) | During the term of the Agreement | Personal data is transferred to processors |
Purpose: protecting rights and legitimate interests of the Company
| Personal data | Legal basis | Storage period | Other comments |
|---|---|---|---|
| Any and all personal data collected in the performance of contracts that are necessary to resolve a dispute | Article 6(1)(f) GDPR (legitimate interest - defence of legal claims) | 10 years | Data transmission courts, public dispute resolution bodies, litigants, lawyers and other legal service providers |
8. Direct marketing (sales promotion)
We send direct marketing communications to recipients who have given their consent to direct marketing. For the purpose of sending direct marketing communications, we process the following personal data: name of the organization, position, email address, telephone number, content and dates of the messages sent. Your data will be processed for the purpose of sending direct marketing communications for 2 years from the date of consent. Direct marketing communications are sent (your contact details are processed) on the basis of consent.
If you are our client and you did not object to direct marketing of our goods or services similar to the services you have purchased at the time of ordering the services (at the time of entering into the contract), we may send direct marketing communications to the email address specified in the contract on the basis of our legitimate interest. In this case, direct marketing communications will be sent to the email address specified in the contract for the duration of the contract and for 1 year after its termination, unless you object to the further processing of the data for the purpose of direct marketing before that time. In this case, we will immediately stop sending you direct marketing communications.
Personal data processed for the purpose of direct marketing shall be transferred to the processors necessary to carry out direct marketing.
You have the right to opt-out of receiving direct marketing communications at any time by contacting us at the email address set out in Section 2.
9. Protecting confidential information of the Company and ensuring business continuity
The Company may review its employees' correspondence with contractors in order to protect the Company's confidential information and ensuring the continuity of the Company's business in its legitimate interest. For these purposes, the Company processes the following personal data of its employees and of persons who send or receive employee communications: e-mail address, name of the sender or recipient, date, and content of information contained in electronic work tools. Such data shall be kept for 4 years.
10. Defending our rights and legitimate interests
The Company will, on the basis of its legitimate interest to defend its rights, including in the event of civil disputes, process the names, surnames, personal identification numbers, case background, other information related to the case, and publicly available information of the persons involved in the case or of their employees. The data may be communicated to law enforcement authorities, lawyers or bailiffs for the purpose of debt collection. The data shall be destroyed 1 year after the final settlement of the case and the full satisfaction of the Company's claims (if satisfied).
11. Archiving
We continue to store contracts for goods, works, services, and acts of acceptance of goods, works and services for archiving purposes (10 years after the end of the contract), when they are no longer needed for the original purpose (in the general sense of concluding and performing the contract). We process personal data for this purpose in order to comply with a legal obligation (Article 6(1)(c) GDPR), as set out in point 10.37 of the General Index of Document Retention Periods approved by Order No V-100 of the Archivist of the Republic of Lithuania dated 9 March 2011.
12. Contact us
There are several ways you can contact the Company: by phone, email, social media accounts or by sending a letter to the Company's registered office address. All communications are received, reviewed and responded to by us. If you contact us, we may process the data you provide to us, i.e. email address, name (if provided), username (if the request is sent via a social networking account), workplace (if provided), date, time, recipient, sender (if the message is addressed to you), content of the messages sent and received.
Such data will be processed in order to answer your questions and process your suggestions. If you do not provide your contact details, it will not be possible to contact you.
Correspondence is stored for 1 year from the date of receipt of the message, except for information for which other time limits are specified in the Privacy Policy or in legal acts.
Any personal data you provide when you interact with us is only used for the purposes set out above and to view messages and administer and manage communication flows. We undertake not to use your personal data in any publications in a way that could identify you without your explicit consent.
Please note that we may need to contact you by post, email or telephone. Please notify us of any changes to your personal data.
13. Cookies and other tracking technologies
Our websites use cookies and other tracking technologies. A cookie is a small file made up of letters and numbers that we place on your browser or on the hard drive of your computer with your consent. We use different cookies for different purposes.
Cookies also help us to distinguish you from other users of the Website, thus ensuring a more pleasant experience and enabling us to improve the Website.
Most browsers allow you to reject all cookies, and some browsers only allow you to reject third party cookies. You can therefore take advantage of these options. However, please note that blocking all cookies will have a negative impact on the use of the Website and without cookies you will not be able to use all the services provided on the Website. Further information is available at AllAboutCookies.org or www.google.com/privacy_ads.html.
We may use the types of cookies described below, but for a detailed and up-to-date list of the cookies used on this website, please visit HERE. !!!
Strictly Necessary Cookies.
These cookies are absolutely necessary for our website to work. The basis for the use of such cookies is Article 73(4) of the Law on Electronic Communications of the Republic of Lithuania. These cookies are necessary for the operation of the website and cannot be disabled on our systems. They are usually used in response to what you do on the website, such as starting to browse or selecting your privacy settings. These cookies do not store any personally identifiable information about you and are deleted as soon as you turn off the website.
Analytics and/or Performance Cookies.
These cookies allow us to count the number of visits to the website and to monitor the flow of visitors so that we can improve the website. They allow us to know which pages of the website are the most or least visited and to monitor how visitors navigate through the website. The data collected is not accessible to any other party. The information collected by cookies is anonymous and is not intended to identify you or to influence your browsing experience while you are on the website. If you do not consent to the use of these cookies, you will not be recorded in the visit statistics. The processing of data collected by these cookies is based on your consent.
Commercial / Advertising Cookies.
These cookies, used by us and third parties, are designed to show you offers or other promotional information that may be of interest to you. We use cookies that collect data about your browsing history and identify your areas of interest so that we can show you relevant marketing information. The processing of data collected by these cookies is based on your consent.
14. Managing our social media accounts
The information you provide to us via social media (including messages, the use of the "Like" and "Follow" buttons, and other communications) is controlled by the operator of the social network.
Our websites may provide links to our social media accounts ("Social Accounts"). We currently administer the following Social Accounts:
- AIDA Projektai account on LinkedIn;
- AIDA Recruitment account on LinkedIn;
- AIDA Recruitment account on Instagram;
- AIDA Recruitment account on Facebook;
- TeamFill account on LinkedIn;
We process the information contained in social accounts for the purpose of administering the accounts on the basis of your consent. We do not separately store the information contained in the Social Accounts (where the data is processed for the purpose of administering the Social Accounts, but the data may be stored if it is necessary to process the data for another purpose, such as for the purpose of enforcing rights).
When you visit Social Accounts, social network administrators place cookies on your device that collect personal data. Cookies are stored both if you are a registered user of a social network and if you do not have an account with the relevant social network. We do not have access to the personal data collected about you and can only obtain statistical information from the administrators of the social networks about the traffic of the Social Accounts.
We recommend that you read the privacy notices of third parties and contact the service providers directly if you have any questions about how they use your personal data.
15. Receipt and disclosure of data
We receive your data from you, our employees and service providers, our contractors or generate it from software (for example, applicant assessments provided by TeamFill).
Your personal data may be transferred to our data processors, such as IT or cloud service companies (e.g. when we rent servers from an IT company, your personal data will be physically hosted (stored) with that IT company). We require our data processors to ensure adequate protection of your data and ensure that they process your personal data only for the purposes for which we have instructed them to do so and only under our written instructions.
Personal data may also be transferred to recipients who act as data controllers (separately or jointly with us). For example, social network operators, banks, payment service providers (for payments for paid services), etc.
If you have any questions about our service providers, please contact us at the email address listed in our Privacy Policy.
In addition to the specific recipients of the data identified in this Privacy Policy, we may also disclose information about you:
- if we are required to do so by law (e.g. by a court or law enforcement authority);
- when we intend to sell the business or part of its assets by disclosing your personal data to a potential buyer of the business or part of the business;
- the sale of the Company's business or a substantial part of its assets to a third party.
- where necessary to protect our rights and legitimate interests.
Except as provided in this Privacy Policy, we do not provide your personal data to any third parties.
16. Security of your personal data
Your personal data will be processed in accordance with the General Data Protection Regulation, the Law on Legal Protection of Personal Data of the Republic of Lithuania and other legal requirements. When processing your personal data, we implement organisational and technical measures to ensure the protection of personal data against accidental or unlawful destruction, alteration, disclosure, as well as against any other unlawful processing.
17. Your rights
In this section, we provide information about your rights in relation to our processing of your personal data and when you can exercise these rights. If you would like more information about your rights or to exercise them, please contact us at the email address set out in this Privacy Policy.
The Company will provide you with information on the action taken following your request for the exercise of your rights without undue delay, but at the latest within one (1) month of receipt of the request. Depending on the complexity of the request and the number of requests received, the aforementioned time limit may be extended for a further 2 (two) months. In this case, we will inform you within 1 (one) month of receipt of the request of such extension and the reasons for it. The company will only refuse to exercise your rights in cases provided for by law.
18. Right of access to your personal data
We want you to fully understand how we use your personal data so that you do not experience any inconvenience. You can contact us at any time to enquire whether we are processing any of your personal data. If we store or use your personal data in any way, you have the right to access it. To do so, please submit a written request to us at the email address set out in this Privacy Policy, confirm your identity; and observe the principles of fairness and reasonableness when making such a request.
18.1 Right to withdraw consent
If you have given us your explicit consent to the processing of your data, you can withdraw it at any time. Withdrawal of consent does not affect the lawfulness of consent-based processing carried out before the withdrawal of consent.
18.2 Additional rights
Below you will find information about additional rights that you may have, which you can exercise by following the procedures described below.
(a) You have the right to ask us to correct any inaccuracies in the data we hold. In this case, we may ask you to confirm the corrected information.
(b) You have the right to ask us to delete your personal data. This right shall be exercised in the cases provided for in Article 17 of the General Data Protection Regulation (EU) 2016/679.
(c) You have the right to ask us to restrict or not to process your personal data:
- the period of time necessary to verify the accuracy of your personal data when you make a complaint about the accuracy of the data;
- where our collection, storage or use of your personal data is unlawful, but you choose not to request erasure;
- where we no longer need your personal data, but you need it to establish, exercise or defend a legal claim;
- the period necessary to determine whether we have an overriding legal basis to continue processing your personal data if you have exercised your right to object to the processing of personal data.
(d) You have the right to the transfer of data processed by automated means which we have received from you in a structured, commonly used and computer-readable format with your consent or for the purposes of concluding a contract (right to data portability). If you exercise this right, we will, at your request, transfer a copy of the data provided by you to you or to a data controller of your choice.
(e) You have the right to object to our use of your personal data in accordance with Article 21 of the GDPR. You have the right to object when your personal data is processed on the basis of legitimate interest (for each of the above purposes of processing, it is indicated on which basis the data is processed) or for direct marketing purposes.
18.3 Right to request more information
We hope that you will understand that it is very difficult to discuss all possible ways of collecting and using personal data. We do our best to provide as clear and complete information as possible and we undertake to update this Privacy Policy if the process of using personal data changes. However, if you have any questions about our use of your personal data, we will be happy to answer them or provide you with any additional information we may disclose. If you have any specific questions or do not understand the information provided, please contact us.
19. Complaints
If you believe that your rights as a data subject have been and/or may be violated, please contact us immediately at the email address specified in this Privacy Policy. We ensure that only upon receipt of your complaint, we will contact you within a reasonable period of time to inform you of the progress of the investigation and, subsequently, the outcome of the complaint.
If you are not satisfied with the results of the investigation, you can lodge a complaint with the supervisory authority, the State Data Protection Inspectorate: https://vdai.lrv.lt/.
20. Responsibility
You are responsible for maintaining the confidentiality of the data you provide to us and for ensuring that the data you provide to us is accurate, correct and complete. If there is any change in the data you have provided, you must inform us immediately by e-mail. In no event shall we be liable for any damage caused to you as a result of your providing incorrect or incomplete personal data or your failure to inform us of any change in the data.
21. Changes to the Privacy Policy
We may update or change this Privacy Policy at any time. If you would like to receive an updated Privacy Policy, please notify us at the email address listed in Section 2.
Cookie list
| Cookie name | Purpose of processing | Data used | Period of validity | Type of cookie | Link to the third party privacy policy |
|---|---|---|---|---|---|
| teamfillnet_session | Used to log in to a user | Session data | Session | Necessary | - |
| XSRF-TOKEN | Used for security reasons | Unique identifier | Session | Necessary | - |
| _ga | Used to distinguish users by assigning a unique user ID | User ID and browsing data | 2 years | Analytics | Google Privacy Policy |
| _gid | Used to distinguish users | User ID and browsing data | 24 hours | Analytics | Google Privacy Policy |
| _gat | Used to throttle request rate, limiting data collection on high-traffic sites | No data, only used to limit data requests | 1 minute | Analytics | Google Privacy Policy |
| gac* | Contains campaign-related information for the user (if Google Ads integration) | Campaign-related data, unique user ID | 90 days | Analytics, advertising | Google Privacy Policy |
| ga |
Used to persist session state | User interactions, unique user ID, session data | 2 years | Analytics | Google Privacy Policy |
| _fbp | Used to deliver, measure, and improve the relevancy of ads | Unique user ID, device information, browsing behavior | 3 months | Analytics, advertising | Facebook Privacy Policy |
| _clck | Persists the Clarity User ID and preferences across browsing sessions | Unique user ID, session data | 1 year | Analytics | Microsoft Privacy Statement |
| _clsk | Connects multiple page views by a user into a single Clarity session record | Session data, page interaction details | 1 day | Analytics | Microsoft Privacy Statement |