Thanks for your interest in working with us!

We want to be open with you about how we use, store and collect your data when you apply for a job at Vinted. That’s why we’ve created this Privacy Policy. Please read it carefully as it contains important information about your privacy and the related rights.

1. Who is responsible for protecting your information and how to contact us?

2. Why do we collect information about you?

3. What information do we collect?

4. Why are we legally allowed to collect your information?

5. Where do we get your information from?

6. Which information do you have to provide us with and why?

7. Do we share any information about you?

8. Do we disclose any information about you outside the European Economic Area?

9. How long do we keep information about you?

10. What privacy rights do you have?

11. Changes to this Privacy Policy

1. Who is responsible for protecting your information and how to contact us?

At Vinted, we care about keeping your information confidential and secure. We follow the requirements outlined in the EU General Data Protection Regulation (“GDPR”) and other laws aimed at protecting your personal data.

When you apply for a position with our Lithuanian company, Vinted UAB is the data controller and is responsible for protecting your information.

If you apply for a job at our German, French, Czech, Polish or Dutch company, Vinted UAB is the data controller and is responsible for organising the recruitment process. Meanwhile, the company in the country you applied to (our German, French, Czech, Polish or Dutch company) is responsible for supporting the recruitment process.

Here are the contact details of our companies:

• Vinted, UAB (Lithuanian company). Identification number: 302767152. Address: Švitrigailos 13, LT-03228, Vilnius.

• Vinted GmbH (German company – if you apply for a job at this entity). Identification number: HRB 184585 B. Address: Unter den Linden 14, 10117 Berlin.

• Vinted, SASU (French company – if you apply for a job at this entity). Identification number: 921456380. Address: 5 Rue de l'Arc de Triomphe, 75017 Paris.

• Vinted s.r.o. (Czech company – if you apply for a job at this entity). Identification number: 29130182. Address: Zenklova 32/28, Libeň (Praha 8), 180 00 Praha.

• Vinted Sp. z.o.o. (Polish company – if you apply for a job at this entity). Identification number: 0000448543. Address: przy ul. Grzybowska 2 lok. 29 00-131 Warszawa.

• Vinted B.V. (Dutch company – if you apply for a job at this entity). Address: Vinkenburgstraat 2 A, 3512 AB Utrecht, Netherlands.

Vinted has a designated Data Protection Officer. If you have any questions, comments or complaints regarding how we collect, use and store information about you, or if you want to assert any of your rights under the GDPR, please send an email via privacy.hr@vinted.com.

2. Why do we collect information about you?

When you apply for a job at Vinted or are referred to us by someone else, we collect, use and store the information that is necessary to assess your application and your suitability to enter into an employment contract with us, and suggest a job offer for you.

If you agree, we will also collect, use and store information for anonymised monitoring of diversity, equal opportunities and the overall candidate experience so that we can evaluate the effectiveness of our recruitment process and improve it. This information will not be used in the recruitment and selection process.

We may also use your information to handle your privacy rights requests and take the necessary action (see Section 10).

If you get involved in a dispute with us or we otherwise need to defend, enforce, exercise, and uphold our rights, we will use all your information as necessary to resolve a particular situation.

3. What information do we collect?

We collect, use and store the information that is necessary for the purposes outlined in Section 2, plus the information which you provide to us voluntarily. (What is necessary depends on the job ad and our requests. For example, for some positions, certificates are required). This information includes:

• Your full name

• Your contact information, including email address and phone number

• Your communication (email messages, attachments, conversations on social media, etc.) with us and/or with the recruitment agency

• Your CV, resume, cover letter and/or other document (including any attachments thereto) that contains your employment history, relevant experience, education, language proficiency, certifications, recommendations, etc.

• Updates on your employment history (when you permit us to contact you about the future job opportunities)

• Link to your LinkedIn profile, GitHub profile, and/or personal website

• The job openings you are interested in

• Interview notes about you

• Referrer’s notes about you and your relationship with referrer

• Recruitment agency’s assessment of you

• Your fitness for a particular position, including your skills, qualifications, values, etc.

• Recruitment tasks (presentations, tests, etc.) performed by you

• Tryout agreements, including non-disclosure agreement, and any information contained therein (your full name, personal identification number or tax identification number, home address, remuneration, bank account number, rights and obligations)

• Your desired salary and other job-related preferences

• Information you choose to provide to us for diversity, equal opportunities, and candidate experience monitoring (note: we do not have access to this data as part of your candidate profile and only receive aggregated information from our recruitment tool service provider)

• Other non-required information voluntarily submitted by you

4. Why are we legally allowed to collect your information?

We collect information about you lawfully because:

• We have the intention to enter into a contract with you (Art. 6 (1) (b) of GDPR) – when you apply for a particular job position and we assess your suitability for the role

• We have a legitimate interest to effectively organise the recruitment process (Art. 6 (1) (f) of GDPR)

• You have given us consent to process your personal data (Art. 6 (1) (a) of GDPR) – (a) when you permit us to contact you about the future job opportunities; (b) when you voluntarily provide us information for anonymised monitoring of diversity, equal opportunities and the overall candidate experience; (c) when you voluntarily provide us information that goes beyond what is strictly necessary for the purposes outlined in Section 2

• We have a legitimate interest to contact you and offer a job opportunity (Art. 6 (1) (f) of GDPR) – when you publish your contact details on LinkedIn or other channels

• We have a legitimate interest to defend the rights and interests of Vinted (Art. 6 (1) (f) of GDPR) – when you get involved in a dispute with us or we otherwise need to defend, enforce, exercise, and uphold our rights

• We have a legal obligation to process your personal data (Art. 6 (1) (c) of GDPR) – (a) when you wish to exercise your privacy rights (Section 10), including the right to object to us contacting you about job opportunities

5. Where do we get your information from?

Generally, we collect the information directly from you. However, there is some information we may obtain from the following parties:

• Vinted employees (referrals)

• Recruitment agencies

• LinkedIn and other social media sources

• Greenhouse Software, Inc.

• Lever, Inc.

• MeetFrank OÜ

• Glassdoor, Inc.

• Other recruitment agents and collaboration platforms

6. Which information do you have to provide us with and why?

Please read Section 2 above – you’re required to provide us with the information which is necessary to assess your application and your suitability to enter into an employment contract and suggest a job offer for you. What is necessary depends on the job ad and our requests.

You are not legally obliged to provide us with your personal information. However, if you do not provide this information, we will not be able to assess your application and your suitability to receive a job offer from us or to enter into an employment contract with us.

You do not have to provide information that is not necessary for the purposes mentioned above but voluntarily provided by you. You never have to provide us with information containing special categories of data.

7. Do we share any information about you?

We only share information about you with the following recipients where permitted by applicable laws and necessary for the purposes outlined in Section 2:

• Vinted, UAB and Vinted, Ltd. (to manage Vinted’s international group of companies)

• Providers of recruitment, IT (including social media, recruitment software, email, and communication software), communication, translation, consultancy, financial, legal, and other services

• Supervisory authorities

8. Do we disclose any information about you outside the European Economic Area?

In most cases, your data is processed within the territory of the European Economic Area (EEA). However, some of our service providers are established outside of this territory, which may result in your data being transferred to third countries (e.g. USA). When this is permitted by law and is necessary for the purposes outlined in Section 2, we share your data with the following recipients outside the EEA:

• Greenhouse Software, Inc. (USA) – recruitment software service provider (your data is protected by the service provider entering into the Standard Contractual Clauses as approved by the European Commission)

• LinkedIn Corporation (USA) – social media service provider (your data is protected by the service provider entering into the Standard Contractual Clauses as approved by the European Commission)

• Google LLC (USA) – communication service provider (your data is protected by the service provider entering into the Standard Contractual Clauses as approved by the European Commission)

• Slack Technologies, Inc. (USA) – communication software service provider (your data is protected by the service provider entering into the Standard Contractual Clauses as approved by the European Commission)

• CloudRock Partners Ltd (UK) – digital recruitment consultancy service provider (the destination country offers an adequate level of data protection as recognised by the European Commision)

9. How long do we keep information about you?

When you apply for a particular job, we, in general, will keep your personal data for as long as described below:

• If you become an employee, we will save your application information within your employee file.

• If you do not start working with us, we will keep your personal data for 4 (four) months after the end of the recruitment process so we can address any potential claims.

When you permit Vinted to contact you about future job opportunities, we will store your personal data for 2 (two) years after the end of the recruitment process.

When you object to Vinted contacting you after being approached by us via Linkedin or other channels, we will keep your full name and contact information for 10 (ten) years. This is to ensure that we don’t contact you in the future. We won’t use your information for anything else.

10. What privacy rights do you have?

The GDPR and other laws provide you with certain rights, as well as procedures for implementation of and exceptions to these rights. When allowed by law, you can:

• Submit a request for confirmation whether Vinted is processing the data related to you. If Vinted processes the data related to you, you can request access to the data undergoing processing and the related information (Art. 15 of GDPR)

• Submit a request to correct inaccurate or incorrect information or to supplement it when it is not complete (Art. 16 of GDPR)

• Submit a request to delete the information we have about you (“right to be forgotten”) (Art. 17 of GDPR)

• Submit a request to restrict the processing of your information (Art. 18 of GDPR)

• Object to collection, use and storage of your information at Vinted (Art. 21 of GDPR)

• Submit a request to transfer (receive) the data that you provided to us under the contract or by giving consent and which we process by automated means, generally using electronic form (Art. 20 of GDPR)

• Withdraw any consents given to us regarding information about you (Art. 7 (3) of GDPR)

• Lodge a complaint with a supervisory authority, in particular in the country of your habitual residence or place of an alleged infringement of the GDPR, and seek a judicial remedy (Art. 77 of GDPR)

11. Changes to this Privacy Policy

Whenever we update our Candidate Privacy Policy, we will notify you by posting a new version on this page and will identify the date of update. In case of material changes to this Privacy Policy, we will take additional steps to make sure you are made aware of them.