Summary: VerdaBlue UAB collects only the data necessary to provide recruitment services to EU employers and to process candidate applications. We do not sell data. We comply fully with EU GDPR. Data requests may be directed to kundan@verdablue.com.
1. Who We Are
VerdaBlue UAB is a skilled trades recruitment firm registered in Vilnius, Lithuania, European Union. We operate as a data controller under the General Data Protection Regulation (GDPR) for personal data processed in connection with our EU employer and candidate services.
Data Controller: VerdaBlue UAB, Vilnius, Lithuania
Contact: kundan@verdablue.com
2. Data We Collect
We collect personal data in the following contexts:
From EU Employers:
- Company name, registered address, and company registration number
- Contact person name, job title, and business email address
- Job requirements, vacancy details, and correspondence
- Contract and invoice information
From Candidates (India):
- Full name, contact details, date of birth, and nationality
- ITI NCVT certificate details and trade qualifications
- Employment history and professional references
- Passport details and visa documentation
- German language assessment results
From Website Visitors:
- Contact form submissions including name and email address
- Essential cookies required for website functionality only
- No tracking cookies, no analytics, no advertising pixels
3. Legal Basis for Processing
- Contract performance — processing necessary to fulfil placement agreements with employers
- Legitimate interests — maintaining candidate pipelines, managing employer relationships
- Legal obligation — compliance with EU employment and tax law
- Consent — where specifically requested, such as for marketing communications
4. How We Use Your Data
- Matching candidates with appropriate employer vacancies
- Verifying qualifications and credentials through authorised bodies (ZAB, anabin)
- Communicating placement opportunities and process updates
- Preparing employment documentation and visa application support
- Invoicing and financial administration
- Complying with EU legal and regulatory obligations
5. Data Sharing
We share personal data only where necessary:
- Employers — anonymised candidate profiles first, full details only after NDA signature
- Credential verification bodies — ZAB and anabin for qualification checks
- German Federal Employment Agency — Bundesagentur für Arbeit, for visa-related processes
- Accountants and legal advisers — bound by professional confidentiality
- Payment processors — Wise Business (EU) and Razorpay (India)
We do not sell, rent, or trade personal data to any third party for marketing purposes.
6. International Data Transfers
As an EU-India recruitment firm, personal data is necessarily transferred between the EU and India. For transfers to India, we apply appropriate safeguards including standard contractual clauses and anonymisation where possible prior to transfer.
7. Data Retention
- Employer contract data — retained for 7 years for tax and legal compliance
- Candidate data for placed candidates — retained for 5 years post-placement
- Candidate data for unsuccessful applicants — deleted within 12 months of last contact
- Website enquiry data — retained for 24 months unless a placement relationship develops
8. Your Rights Under GDPR
If you are located in the EU or EEA, you have the following rights:
- Right of access — request a copy of personal data we hold about you
- Right to rectification — request correction of inaccurate data
- Right to erasure — request deletion of your data where no legal basis remains
- Right to portability — receive your data in a structured, machine-readable format
- Right to object — object to processing based on legitimate interests
- Right to restrict processing — request limitation of how we use your data
To exercise any of these rights, email kundan@verdablue.com. We will respond within 30 days.
9. Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. All data is transmitted over encrypted connections (TLS). Access to personal data is restricted to those with a need-to-know basis.
10. Complaints
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Lithuanian State Data Protection Inspectorate (SDPI) at vdai.lrv.lt, or with the supervisory authority in your country of residence.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The date at the top of this page reflects when the policy was last revised. Continued use of our services following any update constitutes acceptance of the revised policy.
12. Contact
For any privacy-related queries or data subject requests:
Email: kundan@verdablue.com
Entity: VerdaBlue UAB, Vilnius, Lithuania, European Union