Your privacy

Who is responsible for 
protecting your data?

When you engage with any of Vinted’s companies – whether by applying for a role, being referred for it, or visiting this website – your data controller is Vinted, UAB (“Vinted” or “we”), which means it takes responsibility for protecting your data.

Depending on the location and role you’re applying for, other Vinted companies may also be included in the recruitment process:

• Vinted, UAB (Lithuania). Identification number: 302767152. Address: Švitrigailos 13, LT-03228, Vilnius.
• Vinted Go, UAB (Lithuania). Identification number: 305959706. Address: Švitrigailos 13, LT-03228, Vilnius.
• Vinted Pay, UAB (Lithuania). Identification number: 306056667. Address: Švitrigailos 13, LT-03228, Vilnius.
• Vinted GmbH (Germany). Identification number: HRB 184585 B. Address: Unter den Linden 14, 10117 Berlin.
• Vinted Go GmbH (Germany). Identification number: HRB 126796. Address: Modering 5, D-22457 Hamburg.
• Vinted, SASU (France). Identification number: 921456380. Address: 5 Rue de l'Arc de Triomphe, 75017 Paris.
• Vinted s.r.o. (Czechia). Identification number: 29130182. Address: Zenklova 32/28, Libeň (Praha 8), 180 00 Praha.
• Vinted Sp. z.o.o. (Poland). Identification number: 0000448543. Address: przy ul. Grzybowska 2 lok. 29 00-131 Warszawa.
• Vinted B.V. (Netherlands). Address: Vinkenburgstraat 2 A, 3512 AB Utrecht.
• Vinted (UK) Limited (United Kingdom). Identification number: 14685110. Address: 5 New Street Square, EC4A 3TW, London.

Vinted has a designated Data Protection Officer. If you have any questions, comments or complaints regarding how we handle your data, or if you want to assert any of your rights under the General Data Protection Regulation (“GDPR”), please send an email to privacy.hr@vinted.com.

What data do we collect
and why?

1. To assess your application and, potentially, offer you a job with us 

Purpose. When you apply for a role at Vinted (either directly or through a recruitment agency), or when you are referred to us by someone else, we collect, use, and store the data needed to organise and optimise the recruitment process, review your application, and decide if you're a good fit for the role.

Data categories. For this purpose, we collect, use and store:

• Identification data (such as your full name, email address, phone number, nationality, personal identification number, tax identification number, home address, remuneration, bank account number, etc.).
• Communications data (such as email messages, attachments, conversations on social media, etc., with us and/or with a recruitment agency).
• Recruiter’s or referrer’s data (such as your recruiter’s/referrer’s full name and notes, the nature of your relationship with the referrer (personal or professional), recruitment agency’s assessment of you, etc.).
• Application data (such as your employment history, relevant experience, education, language proficiency, and any other data provided in your CV or documents attached thereto, where and how you applied for a job with us, your desired salary and other job-related preferences, updates on your employment history (when you permit us to contact you about the future job opportunities), links to your LinkedIn profile, GitHub profile, and/or personal website, etc.)
• Suitability for a particular position assessment data (such as your skills, qualifications, values, whether you are eligible to legally work in the country you are applying or getting referred to, whether you require visa support, etc.).
• Recruitment tasks data (such as the presentations and tests performed by you, interview notes about you, tryout agreements (including the non-disclosure agreement, and any information contained therein), other non-required information voluntarily submitted by you, etc.).

Legal basis. We collect, use and store the data lawfully because:

• When you apply or get referred for a particular role and we assess your suitability for the role, we have the intention to enter into a contract with you (Art. 6(1)(b) of GDPR). 
• We also have a legitimate interest in effectively organising our recruitment process (Art. 6(1)(f) of GDPR). 
• In addition, we process the data that you voluntarily provide to us that goes beyond what is strictly necessary for the purposes outlined above on the basis of your consent (Art. 6(1)(a) of GDPR). You can withdraw your consent at any time by sending an email to privacy.hr@vinted.com.

Retention period. If you become an employee with us, we will save the information contained in your application within your employee file. If you do not start working with us, we will keep your personal data for 4 months after the end of the recruitment process so we can address any potential claims and have a short history of applications. If you consent to receive email notifications about future job opportunities, we will store your data for a longer period as detailed below.

2. To notify you about job opportunities at Vinted

Purpose. We collect, use and store the data that is necessary in order to send you email notifications about job opportunities at Vinted and invite you to participate in our recruitment process.

Data categories. For this purpose, we collect, use and store your email address, your contact details published on social media platforms (e.g. LinkedIn), and the information listed above.

Legal basis. We collect, use and store the data for the purposes of:

• Sending you email notifications about job opportunities and inviting you to participate in our recruitment process where we have your consent (Article 6(1)(a) of the GDPR). You can withdraw your consent at any time by clicking on “Unsubscribe” in the footer of each email.
• We also have a legitimate interest in assessing your suitability for the role and in contacting you to offer a job opportunity (Art. 6(1)(f) of GDPR) when you publish your contact details on LinkedIn or other channels. 

Retention period. If we obtain your consent to receive notifications about job opportunities during the application process, we keep the data for this purpose for 2 years after the end of the recruitment process. When you object to Vinted contacting you after being approached by us via LinkedIn or other channels, we will keep your full name and contact information for 10 years – this is to ensure that we do not contact you in the future. We will not use your information for anything else.

3. To monitor diversity, equal opportunities and candidate experience

Purpose. If you agree, we collect, use and store the data that is necessary for anonymised monitoring of diversity, equal opportunities and the overall candidate experience, so that we can evaluate and improve the overall effectiveness of our recruitment process. This information is not used in the recruitment and selection process.

Data categories. Information you choose to provide to us for diversity, equal opportunities, and candidate experience monitoring (note: we do not have access to this data as part of your candidate profile and only receive aggregated information from our recruitment tool service provider).

Legal basis. We collect, use and store the data lawfully because we have your consent (Article 6(1)(a) of the GDPR). You can withdraw your consent at any time by sending an email to privacy.hr@vinted.com.

Retention period. Data for this purpose is kept for 3 years.

4. To ensure the functionality of our website

Purpose. We collect, use and store the data that is necessary for our website to function properly (for example, to remember your privacy preferences or to allow you to fill in forms).

Data categories. With the help of strictly necessary and functional cookies, we collect, use and store the data about your use of our website.

Legal basis. We collect, use and store the data lawfully because it is necessary for the legitimate interest of Vinted to ensure the functionality of our website (Article 6(1)(f) of the GDPR).

Retention period. We keep the data for this purpose until the relevant cookies expire.

5. To analyse and improve our website

Purpose. We collect, use and store the data that is necessary to analyse the usage of our website and improve its performance.

Data categories. With the help of analytical cookies, we collect, use and store the data about your use of our website.

Legal basis. We collect, use and store the data lawfully because we have your consent (Article 6(1)(a) of the GDPR). You can withdraw your consent at any time.

Retention period. We keep the data for this purpose until the relevant cookies expire.

6. To optimise the advertising of job opportunities

Purpose. We collect, use and store the data that is necessary to better optimise the advertising of job opportunities at Vinted.

Data categories. With the help of advertising cookies, we collect, use and store the data about your use of our website.

Legal basis. We collect, use and store the data lawfully because we have your consent (Article 6(1)(a) of the GDPR). You can withdraw your consent at any time (see "What cookies do we use?" below).

Retention period. We keep the data for this purpose until the relevant cookies expire (see "What cookies do we use?" below).

7. To respond to your requests 

Purpose. When you reach out to us, we collect, use and store the data that is necessary to respond to your request.

Data categories. For this purpose, we collect, use and store the data contained in your request, such as your full name, email address, phone number, date and time and the content of your message.

Legal basis. We collect, use and store the data lawfully because it is necessary for the legitimate interest of Vinted to maintain contact with potential candidates and other interested persons (Article 6(1)(f) of the GDPR).

Retention period. We keep the data for this purpose for 2 years from the receipt of your message.

8. To exercise your privacy rights

Purpose. If you send us a request, complaint or other enquiry in relation to your privacy rights, we collect, use and store the data that is necessary to handle the enquiry and take appropriate action.

Data categories. For this purpose, we collect, use and store the data contained in your enquiry, in addition to any other data held by Vinted as necessary to respond to a specific enquiry.

Legal basis. We collect, use and store this data lawfully because it is necessary for compliance with a legal obligation to which Vinted is subject (Article 6(1)(c) of the GDPR).

Retention period. We keep the data for this purpose for 2 years after resolving the enquiry.

9. To defend our rights and interests

Purpose. If you get involved in a dispute with us or we need to otherwise defend, enforce, exercise and uphold our rights or legitimate interests, we collect, use and store the data that is necessary for the specific case.

Data categories. For this purpose, we collect, use and store all data we hold about you as necessary for the specific case.

Legal basis. We collect, use and store the data lawfully as it is necessary for the legitimate interest of Vinted to defend its rights and interests (Article 6(1)(f) of the GDPR).

Retention period. We keep the data for as long as it is necessary to defend our specific rights and interests, and, in the case of a dispute, until the final execution of the binding decision of the authorised body.

What cookies do we use?

Cookies are small text files that are placed on your device by the websites you visit. They are widely used to make websites work or function in a better, more efficient way.

To see what specific cookies we use, how long they are stored, and how you can manage them, click here.

You can configure your browser to decline some or all non-strictly necessary cookies, or to ask for your permission before accepting them. Please note that by deleting cookies or disabling cookies, you may be unable to access certain areas or features of our website. For more information on how to adjust or change your browser settings, visit www.aboutcookies.org or www.allaboutcookies.org.

Where do we get your information from?

Generally, we collect the information directly from you. However, there is some information we may obtain from the following parties:

• Vinted employees (referrals)
• Recruitment agencies
• Your former employer(s) (only after notifying you)
• LinkedIn and other professional social media sources
• Lever, Inc.
• MeetFrank OÜ
• Glassdoor, Inc.
• Other recruitment agents and collaboration platforms

Which information do you have to provide us and why?

Please read “What data do we collect and why?” above – you’re required to provide us with the information which is necessary to assess your application and your suitability to enter into an employment contract and suggest a job offer for you. What is necessary depends on the job ad and our requests.

You are not legally obliged to provide us with your personal information. However, if you do not provide this information, we will not be able to assess your application and your suitability to receive a job offer from us or to enter into an employment contract with us.

You do not have to provide information that is not necessary for the purposes mentioned above but voluntarily provided by you. You never have to provide us with information containing special categories of data.

Do we share any data about you?

We only share information about you with the following recipients when it is in line with applicable laws and necessary for the purposes outlined above:

• Vinted’s group of companies.
• IT maintenance, technical support, customer support, cloud, hosting, information security, communication, translation, consultancy, financial, legal, and other service providers.
• Law enforcement, supervisory and other public authorities.

Do we disclose any information about you outside the European Economic Area?

In most cases, your data is processed within the territory of the European Economic Area (EEA). However, some of our service providers are established outside of this territory, which may result in your data being transferred to third countries (e.g. USA). We share your data with the following recipients outside the EEA when it is in line with applicable laws and is necessary for the purposes outlined above:

• Greenhouse Software, Inc. (USA) – recruitment software service provider (your data is protected by the service provider entering into the Standard Contractual Clauses as approved by the European Commission).
• LinkedIn Corporation (USA) – social media service provider (your data is protected by the service provider entering into the Standard Contractual Clauses as approved by the European Commission).
• Google LLC (USA) – communication service provider (your data is protected by the service provider entering into the Standard Contractual Clauses as approved by the European Commission).
• Slack Technologies, Inc. (USA) – communication software service provider (your data is protected by the service provider entering into the Standard Contractual Clauses as approved by the European Commission).
• CloudRock Partners Ltd (UK) – digital recruitment consultancy service provider (the destination country offers an adequate level of data protection as recognised by the European Commision).
• Etch Mobile, Inc. (GoodTime) (USA) – recruitment software service provider (your data is protected by the service provider entering into the Standard Contractual Clauses as approved by the European Commission).