Privacy policy

Vinted, UAB (“Vinted” or “we”) cares about treating your personal data in a lawful, secure and transparent way.

We’ve created this Privacy Policy to help you understand how we collect and use your personal data when you engage with our website, and/or apply or get referred for a job at Vinted. Read it carefully as it contains important information about your privacy and the rights relating to it.

1. Who is responsible for protecting your data?

Vinted, UAB manages this website and organizes the recruitment process. It acts as a data controller and is responsible for protecting your information. 

If you apply or get referred for a job at our Lithuanian, German, French, Czech, Polish or Dutch company, the respective company is responsible for supporting the recruitment process:

• Vinted, UAB (Lithuanian company). Identification number: 302767152. Address: Švitrigailos 13, LT-03228, Vilnius.
• Vinted Go, UAB (Lithuanian company). Identification number: 305959706. Address: Švitrigailos 13, LT-03228, Vilnius.
• Vinted Pay, UAB (Lithuanian company). Identification number: 306056667. Address: Švitrigailos 13, LT-03228, Vilnius.
• Vinted GmbH (German company). Identification number: HRB 184585 B. Address: Unter den Linden 14, 10117 Berlin.
• Vinted, SASU (French company). Identification number: 921456380. Address: 5 Rue de l'Arc de Triomphe, 75017 Paris.
• Vinted s.r.o. (Czech company). Identification number: 29130182. Address: Zenklova 32/28, Libeň (Praha 8), 180 00 Praha.
• Vinted Sp. z.o.o. (Polish company). Identification number: 0000448543. Address: przy ul. Grzybowska 2 lok. 29 00-131 Warszawa.
• Vinted B.V. (Dutch company). Address: Vinkenburgstraat 2 A, 3512 AB Utrecht.
• StyleRemains GmbH (German company). Identification number: HRB 126796. Address: Block X, 1st floor on the right Brooktorkai 4, 20457, Hamburg.

Vinted has a designated Data Protection Officer. If you have any questions, comments or complaints regarding how we handle information about you, or if you want to assert any of your rights under the General Data Protection Regulation (“GDPR”), please send an email to privacy.hr@vinted.com.

2. What data do we collect and why?

2.1. To assess your application and, potentially, offer you a job with us 

Purpose. When you apply or get referred for a job at Vinted (either directly or through a recruitment agency), or when you are referred to us by someone else, we collect, use and store the data that is necessary to assess your application and your suitability to enter into an employment contract with us.

Data categories. For this purpose, we collect, use and store:

• Identification data (such as your full name, email address, phone number, nationality, personal identification number, tax identification number, home address, remuneration, bank account number, etc.).
• Communications data (such as email messages, attachments, conversations on social media, etc., with us and/or with a recruitment agency).
• Recruiter’s or referrer’s data (such as  your recruiter’s/referrer’s full name and notes, your relationship with the referrer, recruitment agency’s assessment of you, etc.).
• Application data (such as your employment history, relevant experience, education, language proficiency, and any other data provided in your CV or documents attached thereto, where and how you applied for a job with us, your desired salary and other job-related preferences, updates on your employment history (when you permit us to contact you about the future job opportunities), links to your LinkedIn profile, GitHub profile, and/or personal website, etc.)
• Suitability for a particular position assessment data (such as your skills, qualifications, values, whether you are eligible to legally work in the country you are applying or getting referred to, whether you require visa support, etc.).
• Recruitment tasks data (such as the presentations and tests performed by you, interview notes about you, tryout agreements (including the non-disclosure agreement, and any information contained therein), other non-required information voluntarily submitted by you, etc.).

Legal basis. We collect, use and store the data lawfully because:

• When you apply or get referred for a particular position and we assess your suitability for the role, we have the intention to enter into a contract with you (Art. 6(1)(b) of GDPR). 
• We also have a legitimate interest to effectively organise our recruitment process (Art. 6(1)(f) of GDPR). 
• In addition, we process the information that you voluntarily provide to us that goes beyond what is strictly necessary for the purposes outlined above on the basis of consent (Art. 6(1)(a) of GDPR). You can withdraw your consent at any time by sending an email to privacy.hr@vinted.com.   

Retention period. If you become an employee with us, we will save the information contained in your application within your employee file. If you do not start working with us, we will keep your personal data for 4 months after the end of the recruitment process so we can address any potential claims and have a short history of applications.

2.2. To notify you about job opportunities at Vinted

Purpose. We collect, use and store the data that is necessary in order to send you email notifications about job opportunities at Vinted and invite you to participate in our recruitment process.

Data categories. For this purpose, we collect, use and store your email address, your contact details published on social media platforms (e.g. LinkedIn), and the information listed under section 2.1.

Legal basis. We collect, use and store the data for the purposes of:

• Sending you email notifications about job opportunities and inviting you to participate in our recruitment process where we have your consent (Article 6(1)(a) of the GDPR). You can withdraw your consent at any time by clicking on “Unsubscribe” in the footer of each email.
• We also have a legitimate interest to assess your suitability for the role and to contact you to offer a job opportunity (Art. 6(1)(f) of GDPR) when you publish your contact details on LinkedIn or other channels. 

Retention period. If we obtain your consent to receive notifications about job opportunities during the application process, we keep the data for this purpose for 2 years after the end of the recruitment process. When you object to Vinted contacting you after being approached by us via Linkedin or other channels, we will keep your full name and contact information for 10 years - this is to ensure that we do not contact you in the future. We will not use your information for anything else. We keep your email address for the purpose of sending you notifications until you unsubscribe from the mailing list.

2.3. To monitor diversity, equal opportunities and candidate experience

Purpose. If you agree, we collect, use and store the data that is necessary for anonymised monitoring of diversity, equal opportunities and the overall candidate experience, so that we can evaluate and improve the overall effectiveness of our recruitment process. This information is not used in the recruitment and selection process.

Data categories. Information you choose to provide to us for diversity, equal opportunities, and candidate experience monitoring (note: we do not have access to this data as part of your candidate profile and only receive aggregated information from our recruitment tool service provider).

Legal basis. We collect, use and store the data lawfully because we have your consent (Article 6(1)(a) of the GDPR). You can withdraw your consent at any time by sending an email to privacy.hr@vinted.com. 

Retention period. Data for this purpose is kept for 3 years.

2.4. To ensure the functionality of our website

Purpose. We collect, use and store the data that is necessary for our website to function properly (for example, to remember your privacy preferences or to allow you to fill in forms).

Data categories. With the help of strictly necessary and functional cookies (see Section 3 below), we collect, use and store the data about your use of our website.

Legal basis. We collect, use and store the data lawfully because it is necessary for the legitimate interest of Vinted to ensure the functionality of our website (Article 6(1)(f) of the GDPR).

Retention period. We keep the data for this purpose until the relevant cookies expire (see Section 3 below).

 2.5. To analyze and improve our website

Purpose. We collect, use and store the data that is necessary to analyse the usage of our website and improve its performance.

Data categories. With the help of analytical cookies (see Section 3 below), we collect, use and store the data about your use of our website.

Legal basis. We collect, use and store the data lawfully because we have your consent (Article 6(1)(a) of the GDPR). You can withdraw your consent at any time (see Section 3 below).

Retention period. We keep the data for this purpose until the relevant cookies expire (see Section 3 below).

2.6. To optimize the advertising of job opportunities

Purpose. We collect, use and store the data that is necessary to better optimise the advertising of job opportunities at Vinted. 

Data categories. With the help of advertising cookies (see Section 3 below), we collect, use and store the data to optimize the advertising of job opportunities at Vinted.

Legal basis. We collect, use and store the data lawfully because we have your consent (Article 6(1)(a) of the GDPR). You can withdraw your consent at any time (see Section 3 below).

Retention period. We keep the data for this purpose until the relevant cookies expire (see Section 3 below).

2.7. To respond to your requests 

Purpose. When you reach out to us, we collect, use and store the data that is necessary to respond to your request.

Data categories. For this purpose, we collect, use and store the data contained in your request, such as your full name, email address, phone number, date and time and the content of your message.

Legal basis. We collect, use and store the data lawfully because it is necessary for the legitimate interest of Vinted to maintain contact with potential candidates and other interested persons (Article 6(1)(f) of the GDPR).

Retention period. We keep the data for this purpose for 2 years from the receipt of your message.

2.8. To exercise your privacy rights

Purpose. If you send us a request, complaint or other enquiry in relation to your privacy rights (see Section 7 below), we collect, use and store the data that is necessary to handle the enquiry and take appropriate action.

Data categories. For this purpose, we collect, use and store the data contained in your enquiry, in addition to any other data held by Vinted as necessary to respond to a specific enquiry.

Legal basis. We collect, use and store this data lawfully because it is necessary for compliance with a legal obligation to which Vinted is subject (Article 6(1)(c) of the GDPR).

Retention period. We keep the data for this purpose for 2 years after resolving the enquiry.

2.9. To defend our rights and interests

Purpose. If you get involved in a dispute with us or we need to otherwise defend, enforce, exercise and uphold our rights or legitimate interests, we collect, use and store the data that is necessary for the specific case.

Data categories. For this purpose, we collect, use and store all data we hold about you as necessary for the specific case.

Legal basis. We collect, use and store the data lawfully as it is necessary for the legitimate interest of Vinted to defend its rights and interests (Article 6(1)(f) of the GDPR).

Retention period. We keep the data for as long as it is necessary to defend our specific rights and interests, and, in the case of a dispute, until the final execution of the binding decision of the authorised body.

3. What cookies do we use?

Cookies are small text files that are placed on your device by the websites you visit. They are widely used to make websites work or function in a better, more efficient way.

To see what specific cookies we use, how long they are stored, and how you can manage them, click on: Cookie settings

You can configure your browser to decline some or all non-strictly necessary cookies, or to ask for your permission before accepting them. Please note that by deleting cookies or disabling cookies, you may be unable to access certain areas or features of our website. For more information on how to adjust or change your browser settings, visit www.aboutcookies.org or www.allaboutcookies.org.

4. Where do we get your information from?

Generally, we collect the information directly from you. However, there is some information we may obtain from the following parties:

• Vinted employees (referrals)
• Recruitment agencies
• LinkedIn and other professional social media sources
• Greenhouse Software, Inc.
• Lever, Inc.
• MeetFrank OÜ
• Glassdoor, Inc.
• Other recruitment agents and collaboration platforms

5. Which information do you have to provide us and why?

Please read “What data do we collect and why?” above – you’re required to provide us with the information which is necessary to assess your application and your suitability to enter into an employment contract and suggest a job offer for you. What is necessary depends on the job ad and our requests. 

You are not legally obliged to provide us with your personal information. However, if you do not provide this information, we will not be able to assess your application and your suitability to receive a job offer from us or to enter into an employment contract with us. 

You do not have to provide information that is not necessary for the purposes mentioned above but voluntarily provided by you. You never have to provide us with information containing special categories of data.

6. Do we share any data about you?

We only share information about you with the following recipients where permitted by applicable laws and necessary for the purposes outlined in Section 2:

• Vinted’s group of companies.
• IT maintenance, technical support, customer support, cloud, hosting, information security, communication, translation, consultancy, financial, legal, and other service providers.
• Law enforcement, supervisory and other public authorities.

7. Do we disclose any information about you outside the European Economic Area?

In most cases, your data is processed within the territory of the European Economic Area (EEA). However, some of our service providers are established outside of this territory, which may result in your data being transferred to third countries (e.g. USA). When this is permitted by law and is necessary for the purposes outlined in Section 2, we share your data with the following recipients outside the EEA:

• Greenhouse Software, Inc. (USA) – recruitment software service provider (your data is protected by the service provider entering into the Standard Contractual Clauses as approved by the European Commission).
• LinkedIn Corporation (USA) – social media service provider (your data is protected by the service provider entering into the Standard Contractual Clauses as approved by the European Commission).
• Google LLC (USA) – communication service provider (your data is protected by the service provider entering into the Standard Contractual Clauses as approved by the European Commission).
• Slack Technologies, Inc. (USA) – communication software service provider (your data is protected by the service provider entering into the Standard Contractual Clauses as approved by the European Commission).
• CloudRock Partners Ltd (UK) – digital recruitment consultancy service provider (the destination country offers an adequate level of data protection as recognised by the European Commision).

8. What privacy rights do you have?

The GDPR and other laws provide you with certain rights. Subject to conditions and limitations, you have the right to:

• Submit a request for confirmation as to whether Vinted processes your personal data. If Vinted processes your personal data, you can request access to it and certain explanations.
• Submit a request to correct inaccurate or incorrect personal data or to supplement it when it is not complete.
• Submit a request to delete your personal data held by Vinted.
• Submit a request to restrict the processing of your personal data.
• Object, on grounds relating to your particular situation, to collection, use and storage of your personal data when Vinted processes it on the basis of legitimate interest.
• Lodge a complaint with a supervisory authority, in particular in the country of your habitual residence or place of an alleged infringement of the GDPR, and seek a judicial remedy.

If you’d like to exercise any of your privacy rights, reach out to us using the contact details in Section 1 above.

9. Changes to this Privacy Policy

We will notify you whenever we update this Privacy Policy by posting a new version on this page and identifying the date of update. In case of material changes to this Privacy Policy, we will take additional steps to make sure you are made aware of them.