Submit your application

Data Controller

EnGarde Games UAB, registered in Lithuania, is the EU data controller for all career application data submitted through this form. Contact: privacy@engarde.lt

What We Collect

By submitting this form you provide: your full name, email address, and the PDF file you upload (CV, portfolio, or cover letter). We collect only what you provide — no tracking pixels or cookies are used on this page beyond those already present in the site header.

Purpose & Legal Basis

Your data is processed for the sole purpose of evaluating your candidacy for the position selected above. The legal basis is our legitimate interest in recruiting under GDPR Art. 6(1)(f) and your explicit consent given by checking the required box. You will not be added to any marketing list.

Retention & Deletion

• If your application is unsuccessful: your name, email, and CV are deleted 3 months after the decision is made.
• If you are shortlisted or offered a position: data is kept for 12 months to support onboarding or future roles you may be considered for.
• You can request earlier deletion at any time by writing to privacy@engarde.lt — we will confirm within 30 days.

File Security Scanning

Every uploaded PDF is hashed (SHA-256) and checked against the VirusTotal database before it is saved. If your file is flagged as malicious by two or more antivirus engines it will be rejected automatically and will not be stored. This check is performed to protect our staff from malware — your hash is shared with VirusTotal in line with their Terms of Service.

AI-Assisted Review

If you opt in to AI-assisted review, an AI tool may generate a skills summary or highlight relevant experience to help the hiring manager focus their attention. The output is advisory only — it is never the basis for an automated rejection. Your CV is not used to train any AI model. You may opt out of AI review without affecting your application.

Third-Party Sharing

We do not sell or share your data with third parties for marketing, profiling, or tracking. Your CV is accessible only to the relevant hiring manager and HR staff at EnGarde Games. VirusTotal receives only your file's cryptographic hash (not the file itself) for the initial scan — a full file upload occurs only if you are on a known-malware watchlist.

Your Rights Under GDPR

• Access — request a copy of your data at any time.
• Rectification — ask us to correct inaccurate information.
• Erasure — request deletion before the retention period ends.
• Restriction — ask us to pause processing while a dispute is resolved.
• Object — object to processing based on legitimate interest.
• Complain — lodge a complaint with the Lithuanian State Data Protection Inspectorate (VDAI) at vdai.lrv.lt.

To exercise any right: privacy@engarde.lt — we respond within 30 days as required by GDPR Art. 12.