Objective

To take the steps necessary for the conclusion of a contract, at your request (Article 6(1)(b) RODO).

Objective

Implementation of the recruitment process, insofar as this is a direct consequence of the law, in particular Article 22(1) § 1 of the Labour Code (Article 6(1)(c) RODO).

Objective

Implementation of the recruitment process, in the event that you voluntarily provide other data than that required by law (Art. 6(1)(a) RODO).

NOTE: the provision of information by the candidate that exceeds the minimum data scope regulated by employment law is an explicit action, tantamount to consenting to the processing of this data for recruitment purposes.

Objective 

The fulfilment of the Administrator's legitimate interest in establishing, asserting or defending against claims (Article 6(1)(f) RODO and, in the event that special category data is provided, also Article 9(2)(f) RODO).

Objective 

Consideration of your candidature for future recruitments, if you give additional consent (Article 6(1)(a) of the DPA).

Objective

Verification of the references provided to you, in case you give additional consent (Article 6(1)(a) RODO).

Data storage time 

Your data will be held until the end of the recruitment process and then for a period of 3 months so that we can contact you should we nevertheless decide to employ you during this additional period.

If claims related to possible employment discrimination may be associated with the processing, your data will be stored until the statute of limitations for these claims has expired. The data retention period is then 3 years, in accordance with Article 291 § 1 of the Labour Code.

If you are employed, we will continue to process your data in accordance with the periods appropriate for an employee/co-worker.

If we process certain data on the basis of the legitimate interest of the Controller (Article 6(1)(f) RODO) and you raise an effective, justified objection to the processing before the expiry of the basic storage period, then the data will be processed for this specific purpose for a shorter period, i.e. until your objection is taken into account.

If we process certain data on the basis of your consent (Article 6(1)(a) RODO) and you withdraw your consent before the expiry of the basic retention period, then the data will be processed for this specific purpose for a shorter period, i.e. until you withdraw your consent.

We process the data you provide us with yourself, i.e. the data contained in your application documents. This includes, in particular, your contact details, data on your qualifications or experience.

In the course of recruitment, we may also collect additional data, e.g. data provided verbally during the recruitment interview, data on the results of tests taken.

We acquire data directly from you.
When we use recruitment agencies to source candidates and then provide us with their data, the agencies are the source of the data. If you were recommended for a job through a referral scheme, the source of the data was the referrer.

The provision of certain data is a statutory obligation for a candidate for an employment contract, in particular the data referred to in Article 22(1) § 1 of the Labour Code (first name(s) and surname; date of birth; contact details indicated by you; education; professional qualifications; previous employment history).

The data will be transferred to [name of country], in accordance with the European Commission's decision finding an adequate level of protection for personal data (Article 45 RODO). - [link to decision].

The data will be transferred to [name of country] following the conclusion of the so-called standard contractual clauses adopted by the European Commission (Article 46(2)(c) of the RODO). Please contact us if you would like a copy of the concluded standard contractual clauses.

b) to rectify their personal data - within the limits of Article 16 of the RODO,
c) the erasure of your personal data - within the limits of Article 17 of the RODO,
d) restrict the processing of your personal data - within the limits of Article 18 RODO,
e) the portability of your personal data - within the limits of Article 20 RODO,
f) to withdraw at any time your consent to the processing, if it was the basis for the processing, without this affecting the lawfulness of the processing carried out before your consent was withdrawn,
as well as
g) The right to object at any time to the processing of your personal data - within the limits of Article 21 RODO - if the legal basis for the processing is the legitimate interest of the Controller or a third party (Article 6(1)(f) RODO) - when submitting an objection, you should indicate the reasons related to your particular situation, unless the objection relates to processing for direct marketing purposes - in which case there is no requirement to indicate such a reason.

Fulfilment of the Administrator's obligations arising from the employment relationship, including but not limited to those related to the organisation of work, the provision of safe and healthy working conditions, anti-discrimination, the settlement of accounts receivable, the maintenance and archiving of personal files, the Administrator's obligations arising from the provisions on social security, health insurance, taxes, the company social benefit fund, employee capital plans, trade unions, accounting, general duty of defence (Article 6(1)(c) RODO).

Applies to the processing of special categories of data
Fulfilment of the Administrator's obligations in the field of labour law, social security and social protection, in particular health data, including within the framework of the company's social benefits fund (Article 9(2)(b) RODO).

The data will be retained for a period of 10 years from the end of the calendar year in which the employment relationship ceased/terminated, when it was established no earlier than 01.01.2019.

The data will be retained for a period of 50 years from the end of the calendar year in which the employment relationship ceased/terminated, where it was established earlier than 01.01.2019.

In the case of persons employed under civil law contracts, the data will be stored until the expiry of the limitation period for contractual claims or the expiry of legal retention obligations, in particular the retention of accounting documents.

Video surveillance recordings will be stored for up to three months and, if necessary for the establishment, investigation or defence of claims, until the final settlement of the claims asserted or the expiry of the limitation period.

If we process certain data on the basis of the legitimate interest of the Controller (Article 6(1)(f) RODO) and you raise an effective objection to the processing before the expiry of the basic storage period, then the data will be processed for this specific purpose for a shorter period, i.e. until your objection is taken into account.

If we process certain data on the basis of your consent (Article 6(1)(a) RODO) and you withdraw your consent before the expiry of the basic retention period, then the data will be processed for this specific purpose for a shorter period, i.e. until you withdraw your consent.

At the time of employment, we process those data that you provide to us yourself. This is data that is necessary for the conclusion of an employment contract or a civil contract and, if you are employed under an employment contract, also data related to the fulfilment of many of the employer's obligations, such as data on your family members, data on your disability or data on your fitness for work.

In the course of your employment contract or civil law contract, we acquire a range of new data about you. These include, for example, data on training you have attended, data on your use of employee benefits, your image (obtained, for example, in connection with the production of a promotional video), data on your activity in the resources made available to you (so-called logs), data on your geolocation (in the context of company cars) and a number of other data, the catalogue of which may vary in the various stages of the duration of the employment contract or civil law contract.

As standard, we obtain data directly from you.

In exceptional situations, we obtain this data from sources other than you. An example of such a situation is a summons from a bailiff to seize your salary. Another example is when we ask our customers about their satisfaction with the service, in which case we obtain your personal data from them in the form of their opinions about you.

The provision of certain data is a statutory obligation for an employee employed under an employment contract, in particular the data referred to in Article 22(1) of the Labour Code.

The provision of certain data may also be a condition for the conclusion of an employment or civil law contract.

Recipients are external entities to whom we pass your data:
- state authorities or other entities authorised by law, if this is necessary for the fulfilment of legal obligations,
- our clients,
- our suppliers, including the service providers referred to below,

- entities that provide us with IT tools to store your data or entities that have access to your data as part of ongoing maintenance work on IT systems,
- entities auditing our activities or experts,
- providers of accounting, human resources or legal services,
- trade unions and employee benefit societies,
- users of the website, social media or other audiences, in the event that your data is made public,
- companies that dispose of or archive documents and other media,
- courier and postal service companies,
- medical facilities,
- banks, insurance companies and other financial and payment institutions,
- companies preparing personalised clothing, badges or certificates,
- companies providing security services, access control and monitoring the use of work tools,
- training companies,
- hotels and transport companies.

Personal data will be held until your enquiry, submitted via the contact form, has been processed and then for a period of 3 months after the response.

Personal data will be held until an offer is made to you and then for a period of 3 months after the offer has been made if the offer is not accepted.

If our offer has been accepted and we are bound by a contract, then we will process your data for the time dedicated to customers with an active contract
If your enquiry did not relate to our offer, then we will keep your data for a period of 3 months after we have answered you.

If you have a specific relationship with the Administrator (e.g. you are a customer with an active contract), then we may also store your data obtained via the Contact tab until the statute of limitations for claims arising from the legal relationship between you and the Administrator.

If we process certain data on the basis of the legitimate interest of the Controller (Article 6(1)(f) RODO) and you raise a legitimate objection to the processing before the expiry of the basic storage period, then the data will be processed for this specific purpose for a shorter period, i.e. until your objection is taken into account.

If we process certain data on the basis of your consent (Article 6(1)(a) RODO) and you withdraw your consent before the expiry of the basic retention period, then the data will be processed for this specific purpose for a shorter period, i.e. until you withdraw your consent.

If we process certain data on the basis of the legitimate interest of the Controller (Article 6(1)(f) RODO) and you raise an effective objection to the processing before the expiry of the basic storage period, then the data will be processed for this specific purpose for a shorter period, i.e. until your objection is taken into account.

If we process certain data on the basis of your consent (Article 6(1)(a) RODO) and you withdraw your consent before the expiry of the basic retention period, then the data will be processed for this specific purpose for a shorter period, i.e. until you withdraw your consent.

Personal data will be stored until the expiry of the statute of limitations for claims arising from the contract with the customer.

The specified data will also be stored until the expiry of data retention obligations under specific legislation, in particular the retention of accounting documents. If we process the specified data on the basis of the legitimate interest of the Controller (Article 6(1)(f) RODO) and you raise an effective objection to the processing before the expiry of the basic storage period, then the data will be processed for this specified purpose for a shorter period, i.e. until your objection is taken into account.

If we process certain data on the basis of your consent (Article 6(1)(a) RODO) and you withdraw your consent before the expiry of the basic retention period, then the data will be processed for this specific purpose for a shorter period, i.e. until you withdraw your consent.

Our client (contracting party) may be an individual or an institution, such as a commercial company. In the latter case, we process the personal data of persons who act on behalf of the institution, e.g. the president, proxy or contact persons for the execution of the contract.

Before concluding a contract with a customer, we obtain the data necessary to make an offer. This is usually basic contact data: name, e-mail address, telephone number. In the case of customer-individuals, we collect additional data necessary for the conclusion of the contract before concluding the contract, e.g. PESEL or residential address, depending on the product/service we sell.

During the course of the customer contract, we acquire or process further data, such as data on transactions concluded or the history of the cooperation in general, including the results of satisfaction surveys.

Please note: if, in connection with the use of our services/purchase of products offered by us, you have registered an account on our website, please note that such an account is a separate service and information on the processing of your data in the provision of this service by us can be found in another section of this Policy.

As standard, we obtain data directly from you.

Your personal data may also be obtained from another source, e.g. from our client company if you are an employee or representative of that company. Sometimes we obtain personal data from public sources, e.g. the client's website or from so-called business intelligence agencies, if we want to verify a client before doing business with them.

As a general rule, your personal data will not be transferred outside the European Economic Area (hereinafter: EEA). However, having regard to the services provided by the Administrator's subcontractors in the provision of support for ICT services and IT infrastructure, the Administrator may outsource certain activities or IT tasks to recognised subcontractors operating outside the EEA which may result in the transfer of your data outside the EEA. Recipient countries outside the EEA, in accordance with the European Commission's decision , shall ensure an adequate level of protection of personal data in accordance with EEA standards. For recipients in the territory of countries not covered by the European Commission Decision, in order to ensure an adequate level of such protection, the Controller shall contract with the recipients of your personal data based on the standard contractual clauses issued by the European Commission in accordance with Article 46(2)(c) of the RODO. A copy of the standard contractual clauses can be obtained from the Controller by contacting the contact details provided above. The method used by the Controller to secure your data complies with the principles provided for in Chapter V of the RODO. You may request further information on the safeguards applied in this regard, obtain a copy of these safeguards and information on where they are available.

Personal data will be stored until the expiry of the statute of limitations for claims under the contract with the contractor.

The specified data will also be kept until the expiry of data retention obligations under specific legislation, in particular the retention of accounting documents.

If we process certain data on the basis of the legitimate interest of the Controller (Article 6(1)(f) RODO) and you raise an effective objection to the processing before the expiry of the basic storage period, then the data will be processed for this specific purpose for a shorter period, i.e. until your objection is taken into account.

Our counterparty (contracting party) may be an individual or an institution, e.g. a commercial company. In the latter case, we process the personal data of persons who act on behalf of the institution, e.g. the president, proxy or contact persons for the execution of the contract.

Before concluding a contract with a contractor, we obtain the data necessary to start negotiating the terms of cooperation. This is usually basic contact data: name, e-mail address, telephone number. In the case of counterparties - natural persons, before concluding a contract, we obtain additional data necessary for its conclusion, e.g. PESEL or address of residence.

During the course of the contract with the counterparty, we acquire or process further data, such as data on invoices issued by the counterparty or the history of the cooperation in general.

As standard, we obtain data directly from you.

Your personal data may also be obtained from another source, e.g. from our counterparty - a company, if you are its employee or representative. Sometimes we obtain personal data from publicly available sources, e.g. from the counterparty's website or so-called business intelligence services, if we want to verify a counterparty before doing business with it.

No, we will not transfer your data outside the European Economic Area.

Data will be transferred to [name of country] in accordance with the European Commission's decision finding an adequate level of protection for personal data (Article 45 RODO). - [link to decision].

The data will be transferred to [name of country] following the conclusion of the so-called standard contractual clauses adopted by the European Commission (Article 46(2)(c) of the RODO). Please contact us if you would like a copy of the concluded standard contractual clauses.

 Fulfilment of the Administrator's legitimate interest to establish, assert or defend against claims (Article 6(1)(f) of the DPA).

The data processed in connection with the handling of complaints are stored until the expiry of data storage obligations under specific legislation (e.g. in connection with disbursement of funds), in other cases - for a period of 2 years from the end of the complaint procedure, understood as the response to the complaint.

Data processed for the purpose of compiling an answer to a question asked, not related to the complaint, and its dispatch, will be processed for a period of 2 years after the answer has been provided.

If we process certain data on the basis of the legitimate interest of the Controller (Article 6(1)(f) RODO) and you raise an effective objection to the processing before the expiry of the basic storage period, then the data will be processed for this specific purpose for a shorter period, i.e. until your objection is taken into account.

No, we will not transfer your data outside the European Economic Area.

Data will be transferred to [name of country] in accordance with the European Commission's decision finding an adequate level of protection for personal data (Article 45 RODO). - [link to decision].

The data will be transferred to [name of country] following the conclusion of the so-called standard contractual clauses adopted by the European Commission (Article 46(2)(c) of the RODO). Contact if you wish to obtain a copy of the concluded standard contractual clauses.

Fulfilment of the Administrator's legitimate interest in marketing its own products and services (Art. 6(1)(f) RODO) using the following forms of communication: emails, for the purpose of sending newsletters.

NOTE: the use of certain forms of communication requires separate consent to the use of that channel, pursuant to Article 398 of the Electronic Communications Act.

Your personal data will be stored until you object to marketing activities or withdraw your consent, depending on the legal basis for sending communications, i.e. you show us in any way that you do not wish to receive information from us about our activities / our services.

If you make certain claims in connection with the marketing communications that we carry out, your data will be stored until the expiry of the limitation periods for these claims.

The specified data will also be stored until the expiry of data retention obligations under specific legislation, in particular the Electronic Communications Act.

If we process certain data on the basis of the legitimate interest of the Controller (Article 6(1)(f) RODO) and you raise an effective objection to the processing before the expiry of the basic storage period, then the data will be processed for this specific purpose for a shorter period, i.e. until your objection is upheld (unless the objection relates to processing for direct marketing purposes - in which case there is no requirement to substantiate the objection).

If we process certain data on the basis of your consent (Article 6(1)(a) RODO) and you withdraw your consent before the expiry of the basic retention period, then the data will be processed for this specific purpose for a shorter period, i.e. until you withdraw your consent.

Your data will not be subject to a decision based solely on automated processing, including profiling, producing legal effects or having a similar significant impact.

We do not make automated decisions on the basis of this data that we process in the process of sending communications. On the other hand, we may make such decisions on the basis of data obtained in other processes, e.g. in the process of fulfilling a contract concluded with you. We use your purchase history to build your profile, and then decide what offers to send you based on this. This is done on the basis of Article 22(2)(c) of the DPA; the condition is that we first obtain your express consent to do so.

The specified data will also be stored until the expiry of data retention obligations under specific legislation, in particular the Electronic Communications Act.

If we process certain data on the basis of the legitimate interest of the Controller (Article 6(1)(f) RODO) and you raise a legitimate objection to the processing, then the data will be processed for this specific purpose until your objection is taken into account.

If we process certain data on the basis of your consent (Article 6(1)(a) RODO) and you withdraw your consent, then the data will be processed for that specific purpose until you withdraw your consent.