- INTRODUCTION
Pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), unified text OJ EU L No. 119, p. 1 (the “GDPR”), we are under an obligation to inform you about our processing of your personal data. We invite you to read the following information that implements this obligation.
- DATA CONTROLLER
The controller of your personal data shall be the company under the business name of: Pniewski Zeuschner Legal Adwokaci i Radcowie Prawni sp. p. with its registered office in Warsaw (00-681), at ul. Hoża 61 lokal 3, piętro I, entered in the register of entrepreneurs of the National Court Register maintained by the District Court for the Capital City of Warsaw in Warsaw, XII Commercial Division of the National Court Register, under KRS number: 859908, NIP tax identification number: 525-28-35-847, REGON statistical number: 387035518 (“we”, the “Controller”).
- CONTACT THE CONTROLLER
You can contact the Controller on any matter concerning your personal data by writing to the address of the registered office, at administrator.danych@pz.legal or using the contact form available on the Controller’s website at https://pz.legal/.
- SOURCE OF PERSONAL DATA
We may have received your personal data directly from you or from entities providing employment intermediation services to us.
- PURPOSES AND BASIS FOR DATA PROCESSING
- For purposes related to the conduct of the recruitment process currently underway, including contacting you and informing you of the results – on the basis of Article 6(1)(a) of the GDPR or Article 6(1)(c) of the GDPR, if the employment is to be based on an employment contract.
For purposes related to the conduct of (possible) future recruitment processes – on the basis of Article 6(1)(a) of the GDPR.
For archival and evidentiary purposes to secure information in case of a legal need to use it – on the basis of Article 6(1)(f) of the GDPR.
Accordingly, we may process the following categories of personal data: given name, surname, image, workplace, function, educational history and career history, contact details (mailing address, home address, telephone number, e-mail address), electronic identification data, personal details, information about your health, family situation, and other data that may be provided by you directly or obtained by the Controller at the recruitment stage.
Providing us with personal data to the extent required by law is mandatory, and failing to do so will result in the inability to participate in the recruitment process.
Providing other personal data is voluntary, but failing to provide such data may also result in the inability to process the recruitment application.
- ENTITIES TO WHOM WE MAY TRANSFER YOUR PERSONAL DATA
We may transfer your personal data to subcontractors, i.e. entities whose services we use for processing: entities providing recruitment services, accounting services, services related to the disposal or archiving of documentation, IT services, including hosting and data server maintenance services, and providers of the software we use.
- TRANSFER OF YOUR PERSONAL DATA OUTSIDE OF THE EUROPEAN ECONOMIC AREA
Your personal data will not be transferred outside the European Economic Area.
- HOW LONG WE PROCESS YOUR PERSONAL DATA
We retain your personal data processed for the purposes of recruitment for a specific position until the recruitment is completed, unless you withdraw your consent, object to its processing, or if we ourselves determine that the data has become obsolete or our legitimate interest in its processing has been exhausted.
If you consent to participate in future recruitment processes, for the same or a similar position, your personal data will be processed until you withdraw your consent, object to its processing, or if we ourselves determine that the data has become obsolete or our legitimate interest in its processing has been exhausted, but for no longer than a period of 3 years.
- YOUR RIGHTS
- The right to withdraw consent to the processing of personal data
If we process your personal data based on the consent you have given us, you have the right to withdraw it. We will stop processing your personal data if there is no other basis for the processing. The withdrawal of consent does not affect the processing of your personal data performed before the withdrawal of the consent.
- The right to access your personal data
At any time, you may request information from us regarding what personal data we process and the purposes we use them for. Pursuant to Article 15(1) of the GDPR, this information will include, at least:
- the purposes of the processing;
- the categories of the relevant personal data;
- information about the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular, any recipients in third countries or international organizations;
- where possible, the planned retention period of personal data, and when this is not possible, the criteria for determining this period;
- information about the right to request the Controller to correct, erase or restrict the processing of your personal data and to object to such processing;
- information about the right to lodge a complaint with the supervisory authority;
- if the personal data has not originated from you – any available information about its source;
- information about automated decision-making, including profiling, as referred to in Article 22(1) and (4) of the GDPR, and, at least in these cases, relevant information about the principles of their decision-making, as well as the significance of the and the anticipated consequences of such processing for you.
- The right to correct your personal data
If your personal data is inaccurate (e.g., incorrect or incomplete), you may at any time request that it be corrected or supplemented (taking into account the purposes of the processing).
- The right to delete your personal data
You have the right to request the deletion of your personal data if:
- our processing of your personal data is no longer necessary to achieve the purposes referred to above;
- we process the personal data on the basis of your consent, and you choose to withdraw such consent, and there is no other basis for the processing of your personal data;
- you have exercised your right to object to the processing of your personal data, but only if we process your personal data (i) in order for us or another person to pursue a legitimate interest and (ii) your rights and freedoms will override such legitimate interest;
- we process your personal data unlawfully;
- our obligation to delete your personal data arises from a legal obligation to which we are subject.
If the data whose deletion you request has been made public by us, we will take reasonable measures, taking into account the available technology and the cost of implementing such measures, to inform other controllers that you wish your personal data, their copies or replications to be deleted.
You may not be entitled to request the deletion of your personal data if we process the personal data for the purpose of performance of a legal obligation, performance of an agreement or for the purpose of establishment, pursuit or defence of claims.
- The right to restrict the processing
You may request that we restrict our processing of your personal data if:
- you believe that the personal data processed by us is incorrect (for the duration of the verification of the correctness of such data);
- our processing of your personal data is unlawful, but you do not wish us to delete it;
- we no longer need your personal data, but you need it to establish, pursue or defend your claims;
- you have exercised your right to object to our processing of your personal data, but only if we process your personal data (i) in order for us or another person to pursue a legitimate interest and (ii) your rights and freedoms will override such legitimate interest.
- The right to data portability
You have the right to receive, in a structured, commonly used, machine-readable format, the personal data that you have provided to us and to send this personal data to another controller without hindrance from us, if you have provided us with this personal data and if the processing is based on your consent (Article 6(1)(a) of the GDPR) or on an agreement (Article 6(1)(b) of the GDPR) and if the processing is automated.
- The right to object
You have the right to object to the processing of your personal data on the basis of our or a third party’s legitimate interest. If you point out to us a specific situation that you believe constitutes a reason for us to cease the processing of your personal data, we will comply with such a request unless we demonstrate that the grounds for our processing of your personal data override your rights or that your data are necessary for us to establish, pursue or defend claims.
- THE RIGHT TO LODGE A COMPLAINT WITH THE SUPERVISORY AUTHORITY
If you believe that we are violating any of your rights relating to the processing of your personal data, you may lodge a complaint with the President of the Personal Data Protection Office, located in Warsaw, at ul. Stawki 2, 00-194 Warsaw. Detailed information on how to lodge a complaint can be found at the following link: https://uodo.gov.pl/pl/83/155.
- PROFILING AND AUTOMATED DECISION-MAKING
We will not use any of your personal data for profiling or any automated decision-making.
* * * Last updated: 8 March 2023