Career – The Information Clause

Information clause concerning the processing of personal data in the recruitment process to Fingoweb

1. The Controller of personal data in matters related to recruitment is FINGOWEB spółka z ograniczoną odpowiedzialnością spółka komandytowa with its registered office in Kraków, address: ul. Ostatnia 1C/A10, 31-444 Kraków, entered in the Register of Entrepreneurs of the National Court Register under the KRS number: 0000748728
2. Contact details. In matters concerning your personal data you can contact:
   1. address – ul. Ostatnia 1C/A10, 31-444 Kraków
   2. by email kariera@fingoweb.com
3. Purpose, scope and legal basis of data processing. We only process personal data that you provide to us, or that is made available to us, or that is collected by us for the purpose of the recruitment process provided:
   1. the data is necessary for the fulfilment of a legal obligation incumbent on us, including that under Article 221 of the Labour Code, i.e. data concerning: first name, last name, e-mail address, date of birth, education, professional qualifications, course of previous employment, or
   2. the data are necessary for the conclusion and subsequent performance of a contract with you, that is, in particular, the data to be included in the body of the contract to be concluded in the event of a successful outcome of the recruitment, or
   3. the data is necessary for the purposes of the legitimate interests pursued by us, namely:
      • to select a suitable candidate able to guarantee the correct performance of his/her duties, i.e. data collected by us in the course of our recruitment activities, e.g. in notes made in the course of interviews with you, other than the data mentioned under a) and b) above, but necessary for the above purpose,
      • to assert and defend against claims, before and beyond the courts and administrative authorities (in respect of all data collected) – in respect of all your data,
      • to verify whether you have participated in the recruitment process and from which source your personal data has been collected for the purpose of exercising our rights and fulfilling our contractual obligations towards third parties – with regard to your name, surname, email address and the manner in which the data was collected,
      • back up your data in connection with our obligation as data controller to keep your data secure – for all your data,
   4. and to the extent other than stated in letters a) – c) above, where you have given us your consent to process such data, including by means of a statement or a clear affirmative action, such as forwarding us your CV or a cover letter containing such data, or other documents, e.g. communicated in a message or during an interview.
4. Data retention period. Your personal data will be processed:
   1. for the purpose of recruitment for a specific position, from the date of their collection until the end of the recruitment process for that position,
   2. for the purposes of taking part in future recruitment processes (if you have given your consent to further processing of your data for the purposes of future recruitment processes) – from the date of your consent for a further period of 5 years or until you withdraw your consent,
   3. for the purpose of defence against your possible claims or the assertion of our claims – from the date of the end of each recruitment process in which you will participate, until the expiry of the limitation period for your or our claims, but no longer than the date on which you successfully lodge an objection,
   4. for the purposes of exercising our rights and obligations under contracts with third parties, from the date on which the data is collected until the expiry or limitation of our rights and obligations, but not beyond the date on which you successfully lodge an objection,
   5. for the purpose of making back-up copies – for the period necessary for making back-up copies, but not longer than the date on which you successfully lodge an objection
5. Information on the source of the data. There may be situations where we have not obtained your personal data directly from you, but from third parties. We will endeavour to inform you of this at all times and ensure that the collection of such data is carried out on an appropriate legal basis (e.g. your consent or a legal provision). We may obtain such data in particular:
   1. from people recommending you as a candidate – where your details are passed on to us by external recruiters, careers offices, companies working with us or referrers. In such a situation, these entities should take care to obtain the legal basis to provide us with your data,
   2. from other third parties where you have given us permission to contact such persons, for example to confirm your education or work experience,
   3. from publicly available sources, such as social media and your profile posted there.
6. Data recipients. We will exercise due diligence in selecting the entities to which we will transfer your data and, in the case of such selected entities, we will require them to protect your data with appropriate technical and organisational measures. Your personal data may only be disclosed:
   1. to third parties who provide us with services which are necessary for the purposes for which we process your data (e.g. IT services, recruitment, electronic communications, hosting), as well as their subcontractors,
   2. to recipients to whom disclosure is required by law or by an order of a court or other authority,
   3. to other recipients where you have given your consent or where the transfer is necessary to protect your vital interests or the vital interests of other individuals or for the public good.
7. Transfer of personal data to third countries. The data recipients indicated above are generally located in Poland and in other countries of the European Economic Area (EEA). For recipients outside the EEA, we will ensure that they give guarantees of a high level of protection of personal data and that the legal requirements for such transfers are met.
8. Rights. With regard to each of the rights set out below, you can contact us in particular using the contact details given in section 2.
   1. The right to be informed, to have access to your data and to receive a copy of your data. You have the right at any time to request information about your personal data that we hold or to which we have access. Upon your request, a copy of your personal data being processed will be provided to you free of charge. We are entitled to charge a fee for sending any further copies of the data, which will cover the reasonable costs of handling such a request.
   2. The right to withdraw consent. Whenever your data are processed on the basis of your consent, you have the right to withdraw this consent at any time, whereby the withdrawal of consent shall not affect the lawfulness of the processing of the data prior to the withdrawal of your consent.
   3. The right to rectification of personal data. We take reasonable steps to ensure that your personal information is correct, complete and up to date. If any changes need to be made to these details, please let us know.
   4. Right to data transfer. You have the right to request the transfer of your personal data in a structured, commonly used machine-readable format, as well as to request that the data be sent to another controller, where the processing of your personal data is based on your consent.
   5. The right to erasure and to restriction of processing. In the cases indicated in the data protection legislation, you have the right to request the deletion of your personal data. However, this right is not absolute – there may be situations where we are still entitled to process your personal data. You can also request that we restrict further processing of your data.
   6. The right to object to processing. In the cases indicated in the legislation, you have the right to object to further processing of your data where the processing is based on our legitimate interests.
   7. The right to lodge a complaint with a supervisory authority. You have the right to lodge a complaint with the supervisory authority dealing with the protection of personal data – in principle this will be the President of the Office for Personal Data Protection.