GDPR English

  1. Introduction

This document has been created to fulfil the requirements of articles 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27th April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC ("GDPR"). The aim of this document is to gather all the information provided to the data subjects in one place, as well as to give them continuous access to information on how their personal data are processed.

 

  1. The document’s recipients

This document is intended for all entities whose personal data are processed by Ework Group Sp. z o.o.:

- candidates;

- employees and co-workers;

- consultants;

- authorities and representatives of the controller;

- contact persons in entities cooperating with the controller;

- members of the family of employees and co-workers;

- persons from social media, blog.

 

  1. The controller

The controller is Ework Group sp. z o.o. with its registered office in Warsaw, Plac Małachowskiego 2, 00-066 Warsaw, entered into the register of entrepreneurs kept by the District Court for the Capital City of Warsaw in Warsaw, XII Commercial Division of the National Court Register under KRS number 0000559036, REGON: 361571875, NIP: 525-261-95-46.

 

  1. Inspector or other contact person

If you have any questions regarding your personal data, please contact us via daneosobowe@eworkgroup.com

 

  1. The supervisory authority

The supervisory authority to which a claim against the controller with regard to personal data may be submitted is:

President of the Office for the Protection of Personal Data

ul. Stawki 2

00-193 Warsaw

fax: 22 531-03-01

 

 

  1. The purpose and legal basis for the processing of personal data

 

1. Candidates:

(a) data sources - candidate himself, referrer, client, intermediary;

b) the scope of data - name, surname, date of birth, e-mail address, telephone number, correspondence address, information related to the competence and the current course of employment;

(c) objectives and legal basis - conduct of the recruitment procedure - consent (Article 6(1)(a)).

 

2. Employees and co-workers:

(a) data sources – data subject, referrer, client, intermediary;

b) scope of data - name, surname, e-mail address, telephone number, correspondence address, date and place of birth, PESEL, ID card series and number, NIP, parents' names, position, remuneration, education, bank account number, information related to the competence and the current course of employment;

(c) objectives and legal basis:

- performance of the contract of employment - Article 6(1)(b),

- correct settlement of the agreement (ZUS, etc.) - Article 6(1)(c),

- protection against claims after termination of contract - Article 6(1)(f),

- maintaining relations, building knowledge, etc. - Article 6(1)(f).

 

3. Consultants:

(a) data sources – data subject, referrer, client, intermediary;

b) the scope of data - name, surname, e-mail address, telephone number, correspondence address, date and place of birth, PESEL, parents' names, ID card series and number, NIP, position, remuneration, education, bank account number, information related to the competence and the current course of employment;

(c) objectives and legal basis:

- performance of the contract for the provision of services - Article 6(1)(b),

- consultant hired by an intermediary - Article 6(1)(f),

- protection against claims after termination of contract - Article 6(1)(f),

- correct settlement of the agreement (ZUS, etc.) - Article 6(1)(c),

- maintaining relations, building knowledge, etc. - Article 6(1)(f),

- based on the information about the consultant, prepare and make available a report which will better present the consultant as a candidate (profiling, without making automated decisions) – Article 6(1)(f).

 

4. Authorities and representatives of the controller:

(a) data source - data subject;

b) the scope of data - name, surname, telephone, e-mail address, identification number, correspondence address;

(c) objectives and legal basis:

- keeping corporate records and reporting to the relevant registers - Article 6(1)(c),

- maintaining direct contact with these persons - Article 6(1)(f).

 

5. Contact persons in entities cooperating with the controller:

(a) data sources - the employer of the data subject, data subject;

b) scope of data - name, surname, telephone number, e-mail address, position;

(c) objectives and legal basis:

- contact in connection with the implementation of an existing agreement or in order to change the scope of cooperation - Article 6(1)(f).

 

6. Members of the family of employees and co-workers:

(a) data sources – employee;

(b) the scope of the data - name, surname, correspondence address, date of birth, degree of kinship;

(c) objectives and legal basis:

- registration of family members of an employee for health insurance, ZUS - art. 6(1)(c).

 

7. Persons from social media, blog:

(a) data sources - data subject;

(b) the scope of the data - name, surname, e-mail address;

(c) Objectives and legal basis:

- maintaining contact and networking, transmission of market information and opportunities for cooperation with the controller - Article 6(1)(a).

 

  1. Rights of data subjects

The data subjects have the right to:

(a) access to personal data, including the right to obtain a copy thereof. The first request for information in this regard in a given calendar year shall be free of charge,

(b) to require rectification of personal data when the personal data provided to the controller have become factually inaccurate or are inaccurate,

c) request the erasure of personal data (the right to be forgotten), inter alia, when the processing of the personal data provided to the controller is no longer necessary for the purposes for which they were collected,

d) a request to restrict the processing of personal data, inter alia, if the situation described above applies, but only to a part of the data,

(e) the transmission of personal data to another controller,

f) object to the processing of personal data within the scope of personal data processing within the scope of legally justified interests pursued by the controller.

 

  1. The right to withdraw consent

Where personal data are processed on the basis of consent, the data subject may withdraw consent to the processing of personal data at any time. The withdrawal of the consent shall not affect the lawfulness of data processing carried out on the basis of the consent prior to its withdrawal.

 

  1. Recipients of personal data

The personal data collected by the controller may be transferred to entities providing services to the controller or its employees and co-workers (such as accounting services, taxi services, language schools, event companies, entities providing postal services, entities organising business trips, banks, entities providing administration and office services), the entity being the owner of the controller, state institutions (such as courts, prosecutors, tax authorities, Social Insurance Institution), clients to whom the controller provides services and other entities providing recruitment services.

 

  1. How long we process the data

Personal data processed on the basis of the consent will be processed for the period of time for which the consent was granted or until the withdrawal of this consent occurs. If you agree to only one recruitment process, your personal data will be deleted within 1 month after the end of this recruitment process. Otherwise, the Administrator shall process the data for the period in which it is permissible for the Administrator or the person whose data relate to claims to be submitted, i.e. for the statute of limitations specified by the Polish law or the obligation under the law to store specific data (employee data, taxes).

 

  1. Where the data were obtained from

Personal data is mainly collected directly from data subjects. In the case of collecting data from persons other than the data subject, the controller shall immediately request the data subject's consent to process the personal data, unless the controller has the right to process the personal data on a different basis.

 

  1. Transfer of personal data outside the EEA

The personal data controller will not transfer personal data outside the European Economic Area.

 

  1. Obligation to provide data

The data subject is free to provide their data, however, in certain situations the providing of data is necessary in order to carry out the recruitment process or to start cooperation or is necessary in connection with legal requirements such as tax law or social security regulations.

 

  1. Rules of amending this document

The terms and conditions described in this document are subject to change. Any change will only affect the personal data collected by the controller after the change. Any changes to this document will be published as follows:

 

The rules described in this document have been in force since 25 May 2018.