In connection with the provisions of the Regulation of the European Parliament and of the Council of the European Union 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 / EC (hereinafter referred to as " GDPR "), we are obliged to provide the following information regarding the protection of personal data:
Pursuant to Art. 13 and 14 of the Regulation of the European Parliament and & nbsp; Of the Council (EU) 2016/679 of 27 April 2016 & nbsp; on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 / EC, the so-called GDPR, ACATOM SP. Z O.O. SP.K. announces that:
The administrator of personal data is ACATOM SP. Z O.O. SP.K. with headquarters at ul. Christo Botewa 14, 30-798 Krakow.
Personal data is processed:
- in order to conclude an employment contract or at the request of the data subject before concluding an employment contract pursuant to art. 6 sec. 1 lit. b GDPR;
- on the basis of the candidate's consent pursuant to Art. 6 sec. 1 lit. a GDPR and art. 9 sec. 2 lit. a GDPR, which may also include the processing of personal data for the purposes of subsequent recruitment processes.
The scope of the processed data is limited to the information the obligation to provide results from the provisions of labor law, necessary to conclude a contract (name (s) and surname, date of birth, contact details indicated by such a person, education, professional qualifications, previous employment history ), as well as provided voluntarily by the job applicant (e.g. image-photo, other contact details,).
The processing of personal data is necessary to take part in the recruitment for work for the Administrator.
To the extent that the basis for the processing of personal data is consent, providing personal data is completely voluntary.
Personal data is processed during the recruitment process, and after its completion, as long as the consent to the processing of personal data is not withdrawn, but not longer than for a period of one year.
Each job applicant is entitled to:
In the case of processing personal data on the basis of consent, the job applicant has the right to withdraw it, which, however, does not affect the validity of actions performed on the basis of consent in the period between its granting and its withdrawal.
The candidate for work does not have the right to object to the processing of personal data pursuant to art. 21 GDPR, as the legal basis for the processing of personal data is not Art. 6 sec. 1 lit. e or f of the GDPR.
The scope of personal data includes data necessary for identification, data recorded by monitoring and vehicle data (optional data).
Personal data is processed on the basis of art. 6 sec. 1 letter f of the GDPR solely for the purpose of ensuring the safety of persons and protection of property, production control and ensuring the confidentiality of information, which is the legitimate interest of the Administrator.
Therefore, it is necessary to present an identity card in order to issue a pass & ndash; however, the ID card will not be photocopied, scanned or photographed.
Personal data is processed as long as required by law to ensure the safety of persons and protection of property in the field of establishing, investigating or defending claims.
Data recorded by video surveillance is stored for a period not exceeding 14 days.
Every person is entitled to:
In the event that Art. 6 sec. 1 lit. f GDPR, pursuant to art. 21 GDPR, you have the right to object to the processing of personal data.
You do not have the right to transfer personal data referred to in art. 20 GDPR.
Recordings from video surveillance may not be improved for technical reasons and are not subject to the right to obtain a copy, where this could violate the rights and freedoms of other people who may be on the recording.
The scope of personal data includes identification data, contact details and data contained in publicly available registers and sources or provided by the Client / Contractor, including data of persons authorized to represent and data of proxies and details of contact persons.
Personal data is processed depending on the legal basis linking the Parties in order to:
In the event of concluding a contract with a commercial company or institution, the Administrator will process the personal data of persons authorized to represent them and persons indicated for contact only for purposes related to the conclusion and performance of contracts and conducting possible complaint and debt collection activities, which is legally justified the Administrator's interest pursuant to art. 6 sec. 1 lit. f GDPR. In this case, personal data includes identification data, contact details, position held and other data available in publicly available registers (e.g. KRS, CEIDG) or provided by the company or institution for the purpose of concluding and performing the contract.
Providing personal data is necessary for the conclusion and performance of the contract.
Your personal data will be processed for the time necessary to perform the contract or the limitation of claims, as well as to fulfill the legal obligation incumbent on the Administrator, in particular with regard to tax and accounting obligations.
Every person is entitled to:
Personal data is processed in order to answer a question asked using the contact form or e-mail, which is the legitimate interest of the Administrator pursuant to art. 6 sec. 1 lit. f GDPR.
Providing data is necessary to answer a question asked using the contact form or by mail.
Your personal data is processed for the time necessary for the limitation of claims.
In the case of data processing pursuant to Art. 6 sec. 1 lit. f GDPR, i.e. in order to implement the legitimate interests of the sender or addressee of correspondence, he / she has the right to object to the processing of data.
Personal data is not transferred outside the European Economic Area or to organizations & nbsp; international.
Personal data is not used in automated decision-making processes, in particular profiling.
Personal data may be disclosed to state authorities in connection with their proceedings under applicable law.
In the remaining scope, access to personal data is also available to trained and authorized employees or associates of the Administrator, including entities providing services in the field of personal and property protection, legal, advisory, IT, accounting, courier or postal, auditing, programming and insurance services .
In order to exercise the rights, please contact us by letter to the address of the Administrator's seat, tel./fax. 12 659 16 35, tel. 12 659 16 59 or e-mail: firstname.lastname@example.org .
We ensure that the Personal Data Administrator makes every effort to ensure physical, technical and organizational measures to protect personal data against accidental or deliberate destruction, loss, alteration, unauthorized disclosure, use or access in accordance with applicable regulations.