INFORMATION ON DATA PROCESSING (INFORMATION OBLIGATION):
- The Administrator of your personal data is Match-Trade Technologies spółka z ograniczoną odpowiedzialnością with it’s registered office in Warsaw, at Królewska 18, 00-103 Warsaw, entered into the Register of Entrepreneurs of the National Court Register kept by the District Court for the capital city of Warsaw in Warsaw, 12th Commercial Division of the National Court Register under KRS number: 0000749554, REGON: 381348297, NIP: 5272865455 (hereinafter referred to as the “Administrator”).
- The Administrator has appointed the Data Protection Inspector. In all matters related to the processing of personal data and the exercise of rights related to processing of personal data, you can contact us in writing at the following address: Królewska 18, 00-103 Warszawa, and by e-mail at: rekrutacje@match-trade.com.
- Your data will be processed for the purpose of recruitment for a given position in the Administrator in accordance with applicable law, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter “GDPR”).
- As part of the recruitment processes, the Administrator expects to be provided with personal data (e.g. in a CV or curriculum vitae) only in the scope specified in labour law provisions. Therefore, information should not be provided in a broader scope. If the submitted applications contain additional data exceeding the scope specified in labour law provisions, processing of these data will be made pursuant to the candidate’s consent (Article 6(1)(a) of the GDPR), expressed by a clear confirmatory action i.e. sending by the candidate application documents. If the submitted applications contain information that is inadequate for the purpose of recruitment, these information shall not be used or taken into account in the recruitment process.
- If voluntary and optional consent is given (Article 6(1)(a) of the GDPR), the data will also be processed for the purposes of future recruitment process conducted by the Administrator, in particular in order to present you with new job offers and invite you to participate in recruitment process and verifying the possibility of participating in future recruitment processes.
- If the preferred form of employment is an employment contract – in order to fulfil the obligations arising from legal provisions related to the employment process, in particular the Labour Code – the legal basis for processing is the legal obligation imposed on the Administrator (Article 6(1) 1 letter c of the GDPR in connection with labour law provisions). If the preferred form of employment is a civil law contract – in order to conduct the recruitment process – the legal basis for the processing of data contained in the application documents is undertaking activities before concluding the contract at the request of the data provider (Article 6(1)(b) of the GDPR).
- In order to verify qualifications and skills and determine the terms of cooperation – the legal basis for data processing is the legitimate interest of the Administrator (Article 6(1)(f) of the GDPR). The Administrator’s legitimate interest is to verify job candidates and determine the conditions of possible cooperation. In order for the Administrator to establish or pursue possible claims or defend against claims brought against the Administrator – the legal basis for data processing is the legitimate interest of the Administrator (Article 6(1)(f) of the GDPR).
- If the documents provided by you contain personal data referred to in Art. 9 section 1 GDPR, they will be processed upon your consent (Article 9(2)(a) of the GDPR), which may be revoked at any time.
- Data processing for purposes other than indicated above may take place: (i) pursuant to obtaining additional consent, (ii) pursuant to applicable law, or (iii) when it is consistent with the purpose for which the personal data were originally collected ( Article 6(4) of the GDPR).
- Providing data specified in Art. 22(1) of the Labour Code is required – if the candidate prefers employment based on an employment contract – by the law, including but not limited to the Labour Code, and if the candidate prefers employment based on a civil law contract – by the Administrator. The consequence of not providing these data shall be lack of ability to consider a given candidacy in the recruitment process. Providing other data is voluntary.
- You have the right to access your personal data, the right to rectify them, the right to transfer these data, and the right to delete them.
- You have the right to file a complaint with the supervisory authority, i.e. the President of the Personal Data Protection Office.
- You have the right to withdraw your consent regarding the processing of personal data at any time, which does not affect the legality of the processing that took place pursuant to a consent given before its withdrawal. If consent is granted for several purposes, you have the right to withdraw it for one or more purposes. After withdrawing your consent, your data will be immediately deleted from the given database.
- You will not be subject to a decision that is based solely on automated processing, including profiling, and that have legal effects on you or similarly significantly affects you.
- The Administrator may transfer data to the following recipients (provided that it is necessary to implement the process): companies from the group capital, advisors, collaborators, entities providing server and data storage services, suppliers of software used to manage the recruitment process and candidate verification.
- The Administrator does not plan to transfer data outside the EEA. In the event of transfer of personal data to third countries, i.e. to recipients based outside the EEA or Switzerland, to countries that, according to the European Commission, do not ensure sufficient data protection (third countries not ensuring an adequate level of protection), the Administrator will transfer them using mechanisms consistent with applicable law, which include, among others: (i) EU “Standard Contractual Clauses”, (ii) EU-US Data Privacy Framework, (iii) adequacy decisions when data are transferred to a third country for which the European Commission has determined that the third country comply with the adequate level of protection.