Pursuant to Article 13 or 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as GDPR), we inform that:
1.The administrator of your personal data is Audit HR Sp. z o.o. with its registered office at Walczaka 20 in Gorzów Wlkp., KRS No. 0000318623.
2. We have appointed a Data Protection Officer who can be contacted in matters regarding the processing of personal data and your rights–by e-mail to the following address: email@example.com or in writing to the address of our registered office.
3. Due to the fact that we provide different services, your data may be processed for different purposes, scopes and on different legal grounds specified in the GDPR, for a certain period of time:
a) IMPLEMENTATION OF RECRUITMENT PROCESSES
If you provide us with your CV or other documents related to the job search or in response to a recruitment advertisement, we will process your data provided in the submitted application documents on the basis of your consent–respectively for participation in a specific recruitment process or in future recruitment–in accordance with Article 6(1)(a) and Article 9(2)(a) of the GDPR. Personal data for future recruitment will be processed for 3 years, calculated from 1 January of the calendar year following the year in which you gave the consent in question. In the last month before the aforementioned deadline arrives, a link will be sent to you (or we may call you), through which it will be possible to agree to leave your CV or other job-seeking documents in our database for a further three years, including the possibility of updating your details. You are independently entitled to revoke your consent in advance. If, on the other hand, you have not given your consent for future recruitments, your data will be processed until the closing date of the recruitment process in question and thereafter–but only in the form of storage–for the period necessary for the purpose of establishing, investigating or defending claims, which is our legitimate interest within the meaning of Article 6(1)(f) of the GDPR.
b) ESTABLISHMENT AND COURSE OF EMPLOYMENT
If you have taken up or intend to take up employment with us, we will process your personal data necessary to fulfil the employer’s legal obligations in connection with the establishment (including possible legalisation, which applies to foreign nationals) and the course of the employment relationship–on the basis of Article 6(1)(c) and Article 9(2)(b) of the GDPR. Such data will be processed for a period of time as required by law (e.g. labour law, pension, health care, tax law, etc.). In addition, if you intend to take up employment with us, we will also process your personal data for the purpose of entering into and performing a contract on the basis of Article 6(1)(b) of the GDPR–for the duration of the contract (if we have acquired rights by virtue of the contract, the data will be processed for at least the duration of those rights) and until we are required to do so by law, including the expiry of time limits for the assertion of claims. In the case of voluntary consent to the processing of data other than those resulting from legal provisions, such data will be processed on the basis of Article 6(1)(a) and Article 9(2)(a) of the GDPR–until the consent is revoked.
c) IMPLEMENTATION OF SERVICES PROVIDED BY THE ADMINISTRATOR
If you use our services or are interested in engaging in a partnership, we will process your contact data and data obtained in connection with the provision of such services on the basis of Article 6(1)(b) of the GDPR. If you will not be a party to such a contract but have only been designated by your organisation as a so-called contact person or we are processing your data because it has been provided to us by your organisation or directly by you because it is necessary for the provision of a particular service (e.g. payroll report, training), then the legal basis for the processing of this data is Article 6(1)(f) GDPR, i.e. it is our legitimate interest to provide the requested service–for the duration of the contract negotiation and its duration and until the expiry of the time limits for the assertion of claims.
d) ARCHIVING OF SETTLEMENT DOCUMENTS
If you use our services, it is necessary to archive settlement documents pursuant to Article 6(1)(c) of the GDPR–until the expiry of the limitation period for tax liability.
e) MARKETING OF THE ADMINISTRATOR’S SERVICES
In relation to legitimate interest, we may carry out marketing of products and services on the basis of Article 6(1)(f) GDPR, where the legitimate interest is to carry out marketing activities to promote our business, until you object. Marketing activities may in particular take place using electronic means of communication, provided that you have given a separate consent (to receive electronic messages or voice calls).
f) VINDICATION OF CLAIMS
Your personal data may also be processed by us to a limited extent after the expiry of the other grounds for processing in connection with the need to assert possible claims on the basis of Article 6(1)(f) of the GDPR–until their statute of limitations under the law.
g) STATISTICAL OBJECTIVES
Your personal data may also be processed by us for statistical purposes on the basis of Article 6(1)(f) of the GDPR, where the legitimate purpose is to have information about the statistics of the activities we carry out which allows us to improve our business, until we have an additional, different legal basis for processing–in case we lose this basis the data is anonymised.
4. Your data may be transferred:
5. Providing data is voluntary, however, refusal to provide them may result in the inability to provide services, recruitment processes or establish employment.
6. We do not make automated decisions based on your personal data, including decisions resulting from profiling.
7. We will not transfer your personal data to a third country or to international organisations.
8. You have the right to access your data and request their rectification, deletion, restriction of processing, data portability, objection to data processing as well as the right to lodge a complaint to the supervisory body dealing with the protection of personal data. If you give your consent to the processing of data, you can revoke it at any time in writing or electronically to the following address: firstname.lastname@example.org. The withdrawal of consent does not affect the lawfulness of the processing undertaken on the basis of the consent before its withdrawal.
AUDIT HR Sp. z o.o.
ul. Walczaka 20
66-400 Gorzów Wlkp.
tel.: +48 95 735 17 17
tel.: +48 95 735 97 13
fax: +48 95 711 72 17
ul. Kozia 12/1
tel.: +48 61 622 71 50
Park Technologiczny Interior
8 67-100 Nowa Sól
tel.: +48 68 411 44 15