Recruitment information clause

Purposes of data processing and legal basis

1. To carry out and adjudicate the recruitment process conducted for the position you are applying for:
   1. on the basis of Article 6(1)(b) Polish RODO, i.e. in order to take necessary actions at the request of a person prior to concluding a contract - within the scope of data provided in the recruitment process, indicated in Article 2211 of the Act of 26 June 1975 Polish Labour Code, and on the basis of your consent, i.e. Article 6(1)(a) Polish RODO, within the scope of data going beyond the catalogue indicated in Article 221 §1 of the Act of 26 June 1974 Polish Labour Code;
   2. based on Article 6(1)(f) Polish RODO, i.e. in order to pursue the legitimate interest of the controller - with regard to data produced in the recruitment process.
2. To carry out and settle the recruitment process for the cooperation proposal directed at business persons:
   1. based on Article 6(1)(b) Polish RODO i.e. taking necessary action at the request of the data subject;
   2. prior to entering into a contract, based on Article 6(1)(f) Polish RODO, i.e. for the purpose of the controller's legitimate interest - with regard to data produced in the recruitment process.
3. To search for and identify relevant profiles for a current job offer or cooperation users of online platforms ("jobboard") or social networks that connect employers and candidates and offer various services to job seekers. The legal basis for the processing of your personal data is our legitimate interest - i.e. Article 6(1)(f) Polish RODO.
4. To include your recruitment profile, i.e. your application and other information generated in connection with your application, in future recruitments during the following 12 months from the date of your consent.
5. As part of an internal audit, to verify that the process has been carried out correctly, in accordance with the law and our internal procedures, based on Article 6(1)(f) Polish RODO, i.e. in order to fulfil the controller's legitimate interest to verify that the recruitment process has been carried out correctly.
6. To establish, investigate or defend of claims, based on Article 6(1)(f) Polish RODO, i.e. in order to pursue the controller's legitimate interest in assessing the risk of claims being brought against us and to defend against them.

Data sources

Your personal data is obtained:

1. directly from you;
2. from another source you have indicated, e.g. a previous employer, an online service such as LinkedIn;
3. during recruitment e.g. recruiters' opinions, recruiters' assessment of competences.

Data collection principles

We may collect the following categories of your personal data during our recruitment processes to create your recruitment profile:

1. contact information: name and surname, address, e-mail address, telephone number;
2. the information you provide in your application: your career and employment history, date of birth, image, education, skills, language skills and any other information you include in your application;
3. other data: any information you choose to share with us during the recruitment process and that we generate in connection with your application.

It cannot be ruled out that special categories of data (within the meaning of Article 9 Polish RODO), e.g. information about your health, will appear in the process, but we will only process this if you provide such data yourself with your application.

In addition, we may obtain the following information during the recruitment process:

1. competency assessment: we can generate evaluative information and opinions about your application on the basis of your application and observations made during the recruitment process, or we can ask you to submit to an assessment of your competencies, your skills, your character traits or your cognitive abilities
2. references: we may choose to obtain references from individuals/institutions, from your professional career. We will only contact those people whose contact details you have given us and only with your permission.

Duration of data processing

We process your personal data for the duration of the recruitment process in question and thereafter your personal data will be stored for the period during which it is possible to raise any potential claims by either party, i.e. 6 months from the date of application. Also, if you withdraw from the recruitment process during the recruitment process, your personal data will be stored for the period in which it is possible to lodge potential claims by any of the parties, i.e. 6 months from the date of application. W przypadku, wyrażenia zgody na przetwarzanie danych osobowych w celach przyszłych rekrutacjach, Twoje dane będziemy przetwarzać w tym celu do czasu odwołania zgody, jednak nie dłużej niż 12 miesięcy od daty złożenia aplikacji i wyrażenia tej zgody.

In the event that you consent to the processing of your personal data for future recruitment purposes, we will process your data for this purpose until you revoke your consent, however, no longer than 12 months from the date of submission of your application and your consent.

Transfer of personal data

Your personal data may be shared with the following categories of entities:

1. trusted subcontractors, in particular providers and operators of selected IT systems and solutions (including hosting, development and maintenance of IT systems and websites; providers of recruitment management systems, providers of other IT systems to support the recruitment process in question), couriers and postal service providers, debt collection bodies and law firms.

The job board recruitment sites, when we post our advertisements there, are also responsible for processing your data when you fill in the application form. Recruitment sites link MDD Group companies and candidates and, in doing so, offer various services dedicated to both jobseekers and potential employers (e.g. posting their job vacancies on the site, receiving applications and sending job offers or contacts to candidates whose profile matches their search). In this area of the processing of your data, the MDD Group companies and the owners of these websites remain Joint Controllers. Each of the aforementioned Joint Controllers independently decides on the purposes and means of data processing, but to a different extent. Each MDD Group company recruiting is responsible only to the extent of the personal data it processes.

As a general rule, personal data will not be transferred outside the EEA or made available to international organisations. However, where the controller uses service providers from outside the EEA that have not been recognised by the European Commission as providing an adequate level of protection for personal data, transfers of personal data to the above-mentioned entities shall be made on the basis of standard data protection clauses adopted by the European Commission, thus subject to adequate safeguards for the protection of the privacy and rights and freedoms of the data subjects. A copy of the standard contractual clauses can be obtained from the controller.

Your rights

Concerning our processing of your personal data, you have the right to:

1. request access to your personal data,
2. request the rectification of your personal data,
3. request the erasure or restriction of the processing of your personal data,
4. object to the processing of your data,
5. complain to the supervisory authority, which in Poland is the President of the Office for Personal Data Protection.

You may exercise your rights by sending the appropriate instruction by post to the Administrator's registered office address or by e-mail to iod@mdd.pl iod@mdd.pl

Other information

The provision of data is voluntary, but necessary in order to receive a response to an enquiry.

There is no automated decision-making, including profiling, in the processing of personal data.