WHAT IS GDPR?
GDPR is an EU law regulating the principles of personal data protection, which we have been applying since 25 May 2018. Since that date, our company has been complying with the principles set out in GDPR.
Full name of GDPR: Regulation (EU) No 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.
WHO IS THE DATA CONTROLLER?
The controller of your personal data is Nord Partner Sp. z o.o. with its registered office in Toruń, ul. Lubicka 16, 87-100 Toruń, Poland.
The controller shall be responsible for the security of the transferred personal data and for the processing thereof in accordance with the provisions of law.
FOR WHAT PURPOSE AND ON WHAT LEGAL BASIS DO WE USE THE DATA?
Your personal data will be used for the following purposes:
- recruitment (activities undertaken at the request of a person before the conclusion of the contract) and conclusion of a contract constituting a basis of employment (legal basis – GDPR Article 6 (1) (b)) – “performance of the contract”,
- performance of legal obligations incumbent on our company; these obligations are laid down in particular in the Polish Act of 26 June 1974 – Labour Code (legal basis – GDPR Article 6 (1) (c)) – “legal obligation”,
- recruitment, if you give your consent to the use of additional personal data (legal basis – GDPR Article 6 (1) (a)) – “consent”,
- pursuing claims related to ongoing recruitment (legal basis – GDPR Article 6 (1) (f)) – “legitimate interest”.
HOW LONG WILL WE USE THE DATA?
We will use the data for the period necessary to achieve the objectives listed above.
Depending on the legal basis, this will be accordingly:
- the time of recruitment for a specific position and the time for which legal provisions compel us to store data,
- the time after which claims related to the documentation kept expire,
- the time until consent is withdrawn.
WHAT RIGHTS DO YOU HAVE?
You may apply to our company for:
- access to personal data (information on personal data processed and a copy of the data),
- rectification of data when it is incorrect,
- data transfer, in cases specified in GDPR,
- removal or restriction of processing of personal data.
If you believe that the processing of your personal data violates the provisions of law, you also have the right to lodge a complaint with the President of the Office for Personal Data Protection.
Consent granted for the processing of personal data may be withdrawn at any time.
WHO ARE WE PROVIDING YOUR DATA TO?
Subject to all data security guarantees, we can transfer your data – in addition to persons authorised by the Data Controller – to other entities, including entities processing it on our behalf, e.g. technical service providers and entities providing advisory services to us.
Your data may also be transferred to countries outside the European Economic Area (to countries other than those of the European Union and Iceland, Norway, and Liechtenstein), provided that the conditions laid down in Chapter V of the GDPR are met.
HOW CAN WE BE CONTACTED CONCERNING PERSONAL DATA PROTECTION?
Our company has appointed a Data Protection Officer who you can be contacted via e-mail: odo@nordpartner.pl.