People Lead

Pursuant to Article 13(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (Journal of Laws of the European Union of 2016 No. 119, p. 1 as amended. hereinafter referred to as the "GDPR"), we inform you that: The Data controller of your data is Baloise Solution Hub Spółka z ograniczoną odpowiedzialnością with its registered office in Warsaw, Prosta 20 street, 00-850 Warsaw, registered in the District Court for the Capital City of Warsaw in Warsaw, XIII Commercial Department of National Court Register, registered under No. KRS 0001069893, NIP 5273085558, REGON 52697954800000, share capital is fully paid and amounts to PLN 500 000,00. The Data controller is a member of the Baloise Holding AG Capital Group. The Data controller can be contacted: - by correspondence address: Prosta Street 20, 00-850 Warszawa, - by e-mail: solution.hub@baloise. com. The Data Controller has appointed a Data Protection Officer, who can be contacted in any matter concerning the processing of personal data by sending an e-mail to the following address: solution.hub.dpo@ baloise.com. Personal data will be processed for the following purposes: - implementation of ongoing recruitment, when we offer an employment contract then the legal basis for data processing are the provisions of the labour law governing the collection of data from a job candidate based on an employment contract (Article 6(1)(c) of the GDPR in connection with Article 22(1) § 1 of the Labour Code), but only to the extent to which you provide data covered by this provision, i.e.: name(s) and surname, date of birth, contact details provided by you, as well as education, professional qualifications and previous employment, if they are necessary to Personal data will be processed for the following purposes: - implementation of ongoing recruitment, when we offer an employment contract then the legal basis for data processing are the provisions of the labour law governing the collection of data from a job candidate based on an employment contract (Article 6(1)(c) of the GDPR in connection with Article 22(1) § 1 of the Labour Code), but only to the extent to which you provide data covered by this provision, i.e.: name(s) and surname, date of birth, contact details provided by you, as well as education, professional qualifications and previous employment, if they are necessary to perform work of a specific type or position; - implementation of ongoing recruitment, when we offer an employment contract, but you also provide other data during the recruitment process than those listed above these data are processed on the basis of your consent Article 6(1)(a) of the GDPR; - ongoing recruitment when we offer cooperation in a form other than an employment contract (e.g. contract of mandate, B2B contract) the basis for the processing of such data is to take action at the request of the data subject before concluding the contract (Article 6(1)(b) of the GDPR), as the Labour Code does not apply; - possible participation in a future recruitment process these data are processed on the basis of your consent Article 6(1)(a) of the GDPR; - to determine the terms and conditions of concluding the agreement, and also in connection with the possible determination and pursuit of claims or defence against claims, which is the legitimate interest of the Controller Article 6(1)(f) of the GDPR. Personal data: - from the recruitment process will be stored for the duration of the recruitment process, and after its positive completion the CV will be able to be placed in the employee files and will be stored in accordance with the retention period of the employee files (for an employment contract) or will be stored together with the concluded contract, until the end of the limitation period for claims related to it (for other civil law contracts); - in the event of negative recruitment, the data will be deleted upon completion, unless it is stored for the time required by the investigation, defense, or establishment of claims; - in the case of consent for future recruitment they will be stored until the candidate's consent to the processing of their data for this purpose is withdrawn, but no longer than 12 months from the date of their sending. The data may be made available to entities providing the following services to the Data controller: audit, hosting, IT, HR, accounting, postal, e-mail, legal, and also to entities to which the Data controller is obliged to transfer data under the law. You have the following rights: the right to access your personal data (Article 15 of the GDPR), including obtaining a copy of your data (Article 15(3) of the GDPR); the right to rectify (correct) or complete incomplete personal data (Article 16 of the GDPR); the right to request the deletion of your personal data in cases provided for by law (Article 17 of the GDPR); the right to request restriction of the processing of your personal data (Article 18 of the GDPR); the right to receive your data in a structured, commonly used format and to transfer them when the processing is based on your consent or a concluded contract, as well as when the processing is carried out by automated means (Article 20 of the GDPR); the right to object to the processing of personal data if the processing is necessary to fulfil the purposes resulting from the legitimate interests of the Data controller (Article 21 of the GDPR); in cases where data processing is based on consent, you also have the right to withdraw your consents at any time, but without affecting the lawfulness of the processing before their withdrawal. You can withdraw your consent by contacting us using the details indicated above. If you find that the processing of your personal data by the Data controller violates the provisions of the GDPR, you have the right to lodge a complaint with the supervisory authority, i.e. the President of the Office for Personal Data Protection with its registered office in Warsaw, who can be contacted in the following ways: - by post to the address of the registered office; - via the electronic inbox available at https://uodo.gov.pl/en/p/contact; - by phone: (22) 531 03 00. Your data may be transferred outside the European Economic Area. The transfer of personal data outside the EEA will take place with the application of appropriate legal safeguards, which are in particular adequacy decisions or standard or contractual clauses approved by the European Commission. Personal data is not subject to automated decision-making, including profiling. Providing data in response to a recruitment advertisement is voluntary, but necessary in order to participate in the current recruitment process and possible future recruitments, because without personal data we are not able to properly conduct the recruitment process. Consent to the processing of personal data for the above-mentioned purposes is voluntary and may be revoked at any time.