GDPR - Chema-Elektromet

GENERAL CLAUSE

In connection with the entry into force on May 25, 2018 of the Regulation of the European Parliament and of the Council of the European Union 2016/679 of April 27, 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and the repeal of Directive 95/46/EC (“GDPR”) Chema-Elektromet Spółdzielnia Pracy provides information on the processing of personal data.

1. Personal Data Controller: Chema – Elektromet Spółdzielnia Pracy with its registered office in Rzeszów, ul. Przemysłowa 9, entered into the Register of Entrepreneurs of the National Court Register by the District Court in Rzeszów under the number 0000092150 (hereinafter: “Controller”).
2. Personal Data Controller contact details: The Controller can be contacted by email at marketing@chema.rzeszow.pl or by letter sent to the address of the Controller’s registered office.
3. Data Protection Officer: The Inspector can be contacted in all matters regarding the processing of personal data and the exercise of rights related to data processing by email at marketing@chema.rzeszow.pl or by letter sent to the address of the Controller’s registered office.

⎯ Direct marketing of the Controller’s products and services, including, inter alia, presenting offers electronically – the legal basis is Article 6 (1) (f) GDPR – the necessity of data processing to implement the legitimate interest of the Controller. The legitimate interest of the Controller is to conduct direct marketing of its products and services;

⎯ Fulfillment of the legal obligation imposed on the Controller resulting from the provisions of tax law and accounting – the legal basis is Article 6 (1) (c) GDPR;

⎯ Handling reports that you send to us (e.g. via the contact form), responding to inquiries and processing applications – the legal basis is Article 6 (1) (f) GDPR – the necessity of data processing to implement the legitimate interest of the Controller. The legitimate interest of the Controller is to improve contact with customers and adapt the Controller’s activities to their needs;

⎯ Alternatively, in order to pursue claims related to the performance of contracts – the legal basis is Article 6 (1) (f) GDPR – the necessity of data processing to implement the legitimate interest of the Controller. The legitimate interest of the Controller is the possibility of pursuing claims thereby;

⎯ Evidence related to the performance of contracts – the legal basis is Article 6 (1) (f) GDPR – the necessity of data processing to implement the legitimate interest of the Controller. The legitimate interest of the Controller is to consider possible complaints and protection against claims.

5. Information about personal data recipients or categories of recipients: Your personal data may be transferred to entities processing personal data at the request of the Controller, including: IT service providers, entities storing and deleting data, entities processing data for accounting or debt collection purposes – where such entities process data on the basis of an agreement with the Controller and only in accordance with the Controller’s instructions. Your personal data will not be transferred to recipients located in countries outside the European Economic Area without your express consent. Your personal data will be made available at the request of state authorities, in particular the Courts, Prosecutor’s Offices, the Police, the President of the Office for Personal Data Protection (formerly: the Inspector General for Personal Data Protection), the President of the Office of Competition and Consumer Protection and others.
6. The period for which personal data will be stored: The period of storage of your personal data corresponds to the duration of the business relationship. After this period, the data will be anonymised. For the purposes of possible claims, evidence and consideration of complaints and requests as well as complaints, personal data is stored to a limited extent for a period corresponding to the possibility of using the above-mentioned measures, but not longer than for a period of 5 years. After this period, the data is removed from the Controller’s file. The Controller shall stop processing data used for marketing purposes earlier if you object to the processing of your data for these purposes.
7. Rights of data subject: You shall have the right to access your data and the right to request its rectification, deletion or limitation of its processing. You shall also have the right to transfer your personal data, i.e. to receive your personal data from the Controller in a structured, commonly used machine-readable format. You can send this data to another data Controller. You have the right to object to the processing of your personal data, to the extent to which the basis for the processing of your personal data is the premise of the legitimate interest of the Controller. In particular, you have the right to object to the processing of data for direct marketing purposes. You also have the right to lodge a complaint with the supervisory body dealing with the personal data protection. Please contact the data Controller or the data protection officer in order to exercise the above rights. Contact details are indicated above. You have the right to withdraw your consent to the extent that it is the basis for the processing of your personal data. The consent can be revoked at any time by sending an email to marketing@chema.rzeszow.pl or a letter to the address of Chema-Elektromet ul. Przemysłowa 9, 35-105 Rzeszów.
8. Information about the data providing requirement: Providing personal data for the purposes set out in Article 6 (1) (b) is voluntary, but necessary for the provision of services. Without providing personal data, it is not possible to perform any concluded contract.
9. The Controller assures that it makes every effort to protect the privacy of people using its services. For this purpose, it processes personal data in a manner ensuring adequate security of personal data, including protection against unauthorized or unlawful processing and accidental loss, destruction or damage, by appropriate technical or organizational measures.

GDPR information clause regarding recruitment for a job position

Pursuant to Article 13 paragraphs 1 and 2 and Article 14 paragraphs 1 and 2 of the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and the repeal of Directive 95/46/EC (hereinafter referred to as GDPR), we would like to inform you that:

The Controller of your personal data is Chema – Elektromet Spółdzielnia Pracy with its registered office in Rzeszów, ul. Przemysłowa 9, entered into the Register of Entrepreneurs of the National Court Register by the District Court in Rzeszów under the number 0000092150 Purposes and grounds for processing

Your personal data will be processed in order to conduct the current recruitment procedure pursuant to:

– Article 6 (1) (b) (c) GDPR and Article 10 GDPR in conjunction with the Labor Code (Article 221 of the Labor Code), while other data – based on consent (Article 6 (1) (a) GDPR), which may be revoked at any time.

If the documents contain the data referred to in Article 9 (1) GDPR, going beyond the provisions of the law, it may turn out that your express consent to its processing will be necessary (Article 9 (2) (a) GDPR), which may be revoked at any time.

Data recipients

The recipients of your personal data will be:

1. a) entities authorized under the law;
2. b) entities entrusted by the Controller to process personal data on the basis of concluded contracts (so-called processors).

Data storage period

Your data collected in the current recruitment process will be stored no longer than necessary, i.e. until the end of the recruitment process. The application documents of the candidate selected in the recruitment process will be attached to his/her personal files and will be stored for the period provided for by law for employee documentation – 10 years, counting from the end of the calendar year in which the employment relationship ends. The application documents of the remaining candidates are destroyed after the recruitment process is completed.

Automated decision making, profiling

The Controller will not make automated decisions regarding you, including decisions resulting from profiling based on your personal data.

Rights of data subjects

In accordance with the GDPR, you are entitled to:

1. a) access his/her data and receive a copy thereof (Article 15 GDPR),
2. b) rectify (correct) his/her data,
3. c) delete personal data (the right to “be forgotten”) under the terms of Article 17 GDPR,
4. d) delete data, limit data processing (Article 18 GDPR),
5. e) lodge a complaint with the President of the Personal Data Protection Office (to the address of the Personal Data Protection Office, ul. Stawki 2, 00 – 193 Warsaw) in the event of a breach of the provisions on the personal data protection.

Other information

Personal data shall not be transferred to a third country or international organizations, or outside the European Economic Area.

Information about the data providing requirement

Providing your personal data in the scope resulting from Article 221 of the Labor Code is necessary to participate in the recruitment procedure. Providing data beyond the scope of the law is voluntary and shall be treated as consent to the processing of this personal data.