Data controller/Objectivity Group: The Joint Controllers of your personal data are Objectivity sp. z o.o. and Objectivity IT Solutions sp. z o.o. (entered in the Register of Employment Agencies, number 13900), both with their registered ofﬁces in Wrocław (54-429) at ul. Strzegomska 142a, and – if you apply for a position in the ordering or sales department or any executive position in any of the departments – Objectivity Ltd. with its registered ofﬁce in Coventry, 9 Westwood House, Westwood Business Park Coventry, CV4 8HS, United Kingdom.
Additional information: In the Objectivity Group we use a group-wide HR base, since recruitment to a particular position does not have to necessarily be related to employment in a pre-speciﬁed company. In addition, the people in our parent company (Objectivity Ltd.) may participate in evaluation of candidates for key positions in other Group companies – therefore your data will be jointly controlled by more than one entity.
Data Protection Ofﬁcer (DPO): In matters related to data processing, you may contact our data protection ofﬁcer at: firstname.lastname@example.org.
Purposes of processing and legal basis: Your data will be processed for purposes of recruitment for a speciﬁc position based on Article 6(1)(b) of the General Data Protection Regulation – GDPR (to take steps at the request of the data subject prior to entering into a contract). If you also consent to your personal data processing with effect for the future, your data will be processed to conduct future recruitment based on Article 6(1)(a) (consent). If we make contact with you, we may retain basic information on the recruitment process (e.g. the name of the position, date of contact/meeting and the reason for closing the recruitment process) to facilitate recruitment processes in the future. In this scope, personal data is processed on the basis of art. 6(1)(f) of the GDPR, i.e. on the basis of our legitimate interest which is the retention of knowledge on previous recruitment processes in order to maintain adequate quality in the handling of candidates.
Recipients of personal data: Recipients of personal data are: individuals formally authorized to process personal data (engaged by the Joint Controllers) and entities which process personal data on behalf of the Joint Controllers on the basis of appropriate data processing agreements, i.e. the provider of HRlink – Online Technologies with its seat in Szczecin, Poland, and other providers of IT services.
Transfers of data to third countries: We do our best to limit personal data transfer outside of the European Economic Area (EEA). In particular, we limit storage locations to locations within the EEA only. Your personal data might be transferred outside of the EEA only as an exception. In such situations the transfer is secured by certiﬁcation of our providers in the Privacy Shield programme (https://iapp.org/resources/article/eu-u-s-privacy- shield-full-text/), or might also be secured with standard contractual clauses accepted by the European Commission (https://eur-lex.europa.eu/legal-content/PL/TXT/?uri=celex%3A32010D0087).
The duration of processing: If you apply for a position currently open, your data is processed until the end of the relevant recruitment process. If you consent to data processing for future recruitment processes, your data will be processed until your consent is revoked, or if you use another, equivalent measure, e.g. you request the deletion of your data. We process basic information on the recruitment process (e.g. the name of the position, date of contact/meeting and the reason for closing the recruitment process) for a period of 3 years after the end of the process.
Your entitlements: You have the right to access, rectify, obtain a copy of, erase, and restrict the processing of your personal data and the right to data portability, as well as the right to object to processing – in accordance with the provisions of the General Data Protection Regulation (GDPR).
Consent withdrawal: If you consent to the processing of your personal data in future recruitment processes, you have the right to withdraw your consent at any time, but this will not affect the lawfulness of personal data processing prior to the withdrawal.
Complaint with a supervisory authority: You have the right to lodge a complaint with the data protection supervisory authority if you believe that the processing of your personal data infringes the provisions of GDPR.
Freedom to provide data and consent: Data is given voluntary but is indispensable to conduct a pending recruitment process. Your consent to the processing of your data in connection with future recruitment is voluntary, however, if you do not give your consent your data will not be processed in other recruitment processes than the current one.