Privacy Policy for Recruitment

1. What is the purpose and legal basis for processing your data?

The scope of personal data we process depends on the information you provide in your application – it includes the content of the documents, information regarding the manner in which they were submitted, as well as the content of any further communication between us and the conclusions drawn from the recruitment process.Please note that, where the position for which you are applying involves entering into an employment contract, we are entitled to require you to provide the data listed in Article 22¹ of the Polish Labour Code, as well as to document such data to the extent necessary to confirm it, namely:

• first name(s) and surname;
• date of birth;
• contact details;
• education;
• professional qualifications;
• employment history;
• other data, if necessary in order to exercise a right or fulfil an obligation arising from a provision of law.

Failure to provide the above data at our request may result in our being unable to assess your application and, consequently, in refusal to allow you to participate in the recruitment process or to offer you employment. By contrast, to the extent that the data goes beyond the scope resulting from the Polish Labour Code, such data is provided by you voluntarily, which means that refusal to consent to its processing will not result in any adverse consequences.If you have given your consent to participate in a specific recruitment process or in future recruitment processes, the legal basis for our processing of your personal data will be your consent (Article 6(1)(a) GDPR). In some cases, we may process your personal data for the purposes of future recruitment on the basis of our legitimate interests (Article 6(1)(f) GDPR), namely the use of a lawfully obtained application in order to present you with an offer of co-operation for a position corresponding to your qualifications and our recruitment needs, which is a purpose compatible with the purpose for which your personal data was originally collected (the so-called compatible purpose within the meaning of Article 6(4) GDPR).In each case, the purpose of processing is:

• to assess your application against the requirements for the position indicated in the job advertisement in response to which you submitted your application, or, as applicable, to conduct future recruitment processes for similar positions;
• if you meet the requirements for the position – to present you with an offer of co-operation and conclude a contract;
• to demonstrate that the recruitment process complies with the applicable laws.

Where data is processed on the basis of consent, we remind you that you may withdraw the consent previously given at any time, without affecting the lawfulness of processing carried out on that basis before such withdrawal. Refusal to give consent or withdrawal of consent may not constitute grounds for adverse treatment and will not give rise to any negative consequences whatsoever; in particular, it will not constitute a reason justifying refusal of employment.Retention period for your personal dataIf we process your personal data in connection with a single recruitment process, it will be deleted no later than 6 months after the end of the recruitment process, understood as the conclusion of a contract with another candidate. This period allows for completion of the probationary period and confirmation that the position has in fact been effectively filled. In addition, during this period we may offer you participation in a recruitment process for a similar position (the so-called compatible purpose – see above).Data processed on the basis of consent for future recruitment processes is processed until such consent is withdrawn or the purpose for which it was given has been fulfilled (i.e. your employment), but usually for no longer than 2 years from its last update by you.The above periods may be appropriately and necessarily extended in the event of potential claims and court proceedings – for the duration of such proceedings and their settlement – as well as where the law requires us in specific cases to process such data for a longer period.Please also see the Privacy Policy tab, where you will find the data identifying the data controller, as well as information on the categories of recipients of your data and the rights to which you are entitled.