PRIVACY POLICY

Pursuant to Article 13(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (“GDPR”), Finobserve spółka z ograniczoną odpowiedzialnością provides the following information regarding the processing of your personal data:
​

​​

1. Personal Data Controller
   The controller of your personal data is Finobserve spółka z ograniczoną odpowiedzialnością, with its registered office in Kraków, ul. Morawskiego 5/323, 30-102 Kraków, entered into the Register of Entrepreneurs kept by the District Court for Kraków–Śródmieście in Kraków, 11th Commercial Division of the National Court Register, under KRS number: 0001120697, NIP (Tax Identification Number): 6772514021, share capital: PLN 5,000, e-mail: gdpr@fin-observe.com.
   
    

2. Purposes and legal bases for the processing of personal data
   The Controller processes personal data in order to enable participation in recruitment processes currently conducted and that may be conducted in the future by the Controller.
   
   The legal basis for the processing of personal data is:
   
   1) with respect to recruitment processes currently being conducted – the taking of steps by the Controller at the request of the job candidate (i.e. consideration of the job application) prior to the possible conclusion of a contract (Article 6(1)(b) GDPR);
   
   2) with respect to recruitment processes that may be conducted in the future – the consent given by the job candidate (Article 6(1)(a) GDPR).
   
    

3. Recipients of data
   The Controller may disclose your personal data to its subcontractors (entities whose services the Controller uses in processing), such as:
   
   1) IT service providers;
   
   2) entities cooperating with the Controller in the recruitment process.
   
   The Controller may use IT service providers whose registered offices are located outside the European Union. Consequently, personal data may be transferred outside the EU. The Controller uses only entities established in countries in respect of which the European Commission has found that they ensure an adequate level of protection, or entities processing personal data on the basis of Standard Contractual Clauses adopted by the European Commission, as referred to in Article 46 GDPR, concluded between the Controller and such entities, or entities processing data on the basis of the Data Privacy Framework principles.
   
    

4. Data retention period
   Personal data are stored by the Controller for a period of 2 years from the date of their collection, provided that the job candidate has given the relevant consent. If consent has not been given, personal data are deleted immediately after the completion of the given recruitment process.
   
    

5. Rights of data subjects
   You are entitled to the following rights:
   
   1) the right of access to your personal data and to obtain a copy thereof;
   
   2) the right to rectification of personal data;
   
   3) the right to erasure of personal data;
   
   4) the right to request restriction of the processing of personal data;
   
   5) the right to data portability;
   
   6) the right to object to the processing of your personal data;
   
   7) the right to lodge a complaint with a supervisory authority.
   
   Where the processing of personal data is based on consent, you also have the right to withdraw your consent to the processing of personal data at any time. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.
   
   To exercise the above rights, you may contact the Controller.
   
   The Controller does not make decisions concerning you that are based solely on automated processing, including profiling.
   
   The Controller processes personal data obtained directly from you. The Controller may also process personal data obtained from publicly available sources (the Internet).
   
    

6. Information on the voluntary or mandatory provision of data
   The provision of your personal data is voluntary; however, failure to provide such data will make it impossible to participate in recruitment processes.