Information on the processing of personal data of candidates applying for jobs
at Astrafox Sp. z o.o.
Pursuant to Art. 13(1) and (2) of General Data Protection Regulation (EU) 2016/679 (the “GDPR”), we inform you that:
Controller and Data Protection Officer
-
The controller of your personal data is ASTRAFOX Sp. z o.o., with its registered office at ul. Poloneza 93, 02-826 Warsaw, telephone: +48 22 355 21 60, email: office@astrafox.pl, hereinafter the “Controller.”
-
The Controller has appointed a Data Protection Officer (DPO), who can be contacted in all matters related to the processing and protection of personal data by email at iod@astrafox.pl.
Purposes and legal bases for processing
-
Your personal data will be processed to conduct the recruitment process.
-
If you are applying for employment under an employment contract, your personal data, to the extent specified in labor law—Art. 22(1) of the Labor Code (Kodeks pracy)—will be processed on the basis of Art. 6(1)(c) GDPR, i.e., to comply with a legal obligation to which the Controller is subject. Other data, such as your photograph, contact details, and other information included, for example, in your cover letter, will be processed on the basis of your consent. You give your consent through the clear affirmative action of voluntarily submitting your application documents.
-
If you are applying for engagement under a civil-law contract (contract of mandate or B2B contract), your personal data that the Controller needs to enter into the contract will be processed on the basis of Art. 6(1)(b) GDPR (taking steps at the request of the data subject prior to entering into a contract). Other data that you include in your application documents beyond what is necessary, such as a photograph or information about hobbies, will be processed on the basis of your consent. You give your consent through the clear affirmative action of voluntarily submitting your application documents.
Retention period and withdrawal of consent
-
As a standard rule, your personal data contained in your application documents will be retained for 30 days after the recruitment process has ended.
-
If you give your consent, your data will be processed for future recruitment processes for one year or for a shorter period if you withdraw your consent to the processing of your data earlier.
-
To withdraw your consent to the processing of your data for recruitment purposes, send an email to office@astrafox.pl or iod@astrafox.pl.
Data recipients
- Recipients of your personal data may include entities that provide the Controller with IT services (such as email hosting and server hosting), legal services, and advisory services under appropriate agreements, as well as entities authorized to receive personal data under applicable laws.
Rights of natural persons
- Under the rules set out in the GDPR, you have the right to:
a) withdraw your consent to the processing of your data at any time, without affecting the lawfulness of processing based on consent before its withdrawal;
b) access your personal data and obtain a copy of it;
c) request rectification of your data;
d) request erasure of your data;
e) request restriction of the processing of your data.
-
To exercise your rights, please contact the Controller or the Data Protection Officer at the email addresses specified in Sections 1 and 2 above, or by mail at the address of the Controller’s registered office.
-
You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO) if you believe that the processing of your personal data violates the law.
Information on the requirement to provide data
- Providing personal data to the extent resulting from Art. 22(1) of the Labor Code is necessary to participate in the recruitment process. Providing other data is voluntary.
Information on the absence of profiling and transfers of data outside the EEA
- Your personal data will not be subject to automated decision-making, including profiling, and will not be transferred outside the European Economic Area.
Consent statement concerning future recruitment:
If you consent to the processing of your personal data after the recruitment process has ended for future recruitment purposes, including recruitment for other positions, please include the following consent statement in your application documents:
“I consent to the processing of the personal data contained in my application by ASTRAFOX Sp. z o.o., with its registered office in Warsaw, for future recruitment processes, including recruitment for other positions. I understand that I may withdraw my consent at any time.”