Information clause regarding the processing of personal data

Pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council from 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the GDPR), you are advised of the following:

  1. The administrator of your personal data is Atlas Ward Polska Sp. z o. o. with its registered office in Wrocław, at 41 Zwycięska Street, 53-033 Wrocław (KRS No. 0000102206) (hereinafter referred to as the “Administrator”).
  2. The Administrator shall process the following personal data:
    1) data regarding clients/potential clients and contractors/potential contractors, their employees and associates, as well as data of other persons provided to the Administrator in connection with the performance of agreements (personal ID, contact details, information about professional qualifications, job positions, other data provided in connection with cooperation),
    2) data of persons who contact the Administrator via e-mail or via the contact form on the website (personal ID, contact details and other data provided in connection with establishing contact),
    3)personal data included in application documents and collected during the recruitment process (name and surname, contact details, date of birth, data regarding education, work experience and qualifications, other data provided as part of the recruitment process).
  3. The Administrator shall obtain the data referred to in section 2 point 2) above directly from you, and the data referred to in section 2 points 1) and 3) above directly from you or other persons, including your employers, ordering parties, or persons recommending you in the recruitment or cooperation process, or from publicly available sources (in relation to data of potential contractors).
  4. Your personal data shall be processed for the following purposes:
    1) in the case of the data referred to in section 2 point 1) above, it shall be processed in order to:
    – establish cooperation,
    – conclude, execute and settle agreements,
    – fulfill legal obligations (e.g. tax, accounting etc.),
    – as defense against potential claims, as well as to issue any claims,
    – keep an internal database of contractors/potential contractors, in order to enable contact between the Administrator and contractors/potential contractors,
    – ensure safety and protection of property by the Administrator;
    2) in the case of the data referred to in section 2 point 2) above, it shall be processed in order to:
    – answer questions and conduct further correspondence to this regard,
    – as defense against potential claims, as well as to issue any claims,
    3) in the case of the data referred to in section 2 point 3) above, it shall be processed in order to:
    – consider candidates and manage the recruitment process, and, if consensual, also for the purpose of future recruitment,
    – as defense against potential claims, as well as to issue any claims,
    – ensure safety and protection of property by the Administrator.
  5. The legal basis for the processing of personal data is:
    1) in the case of the data referred to in section 2 point 1) above:
    – Article 6(1)(b) of the GDPR, i.e. processing is necessary for the performance of an agreement with the data subject, to which that person is a party or in order to take action at the request of the data subject prior to entering into an agreement;
    – Article 6(1)(c) of the GDPR, i.e. processing is necessary to fulfill a legal obligation of the Administrator,
    – Article 6(1)(f) of the GDPR, i.e. processing is necessary for the purpose of legitimate interests pursued by the Administrator (defense against potential claims, issuing potential claims, keeping a database of contractors/potential contractors, ensuring safety and property protection);
    2) in the case of the data referred to in section 2 point 2) above:
    – Article 6(1)(a) of the GDPR, i.e. the data subject has provided consent to the disclosure of their personal data for one or more specific purposes,
    – Article 6(1)(f) of the GDPR, i.e. processing is necessary for the purpose of legitimate interests pursued by the Administrator (correspondence with persons requesting contact, defense against potential claims, issuing potential claims);
    3) in the case of the data referred to in section 2 point 3) above:
    – Article 6(1) of the GDPR, i.e. the data subject has provided consent to the disclosure of their personal data for one or more specific purposes
    – Article 6(1) of the GDPR, i.e. processing is necessary for the performance of an agreement with the data subject, to which they are a party or to take action at the request of the data subject prior to the conclusion of an agreement
    – Article 6(1)(c) of the GDPR, i.e. processing is necessary to fulfill a legal obligation of the Administrator,
    – Article 6(1)(f) of the GDPR, i.e. processing is necessary for the purpose of legitimate interests pursued by the Administrator (defense against potential claims, issuing potential claims, ensuring safety and property protection).
  6. The recipients of the personal data shall be persons authorized by the Administrator, i.e. Members of the Management Board, employees and associates. Personal data may also be transferred to entities related to the Administrator personally or by capital, and entities providing services to the Administrator, in particular entities providing the following services: telecommunications, courier, recruitment, HR and payroll, accounting, auditing, notary, consulting, legal, scanning, printing, handling of correspondence, archiving and destroying documents, as well as entities providing security services.
  7. Personal data shall be stored for the following periods of time:
    1) data referred to in section 2 point 1) above – for the duration of the agreement, and in the case that an agreement is not concluded, for the duration of actions taken to conclude the agreement, and later for the period of limitation of any claims, for the period required by law or until a decision is made to delete a given contractor/potential contractor from the database or the discontinuation of keeping the database of contractors/potential contractors – depending on which of the above periods is longer,
    2) data referred to in section 2 point 2) above – for the period necessary to answer questions and conduct correspondence, and later until the expiration of the limitation period for any claims, unless the obligation to store data for a longer period results from legal provisions,
    3)data referred to in section 2 point 3) above – for the duration of the recruitment process or, upon consent, also for the duration of future recruitment processes, or until the consent is withdrawn, and later for a period of 6 months, unless an obligation for longer storage is required by law.
  8. Personal data shall not be processed in an automated manner and shall not be transferred to third countries.
  9. Authorized persons have the right to access their data, request correction or deletion of their data (“right to be forgotten”) or limit its processing, transfer their data to another administrator and object to processing of their data. If the processing of data is based on consent, you have the right to withdraw it at any time without affecting the lawfulness of the processing that was carried out on the basis of the consent before its withdrawal.
  10. In order to exercise the rights referred to in section 9 above, please contact the Data Protection Officer appointed by the Administrator by sending an application: 1/ by e-mail to the e-mail address: rodo@atlasward.pl or 2/ by registered letter to the Administrator’s address indicated in section 1 of this clause.
  11. The above mentioned Data Protection Officer is not the Data Protection Officer as mentioned in the GDPR.
  12. Authorized persons have the right to file a complaint with the President of the Office for Personal Data Protection should they consider that the processing of their personal data violates the provisions of the GDPR.
  13. Provision of your personal data is voluntary, but may be necessary to conclude or perform an agreement or to take action on your request prior to concluding an agreement, as well as to answer questions, conduct correspondence or participate in recruitment process

The Administrator shall treat the protection of personal data with significant importance, and treat it with due diligence and in accordance with applicable regulations.

 

Feel welcome to contact us

Write us or call: +48 71 360 53 50