Information on the processing of personal data
as per the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (EU OJ L 119, p. 1) – abbreviated as GDPR and the provisions of the Polish law regarding personal data protection.
You are hereby informed that we process your personal data.
You will find details below.
I. Personal data controller
The controller of your personal data is HiProMine S.A., based in Robakowo 62-023, ul.
Poznańska 12F. You can contact the data controller via e-mail at firstname.lastname@example.org or
personally at the aforementioned address.
II. Objectives and legal bases for processing
A. In order to conduct a recruitment – process the processing takes place with the employee’s consent (legal basis under Article 6 (1) letter a GDPR);
B. In order to ensure security of employees at a work establishment and on its premises, to protect property, prevent unauthorized access to the premises, to control production or to keep secret information which, if disclosed, could cause detriment to the employer – CCTV inside and outside of the working establishment (legal basis under Article 6 (1) letter f GDPR, the processing is necessary for legitimate interests of the data controller);
III. Categories of your data that we process
The scope of your data is as follows: full name, full date of birth, contact data provide by the candidate in the questionnaire or CV, details of your education, professional qualifications, course of work, and other data provide by candidate e.g. image or home address. Image recorded in CCTV recordings.
IV. Data recipients
Your personal data may be made available to the following categories of entities:
A. IT system administrators (suppliers of IT or hosting services)
B. Entities performing consulting/ occupational medicine services /legal/EU project handling tasks for our company
C. Entities/institutions controlling the activity of HiProMine SA
D. Companies in charge of your trainings, conferences, associations of industry entities
E. Accounting offices
F. Other entities providing services necessary for the performance of your tasks/duties
V. Transfer of data to third countries and international organizations
Your data will be transferred outside Poland/EU/European Economic Area if it is necessary to enter in an international training or conference or an industry meeting. Your data will be transferred to the USA in relation to your use of Google services. Due protection of your data is ensured through an approved certification mechanism in combination with enforceable obligations of the data recipient to provide the relevant protections (Privacy Shield).
VI. Storage of personal data
Data obtained in relation to the conclusion of the agreement are stored:
A. if the application is rejected, the data obtained for recruitment purpose will be deleted immediately after closing the recruitment process for which the application has been submitted,
B. if the candidate agrees to participate in the future recruitments, the data is stored for 6 months from the date of closing the recruitment process for which the application was submitted,
C. data obtained from the candidate in order to conclude a potential employment contract / civil law contract / scholarship, which did not succeed, we keep for the negotiating period of the contract.
VII. Your rights
You have the following rights:
A. to access your personal data and maintain a copy thereof;
B. to rectify (correct) your data;
C. to have your data removed;
D. to limit the processing of your personal data;
E. to transfer your data;
F. to file a complaint with the supervisory authority;
If you think we are processing your data contrary to the law, you may submit a complaint to the relevant supervisory authority – President of the Personal Data Protection Office (Urząd Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa).
G. to withdraw your consent to the processing of your personal data covered by your consent.
You can at any time withdraw your consent to the processing of the personal data we process on the basis of your consent. Withdrawal of your consent will not affect legitimacy of the processing done on the basis of your consent granted before it is withdrawn.
VIII. Information on the provision of data being obligatory/voluntary
A. Your provision of data is:
a. a condition for us to fulfill our personnel, payroll, insurance and tax obligations in relation to your employment/redundancy/conclusion of a civil law or a scholarship contract with you
B. If you fail to provide your data:
a. we can refuse to conclude an employment contract with you and we can refuse to conduct a recruitment process.
IX. Automatic decision making
Decisions concerning your personal data obtained from you will not be taken by automated means. You will not be subject to profiling.
X. Information on data source
We have obtained your data on the basis of the personal data form you have filled out, the contract we have concluded, other documents you have provided us with and information you have presented to us during conversations with you before and during the recruitment process.