Career

GDPR information clause for an applicant

Pursuant to Article 13 (1) and Article 13 (2) of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ L 2016.119.1) (hereinafter referred to as the “GDPR”), the Controller informs you that:

1. The controller of your data is CORAB Spółka Akcyjna based in Olsztyn (10-547) at ul. Michała Kajki 4, entered in the Register of Businesses kept by the District Court in Olsztyn, 8th Economic Division of the National Court Register, under KRS number: 0000950779, REGON (Business ID): 510519084, NIP (Tax ID): 7390207757, hereinafter referred to as the “Controller” The Controller has appointed a Data Protection Inspector: Ms. Katarzyna Krzywicka. You can contact the Data Protection Inspector by e-mail to iod@corab.com.pl or by addressing correspondence to the Controller.
2. The Controller processes the following personal data: personal data contained in the documents that you submit while participating in the recruitment process for the job position mentioned in the job notice and which is conducted by the Controller. You have the right to withdraw your consent to data processing as part of the recruitment process at any time.
3. The Controller processes personal data:
   • In order to carry out the recruitment process and on the basis of your consent to participate in the recruitment (pursuant to Article 6(1)(a) and Article 9(2)(a) of the GDPR – in the scope of special category data),
   • For archival (evidential) purposes to protect information in the event of a legal need to prove facts, which constitutes the Controller’s legitimate interest (pursuant to Article 6(1)(f) of the GDPR),
   • In order to determine, pursue or defend claims where necessary, which is the legitimate interest of the Controller (pursuant to Article 6(1)(f) of the GDPR),
   • For purposes related to the Controller's recruitment for a relevant or similar job position in the future based on your consent to participate in the recruitment process in the future (pursuant to Article 6(1)(a) of the GDPR),
   • In order to comply with legal obligations, in particular in the case of recruitment for a job position as part of cooperation under an employment contract (pursuant to Article 6(1)(c) of the GDPR).
4. Personal data may be made available to subcontractors, i.e. entities whose services the Controller uses to process data, such as technical support, IT companies, entities providing accounting and payroll services. The list of recipients of personal data may also include entities that are lawfully entitled to receive them (e.g. Tax Office).
5. The Controller will process your personal data for 3 months from the date of end of recruitment. If you have agreed to participate in future recruitment for the relevant job position or a similar position, the Controller will be processing your personal data for this purpose until 1 year from the end of the recruitment or until you withdraw your consent. Thereafter, the data you provided during the recruitment process will be erased. The Controller will contact selected candidates.
6. You have the following rights related to the processing of your personal data:
   • The right to access personal data and receive a copy thereof,
   • The right to have your data rectified (corrected),
   • The right to have your data erased,
   • The right to restrict data processing,
   • The right to object to data processing based on a legitimate interest,
   • The right to data portability,
   • The right to withdraw your consent, where the Controller processes your data based on this consent, at any time without prejudice of the lawfulness of processing based on consent before its withdrawal,
   • The right to lodge a complaint with the supervisory authority.
   • In order to exercise the foregoing rights, submit your request to the above e-mail address. Before you exercise your rights, the Controller will have to properly identify you.
7. Not all of the above rights will be available always and under all conditions. Some of the above rights are not absolute and you need a verification to exercise them.
8. Providing your personal data is voluntary but necessary to participate in the recruitment process. We obtain personal data directly from you. In particular, these are such data as your first name, last name, place of employment, job position and contact details such as e-mail or telephone number.
9. Your personal data will not be subject to a decision that is based solely on automated processing, including profiling, and which produces legal effects regarding you or significantly affects you in a similar way.
10. Your personal data may be transferred to third countries or international organizations outside the European Economic Area in connection with the Controller's use of services from various providers. Your data may be transferred, for example, to entities from the Microsoft group. In such a case, the Controller will transfer data solely if the entity provides appropriate security measures and provided that effective legal protection measures for personal data are provided, for instance where standard contractual clauses are applied.
11. You have the right to lodge a complaint with the supervisory authority, which in Poland is the President of the Office for Personal Data Protection.