What data are we talking about?
Personal data refers to information about an identified or identifiable natural person. This primarily includes data that allows for your identification, such as your name and contact details, including phone number, email address, and mailing address. If we process your data for recruitment purposes, this will also include information about your education and employment history. Depending on the information we receive from you, this may also include data about your family situation, marital status, photos, and information about your profiles on social networks (e.g., LinkedIn profile).
Personal Data Controller
The controller of your personal data are the individual entities within the KRUK Capital Group, depending on which recruitment advertisement you apply to or to which you have given consent to process your data for specific purposes. These may include:
Data Protection Officer
Each of the aforementioned Controllers of your personal data is KRUK S.A. or a company from the KRUK Capital Group, depending on the job advertisementhas appointed a Data Protection Officer, whom you can contact regarding all matters related to the processing of your personal data and your related rights.
For matters related to the recruitment process conducted by KRUK S.A. as a Controller or as a data processor, contact the Data Protection Officer at KRUK S.A., ul. Wołowska 8, 51-116 Wrocław, or via email: dpo@kruksa.pl.
Why and on what basis do we process your personal data?
All personal data provided by you in recruitment documents are processed to conduct the recruitment process for the position you have chosen. Providing personal data is voluntary but necessary for the recruitment process. The legal bases for processing your personal data are:
If you have also consented to participate in future recruitments, your data will be processed for your participation in potential future recruitment processes for the position you have chosen or other similar positions within the KRUK Capital Group companies, and the basis for processing your personal data is Article 6(1)(a) of the GDPR.
If you have consented (Article 6(1)(a) of the GDPR) as part of the recruitment processes you participate in, we may send you a short survey to the provided email address to measure your satisfaction with the recruitment process (Candidate Experience).
How long do we store your personal data?
Your personal data will be processed for the duration of the recruitment process you have chosen. Additionally, if you have also consented to participate in future recruitments, your data will be processed by us for 18 months from the date you submitted your application and gave consent. However, in the case of your personal data processed solely based on your consent, it will be processed for the duration of the recruitment process you have chosen or shorter if you withdraw your consent before its completion.
You can withdraw your consent to the processing of your data (e.g., by sending an email to rekrutacja2@kruksa.pl or by mail to the Business Partnership and HR Advisory Department (HR), KRUK S.A., ul. Wołowska 8, 51-116 Wrocław).
Withdrawal of consent does not affect the lawfulness of processing carried out based on consent before its withdrawal.
To whom can we transfer your personal data?
Your data may be shared with entities supporting our activities, such as companies within the KRUK Capital Group, entities providing legal and accounting services, telecommunications operators, postal and courier service providers, entities supporting our IT infrastructure, our consultants or auditors, and law enforcement agencies, as well as other authorities and entities if the obligation to transfer data arises from legal provisions.
Our data processors in the recruitment process include:
Do you have to provide us with your personal data?
Providing your personal data is voluntary. To the extent that the processing of your personal data is necessary for handling the recruitment process and your candidacy, the consequence of not providing it will be the inability to consider your candidacy in the recruitment process.
From whom can we receive your data?
Generally, we receive your data directly from you as a result of your application. In some situations, we obtain your personal data in ways other than directly from you, e.g., when an external recruiter handles our recruitment process.
Profiling and automated decision-making
We inform you that within our operations, your data will be processed automatically, but not in the form of profiling. We do not make decisions about you in an automated manner.
Transfer of your personal data outside the European Economic Area (EEA)
We use the services of providers and partners outside the EEA, and therefore it is possible to transfer personal data to countries outside the EEA. Such data transfer may occur based on a decision confirming an adequate level of protection or subject to appropriate safeguards, Articles 45, 46 of the GDPR. Information about the EU Commission's adequacy decisions is available here: EU Adequacy Decisions.
What are your rights regarding your data and how can you exercise them?
According to the GDPR, you have the right to:
If you want to exercise the above rights, you can:
Please note that according to the GDPR, we will not delete your personal data to the extent that its processing is necessary for us to establish, pursue, or defend our claims or if we have a legal obligation to process it.
When the basis for processing personal data is your consent, you can withdraw it at any time. However, this will not affect the lawfulness of the use of your data by the Company before the withdrawal of such consent.