What data do we mean?
Personal data is information about an identified or identifiable natural person. This includes, in particular, your personal identification data, such as your name, date of birth, personal identification number (PESEL), home address and, where applicable, identity card number and series, photograph, contact details such as telephone number, e-mail address and postal address. Where we are processing your data for the purpose of performing an employment contract, this will also include information about your education and previous employment, information about family members and your health. Depending on what information we receive from you, this may include details of your family situation and marital status. We process employee appraisal and remuneration information.
Personal Data Controller
KRUK S.A. with its registered office in Wrocław (51-116), ul. Wołowska 8, is the controller of your personal data.
You may address your query to any of the above-mentioned Controllers by sending it to KRUK S.A., ul. Wołowska 8, 51-116 Wrocław, or to the e-mail address email@example.com.
Data Protection Officer
We have appointed a Data Protection Officer whom you may reach for all matters concerning the processing of your personal data and your rights in this regard. You may write to him at the following address: Data Protection Officer, KRUK S.A. ul. Wołowska 8, 51-116 Wrocław, or contact by e-mail: firstname.lastname@example.org.
Why and on what basis do we process your personal data?
Your personal data may be processed by us under Article 6(1)(b) GDPR to the extent necessary for the performance of the contract of employment or cooperation and Article 6(1)(c) GDPR to fulfil the employer's obligations towards the employee and institutions imposed on the employer by laws and regulations. With regard to employee evaluations, we process personal data on the basis of Article 6(1)(f) GDPR in the legitimate legal interest of the Controller in collecting and verifying employee performance evaluations.
How long do we keep your personal data?
The duration of the Controller's processing of your personal data depends on the purpose of the processing. It arises in the case of an employment contract usually from:
To whom may we pass your personal data?
Your data may be shared with KRUK Group entities and other entities supporting the HR process as well as IT, ICT and cloud service providers. Your personal data is passed on to the tax authorities and the National Health Fund within the statutorily defined scope. Your personal data may be forwarded to banks for the purpose of salary payment and to entities that are entitled to seize your salary by virtue of a valid enforcement order. Depending on your position, we may pass on your personal data to our auditors and consultants.
Do you have to give us your personal information?
Your provision of personal data is voluntary. To the extent that the processing of your personal data is carried out for the purpose of performing an employment contract, the consequence of failing to do so will be that the contract and the employer's obligations cannot be fulfilled.
From whom may we receive your data?
In principle, we receive your data directly from you as a result of your application and submission of statements and questionnaires. In certain situations, we obtain your personal data by means other than directly from you, such as when an external recruiter handles our recruitment process. In addition, we may receive your personal data from entities such as healthcare providers, treasury offices, bailiffs, banks and co-workers.
Profiling and automated decision making
Please be informed that in the course of our activities your data will be processed by automated means, including profiling. We do not make automated decisions in relation to you.
Transfer of your personal data outside the European Economic Area (EEA)
We use suppliers and partners outside the EEA and it is therefore possible to transfer personal data to countries outside the EEA. Such transfer of personal data may take place on the basis of a decision stating the appropriate level of protection or subject to appropriate safeguards, Art. 45, 46 GDPR. Information on the EU Commission's adequacy decisions is available here: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en
What rights do you have in relation to your data and how can you exercise them?
In our business, we ensure that you can exercise your rights under the GDPR.
Under the GDPR you have the right to:
You can also request:
Please note that, in accordance with the GDPR, we will not delete your personal data to the extent that its processing is necessary for us to establish, assert or defend our claims, e.g. a request for payment of a debt, or we have a legal obligation to process it, e.g. an obligation to keep accounting documents. If, on the other hand, we restrict the processing of your data at your request, we will still be able to process your data to establish, assert or defend our claims.
Where your consent is the basis for the processing of your personal data, you may withdraw it at any time. However, this will not affect the lawfulness of the Company's use of your data prior to the withdrawal of such consent.
If you wish to exercise the above rights, you may submit a request to us by:
You also have the right to lodge a complaint with the data protection supervisory authority, i.e. the President of the Office for Personal Data Protection.