In accordance with Regulation of the European Parliament and the Council (UE) 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data as well as on the repeal of directive 95/46/WE ( hereinafter referred to as: “GDPR”), please be informed of the following:
1. The controllers of the personal data
The controller of your personal data is:
Drutex Spółka Akcyjna,
based in Bytów (77-100) in Lęborska 31 street
hereinafter referred to as „Drutex SA” or ‘’Controller’’
2. Contact point
The controller has appointed a contact point that is the personal data Controller, the controller may be contacted:
- By correspondence -– sending queries at the aforesaid Drutex SA address
- By email on: gdpr@Drutex.com.pl
3. Purposes of the processing, the legal basis of the processing, the duration of data storage
Your personal data will be processed within the purpose of recruitment process for the position that the candidate has applied for - pursuant to Article 6 (1) (A) GDPR (i.e. your consent to processing data provided in the application documents, if you have provided data other than one that is legally required from the wording of Article 221 § 1 of the Labour Code ), and also pursuant to Article 6 (1) (F) GDPR (i.e. legitimate interest of the Controller – regarding the data collected during the job interview and the results of the qualification tests. The Controller has legitimate interest in checking your skills and abilities – it is necessary in order to evaluate if you are the proper person for the position in the recruitment process.
Your personal data will be processed within this purpose during the recruitment process for the position that you have applied for and in duly justified cases for another 2 years with a view to protecting itself against potential claims for damages.
4. Recipients of data
We shall not transfer personal data processed in recruitment process to industrial entities registered or established in third countries. We shall not transfer personal data to international organizations. Access to your personal data shall be limited to authorized staff and collaborators of the Controller.
5. Rights concerning personal data processing and taking automated decisions
In compliance with the principles and in the scope specified in the GDPR, you have the following rights:
a) the right to access the personal data,
b) the right to rectify and complete your data,
c) the right to erase personal data,
d) the right to restrict personal data processing, ,
e) the right to transfer data,
f) the right to withdraw your consent at any time which shall not affect the lawfulness of processing based on consent before its withdrawal – in the scope that data processing occurs based on your consent;
g) the right to object to the processing of any data relating to you due to your particular situation – if your data is processed basing on the legitimate interest of the Controller.
Modalities of the rights:
In order to exercise the above mentioned rights you need to contact the data protection coordinator providing your personal data that enables to verify your identity.
6. The right to lodge a complaint with a superior authority
You have the right to lodge a complaint with a superior authority, i.e. Inspector General for the Protection of Personal Data – if you conclude that the Controller has used your personal data unlawfully
7. Obligatory/voluntary submission of data
Providing your personal data in the scope of the specific provision of the article 221 § 1 of the Labor Code is a statutory requirement and its absence will disenable considering the candidate in the recruitment process. However, submitting your personal data in a wider scope is voluntary and occurs with your consent.