GDPR
We ensure full transparency in data processing
INFORMATION OBLIGATION PURSUANT TO ARTICLE 13 PARAGRAPHS 1 AND 2 AND ARTICLE 14 OF THE GDPR
Information clause for clients and contractors
Pursuant to Article 13 paragraphs 1 and 2 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the GDPR), we hereby inform you about the principles of processing your personal data and your rights in this respect.
The following rules apply from May 25, 2018.
1. Personal data administrator:
Due to organizational, personnel, infrastructure, and capital ties, a joint data controllership agreement has been concluded, in accordance with Article 26 of the GDPR. Therefore, the following entities are joint controllers of your personal data:
a) KAMIL ZIELIŃSKI running the business Kamil Zieliński, ul. Lutniana 39, 71-425 Szczecin, REGON: 320660237, NIP: 6692279262;
b) 7HS Sp. z o.o., ul. Lutniana 39, 71-425 Szczecin; KRS: 0000650588; NIP: 6692531141; REGON: 365999682;
c) 7HR GROUP Sp. z o.o., ul. Lutniana 39, 71-425 Szczecin; KRS: 0000721570; NIP: 8513220805; REGON: 369609287;
d) 2BeFair Foundation, ul. Lutniana 39, 71-425 Szczecin; KRS: 0000686545; NIP: 8522633263; REGON: 367776822;
e) Legal HR Sp. z o.o., ul. Lutniana 39, 71-425 Szczecin; KRS: 0000686381; NIP: 5223095804; REGON: 367788854.
hereinafter referred to jointly as: “Joint Controllers”.
2. Joint controllership arrangements
As part of the joint controllership agreement, the scope of responsibility for fulfilling the obligations arising from the GDPR was agreed upon, in particular:
a) The Joint Controllers are jointly responsible for fulfilling your information obligation and for enabling you to exercise your rights. Where appropriate, the Joint Controller will enable you to exercise your rights or forward your request to the relevant Joint Controller, who will then fulfill your request;
b) each of the Joint Controllers is responsible for the processing of your personal data within the indicated purposes.
3. Common point of contact
The Joint Controllers have established a common contact point for individuals whose data is being processed. Contact can be made at: rodo@legalhr.pl.
4. Purposes and basis of processing:
Your personal data will be processed on the basis of applicable legal provisions – in particular Article 6 paragraph 1 letters a, b, c and f of the GDPR:
a) concluding and implementing an agreement for the use of the Joint Controllers’ services, as well as enabling and maintaining contact,
b) fulfillment of legal obligations, e.g. the obligation to issue an invoice or other document required by law,
c) recovering any debts,
d) possible legal disputes, including the determination, investigation or defense against claims,
e) obtaining a response to a submitted inquiry/obtaining contact via the contact form,
f) archival (evidence) to secure information in the event of a legal need to prove facts.
5. Categories of data we process:
To achieve the above purposes, we process the following data:
a) data necessary to conclude, implement and terminate agreements concluded with the Joint Controllers – including name, surname and contact details.
6. Data recipients:
Personal data may be transferred to entities that require the data to be transferred for the performance of the contract, including software and IT service providers, and contractors providing accounting, legal, auditing, and outsourcing services to the Joint Controllers. Personal data may also be transferred to tax, audit, and other authorities.
7. Transfer of data to a third country/international organization:
Your personal data will not be transferred to a third country/international organisation.
8. Period of storage of personal data (the period for which personal data will be stored and, if this is not possible, the criteria for determining this period):
Your personal data will be processed for the period necessary to achieve the processing purposes indicated in point 4, i.e.:
a) within the scope of the performance of the contract concluded by you, for the period until its completion or for a longer period resulting directly from the contract, and after that time for the period required by law or necessary to secure any claims and only to the extent specified by law.
9. Rights regarding personal data:
You have the right to access, rectify, erase, and restrict the processing of your personal data. You also have the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal, the right to data portability, and the right to object to the processing of your personal data.
The above rights may be exercised, for example, by a written declaration.
You have the right to lodge a complaint with the supervisory authority competent for personal data protection if you believe that the processing of your personal data violates the provisions of the GDPR.
10. Information on the requirement/voluntary nature of providing data:
The provision of your data is voluntary, however, failure to provide the required data necessary to perform the contract will prevent its conclusion and performance.
11. Automated processing and profiling
Your data will not be processed in an automated manner, including in the form of profiling.
Information clause for employees
Pursuant to Article 13 paragraphs 1 and 2 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the GDPR), we hereby inform you about the principles of processing your personal data and your rights in this respect.
The following rules apply from May 25, 2018.
1. Personal data administrator:
Due to organizational, personnel, infrastructure, and capital ties, a joint data controllership agreement has been concluded, in accordance with Article 26 of the GDPR. Therefore, the following entities are joint controllers of your personal data:
a) KAMIL ZIELIŃSKI running the business Kamil Zieliński, ul. Lutniana 39, 71-425 Szczecin, REGON: 320660237, NIP: 6692279262;
b) 7HS Sp. z o.o., ul. Lutniana 39, 71-425 Szczecin; KRS: 0000650588; NIP: 6692531141; REGON: 365999682;
c) 7HR GROUP Sp. z o.o., ul. Lutniana 39, 71-425 Szczecin; KRS: 0000721570; NIP: 8513220805; REGON: 369609287;
d) 2BeFair Foundation, ul. Lutniana 39, 71-425 Szczecin; KRS: 0000686545; NIP: 8522633263; REGON: 367776822;
e) Legal HR Sp. z o.o., ul. Lutniana 39, 71-425 Szczecin; KRS: 0000686381; NIP: 5223095804; REGON: 367788854.
hereinafter referred to jointly as: “Joint Controllers”.
2. Joint controllership arrangements:
As part of the joint controllership agreement, the scope of responsibility for fulfilling the obligations arising from the GDPR was agreed upon, in particular:
c) The Joint Controllers are jointly responsible for fulfilling your information obligation and for enabling you to exercise your rights. Where appropriate, the Joint Controller will enable you to exercise your rights or forward your request to the relevant Joint Controller, who will then fulfill your request;
d) each of the Joint Controllers is responsible for the processing of your personal data within the indicated purposes.
3. Common point of contact
The Joint Controllers have established a common contact point for individuals whose data is being processed. Contact can be made at: rodo@legalhr.pl.
4. Purposes and basis of processing:
Your personal data will be processed on the basis of applicable legal provisions – in particular Article 6 paragraph 1 letters b, c and f of the GDPR and other legal provisions, and on the basis of the consents granted for the purposes of:
a) employment, safety and work organization, and ensuring participation in training offered by external entities,
b) assistance in legalizing your stay,
c) providing accommodation – mediating in concluding a lease agreement,
d) fulfillment of obligations arising from agreements concluded by the Joint Controllers regarding employee leasing and outsourcing,
e) possible legal disputes, including the determination, investigation or defense against claims, which is our legitimate interest,
f) archival (evidence) purposes to secure information in the event of a legal need to prove facts, which is a legitimate interest of the Joint Controllers.
5. Categories of data we process:
To achieve the above purposes, we process the following data:
a) data necessary for the conclusion, implementation and termination of employment contracts/contracts of mandate/contracts for specific work/management contracts concluded with the Joint Controllers and the implementation of employee leasing and outsourcing – including first name, last name, PESEL number, NIP number, contact details, data of family members, data collected during the recruitment process, certificates, authorizations, training certificates, certificates of no contraindications to work, employment certificates.
b) data necessary to assist in the legalization of stay – including first name(s) and last name, maiden name, parents’ names, date of birth, marital status, citizenship, place of birth, competent tax office, place of residence (mailing address), passport number (passport scan), visa (visa scan), series and number of the Pole’s card, NIP number, PESEL number.
c) data necessary to provide accommodation – including name(s) and surname, address, identity document number.
6. Data recipients:
Personal data may be transferred to external entities providing services such as providing training and professional courses, recruitment and HR management, IT infrastructure support and maintenance (including within the IT system used for recruitment and employment), legal advice, user behavior analysis, order processing, compliance verification (audits), training and development.
Personal data may be transferred to clients of the Joint Controllers as part of employee leasing and outsourcing.
Data may be transferred to entities offering additional benefits for employees, such as group insurance, other benefits and business travel arrangements.
Personal data may be transferred to entities to which the transfer of data is necessary for the performance of the contract – these include, among others, Occupational Health Institutions, Tax Offices, the Social Insurance Institution, entities providing legal and IT services.
The recipients of your personal data will also be state authorities within the scope of their tasks.
7. Transfer of data to a third country/international organization:
Your personal data will not be transferred to a third country/international organisation.
8. Period of storage of personal data (the period for which personal data will be stored and, if this is not possible, the criteria for determining this period):
Your personal data will be processed for the period necessary to achieve the processing purposes indicated in point 4, i.e.:
a) within the scope of the performance of the contract concluded by you, for the period until its expiry, and after that time for the period resulting from the provisions of labor law to secure any possible claims,
b) in the scope of court disputes, for a period of 10 years from the date of issuance of a final judgment concluding the proceedings.
9. Rights regarding personal data:
You have the right to access, rectify, erase (where applicable) your personal data, and restrict its processing. You also have the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal, the right to data portability, and the right to object to the processing of your personal data.
The above rights may be exercised, for example, by a written declaration.
You have the right to lodge a complaint with the supervisory authority competent for personal data protection if you believe that the processing of your personal data violates the provisions of the GDPR.
10. Information on the requirement/voluntary nature of providing data:
Providing your personal data as specified in applicable regulations is a statutory requirement and is necessary for the conclusion of an employment contract. Otherwise, providing your personal data is voluntary.
11. Automated processing and profiling
Your data will not be processed in an automated manner, including in the form of profiling.
Information clause for job candidates
Pursuant to Article 13 paragraphs 1 and 2 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the GDPR), we hereby inform you about the principles of processing your personal data and your rights in this respect.
1. Personal data administrator:
Due to organizational, personnel, infrastructure, and capital ties, a joint data controllership agreement has been concluded, in accordance with Article 26 of the GDPR. Therefore, the following entities are joint controllers of your personal data:
a) KAMIL ZIELIŃSKI running the business Kamil Zieliński, ul. Lutniana 39, 71-425 Szczecin, REGON: 320660237, NIP: 6692279262;
b) 7HS Sp. z o.o., ul. Lutniana 39, 71-425 Szczecin; KRS: 0000650588; NIP: 6692531141; REGON: 365999682;
c) 7HR GROUP Sp. z o.o., ul. Lutniana 39, 71-425 Szczecin; KRS: 0000721570; NIP: 8513220805; REGON: 369609287;
d) 2BeFair Foundation, ul. Lutniana 39, 71-425 Szczecin; KRS: 0000686545; NIP: 8522633263; REGON: 367776822;
e) Legal HR Sp. z o.o., ul. Lutniana 39, 71-425 Szczecin; KRS: 0000686381; NIP: 5223095804; REGON: 367788854.
hereinafter referred to jointly as: “Joint Controllers”.
2. Joint controllership arrangements:
As part of the joint controllership agreement, the scope of responsibility for fulfilling the obligations arising from the GDPR was agreed upon, in particular:
a) The Joint Controllers are jointly responsible for fulfilling your information obligation and for enabling you to exercise your rights. Where appropriate, the Joint Controller will enable you to exercise your rights or forward your request to the relevant Joint Controller, who will then fulfill your request;
b) each of the Joint Controllers is responsible for the processing of your personal data within the indicated purposes.
3. Common point of contact
The Joint Controllers have established a common contact point for individuals whose data is being processed. Contact can be made at: rodo@legalhr.pl.
4. Purposes and basis of processing:
Your personal data will be processed on the basis of applicable legal provisions – in particular Article 6 paragraph 1 letters b, c and f of the GDPR and other legal provisions, and on the basis of the consents granted for the purposes of:
a) implementation of a specific recruitment process, including for the benefit of the Joint Controllers’ clients,
b) implementation of future recruitment processes,
c) inclusion in the Joint Controllers’ candidate database,
d) assistance in finding employment or other suitable work,
e) sending information about you to clients of the Joint Controllers for the purpose of applying for a specific position or assessing your qualifications,
f) fulfillment of obligations arising from any agreements concluded between the Joint Controllers and third parties in connection with your recruitment;
g) assistance in legalizing your stay,
h) assistance in enrolling children in nursery/kindergarten/school;
i) assistance with tax settlements;
j) assistance in obtaining a PESEL number and opening a bank account;
k) providing accommodation – mediating in concluding a contract,
l) obtaining a response to a submitted inquiry/obtaining contact via the contact form,
m) establishing and pursuing claims or defending against claims, if the claims relate to ongoing recruitment, until the statute of limitations for such claims expires.
5. Categories of data we process:
To achieve the above purposes, we process the following data:
a) data necessary to conduct the recruitment process, including name, surname, date of birth, contact details, education, previous employment history, image (in the case of a photo included in the CV);
b) data necessary to conduct the recruitment process on behalf of the client, i.e. the data indicated in point a) and: immigration status (if a work permit is required), nationality, citizenship, information on criminal records, if required for the position for which you wish to apply, data related to your references.
c) data necessary to assist in the legalization of stay – including first name(s) and last name, maiden name, parents’ names, date of birth, marital status, citizenship, place of birth, competent tax office, place of residence (mailing address), passport number (passport scan), visa (visa scan), series and number of the Pole’s card, NIP number, PESEL number.
d) data necessary to assist in enrolling children in a nursery/kindergarten/school – including first name(s) and last name, date of birth and PESEL number of the child, and in the absence of a PESEL number – the series and number of the passport or other document confirming identity; e-mail address and telephone numbers of parents, a declaration of place of residence, a decision on the need for special education issued due to disability, a decision on disability or degree of disability or an equivalent decision, a final family court judgment declaring divorce or separation or a death certificate, and a declaration that the child is raised alone and not raised any child jointly with their parent, a document confirming that the child is placed under foster care.
e) data necessary to assist with tax settlements – including name(s) and surname, PESEL number, income, spouse’s income, data regarding children.
f) data necessary to assist in obtaining a PESEL number and opening a bank account – including first name(s) and last name, place of residence (mailing address), gender, date of birth, country of birth, country of residence, citizenship, series and number and expiry date of the foreigner’s travel document or other document confirming identity and citizenship, maiden name, mother’s first name, father’s maiden name, father’s first name, birth certificate reference, place of birth, mother’s maiden name, marital status, spouse’s first name and maiden name, spouse’s PESEL number, information on recent events affecting the marriage.
g) data necessary to provide accommodation – including name(s) and surname, address of residence, identity document number.
6. Data recipients:
Personal data may be transferred to potential employers and other recruitment agencies/organisations.
The recipients of your personal data will also be state authorities within the scope of their tasks.
7. Transfer of data to a third country/international organization:
Your personal data may be transferred outside the European Economic Area (Member States of the European Union and Norway, Iceland and Liechtenstein) if this is in accordance with data protection legislation and the means of transfer ensure adequate data protection, for example:
a) through a data transfer agreement containing the current standard contractual clauses adopted by the European Commission for the transfer of personal data from data controllers in the EEA to controllers and processors in jurisdictions without adequate data protection legislation,
b) by joining the EU-US Privacy Shield for the transfer of personal data from entities in the EU to entities in the United States of America or any equivalent agreement for other jurisdictions,
c) by transferring data to a country in which the European Commission has made a determination of the adequacy of the level of data protection in such country through its legislation,
d) if it is necessary for the conclusion or performance of a contract between the Joint Controllers and a third party, and the transfer of data is in your interest for the purposes of the contract (when data must be transferred outside the EEA in order to fulfill contractual obligations),
e) if you have consented to the transfer of data.
8. Period of storage of personal data (the period for which personal data will be stored and, if this is not possible, the criteria for determining this period):
Your personal data will be stored until the recruitment process is completed or until you withdraw your consent. Only to the extent consent was granted and for no longer than one year for future recruitment purposes. To the extent necessary to achieve the objectives specified in point 4(f) under applicable law, for the period specified therein.
9. Rights regarding personal data:
You have the right to access, rectify, erase (where applicable) your personal data, and restrict its processing. You also have the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal, the right to data portability, and the right to object to the processing of your personal data.
The above rights may be exercised, for example, by a written declaration.
You have the right to lodge a complaint with the supervisory authority competent for personal data protection if you believe that the processing of your personal data violates the provisions of the GDPR.
10. Information on the requirement/voluntary nature of providing data:
Providing your data is voluntary, however, failure to provide the data required by law will prevent you from taking part in the recruitment process.
11. Automated processing and profiling
Your data will not be processed in an automated manner, including in the form of profiling.
