Complying with the obligation set out in articles 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (Official Journal of the EU.L No. 119, p. 1), hereinafter referred to as “GDPR”, Rebel Wolves sp. z o.o. with its registered office in Warsaw at Dereniowa 60 lok. U4, (02-776) Warsaw, entered into the Register of Entrepreneurs of the National Court Register kept by the District Court for the Capital City of Warsaw in Warsaw, 13th Commercial Division of the National Court Register under KRS number 0000933935, REGON: 520497877, NIP: 9512529961, acting as the Data Controller of your personal data (hereinafter as: “Data Controller”), informs you that:
Contact regarding data protection is possible at the following e-mail address: [email protected] or in writing to the abovementioned address of the Data Controller’s registered office.
Your personal data will be processed for the purpose of reviewing your application and for the current recruitment process and, if you have given your consent, for future recruitments for similar positions. In addition, your data may be processed by the Data Controller in connection with the defense against potential claims.
The personal data has been obtained directly from you or from another party (e.g. when the Data Controller’s employee recommended your application).
The Data Controller may process your following personal data: name(s), date of birth, contact details, education, professional qualifications, previous employment history and additional information provided by you as part of your application documents, e.g. your image, information about your interests.
The basis for the processing of your personal data is:
a) the necessity of the processing to take action prior to entering into a contract at your request i.e. article 6(1)(b) of the GDPR,
b) the necessity for compliance with a legal obligation to which the Data Controller is subject, i.e. article 6(1)(c) of the GDPR in connection with article 22(1) of the Labour Code (Journal of Laws of the Republic of Poland of 2023, item 1465) and secondary legislation to this Act,
c) the Data Controller’s legitimate interest in being able to establish, investigate or defend against potential claims related to unequal treatment in employment, i.e. article 6(1)(f) of the GDPR,
d) where you have consented to the processing of your personal data in future recruitments for similar positions, as well as where you have provided additional information in your application documents (data other than those specified in the relevant regulations in the area of labor law), the basis for the processing of your data will be your consent, i.e. article 6(1)(a) of the GDPR / article 9(2)(a) of the GDPR.
The provision of personal data is voluntary, but necessary to participate in the recruitment process. Refusal to provide personal data prevents participation in the recruitment process.
Personal data may be shared by the Data Controller with entities authorised to obtain information on the basis of mandatory provisions of law and with Data Controller’s subcontractors, acting on our behalf, which technically or organisationally assist in the recruitment process.
Personal data will be kept for the duration of the recruitment process and for a period of 1 year from the date of the end of the recruitment. If you have given your consent to the use of your personal data in future recruitments, personal data will be kept until you withdraw your consent, but for no longer than a period of 3 years from the date you have given your consent.
You have the following rights in relation to the processing of your personal data by the Data Controller (under the terms of the applicable regulations):
a) the right to access personal data (including, for example, to receive information on which personal data are processed and to obtain a copy of such data),
b) the right to request rectification, erasure or restriction of the processing of personal data,
c) the right to object to the processing of your personal data – to the extent that the processing is based on the legitimate interest of the Data Controller,
d) the right to transfer personal data that have been provided to the Data Controller and that are processed by automated means and the processing is based on consent or on the basis of necessity for the performance of a contract, e.g. to another controller,
e) the right to withdraw consent at any time and in any manner, without affecting the lawfulness of previous processing on that basis – to the extent that processing is carried out on the basis of the granted consent,
f) the right to lodge a complaint to the supervisory authority – the President of the Office for Personal Data Protection.
The Data Controller does not carry out activities involving automated decision-making, including profiling, with respect to data subjects.
Your personal data may be transferred outside the European Economic Area (EEA), but only to the extent necessary. In such cases, the Data Controller shall ensure the protection of your personal data, in particular by transferring it to countries for which the European Commission has issued a decision declaring an adequate level of protection or by applying standard data protection clauses adopted pursuant to a decision of the European Commission. In such cases, you may contact the Data Controller to obtain a copy of the applicable safeguards.