Job Applicant Privacy Notice
In accordance with Article 13(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), we inform you about how your personal data submitted during the recruitment process is handled.
1. Data Controller
The controller of your personal data is ZANREAL Mateusz Janota, with its registered office at ul. 3 Maja 30A, 44-200 Rybnik, Poland.
For matters related to the protection of personal data, you can contact the controller by email at: privacy@zanreal.com.
2. Purposes and Legal Bases of Processing
Your personal data is processed for the purpose of carrying out the recruitment process for the position you are applying for, on the following legal bases:
- Article 6(1)(c) GDPR — compliance with a legal obligation to which the controller is subject, in the scope of data required by labour law (the Polish Labour Code of 26 June 1974);
- Article 6(1)(b) GDPR — taking steps at the request of the data subject prior to entering into a contract;
- Article 6(1)(a) GDPR — your consent — for data provided voluntarily beyond the scope required by law (e.g. your image), and where you consent to participate in future recruitment processes;
- Article 6(1)(f) GDPR — the legitimate interest of the controller in establishing, pursuing, or defending potential claims.
3. Data Recipients
Recipients of your data may include processors acting on the controller's behalf (e.g. IT and hosting providers) under data processing agreements, as well as public authorities entitled to obtain data under applicable law.
4. Data Retention
- If a candidate is not selected for further stages — data is deleted promptly after the recruitment ends, no later than 12 months from its completion.
- Where consent to future recruitment is given — data is kept for up to 24 months from the date it was submitted.
- To the extent necessary to establish, pursue, or defend claims — for the period resulting from the statute of limitations.
5. Your Rights
You have the right to:
- access your data and obtain a copy of it;
- rectify (correct) your data;
- erase your data;
- restrict the processing of your data;
- object to the processing of your data;
- data portability;
- withdraw your consent at any time, without affecting the lawfulness of processing carried out before its withdrawal;
- lodge a complaint with the supervisory authority.
6. Right to Lodge a Complaint
You have the right to lodge a complaint with the President of the Personal Data Protection Office (PUODO), ul. Stawki 2, 00-193 Warsaw, Poland, if you believe that the processing of your data infringes the GDPR.
7. Voluntariness of Providing Data
Providing personal data in the scope required by labour law is necessary to take part in recruitment. Providing any other data is voluntary and based on your consent.
8. Automated Decision-Making and Profiling
Your personal data will not be subject to automated decision-making, including profiling.
9. Transfers Outside the EEA
Your personal data will not be transferred to third countries (outside the European Economic Area) or to international organisations.
