GDPR

Information clause regarding processing of personal data

1. Definitions

a) Controller - ARC Consulting Group sp. z o.o. sp. k., based in Kraków, 57 Królewska street, 30-081

b) Personal Data – any information about an individual identified or identifiable by one or more specific factors determining a physical, physiological, genetic, psychological, economic, cultural or social identity, including image, recording of voice, contact details, location data, information included in correspondence, information collected via recording equipment or other similar technology

c) GDPR - Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing of Directive 95/46/EC

d) Data Subject - any individual whose personal data is processed by the Controller, e.g. a person visiting Controller’s premises or sending a query to Controller by e-mail.

2. Contact with the controller

a. The Controller has appointed the Inspector of Data Protection: Maciej Rymaszewski; contact with IOD is possible via e-mail address: dpo@arc-consulting.pl or to mailing address: Królewska street 57, 30-081 Kraków

3. Purposes and legal basis of the processing of Personal Data

EMAIL AND POSTAL CORRESPONDANCE

a. In case of directing towards the Controller, by means of email post or traditional post, correspondence unrelated to the services provided towards the sender, other agreement concluded with him or another manner unrelated to any relation with the Controller, personal data contained in the correspondence are processed solely for the purpose of communication and termination of a matter to which such correspondence refers.

b. Legal basis for the processing is the legally justified interest of the Controller (art. 6 sec. 1 letter f of GDPR), consisting of the conduct of correspondence directed at him pursuant to his economic activity.

TELEPHONE CONTACT

a. In case of contacting the Administrator via telephone regarding matters related to the concluded agreement or the provided services, the Controller may demand indication of personal data only when it is deemed as necessary in order to handle a given matter to which the contact refers

b. Legal basis is such case is the legally justified interest of the Controller (art. 6 sec. 1 letter f of GDPR) consisting of the necessity to handle the submitted matter related to the economic activity conducted by him.

DATA COLLECTION IN CONNECTION WITH THE PROVISION OF SERVICES OR THE PERFORMANCE OF OTHER CONTRACTS

a. Where data is collected for purposes related to the performance of a specific contract, the Controller provides the data subject with detailed information regarding the processing of their personal data upon conclusion of the contract.

RECRUITMENT

a. As part of recruitment processes, the Controller process personal data included in application form and in all attached documents (e.g. in a CV or resume). Personal data are processed:

i. to comply with legal obligations related to a recruitment process, including in particular the Labour Code – the legal grounds for processing is the legal duty of the Controller (Article 6(1)c) of GDPR in connection with the provisions of the Labour Code);

ii. to carry out the process of recruitment in the scope of data not required by the provisions of law nor by the Controller, as well as for the purposes of future recruitment processes – legal basis for the processing is consent (art. 6 sec. 1 letter a of GRDP)

iii. to establish, pursue or defend against claims – the legal grounds for data processing is a legitimate interest of the Controller (Article 6(1)f) of GDPR).

OTHER CASES OF DATA COLLECTION

a. In connection with its business activity, the Controller also collects personal data in other cases – e.g. during business meetings, at industry events or through exchange of business cards - for purposes related to initiating and maintaining business contacts. In such cases, the legal grounds for processing is a legitimate interest of the Controller (Article 6(1)f) of GDPR) which consists in developing a network of contacts in connection with its business.

b. Personal data collected in such cases are processed only for the purpose for

4. Data recipients

a. The Controller can disclose personal data to third parties, in particular suppliers responsible for the operation of IT systems and equipment, entities providing legal or accounting services, couriers, marketing agencies or recruitment agencies.

b. Controller reserves the right to disclose selected information about a data subject to competent authorities or third parties who request such information on appropriate legal basis and in accordance with applicable law.

5. Personal data processing period

a. The period of data processing by the Controller depends on the type of service provided and the purpose of the processing. Data processing period can also arise from regulations, where processing is carried out based on such regulations.

i. If processing is carried out based on a consent, data will be processed until such consent is withdrawn.

ii. Where data is processed based on a legitimate interest of the Controller – for example for security reasons - data is processed for a period of time making it possible to achieve such interest or to effectively object to data processing.

b. The data processing period may be extended where processing is necessary to establish, pursue or defend against claims

c. If data is processed based on the need of such processing to enter into and perform a contract, such data will be processed until such contract is terminated. After the end of the processing period data is irreversibly deleted or anonymized.

6. Rights of data subjects

a. Data subjects have rights to:

i. right of access and right to information about the processing of personal data

ii. right to obtain a copy of the data

iii. the right to transfer data

iv. the right to have inaccurate personal data rectified, or completed if it is incomplete

v. the right to erasure (to be forgotten)

vi. right to restrict processing

vii. the right to object to the processing

viii. the right to withdraw consent at any time. If data is processed based on a consent given, the data subject has the right to withdraw such consent at any time, which does not affect the lawfulness of processing carried out prior to the withdrawal of the consent.

ix. the right to complain to the Information Commissioner

b. A request regarding the exercise of the rights of data subjects can be submitted to the Inspector of Data Protection indicated by Administrator.

7. Other assumptions

a. Data processed by the Controller will not be transferred to recipients located in countries outside the European Economic Area.

b. Your data might be processed automatically and will not be profiled.

c. If the processing of personal data is carried out on the basis of the consent expressed by the data subject, submitting your personal data is voluntary

d. Providing personal data is mandatory if it is required by law or if it is required by agreement between the parties.

8. Wykorzystanie plików cookies

Stosowane przez Administratora Cookies są bezpieczne dla Urządzenia Użytkownika. W szczególności tą drogą nie jest możliwe przedostanie się do Urządzeń Użytkowników wirusów lub innego niechcianego oprogramowania lub oprogramowania złośliwego.

Administrator wykorzystuje Cookies w celu:

a. rozpoznania urządzenia Użytkownika Serwisu oraz jego lokalizację i odpowiednio wyświetlenia strony internetowej, dostosowanej do jego indywidualnych potrzeb;

b. optymalizacji i zwiększenia wydajności usług świadczonych przez Administratora, poprzez tworzenie anonimowych statystyk, które pomagają zrozumieć, w jaki sposób Użytkownicy Serwisu korzystają ze stron internetowych Serwisu za pomocą usługi Google Analytics.

Użytkownik może samodzielnie i w każdym czasie zmienić ustawienia dotyczące plików Cookies, określając warunki ich przechowywania i uzyskiwania dostępu przez pliki Cookies do Urządzenia Użytkownika. Zmiany ustawień, o których mowa w zdaniu poprzednim, Użytkownik może dokonać za pomocą ustawień przeglądarki internetowej lub za pomocą konfiguracji usługi klikając tutaj.

Użytkownik może w każdej chwili usunąć pliki Cookies korzystając z dostępnych funkcji w przeglądarce internetowej, której używa.

Ograniczenie stosowania plików Cookies, może wpłynąć na niektóre funkcjonalności dostępne na stronie internetowej Serwisu.

We use cookies to ensure that we give you the best experience on our website, in accordance with the information contained in the privacy policy.
Do you agree to the use of cookies?