Information Clause - Recruitment

In accordance with Article 13(1) and (2) of the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter referred to as "GDPR"), we hereby inform you:

1. Data Controller
   
   The data controller of your personal data is Go2Market Sp. z o. o. with its registered office at ul. Kasztanowa 7 in Groblicach (55-010), entered in the National Court Register, maintained by the District Court for Wroclaw Fabryczna in Wroclaw, XI Commercial Division of the National Court Register under KRS no. 0000950476, REGON 521174662, NIP 8961610637.

   You can contact the Administrator by email: hallo@go2market.eu

2. Purposes and Legal Basis for Processing
   
   a) Your personal data will be processed in order to carry out the recruitment process for the position to which you are applying. The legal basis for processing your personal data is:
   - Article 6(1)(c) GDPR (necessity of the processing for compliance with a legal obligation to which the controller is subject) - in the case of personal data within the scope specified by the provisions of the Labour Code, required by law,
   - Article 6(1)(a) GDPR (consent to the processing of personal data) - in the case of other, additional personal data whose provision is not required.
   b) Your personal data will also be processed for the purpose of conducting future recruitment processes, if you provide a separate consent for this purpose. The legal basis for processing your personal data for the purposes of future recruitment processes is Article 6(1)(a) GDPR.
   c) In the event of any claims arising, your personal data will also be processed for the purpose of defending/enforcing these claims, as well as to demonstrate the fulfillment of the legal obligations imposed on the Administrator - as a legally justified interest pursued by the Administrator - Article 6(1)(f) GDPR.

3. Recipients of Personal Data
   
   Your personal data may be transferred to entities that support the Administrator in achieving the aforementioned purposes, including entities to which the Administrator entrusts the processing of personal data in accordance with Article 28 GDPR, including entities providing service for IT systems used in their processing, entities providing hosting services, as well as, for example, postal and courier operators, law firms, and entities authorized to do so under the provisions of law.
   
   

4. Data Transfers
   
   

   Your data may be transferred when using remote communication tools in the form of Microsoft 365, provided by Microsoft. Because the Administrator uses Microsoft services in the IT area, your data may be transferred to the USA. The Administrator has entered into contracts with Microsoft - the so-called Standard Contractual Clauses. This means that, according to Decision No. 2021/914 of the European Commission of 4 June 2021, your personal data may be processed by this company in the USA. Microsoft implements additional measures to ensure the compliance of the data transfer outside the EEA. More information can be found in the document "Microsoft Data Protection Products and Services Addendum (DPA)" on the provider's official website.

5. Data Retention Period
   
   Your personal data will be processed for the duration of the recruitment process. Data processed in relation to the pursuit of claims will be processed until the claims expire. Personal data processed based on your consent will be retained for the period necessary to achieve the purpose for which the consent applies or until the earlier withdrawal of the granted consent.

6. Rights of Data Subjects

   You have the right, as provided for by law, to access your data and receive copies thereof; to rectify your personal data; to delete your personal data; to restrict the processing of your personal data; to transfer your personal data.

   If the processing is based on consent - Article 6(1)(a) or Article 9(2)(a) GDPR, you have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of consent before its withdrawal.

   You have the right to object, on grounds relating to your particular situation, to the processing of your data based on the legitimate interests of the Administrator - Article 6(1)(f) GDPR.

   You have the right to lodge a complaint with the President of the Personal Data Protection Office regarding unlawful processing of personal data at ul. Stawki 2, 00-193 Warsaw.

7. Information on the Requirement to Provide Personal Data
   a) the provision of personal data within the scope specified by the provisions of the Labour Code, required by law, is mandatory - they are necessary for participating in the recruitment process;
   b) the provision of other, additional personal data is voluntary. Granting consent to the processing of personal data for future recruitment purposes is also voluntary.
   
   

8. Information on Automated Decision-Making, Including Profiling

   The processing of your personal data will not be subject to automated decision-making, including profiling, as referred to in Article 22(1) and (4) GDPR.