GDPR
Personal Data Protection
Ensuring the security of the data we process, including information containing personal data, is one of the key tasks of our Company. In connection with the above, we would like to inform you that Starcont has developed and adopted a new Information Security Policy and IT System Management Instructions in order to achieve a standard of processing information containing personal data that complies with the requirements set out in the applicable law, including Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR) (OJ EU L119 of 4 May 2016).
The aim of our actions is to guarantee that the personal data collected remain confidential throughout the entire period of their processing, while preserving their integrity and the integrity of the IT systems.
CONTACT
Data Protection Officer
Jan Kasiuba
biuro@starcont.pl
Information Clause – recruitment
Who is the Data Controller?
In accordance with Article 13 of the General Data Protection Regulation of 27 April 2016 (GDPR), we inform you that the Controller of your personal data is Starcont sp. z o.o. with its registered office in Wrocław, ul. Gwiaździsta 62/12/2. The Company has appointed a Data Protection Officer (DPO), who can clarify any doubts relating to the protection of personal data at any time. Contact details of the Data Protection Officer: Jan Kasiuba – email: biuro@starcont.pl
Purpose and legal basis of processing
Your personal data, to the extent specified in labour law provisions 1, will be processed for the purpose of carrying out the current recruitment process 2; other data, including contact details, will be processed on the basis of consent 3, which may be withdrawn at any time.
Starcont sp. z o.o. will also process your personal data in subsequent recruitment processes if you give your consent 4, which may be withdrawn at any time.
If the documents contain data referred to in Article 9(1) GDPR, your consent will be required for their processing 5, which may be withdrawn at any time.
1 Article 22 of the Act of 26 June 1974 – Labour Code (Journal of Laws 2018, item 917, as amended) and §1 of the Regulation of the Minister of Labour and Social Policy of 28 May 1996 on the scope of documentation kept by employers in matters related to the employment relationship and on the manner of keeping employee personal files (Journal of Laws 2017, item 894, as amended);
2 Article 6(1)(b) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ EU L 119, 04.05.2016, p. 1, as amended) (hereinafter: GDPR);
3 Article 6(1)(a) GDPR;
4 Article 6(1)(a) GDPR;
5 Article 9(2)(a) GDPR.
Recipients of personal data
Your personal data will not be made available to third parties.
Data retention period
The data collected in the current recruitment process will be stored until the recruitment process is completed.
If you consent to the use of your personal data for the purposes of future recruitment, your data will be used for 9 months.
Rights of data subjects
You have the right to:
1) the right to access your data and to receive a copy of it;
2) the right to rectify (correct) your personal data;
3) the right to restrict the processing of personal data;
4) the right to erasure of personal data;
5) the right to lodge a complaint with the President of the Personal Data Protection Office (UODO) (at the address of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw).
Information on the requirement to provide data
Providing your personal data to the extent resulting from Article 22(1) of the Labour Code is necessary in order to take part in the recruitment process. Providing any other data is voluntary.
Personal Data Security
The aim of our actions is to guarantee that the personal data collected remain confidential throughout the entire period of their processing, while preserving their integrity and the integrity of the IT systems.
PRIVACY POLICY – concerning the personal data of contractors
Who are we?
We are Starcont sp. z o.o. with its registered office in Wrocław, ul. Gwiaździsta 62/12/2. In accordance with Article 13 of the General Data Protection Regulation of 27 April 2016 (GDPR), we inform you that we are the Controller of your personal data. The Company has appointed a Data Protection Officer (DPO), who can clarify any doubts relating to the protection of personal data at any time. Contact details of the Data Protection Officer: Jan Kasiuba – email: biuro@starcont.pl
Purpose and legal basis of processing
We process your personal data for the purpose of performing the contract between us and in order to fulfil the tax obligations and accounting requirements incumbent on us. The legal basis for processing your personal data is Article 6(1)(b) GDPR (processing is necessary for the performance of a contract to which the data subject is party, or in order to take steps at the request of the data subject prior to entering into a contract), as well as Article 6(1)(c) GDPR (processing is necessary for compliance with a legal obligation to which the controller is subject). Additionally, the legal basis for our processing of your personal data is Article 6(1)(f) GDPR (processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data, in particular where the data subject is a child). The legitimate interest consists in ensuring that we are able to prove, in the event of a possible dispute, the content of the contract between us and that we performed it with due diligence. If you are an employee or representative of our client, supplier or subcontractor, we process personal data because otherwise we would not be able to perform the contract between us and your company. The above processing is necessary for the purposes of the legitimate interests pursued by the controller (Article 6(1)(f) GDPR). We make every effort to process only the personal data necessary to perform the contract between us. If your company has provided us with more of your data than you consider necessary or appropriate, please exercise the rights described below.
We always try to process only the personal data that are necessary and to the minimum extent, whereby we may process the following of your personal data:
if you are our client: 1) telephone number, 2) e-mail address, 3) delivery or service address;
in the case of issuing a receipt – the data necessary to issue the receipt, i.e. the client's first name and surname or name or company, and their address;
in the case of issuing a VAT invoice – additionally – the client data necessary to issue the invoice, including: a) the client's first name and surname or name, and their address, b) the number by which the client is identified for the purposes of goods and services tax or value added tax, under which they received the goods or services, c) the client's purchase history (date of completion of the delivery of goods or date of receipt of payment, name or type of goods, measure and quantity of goods delivered, the amount of any discounts or price reductions, including in the form of an early-payment discount, unless they have been included in the net unit price; the total amount due), d) PESEL number, e) NIP (tax identification) number. − if you are our supplier: 1) first names and surnames; 2) e-mail address; 3) telephone number; 4) business address; 5) company name; 6) NIP number.
if you are an employee/representative of our client or supplier: 1) first names and surnames; 2) e-mail address; 3) telephone number;
Recipients of personal data
We disclose your personal data, to the required extent, to public administration bodies authorised to receive it by law (such as tax authorities). The data may also be disclosed to our other contractors (clients, suppliers, subcontractors) to the extent necessary to perform the contract between us. However, this does not involve the transfer of your personal data to third countries (outside the European Economic Area). In our activities we use the support of specialised external entities that may or must have access to some of your data – these are entities providing us with services in the area of: − IT system support, legal services, − delivery (couriers, postal services), − accounting (statutory auditor). In the relevant agreements with these entities we have ensured that the data entrusted to them must be protected in accordance with the GDPR and will not be transferred to third countries.
Data retention period
We will process your personal data for at least as long as is necessary for tax purposes, i.e. – in accordance with the currently applicable provisions of Polish law – for 5 tax years. As you probably know well, five tax years may mean six, and sometimes almost seven calendar years. If we cooperate with you on a permanent basis (e.g. on the basis of a framework agreement), then of course some of your data necessary for this purpose will be processed throughout the entire period of cooperation. Also, if under the law or the contract you (or your company) are entitled to any post-sale rights (e.g. under warranty or guarantee), then throughout their entire duration we must process your personal data in order to be able to assist you (or your company) in this respect if necessary.
Rights of data subjects
You have the right to:
1) the right to access your data and to receive a copy of it;
2) the right to rectify (correct) your personal data;
3) the right to restrict the processing of personal data;
4) the right to erasure of personal data;
5) the right to lodge a complaint with the President of the Personal Data Protection Office (UODO) (at the address of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw).
Information on the requirement to provide data
We collect your personal data to the extent necessary to conclude and perform the contract. Some of the data is also necessary for us to fulfil obligations arising from legal provisions (tax regulations, accounting regulations, post-sale obligations). Unfortunately, failure to provide personal data will make it impossible to conclude and perform the contract.
Where we obtain your data from
We have your personal data solely from you, unless you are an employee/representative of our clients, subcontractors or suppliers, in which case we receive your data from your company or directly from you if you contact us directly.
Profiling and automated processing
We do not process your data in an automated manner and we do not profile it within the meaning adopted by the GDPR.