Contact

PRINCIPLES OF PROCESSING OF PERSONAL DATA

1. Data Controller

The Joint-controllers of personal data of the pl.grafton.com  website are the following companies from the Gi Group Capital Group Poland i.e.:

• Grafton Recruitment Sp. z o.o., with its registered office in Warsaw, Rondo Ignacego Daszyńskiego 1 (KRS: 0000744760)
• Gi Group Poland S.A., with its registered office in Warsaw, Sienna 75 (KRS: 0000083941)
• Gi BPO Finance Sp. z o.o., with its registered office in Wrocław, Powstańców Śląskich 9, Midpoint71 Building (9th floor) (KRS: 0000095926)
• Krajowy Centrum Pracy Sp. z o.o., with its registered office in Wrocław, Sienna 75 (KRS: 0000395638)
• Sellpro Sp. z o.o., with its registered office in Wrocław, Powstańców Śląskich 9, Midpoint71 Building (9th floor) (KRS:0000103234)
• Gi Group Sp. z o.o., with its registered office in Katowice, Chorzowska 6 (KRS: 0000152084)
• Generale Industrielle Polska Sp. z o.o., with its registered office in Katowice, Chorzowska 6 (KRS: 0000210200)
• BPO Finance Sp. z o.o., with its registered office in Wrocław, Powstańców Śląskich 9, Midpoint71 Building (9th floor), (KRS: 0001027346)
• Wyser Sp. z o. o. , with its registered office in Katowice, Sobieskiego 11 (KRS: 0000223647)
• Grafton Outsourcing Services Sp. z o.o., with its registered office in Katowice, Sobieskiego 11 (KRS: 0000494161)
• Grafton Recruitment Services sp. z o. o. with its registered office in Warsaw, Rondo Ignacego Daszyńskiego 1 (KRS 0000027957)

(hereinafter: “Controllers”)

In order to implement the principle of lawful, fair and transparent processing of your personal data when using our services, we adopt a document called the Privacy Policy. The Privacy Policy sets out how we take care of your personal data and your rights.

2. Meaning of terms used in the privacy policy

Candidate – an adult natural person who uses the services offered by Grafton on the Websites to search for job offers, apply for them, and participate in recruitment processes.

Account – a set of resources and settings created for the User as part of the Services, used to manage services.

Profile – the functionality of the Account, allowing the User to collect selected information, including the course of his professional career, education history, and other skills.

Employers – employers or personnel consulting agencies publishing job advertisements on our Websites or using recruitment services.

GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons about the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

Website or Services – websites belonging to the Controllers, within which we provide our services. The services are located at the following addresses: pl.gigroup.com, pl.wyser-search.com, pl.grafton.com, pl.mygigroup.pl, pl.myWyser.com, pl.mygrafton.com

User – an adult natural person uses the services offered by the Controllers on the Websites.

3. Data Protection Officer

The Data Protection Officer can be contacted by e-mail: iod@gigroup.com 

4. Purposes of processing your Personal Data and legal bases for processing

The Controllers process personal data of Users for the following purposes:

• The processing of personal data is carried out to process requests for information on the services offered by Group companies. The processing of personal data contained therein takes place based on your consent (by Article 6(1)(a) of the GDPR); Providing your data is voluntary, but necessary to use the functionality of the form. Failure to provide personal data will result in the inability to send data via the form. The data will be stored for the time necessary to process requests for information. Once the retention terms indicated above have elapsed, the personal data will be erased or rendered anonymous, compatible with the technical cancellation and backup procedures.
• securing any claims of the Controllers, User or User Not logged in, if such claims arise, based on the legitimate interest of the Controllers consisting in defending against claims of third parties or pursuing their claims (under Article 6 paragraph 1 letter F of the GDPR); Personal data will be processed until the claims related to the processing of your data expire.

The Controllers process personal data of Candidates looking for a job, provided via the registration form and registering on the website for the following purposes:

• implementation of recruitment processes and setting up and maintaining a user account. Pursuant to art. 6(1)(B) of the GDPR, the processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract. Providing your personal data is voluntary, but necessary to register on the website. Failure to provide personal data will result in the inability to register and set up an account on the website. Personal data are entered into the company database and kept for 48 months from their entry or from your last interaction with the Site (accessing, updating data, or uploading your curriculum vitae), unless you consent to a further period of retention of your data, which you will be asked to express before the expiry of that period.
• further recruitment procedures conducted by the Controllers by sending you job offers. The processing of personal data contained therein takes place on the basis of your consent (in accordance with Article 6(1)(a) of the GDPR). Personal data are entered into the company database and kept for 48 months from their entry or from your last interaction with the Site (accessing, updating data, or uploading your curriculum vitae), unless you consent to a further period of retention of your data, which you will be asked to express before the expiry of that period.
• marketing activities via e-mail address by the Controllers about new forms of contact, new products and services. The processing of personal data contained therein takes place on the basis of your consent (in accordance with Article 6(1)(a) of the GDPR). Personal data are entered into the company database and kept for 48 months from their entry or from your last interaction with the Site (accessing, updating data, or uploading your curriculum vitae), unless you consent to a further period of retention of your data, which you will be asked to express before the expiry of that period.
• marketing activities via sms by the Controllers about new forms of contact, new products and services, including the use of telecommunications terminal equipment and automatic calling systems. The processing of personal data contained therein takes place on the basis of your consent (in accordance with Article 6(1)(a) of the GDPR). Personal data are entered into the company database and kept for 48 months from their entry or from your last interaction with the Site (accessing, updating data, or uploading your curriculum vitae), unless you consent to a further period of retention of your data, which you will be asked to express before the expiry of that period.

5. Recipients of data

In connection with the processing of data for the purposes indicated in point 4, your personal data may be made available to the categories of recipients of personal data indicated below. The recipients of your data may be:

• persons involved in recruitment and staff deciding on employment and persons responsible for IT supervision, supervision over the correctness of recruitment activities, including lawyers
• processors who process your personal data on behalf of the Controllers on the basis of a personal data processing agreement.

6. Rights of data subjects

In connection with the processing of your data by the Data Controllers, you are entitled to:

• the right to access the content of the data, in accordance with Article 15 of the GDPR – the right to receive confirmation as to whether your personal data is being processed and, if processed, you are entitled to obtain the following information: the purposes of the processing, the categories of personal data, information on recipients or categories of recipients to whom the data have been or will be disclosed, on the period of storage of the data or on the criteria for determining them, about your rights related to the processing of your personal data, about the possibility of lodging a complaint with the supervisory authority, about the source of obtaining personal data if they were not obtained directly from you and about profiling and automated processing of decisions;
• the right to rectify data, in accordance with Article 16 of the GDPR – if you are informed that your personal data processed by the Controllers are incorrect, outdated or incomplete, you have the right to request their immediate rectification or supplementation;
• the right to erasure, in accordance with Art. 17 GDPR, whereby, if you have consented to the processing of personal data, the request for deletion will have the same effect as the withdrawal of consent;
• the right to limit the processing of data, in accordance with Article 18 of the GDPR – you may request that we cease processing them, except for their storage, in situations where:

• you question the correctness of personal data – for the period in which the Controllers will verify their correctness;
• you question the lawfulness of the processing of personal data by the Controllers; The Controllers no longer needs this data, but you need them to establish, assert or defend his claims;
• You have objected to the processing – until the Controllers decides as to the legitimacy of the objection;

• the right to object to the processing of data in accordance with Article 21 of the GDPR;
• the right to data portability in accordance with Article 20 of the GDPR – receive in a structured, commonly used and machine-readable format the personal data that you have provided to the Controllers, if their processing takes place on the basis of your consent, or request the transfer of this data to another controller indicated by you.

7. Possibility to withdraw consent

In cases where the processing of your data takes place on the basis of consent to the processing of personal data, you have the right to withdraw your consent at any time, without affecting the lawfulness of the processing, which was made on the basis of consent before its withdrawal yourself after logging in to your profile in the Website or by sending a request for withdrawal of consent to the e-mail address iod@gigroup.com.

In situations where your data was processed on the basis of consent, the withdrawal of consent prevents further use of the services offered by the Website.

8. Data processing outside the EU

The Data Controllers declares that he will not transfer the entrusted personal data outside the European Union, unless:

• the transfer of data will take place on the basis of Standard Contractual Clauses to the Entity that undertook to act in accordance with the GDPR.
• the transfer of data will take place on the basis of an Adequacy decision granted to the Country in which the Entity importing the data operates.

9. Right to lodge a complaint with a supervisory authority

In cases where you believe that the processing of your data violates the provisions of the GDPR, you have the right to lodge a complaint with the supervisory authority.

10. Cookies

The Website collects some personal information while browsing the website (e.g., cookies, etc.). Please click here to read the cookie policy.