- GDPR
Privacy Policy
Information Notice for Recruitment Purposes
Pursuant to Article 13(1) and Article 13(2) of the General Data Protection Regulation of 27 April 2016 (hereinafter: the GDPR), I hereby inform you that:
The controller of your personal data is Górnicza Izba Przemysłowo-Handlowa, with its registered office at ul. Kościuszki 30, 40-048 Katowice, entered under number 0000095169 in the Register of Entrepreneurs of the National Court Register (KRS), and also entered in the Register of Associations, Other Social and Professional Organizations, Foundations and Independent Public Healthcare Institutions, maintained by the District Court Katowice-Wschód in Katowice, 8th Commercial Division of the National Court Register.
The Data Controller has not appointed a Data Protection Officer. Any matters concerning personal data may be submitted in writing to the Chamber’s registered office, by email at biuro@giph.com.pl, or by telephone at +48 32 757 32 52.
Your personal data will be processed for the purpose of conducting recruitment at Górnicza Izba Przemysłowo-Handlowa, on the basis of consent to the processing of personal data indicated in the application documents (Article 6(1)(b) GDPR), as well as for the purpose of pursuing claims or defending the Controller’s rights (Article 6(1)(b) GDPR).
Your data will be processed for the following purposes:
- conducting the recruitment process, on the basis of consent to the processing of personal data provided in the application documents – on the basis of the consent granted (Article 6(1)(a) GDPR),
- pursuing claims or defending the Controller’s rights, i.e. on the basis of the Controller’s legitimate interests (Article 6(1)(f) GDPR).
Your personal data will be processed:
- for the period necessary to conduct the recruitment process, but no longer than 6 months from the date of its completion;
- until the withdrawal of consent or the lodging of an objection to the processing of data – in cases where your personal data are processed on the basis of separate consent or on the basis referred to in Article 6(1)(b) and (f) GDPR.
Providing data by candidates in the recruitment process is voluntary, but necessary for the achievement of the purposes for which the data were collected. Failure to provide the data required under the Labour Code will make it impossible to participate in the recruitment process.
The recipients of your personal data will be the Controller’s employees, within the scope of their official duties and on the basis of authorization. The data may also be transferred to:
- the accounting office responsible for the Controller’s bookkeeping,
- the law firm providing services to the Controller,
- suppliers of IT systems and IT services for the Controller,
- other entities entrusted by the Controller with the processing of your personal data in connection with the recruitment process,
- postal operators,
- public authorities, institutions, or third parties authorized to request access to or receive personal data on the basis of mandatory provisions of law.
Your personal data will not be transferred to a third country/organization.
You have the right to access the content of your data (including information on processed data and to receive a copy thereof), the right to rectify or amend them, the right to restrict processing with regard to data unnecessary for the processing purpose specified in section 3, the right to data portability, the right to delete data unnecessary for the processing purpose specified in section 3, and the right to object to the processing of data for direct marketing purposes. In order to verify whether you are entitled to exercise these rights, we may ask you to provide additional information. The scope of each of the above rights and the situations in which they may be exercised result from legal provisions. Which right you may exercise depends, for example, on the legal basis on which we process the data and the purpose of such processing.
You have the right to lodge a complaint with the President of the Personal Data Protection Office if you believe that the processing of your personal data violates the GDPR.
Your data will not be processed in an automated manner, including profiling, i.e. no decisions producing legal effects concerning you or similarly significantly affecting you will be based solely on automated processing of personal data and will not be associated with such automatically taken decision.
At the same time, we inform you that application documents submitted outside announced recruitment processes will be destroyed immediately, and the personal data contained therein will not be processed.
The Controller reserves the right that sending a CV to Górnicza Izba Przemysłowo-Handlowa outside announced recruitment processes may in some cases be treated as your consent to the processing of personal data – a conscious and unambiguous indication of will in the form of a clear affirmative action.
Giving consent is voluntary, and the data subject may withdraw such consent at any time.
Sample consent wording for recruitment purposes:
I declare that I consent to the processing of my personal data by Górnicza Izba Przemysłowo-Handlowa for the purpose and to the extent necessary in the recruitment process, also after its completion – for the purpose of conducting further recruitment (placing my data on the reserve list), however for no longer than 1 year from the date of announcement of the results of this recruitment. I have been informed of my right to withdraw this consent at any time.
Date: …
Signature: …
Information Notice for Contractors of Górnicza Izba Przemysłowo-Handlowa
The controller of your personal data is Górnicza Izba Przemysłowo-Handlowa, with its registered office at ul. Kościuszki 30, 40-048 Katowice, registered with the District Court Katowice-Wschód in Katowice, 8th Commercial Division of the National Court Register, under number 0000095169, Tax Identification Number (NIP): 634-10-12-786, REGON: 271505490.
In all matters related to the processing of personal data, you may contact the Controller electronically at: biuro@giph.com.pl.
Your personal data will be processed for the following purposes:
- for the purpose of establishing and maintaining business relations with contractors within the framework of the Controller’s legitimate interests (legal basis: Article 6(1)(f) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, i.e. the General Data Protection Regulation, hereinafter: the GDPR);
- for the purpose of performing a contract or taking steps prior to entering into a contract (legal basis: Article 6(1)(b) GDPR);
- for the purpose of fulfilling legal obligations incumbent upon Górnicza Izba Przemysłowo-Handlowa in connection with the performance of the contract, in particular obligations relating to accounting and tax settlements (legal basis: Article 6(1)(c) GDPR);
- for the purpose of establishing, pursuing or defending claims between you and Górnicza Izba Przemysłowo-Handlowa (legal basis: Article 6(1)(f) GDPR).
Providing your personal data is voluntary, but failure to provide them will make it impossible for us to achieve the personal data processing purposes indicated above.
Your personal data will not be transferred to a third country within the meaning of the GDPR (outside the territory of the European Economic Area).
The Controller may disclose your personal data to entities providing legal, accounting, and postal services to the Controller. The Controller may entrust the processing of your personal data to suppliers of services or products acting on its behalf, in particular entities providing IT, transport, and maintenance services to the Controller.
Your personal data will be stored for the period necessary to carry out the cooperation or perform the contract, after which the data will be retained for the period corresponding to the limitation period for claims and punishable acts, or for the period required by law, e.g. tax regulations. The Controller may retain your personal data for a longer period than indicated above only where this results from an obligation imposed on the Controller by generally applicable law or where there is another legal basis for processing personal data specified in Article 6(1) GDPR.
You have the right to request:
a) access to the content of your data – within the limits of Article 15 GDPR,
b) rectification of your data – within the limits of Article 16 GDPR,
c) erasure of your data – within the limits of Article 17 GDPR,
d) restriction of processing – within the limits of Article 18 GDPR,
e) data portability – within the limits of Article 20 GDPR,
f) objection to the processing of your personal data – within the limits of Article 21 GDPR.
The exercise of the above rights may take place by indicating your requests and sending them to the Controller at the following email address: biuro@giph.com.pl.
You also have the right to lodge a complaint with the President of the Personal Data Protection Office if you consider that the processing of your personal data violates the provisions of the GDPR.