Pursuant to Article 13 of the Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation i.e. GDPR) we hereby fulfil the obligation set forth therein and provide you with the following data. The original language of this Information is Polish. Supplier may make available translations of the terms. In case of conflicts between the Polish version and any translation, the Polish version shall prevail.
INFORMATION ON PROCESSING OF PERSONAL DATA
The controller:
The controller of your personal data is Techmark sp. z o.o. (hereinafter: Techmark) entered in the National Court Register under the number 0001077327, NIP 726-000-22-12, REGON 470513221, with its registered office at ul. Piotrkowska 10/12, 95-070 Aleksandrów Łódzki;
The Controller can be contacted:
- by letter to the registered office address given above,
- by phone: (+48) 42 712 17 95,
- by e-mail: techmark@techmark.com.pl.
Data processing in relation to recruitment:
1. your personal data will be processed in order to conduct recruitment proceedings for the vacant position and to select an employee and conclude a contract of employment at Techmark,
2. the personal data provided will be processed on the basis of Article 221 § 1 of the Act of June 26, 1974 of the Labor Code and your consent to the processing of personal data,
3. the provision of data within the scope of the Labor Code is mandatory, the rest of the data we process with your consent to processing,
4. the recipients of your personal data may be external entities authorized by law and entities operating our ICT systems,
5. your personal data will be stored for the duration of the recruitment process and until you revoke your consent to the processing of data for the purposes of further recruitment,
6. you have the right of access to the content of your data and the right to correct, delete, limit processing, the right to object, and the right to withdraw your consent at any time, without affecting the legality of actions performed before the withdrawal of consent,
7. you have the right to lodge a complaint to the President of the Office for Personal Data Protection in Warsaw, 2 Stawki Street, if you consider that the processing of personal data concerning you violates the provisions of the GDPR,
8. providing your personal data is voluntary; failure to provide it will result in inability to participate in the recruitment process.
Data processing in relation to employment:
1. your personal data will be processed for the purpose related to:
- the establishment and conduct of the employment process. The basis for the processing of personal data in the scope of data referred to in Article 221of the Labor Code of June 26, 1974. - is the necessity of processing the data for the execution of the Employment Agreement concluded between the employee and the employer [Article 6(1)(b) of the GDPR],
- ongoing internal and external communications on the basis of [Article 6(1)(f) GDPR],
- fulfilling the employer's legal obligations under applicable law [Article 6(1)(c) GDPR and Article 9(2)(b) GDPR],
- establishing, asserting or defending claims or ensuring security [Article 6(1)(b) and (f) GDPR],
Data processing in conjunction with video surveillance:
1. Monitoring is used to protect property and ensure the safety of employees and people in the monitored area.
2. The legal basis for the processing of personal data is Article 6(1)(f) of the GDPR - (legitimate interest of the controller, which is enabled by the provision of Article 222 § 1 of the Act of June 26, 1974. - Labor Code.
3. Monitoring records will be kept for a period of 2 weeks.
4. A person recorded by the monitoring system has the right to access the recordings, to restrict processing and to object to processing.
5. A person registered by the monitoring system has the right to lodge a complaint to the supervisory authority - the President of the Data Protection Authority at 2 Stawki Street in Warsaw, tel. 22 531 03 00, e-mail: kancelaria@uodo.gov.pl
6. Recipients of the recording from the monitoring may be entities authorized under the provision of the law and persons authorized by the Controller.
Processing of data in relation to business relations and contact:
1. personal data will be processed for purposes related to:
- performance of the contract [Article 6(1)(b) GDPR],
- establishing, asserting or defending claims [art. 6(1)(b) and (f) GDPR],
- fulfillment of the employer's legal obligations under applicable law [Article 6(1)(c) GDPR],
- fulfilling obligations incumbent on the Administrator, such as keeping financial accounts, including tax accounts [Article 6(1)(c) GDPR],
- responding to any inquiries or requests made and conducting further correspondence in this regard [Article 6(1)(f) GDPR],
- have subscribed to the Techmark website by clicking the "Like", "Watch", "Share" or "Subscribe" icon, etc..,
- have performed a reaction on a Techmark page/channel, e.g., by clicking "like," "comment," "share," "save post," "pass on," etc...,
- have sent a private message to Techmark's social media controller via the "send message" function.
- Facebook Ireland Limited (Meta Platforms, Inc.), with registered office at 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland (hereinafter referred to as Facebook),
- Instagram LLC. (Meta Platforms, Inc.), headquartered at 1601 Willow Road, Menlo Park, CA, 94025, USA,
- Twitter, Inc. headquartered at 1355 Market Street, Suite 900, San Francisco, CA 941 03, USA,
- LinkedIn Ireland Unlimited Company, Attn: Legal Dept. (Privacy Policy and User Agreement), Wilton Plaza, Wilton Place, Dublin 2, Ireland (for users from the European Economic Area and Switzerland).
Each of the aforementioned joint controllers decides on the purposes and means of data processing, but to a different extent. Techmark is responsible only to the extent of the personal data it processes.
a) in connection with the operation of the Fanpage, including for the purpose of promoting one's brand and establishing business relationships (legal basis - Article 6(1)(f) of the GDPR) - "legitimate interest",
- publicly available personal data (such as username, profile photo, activity status on the portal), content of comments and other information made publicly available by the user using the using the products and services of the above-mentioned portals,
- Personal data provided by the user visiting the Fanpage, including the collection of information shared in the user's profile and other content, comments, messages and communications (e.g. photos, contact information, place of residence, information on interests or worldview beliefs, etc.),
- other personal data provided by users in the content of messages via instant messaging or other social networking services for the purpose of responding to the inquiry sent or for the purpose of fulfilling a contact request.
- Facebook, are subject to retention under the terms and conditions of https://www.facebook.com/policies_center ,
- Twitter Inc. under the terms of the Twitter Terms of Service https://twitter.com/en/privacy
- LinkedIn according to the Policy https://pl.linkedin.com/legal/privacy-policy?
- Facebook pledges to use standard contractual clauses approved by the European Commission and to rely on decisions by the European Commission finding an adequate level of data protection for specific countries,
- Twitter Inc. may transfer personal data outside the European Economic Area. In accordance with Twitter's Terms of Service https://twitter.com/en/tos , by using its services, you consent to the collection and use of your data, in accordance with the Privacy Policy: https://twitter.com/en/privacy, including the transfer of your data to the U.S., Ireland and/or other countries for storage, processing and use by Twitter Inc. and its affiliates,
- LinkedIn transfers data in accordance with its Privacy Policy: https://pl.linkedin.com/legal/privacy-policy? .
- https://www.facebook.com/privacy/explanation
- https://twitter.com/en/privacy
- https://help.instagram.com/519522125107875
- https://pl.linkedin.com/legal/privacy-policy?
- Provision of electronic services in the provision of content collected on the website and the tools offered, among other things, in the case of personal data processed in cookies, used for technical configuration purposes,
- to perform analytical and statistical research - to analyze your activity, as well as your preferences, in order to improve the functionalities used and services provided [Article 6(1)(f) GDPR],
- Possible establishment and investigation of claims or defense against claims [Article 6(1)(f) GDPR],
- in the provision of electronic services - for the duration of your use of the website or for the duration of the stored cookie. In the absence of withdrawal of consent - for a period of 10 years,
- where the basis for processing is our legitimate interest also until you lodge an effective objection to the processing,
Data processing in relation to reporting a breach or incident (whistleblower platform):
1. Personal data will be processed:
- in relation to reported violations or incidents, based on Article 6(c) of the GDPR - legal obligation,
- in relation to the controller's legitimate interest in receiving, verifying and clarifying violations or incidents on the basis of Article 6(1)(f) GDPR,
- based on voluntary consent if you do not choose to remain anonymous on the basis of Article 6(1)(a) of the GDPR.
2. Your personal data may be transferred to entities with which the Controller has entered into an agreement for the provision of maintenance services for the IT systems in use, as well as to entities and authorities to which the Controller is obliged or authorized to make personal data available on the basis of generally applicable laws.
3. Personal data will be kept for the period of investigation and until the completion of follow-up. After that, I will be kept only for a period depending on the nature of the violation or incident, the findings of the investigation and the follow-up actions taken.
4. You have the right to request access to your personal data, rectification, transfer to another controller. You also have the right to request erasure or restriction of processing, as well as to object to processing, but you have the right only if further processing is not necessary for the controller to comply with a legal obligation and there are no other overriding legal grounds for processing. You have the right to lodge a complaint with the President of the Office for Personal Data Protection.
5. Provision of data is voluntary, but if you do not use the anonymous submission channel, it is necessary for the reliable fulfillment of the controller's legal obligations.
- The public IP address of the computer from which the request came (this can be directly the user's computer),
- The name of the client's station - identification implemented by the HTTP protocol if possible,
- The user name provided in the authorization process,
- time of arrival of inquiry,
- The first line of the HTTP request,
- HTTP response code,
- The number of bytes sent by the server,
- URL address of the page previously visited by the user (referer link) - in case the user went to the Controller's site via a link,
- information about the user's browser,
- information about errors that occurred during the execution of HTTP transactions.
- to create statistics that, for example, support SEO, making it easier to get to the information you need,
- changes to the appearance or version of the site,
- Session data storage (expires when the session ends).