Information Clause

Providing the data contained in the recruitment application (specifically in the CV, cover letter and reference letters submitted), you agree to the processing of your personal data other than: my name(s), surname, parents’ names, date of birth, place of residence (correspondence address), education, employment history by Zakłady Farmaceutyczne ”Polpharma” S.A. with its registered office in Starogard Gdański (83-200), ul. Pelplińska 19, entered in the register of entrepreneurs of the National Court Register under number 0000127044 by the District Court for Gdańsk-Północ in Gdańsk, 7^th Commercial Division of the National Court Register, Tax ID No (NIP) 5920202822, Statistical ID No (REGON) 190929369, share capital: PLN 100,207,830, fully paid-up (hereinafter referred to as: “Employer”) in order to conducted the currently recruitment process by the Employer, i.e. assessment of qualifications, skills and abilities needed to work on the position, and selection by the Employer of a competent person to work for the position for which you apply – for a period no longer than 12 months.

On the basis of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter referred to as: “GDPR”), we hereby inform that:

[Controller, data protection officer, contact details]

1. The administrator of your personal data is each Employer individually (hereinafter referred to as “Administrator”).
2. You can contact the Controller in writing to the above addresses or by e-mail, to: rekrutacja@polpharma.com
3. The Controller has appointed a Data Protection Officer, whom you may contact in all matters relating to the personal data protection, by writing to: Data Protection Officer Zakłady Farmaceutyczne ”Polpharma” S.A, Bobrowiecka 6, 00-728 Warszawa, by sending an e-mail to: iod@polpharma.com or by telephone on: 22 364 63 11.

[Purpose and legal basis for personal data processing]

4. Your personal data will be processed:
   1. for the purpose necessary for the Controller’s handling of the current recruitment process, i.e. evaluation of your qualifications, skills and abilities required for working in the position for which you are applying and the Controller’s selection of the most suitable candidate for the position – on the basis of:
      • Article 6(1)(c) of the GDPR, i.e. the processing is necessary for compliance with a legal obligation following from employment law (especially under Article 22¹ 1 of the Labour Code) to which the Controller is subject, regarding the following personal data: You name(s), surname, parents’ names, date of birth, place of residence (correspondence address), education, employment history;
      • Article 6(1)(a) of the GDPR, i.e. on the basis of your freely given consent concerning other personal data which you have voluntarily provided in your application documents (specifically in the CV, cover letter and reference letters submitted);
   2. for the purpose necessary for the Controller’s handling of future recruitment processes, i.e. evaluation of your qualifications, skills and abilities required for working in job positions available during future recruitment processes and the Employer’s selection of the most suitable job candidate in the future recruitment, for a period no longer than 18 months – Article 6(1)(a) of the GDPR, i.e. on the basis of your freely given consent – with regard to all personal data which you have provided;
   3. in order to establish, exercise or defend against claims (if any) between you and the Controller – on the basis of Article 6(1)(f) of the GDPR, i.e. for the purpose of legitimate interest pursued by the Controller, being the possibility to exercise claims – with regard to all personal data which you have provided.
   4. to complete a survey on the evaluation of the recruitment process – on the basis of the Article 6(1)(a) of the GDPR, i.e. on the basis of your freely given consent.
5. Your provision of personal data within the scope indicated in Article 22¹ 1 of the Labour Code (i.e. name(s), surname, parents’ names, date of birth, place of residence (correspondence address), education, employment history) is voluntary, yet, necessary for participation in the recruitment process (failure to provide the data renders the participation in the recruitment process impossible). Provision of other personal data within the framework of the current recruitment and giving consent to the processing of all personal data provided by you for the purpose of future recruitment is voluntary and is not a condition for participation in the current recruitment process.
6. You will not be subject to automated decision-making, including decisions based on profiling.

[Categories of personal data recipients]

7. Your personal data may be disclosed to the following entities: employees and collaborators of the Controller, entities which conduct recruitment processes for and on behalf of the Controller, IT service providers, providers of consulting and legal services.
8. Your personal data may be made available to entities and authorities which are authorised to process the data under laws.
9. The Controller does not intend to transfer your personal data outside the European Economic Area or to an international organisation.

[Personal data storage period]

10. Your personal data will be processed:
    1. For the purpose of carrying out the ongoing recruitment process for the job position for which you are applying – for the duration of this recruitment process and will be destroyed immediately after its completion;
    2. For the purpose of carrying out future recruitment processes – for 18 months and will be thereafter destroyed.
    3. until you have objected to the processing (if the processing is based on legitimate interest of the Controller) or have withdrawn your consent (if the processing is based on consent) – whichever occurs first.
    4. for the purpose of completing the questionnaire on the evaluation of the recruitment process will be processed for a period of 18 months and will be destroyed after this period;
11. Then, the Controller will store the data until claims (if any) have become time-barred.

[Rights]

12. You have the right to access your personal data, to have the data rectified, erased and to request that its processing be restricted.
13. You have the right to data portability, i.e. to receive from the Controller, in a structured, commonly used and machine-readable format, your personal data which you have provided to the Controller. You can also request the Controller to transmit the data to another controller.
14. In so far as consent serves as the legal basis for the processing of your data, you have the right to withdraw the consent. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
15. In so far as the Controller’s legitimate interest serves as the legal basis for the processing of your data, you have the right to object to the processing of your personal data.
16. In order to exercise the above rights, you need to contact the Controller or the Data Protection Officer, using the aforementioned contact details (contact details provided above).
17. You also have the right to lodge a complaint with a personal data protection supervisory authority (President of the Personal Data Protection Office), if you believe that the data processing violates the GDPR.