The privacy regulations - POLNA S.A.

INFORMATION ON THE PROTECTION OF PERSONAL DATA PROCESSED BY ZAKŁADY AUTOMATYKI «POLNA» S.A. WITH ITS REGISTERED OFFICE IN PRZEMYŚL

Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter: GDPR) has been in force since 25 May 2018. The GDPR will be applied in all countries of the European Union, and thus also in Poland.

 

Therefore, we present the most important information related to the introduction of a new legal regulation.

WHO IS THE CONTROLLER?

1. The Controller of your personal data is Zakłady Automatyki „POLNA” S.A., with its registered office in Przemyśl, ul. Obozowa 23, 37-700 Przemyśl, entered into the Register of Entrepreneurs maintained by the District Court in Rzeszów, 12th Commercial Division of the National Court Register, under KRS number: 0000090173, with the share capital of PLN 3,765,864.60 fully paid up, NIP 7950200705, hereinafter referred to as the “Controller”.
2. With regard to the protection of your personal data, you may contact the Controller by sending a letter to the following address: rodo@polna.com.pl.

WHAT IS THE LEGAL BASIS FOR THE PROCESSING OF YOUR PERSONAL DATA? WHY DO WE PROCESS YOUR PERSONAL DATA?

 

We process your personal data because it is necessary to perform the contract or undertake actions related to the conclusion of the contract in the scope of our services. The legal basis for the processing of your data is the legitimate interest of the Controller (Article 6(1)(f) of the GDPR), which consists in:

1. enabling us to contact you and exchange correspondence for the purposes related to the undertaken or conducted cooperation, resulting from the concluded contract;
2. possible establishing, investigating or defending claims resulting from the application of the contract with you;

 

The legal basis is also:

¾ Personal Data Protection Act of 10 May 2018 (Journal of Laws 2018.1000, as amended);

¾ Civil Procedure Code — Act of 17 November 1964 (Journal of Laws 2018.1360, as amended).

 

WHO CAN BE THE RECIPIENT OF YOUR PERSONAL DATA?

The recipients of your data may be our employees, entities cooperating with us, such as: Accountancy, law firms, consulting firms, companies and persons providing services.

 

 

 

WILL WE TRANSFER YOUR DATA OUTSIDE THE EEA?

We would like to inform you that we do not intend to transfer your personal data to a third country (a third country should be understood as countries outside the EU and the EEA).

FOR HOW LONG WILL WE PROCESS YOUR PERSONAL DATA?

Your personal data will be processed:

1. until the expiry of the obligations to store data resulting from the provisions of law, including archival regulations,
2. until any claims become statute-barred,
3. in the event of withdrawal of consent to the processing of personal data.

 

WHAT ARE YOUR RIGHTS?

 

You have the right to access, rectify, delete or restrict the processing or transferring of your data. You may also at any time object to the processing for the reasons specified in Article 21 of the GDPR. You have the right to lodge a complaint with the supervisory authority (President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw), if you learn that the processing of your data is unlawful.

 

We do not make automated decisions and do not use profiling in relation to your data.

 

INFORMATION FOR CANDIDATES TO WORK IN ZAKŁADY AUTOMATYKI “POLNA” S.A.

In connection with the application of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (referred to as GDPR or the General Data Protection Regulation) and the Act of 10 May 2018 on the protection of personal data (Journal of Laws of 2018, item 1000),

please attach the following clause to the application documents:

“I agree to the processing of my personal data included in this document by Zakłady Automatyki “POLNA” S.A. with its registered office in Przemyśl for the purpose of conducting recruitment for the position for which I am applying, in accordance with the Act of 10 May 2018 on the Protection of Personal Data (Journal of Laws of 2018, item 1000) and in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR).

At the same time, I declare that I have read the GDPR information clause for candidates for employees ( www.polna.com.pl — GDPR tab).”

 

We hereby inform you that after the recruitment process has been completed and after the candidate(s) have been selected, your applications in both paper and electronic versions will be deleted.

If you wish to participate in current and subsequent similar recruitment processes, please include the following clause:

“I agree to the processing of my personal data included in this document by Zakłady Automatyki “POLNA” S.A. with its registered office in Przemyśl for the purposes necessary to carry out the current recruitment process for the position for which I am applying and future recruitment processes, in accordance with the Act of 10 May 2018 on the Protection of Personal Data (Journal of Laws of 2018, item 1000) and in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR).

At the same time, I declare that I have read the GDPR information clause for candidates for employees ( www.polna.com.pl — GDPR tab).”

In the case of your consent to the use of personal data for the purposes of future recruitment processes, the CVs of candidates rejected in a given recruitment process are stored and your data are used for a period of 6 months. After this period, they are deleted and the personal data of candidates are not processed for any other purpose.

We do not send back the received application documents.

Only selected candidates are invited for job interviews.

At the same time, we would like to inform you that applications that will be received after the determined deadline or that do not contain the above clause will not be considered.

In the case of absence of a recruitment process, the received application documents are deleted in both paper and electronic versions.

 

GDPR INFORMATION CLAUSE FOR CANDIDATES FOR EMPLOYEES

Controller

The controller of your personal data processed as part of the recruitment process is Zakłady Automatyki “POLNA” S.A. with its registered office in Przemyśl, ul. Obozowa 23, entered into the Register of Entrepreneurs maintained by the District Court in Rzeszów, 12th Commercial Division of the National Court Register, under KRS number: 0000090173, with a share capital of PLN 3,765,864.60, fully paid up, NIP (Tax Identification Number) 7950200705, as the employer, labour law activities on behalf of whom are performed by the President of the Management Board.

 

Purpose and grounds for processing

Your personal data in the scope specified in the provisions of Labour Law (Article 22¹ of the Labour Code ) will be processed for the purpose of conducting the current recruitment process (Article 22¹ (1) 4-6 of the Labour Code in connection with Article 6(1)(b) of the GDPR, in the case of data referred to in Article 22⁽¹⁾ (1) 1-3 of the Labour Code the legal basis is Article 6(1)(c) of the GDPR). Providing other data to the extent not specified by the provisions of law will be treated as a consent (Article 6(1)(a) of the GDPR) to the processing of personal data. The consent in this case is voluntary and may be revoked at any time. Zakłady Automatyki “POLNA” S.A. will process your personal data also in subsequent recruitment processes if you will give your consent (Article 6(1)(a) of the GDPR), which may be revoked at any time. If the documents contain data referred to in Article 9(1) of the GDPR, your consent to their processing will be necessary (Article 9(2)(a) of the GDPR) and may be revoked at any time.

 

Recipients of personal data

Your personal data may be transferred only to entities that are entitled by law to receive them. Moreover, they may be disclosed to entities with which Zakłady Automatyki “POLNA” S.A. concluded an agreement for the provision of maintenance services for IT systems used in their processing.

 

Data retention period

Your data collected in the current recruitment process will be stored until the recruitment process is completed. If you consent to the use of personal data for future recruitment purposes, your data will be used for 6 months.

 

You have the right to:

1. access your data and receive a copy thereof,
2. rectify (correct) your personal data,
3. restrict the processing of your personal data,
4. erase your personal data,
5. lodge a complaint with the President of the Personal Data Protection Office (to the address of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw).

 

Information on the obligation to provide data

Providing your personal data to the extent resulting from Article 22¹ of the Labour Code is necessary to participate in the recruitment process. The provision of other data is voluntary.

 

 

 

INFORMATION CLAUSE — VIDEO MONITORING

 

Pursuant to Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (Dz.U.UE.L.2016.119.1) — hereinafter “GDPR”, I hereby inform that:

 

• The Controller of your personal data is Zakłady Automatyki “POLNA” S.A. with its registered office in Przemyśl, address: ul. Obozowa 23, 37-700 Przemyśl.
• We have appointed a Data Protection Officer who can be contacted by e-mail address: rodo@polna.com.pl in all matters concerning the processing of personal data and exercising the rights related to their processing.
• The processing of data by means of visual monitoring and access monitoring takes place in order to secure the enterprise (institution) and ensure the security of people staying on its premises, pursuant to Article 6(1)(f) of the GDPR, and includes:
• visual monitoring: entries to buildings, halls, transport routes, external transport routes, area of the enterprise’s real property within its borders;
• access monitoring: entrance to the server room and the plant premises.
• Personal data in the form of an image are recorded by video recording cameras on a continuous basis. Cameras do not record sound. Access monitoring records the entrances and exits of authorised persons.
• Personal data will be made available only to entities authorised to receive them on the basis of the applicable provisions of law.
• Personal data will not be transferred to a third country or an international organisation;
• Personal data will be stored for 1 to 20 days.
• Every data subject has the right to:
• access their data and receive a copy thereof;
• rectify (correct) their data;
• erase personal data in a situation where the processing of data does not take place in order to fulfil the obligation resulting from the provisions of law;
• restrict the processing of data;
• object to the processing of data;
• lodge a complaint with the President of the Personal Data Protection Office (to the address of the Personal Data Protection Office, ul. Stawki 2, 00 — 193 Warsaw).

In order to exercise the above rights, please contact the controller or the Data Protection Officer in the manner indicated above.

• Monitoring data will not be used to make automated decisions and will not be used for profiling.
• The provision of personal data in the form of an image is necessary for technical reasons to stay on the premises of the medical institution. Within the medical institution there are signs indicating that the facility is monitored.