The administrator of your personal data is Stalfa sp. z o.o. with its registered office in Sokołów Podlaski ("Administrator", "we"), Oleksiaka Wichury 2, 08-300 Sokołów Podlaski. In matters related to the processing of your personal data, you can contact us by post at the above address or by e-mail at iod@polimex.pl.

Your personal data will be processed:

1. In the case of preferring employment based on an employment contract for the performance of duties resulting from legal provisions related to the recruitment process, including primarily the Labor Code, the legal basis for processing is the legal obligation imposed on the Administrator (Art. 6(1)(c) GDPR), and in the case of preferring employment based on a civil law contract, the legal basis for processing data contained in application documents is the taking of steps prior to the conclusion of the contract (Art. 6(1)(b) GDPR);

2. For the purpose of conducting the recruitment process in the scope of data not required by law or by the Administrator, as well as for future recruitment, the legal basis for data processing is consent (Art. 6(1)(a) GDPR, Art. 9(2)(a) GDPR);

3. For the purpose of verifying your qualifications and skills and determining the terms of cooperation, the legal basis for processing personal data is the legitimate interest of the Administrator (Art. 6(1)(f) GDPR). The legitimate interest of the Administrator is the verification of candidates for employment/cooperation and determining its terms, as well as the transfer of data within the Polimex Mostostal Capital Group;

4. For the purpose of establishing or pursuing any claims or defending against such claims by the Administrator, the legal basis for data processing is the legitimate interest of the Administrator (Art. 6(1)(f) GDPR).

Your personal data will be stored until the end of the recruitment process, and if we have your consent to process data for future recruitments, until it is no longer useful. In both cases, we will delete the data no later than six months after its collection, and in any case, no longer than until you withdraw your consent.

We may share your data with:

1. entities authorized to receive it based on legal provisions, if such entities/bodies request information based on an appropriate legal basis and in accordance with applicable law.

2. entities processing your personal data on our behalf, i.e., companies providing specific services for us that involve the processing of your personal data, e.g., entities providing advisory services for us, or companies within the PxM Capital Group for administrative purposes.

Using your rights regarding the processing of personal data, you can make the following requests to us: (i) access to personal data and obtain a copy; (ii) correct personal data; (iii) object to data processing; (iv) delete personal data; (v) restrict its processing; (vi) transfer personal data, i.e., the right to receive your personal data from us in a structured, commonly used, machine-readable format. You may send this data to another data controller or request that we send your data to another controller. However, we will do this only if such transfer is technically possible. The right to transfer personal data applies only to data processed based on a contract with you or your consent.

Your personal data will not be subject to solely automated processing.

You may withdraw your consent to the processing of personal data given for one or more purposes at any time. Your withdrawal of consent does not affect the lawfulness of processing that took place before the withdrawal of consent.

If our processing of your personal data violates GDPR regulations, you have the right to file a complaint with the President of the Office for Personal Data Protection.

Providing your personal data within the scope specified in Art. 221 of the Labor Code is required – in the case of preferring employment based on an employment contract – by legal provisions, including the Labor Code. In the case of preferring employment based on a civil law contract – by the Administrator. Providing this personal data is voluntary, but failure to provide it will result in the inability to participate in the recruitment. At the same time, we ensure that failure to provide personal data other than necessary for the recruitment purpose will not be a reason justifying refusal of employment.