GDPR Privacy Notice

1. Data Controller

The controller of your personal data is Magnar AP Sp. z o.o. with its registered office in Warszawa (01-230), ul. Skierniewicka 14 lok. 48. Contact the Controller: biuro@magnar.com.pl, tel. +48 505 258 570.

2. Purposes and legal bases of processing

2.1. Job candidates

• conducting the recruitment process – Article 6(1)(b) GDPR and Article 22¹ of the Labour Code (data required for employment);
• processing additional data contained in the CV or cover letter – Article 6(1)(a) GDPR (candidate's consent);
• inclusion in future recruitment processes – Article 6(1)(a) GDPR (consent);
• establishing, pursuing or defending legal claims – Article 6(1)(f) GDPR.

2.2. Contractors, clients, client employees

• conclusion and performance of a contract – Article 6(1)(b) GDPR;
• issuing and storing invoices – Article 6(1)(c) GDPR;
• handling inquiries and ongoing communication – Article 6(1)(f) GDPR;
• marketing of own products and services – Article 6(1)(f) or (a) GDPR.

2.3. Temporary workers and workers from abroad

• conclusion and performance of an employment contract / temporary employment contract – Article 6(1)(b) and (c) GDPR and labour law provisions;
• conducting the process of legalizing the stay and employment of foreigners – Article 6(1)(c) GDPR and the Act on Foreigners and the Act on Promotion of Employment;
• ensuring occupational health and safety and employer obligations – Article 6(1)(c) GDPR and the Labour Code.

3. Data recipients

Your personal data may be transferred to:

• the Controller's clients – for the purpose of implementing recruitment processes,
• the Controller's recruitment partners in the countries of origin of workers,
• entities processing data on behalf of the Controller (IT providers, accounting firms, law firms),
• state authorities authorized by law.

4. Transfer of data to third countries

In the case of recruitment conducted in Ukraine, Vietnam and other countries, data may be transferred to the Controller's partners in those countries on the basis of standard contractual clauses approved by the European Commission or other appropriate safeguards provided for by the GDPR.

5. Retention period

• Candidate data – for the duration of the recruitment process, and after its completion for a maximum of 24 months for the purpose of informing about future recruitment (based on separate consent).
• Contractor data – for the duration of the contract and the period resulting from tax regulations and limitation periods for claims.
• Employee data – for the period specified by labour law provisions (including 10 years for personnel files for employment after 1 January 2019).

6. Rights of data subjects

You have the right to:

• access your data and obtain a copy thereof,
• rectification, erasure or restriction of processing,
• data portability,
• object to processing,
• withdraw consent at any time,
• lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warszawa).

7. Obligation to provide data

Providing data is voluntary, however, failure to do so makes it impossible to: consider a job application, conclude a contract, issue an invoice or provide a response to an inquiry. In the case of employees, providing data to the extent specified by Article 22¹ of the Labour Code is mandatory.

8. Profiling

Your data is not used for making decisions based solely on automated processing, including profiling, producing legal effects.

9. Contact

For all matters related to the processing of personal data, please contact us:
E-mail: biuro@magnar.com.pl
Telephone: +48 505 258 570