PRIVACY POLICY

GENERAL PROVISIONS

1. This Privacy Policy determines the rules how the appverk.com website’s (hereinafter: Website) operator processes personal data of its users and creates the user’s rights and operator’s obligations.
2. The controller of the Website’s users’ personal data is AppVerk Sp. z o.o. located in Poznań, ul. Grodziska 8 (60-363 Poznań), hereinafter also the Controller.
3. All questions related to personal data protection may be sent to the Data Protection Officer, Katarzyna Ellerik:

1. via letter: ul. Grodziska 8 60-363 Poznań,
2. via email: [email protected]

1. All Website’s users’ personal data are processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter: GDPR)
2. The Controller diligently selects and applies appropriate technical and organizational measures that ensure the protection of the personal data they process, and declares that these data are:

1. processed lawfully,
2. collected for determined, legal purposes, and not processed further with infringement on these purposes,
3. substantially accurate and adequate to the purposes for which they are collected,
4. stored in a manner which makes it possible to identify the data subject, no longer than required for the purposes of the processing.

THE SCOPE OF COLLECTING DATA

1. The Website’s users’ personal data are collected and processed only based on the appropriate legal bases, and the scope depends directly on the type of services provided.
2. The users’ personal data processed by the Controller are mostly:

1. the name and surname, email address, telephone number;
2. name and surname, date of birth, contact data, education/professional information and the employment so far, and other data which aa candidate shares willingly in application documents.
3. information saved in cookie files and analogous technologies.

PURPOSES AND LEGAL BASES FOR COLLECTING DATA

1. The Website’s users’ personal data are processed for the following purposes:

1. acting on request of the user before entering the agreement, including making contact to present a commercial offer personalized for the user’s needs – the processing is based on article 6, section 1, point b of the GDPR;
2. answering a question to the Controller via available communication channels – the processing is based on article 6, section 1, point f of the GDPR, i.e. carrying out the controller’s legally justified interest of maintaining relationships with the client and other parties involved;
3. sending commercial offers and promotional-marketing information the processing is based on article 6, section 1, point a of the GDPR, i.e. the user’s voluntary consent;
4. gathering application documents for job positions offered to run the selection process and choose the candidate – the processing is based on article 6, section 1, point b of the GDPR (in the scope indicated in article 221 §1 of the Labor Code) and article 6, section 1, point a of the GDPR, i.e. the user’s voluntary consent (in the scope of data exceeding the catalog indicated in  221 §1 of the Labor Code);
5. gathering application documents to establish a cooperation within the job position offered (article 6, section 1, point b of the GDPR);
6. bulding a base of potential job candidates – the processing is based on article 6, section 1, point a of the GDPR, i.e. the user’s voluntary consent.

THE DURATION OF PROCESSING DATA

1. The users’ personal data will be processed only for the period necessary to reach the purpose of their collection, i.e.:

1. for the period necessary to prepare an individual offer, and after presenting it, depending on the situation, the data may be used in other processes and will be processed according to the retention time for this process, and they may be added to our client base or a base of contacts used to send out commercial information;
2. for the duration of the correspondence, and after its finish, a maximum of 6 months counted from the day of the last contact;
3. until the consent is withdrawn, in the case of data collected based on this legal basis;
4. for the duration of the recruitment process, but no longer than 3 months counted from the day of the end of the recruitment.

DATA RECIPIENTS

Personal data may be transferred only to trusted recipients, closely cooperating with the Controller, including subjects handling and providing selected IT systems and solutions, law and debt collection firms, subjects providing post/courier services, and subjects providing the Controller with finance/accounting processes.

Personal data will not be transferred outside the European Economic Area or to international organizations.

SUBJECTS’ RIGHTS

1. At all times, the user has the right to:

1. access their personal data,
2. rectify their personal data,
3. remove their personal data,
4. transfer their personal data,
5. limit the processing of the personal data,
6. object to the processing of their personal data, which is based on the controller’s legally justified interest (article 6, section 1, point f of the GDPR),
7. withdraw the consent to have their personal data processed based on the user’s consent, with the reservation that withdrawing the consent does not influence the lawfulness of the processing prior to the withdrawal,

1. In case of any doubt about respecting the user’s rights, they have the option to file a complaint to the supervisory body (UODO).

ADDITIONAL INFORMATION

1. Providing your data is voluntary, but failure to provide them may result in you not being able to use specific services offered by the Controller.
2. There is no automated decision-making, including profiling, in the data processing process.