INFORMATION CLAUSE POLONIUM NETWORK JOB FAIR - WITH A FOCUS ON BIOTECHNOLOGY AND CHEMISTRY
Polish version of the document you can find here
Pursuant to Art. 13 sec. 1 and sec. 2 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation; GDPR), we inform you that:
1. Data Controller
The Controller of Personal Data is Polonium Foundation with its registered office at Pl. Bankowy 2, 00-095 Warsaw, Poland/Poland, entered by the District Court for the Capital City of Warsaw in Warsaw,
XII Commercial Division of the National Court Register under KRS number 0000621890, NIP: 7010584408, e-mail address: contact @poloniumfoundation.org (hereinafter: Foundation or Controller). You can also contact us as follows:
via e-mail: contact@poloniumfoundation.org,
by post to the following address: Fundacja Polonium / Polonium Foundation, Pl. Bankowy 2, 00-095 Warsaw, Poland/Poland.
2. Data Protection Officer
We have appointed a Data Protection Officer. This is the person you can contact in all matters regarding the processing of personal data and the use of rights related to data processing. The Data Protection Officer at Polonium Foundation can be contacted at the following e-mail address: iod@poloniumfoundation.org The Data Protection Officer can also be contacted in writing at the address of the seat of Pl. Bankowy 2, 00-095 Warsaw, Poland/Poland, indicated in point 1, with the note "Data Protection Officer".
3. Purpose and Basis for Processing:
In the case of recruitment, your personal data will be processed to the extent indicated in the provisions of labour law, while other data, voluntarily provided by you, including contact details, on the basis of consent, which may be revoked by you at any time.
The legal basis for data processing will be:
article 6 sec. 1 letter b of the GDPR (data necessary to take action before concluding the contract)
article 22¹ § 1-2 of the Labor Code (legal provision of Article 6(1)(c) of the GDPR)
article 6 sec. 1 letter a GDPR (consent to the processing of data other than those resulting from the law)
article 6 section 1 letter c GDPR, the processing is necessary to fulfil the legal obligation of the Controller
article 6 section 1 letter d GDPR necessary to protect the vital interests of the data subject or another natural person
article 6 section 1 letter f of the GDPR pursuing a legitimate interest consisting in the possible determination or pursuit of claims or defence against claims
4. Data recipients will be:
a) suppliers to whom we will commission services related to the processing of personal data, e.g. IT service providers. Such entities process data on the basis of an agreement with us and only in accordance with our instructions, and
b) event partners, exhibitors, cooperating companies and guests of Job Fair Polonium Network, whose full list with contact details can be found here
c) Warsaw Society of Biotechnology "Symbioza" - based on the concluded data processing entrustment agreement
5. Data retention period
Your data collected in the current recruitment process will be stored until the end of the recruitment process, but no longer than for a period of 12 months from the date of sending the application as part of a given recruitment process. If you consent to the use of personal data for future recruitment purposes, your data will be used for a period of 12 months.
6. Rights of data subjects
You have the following rights related to the processing of personal data:
a. the right to withdraw consent,
b. the right to access your personal data,
c. the right to request rectification of your personal data,
d. the right to request the deletion of your personal data,
e. the right to request limitation of the processing of your personal data,
f. the right to object to the processing of your data due to your particular situation - in cases where we process your data on the basis of our legitimate interest,
g. the right to transfer your personal data, i.e. the right to receive your personal data from us in a structured, commonly used machine-readable IT format. You can send this data to another data controller or request that we send your data to another controller. However, we will only do so if such a transfer is technically possible. The right to transfer personal data applies only to the data that we process on the basis of a contract with you or on the basis of your consent,
7. Right to withdraw consent
To the extent that your data is processed on the basis of consent - you have the right to withdraw consent to data processing at any time. Withdrawal of consent does not affect the lawfulness of processing based on your consent before its withdrawal.
To exercise the above rights, please contact us or our data protection officer (contact details in points 1 and 2 above).
8. Information about the requirement to provide data
Providing personal data by you in the scope resulting from Art. 6 para. 1 letter b and c is necessary to participate in the recruitment procedure. Providing other data by you is voluntary.
9. Information on the transfer of data to a third country:
As part of the organized project Job Fair Polonium Network - art. 6 sec. 1 letter a of the GDPR or 49 sec. 1 letter a GDPR, depending on the country, your data may be transferred to event partners located in a third country (and listed on the event website), i.e. a country outside the European Economic Area.
The Controller may transfer personal data to third countries, i.e. countries outside the European Economic Area. Your data may only be transferred to third countries or entities for which the European Commission has found an adequate level of data protection. The list of countries for which the European Commission issued a decision confirming that a third country provides an adequate level of protection can be found under Adequacy decisions (europa.eu) .
In the absence of a decision from the European Commission stating the appropriate level of protection specified in art. 45 sec. 3 of the GDPR, your personal data may be transferred to a third country only on the basis of binding corporate rules, standard data protection clauses adopted by the European Commission, standard data protection clauses adopted by the Polish supervisory authority and approved by the Commission, an approved code of conduct or an approved certification mechanism ( Article 46 of the GDPR).
In the absence of a decision from the European Commission stating the appropriate level of protection specified in art. 45 sec. 3 of the GDPR or lack of appropriate safeguards specified in art. 46 of the GDPR, including binding corporate rules, we will ask you for express consent to such transfer to a third country or international organization, informing you about the prior risk associated with such transfer pursuant to art. 49 sec. 1 letter a GDPR.
In connection with the transfer of data outside the EEA, you can request information about the appropriate safeguards in this regard, obtain a copy of these safeguards or information about the place where they are made available by contacting us at the address indicated in point 1 above.