Information on the processing of personal data for those taking part in the recruitment (Candidates)

Information on processing of personal data for persons participating in the recruitment (Candidates)

1. The controller of the Candidate's personal data is IdoBooking sp. z o. o. (also referred to as the "Operator") with its registered office at 30 Piastów Avenue, 71-064 Szczecin, entered in the register of entrepreneurs kept by the District Court Szczecin-Centrum in Szczecin, XIII Economic Division of the National Court Register under the number 00001118562 NIP: 8522710288; REGON: 529324888; with the share capital of PLN 200,000.00. IdoBooking may be contacted by e-mail: sales@idobooking.com and by phone: +48 91 443 66 00.
2. The Data Protection Supervisor at IdoBooking is Rafał Malujda, e-mail address: gdpr- inspector@idobooking.com.
3. The processing of the personal data provided by the Candidate is carried out in order to carry out the recruitment for an employee position/ establish cooperation on the basis of: Article 6(1)(c) of the GDPR, i.e. when the processing is necessary for the fulfilment of a legal obligation incumbent on the employer, including in connection with the performance of duties imposed by Article 22 (1) § 1 of the Labour Code,

Article 6(1)(a) of the GDPR, i.e. on the basis of the consent given for the purposes set out each time in the consent forms provided,
Article 6(1)(b) GDPR - taking action at the request of the data subject prior to entering into a contract.

1. The recipients of the personal data processed by IdoPayments are IdoPayments' business partners, hosting companies, software providers, marketing agencies, online and card payment operators, accounting firms, law firms and other entities to which IdoPayments entrusts the Candidate's personal data or makes them available under an appropriate agreement for the provision of services.
2. The Controller will keep the Candidate's personal data until the end of the recruitment procedure in question, unless the Candidate has consented to the processing of his/her data also for future recruitment procedures.
3. The Candidate has the right to request from the Controller access to his/her personal data, rectification, erasure or restriction of processing, as well as the right to data portability.
4. The right to data portability allows data subjects to access their personal data in a structured, commonly used and machine-readable format and to transmit it to another controller without hindrance from the original controller. This right is available in situations where the legal basis for the processing is:

the consent of the data subject (Article 6(1)(a) of the GDPR or Article 9(2)(a) of the GDPR), or
the performance of a contract to which the data subject is party (Article 6(1)(b) GDPR). Data covered by the right to portability must be processed by technical means, e.g. in IT systems. This right does not apply to data processed in paper form. This right only covers personal data that the person has provided to the controller, such as data entered during account registration, data in online forms or data collected during the use of services (e.g. purchase history, user preferences). The data subject may request that the data be transferred directly to another controller if this is technically possible. The right to data portability does not affect the rights and freedoms of others - if data portability would affect the rights of others, the controller may limit the scope of the portability. The right to data portability does not extend to situations where the processing is based on a legal ground other than consent or contract, e.g. a legal obligation of the controller or a task carried out in the public interest.

1. In the case of data processed on the basis of consent, the Candidate has the right to withdraw consent at any time without affecting the lawfulness of the processing carried out on the basis of consent before its withdrawal.
2. The Candidate has the right to lodge a complaint with the supervisory authority, which is the President of the Office for the Protection of Personal Data, if the Candidate considers that the processing of the Candidate's personal data by the Controller violates the provisions on the protection of personal data.
3. The provision of personal data by the Candidate is partly a statutory requirement (recruitment under the Labour Code) and partly a contractual requirement and, as a rule, is voluntary, but may be necessary for the proper conduct of the recruitment procedure. Failure to provide personal data will result in the impossibility of conducting the procedure with the Candidate.