INFORMATION ON THE PROCESSING OF PERSONAL DATA RECRUITMENT
The below referenced scope of advice originates with, and is being passed on to you in pursuance of the Regulation of the European Parliament and of the Council (EU) 2016/679, of April 27, 2016, on the protection of natural persons with regard to the processing of personal data, and on the free movement of such data, and on repealing Directive 95/46/EC (General Data Protection Regulation - GDPR).
I. Personal Data Administrator
The administrator of personal data is Kraków Airport Hotel, a limited liability company with its registered office in Balice at the following address: ul. Kpt. Mieczysława Medweckiego 3, 32-083 Balice, evidenced in the National Court Register of Entrepreneurs as entry No KRS 0000335628, NIP (tax identification number): 5130189547, REGON: 120944716, tel.: + 48 12 340 00 00 (hereinafter referred to as ‘the Administrator’ or ‘the Company’).
II. Contact to the Data Protection Officer:
Contact with the Data Protection Inspector is possible at the following e-mail address: iod@krakowairporthotel.pl or at the correspondence address indicated in point I.
III. Purposes and legal basis of personal data provision
Your personal data will be processed for the purposes of recruitment for the selected position:
in the case of Candidates for employment on the basis of an employment contract in the scope specified in art. 221 of the Labor Code pursuant to Article 6 paragraph 1 point c of the GDPR;
in the case of Candidates for employment under a civil law contract to the extent necessary to take action at the request of the data subject before the conclusion of the contract, pursuant to Article 6 paragraph 1 point b of the GDPR;
in the remaining scope, the data will be processed on the basis of the Candidate's consent expressed by explicit confirmation action, consisting in including these data in the application form (Article 6 paragraph 1 point a of the GDPR);
data may also be processed on the basis of the Administrator's legitimate interest, consisting in conducting a recruitment process and / or defending against any claims related to it (Article 6 paragraph 1 point f of the GDPR).
IV. The scope of data processed
The following categories of personal data will be processed: name (names) and surname, date of birth, contact details indicated by the Candidate, and (if it is necessary to perform work of a specific type or in a specific position), also: data on education, professional qualifications and the course of previous employment .
V. Information on the mandatory / voluntary provision of data
Providing personal data is voluntary, but necessary to take part in the recruitment process. The effect of not providing data in the scope specified in art. 221 of the Labor Code will be unable to participate in the recruitment process.
VI. Period of data processing
Personal data will be processed for the period necessary to conduct the recruitment process and select a candidate for the position, i.e. to complete the recruitment process and accept the job offer by the selected candidate, and then for a period of 1 month in order to defend against any claims related to the recruitment process.
If the candidate in the recruitment application has consented to the processing of personal data for the purposes of future recruitments, the data will be processed for a period of 1 year from the end of current recruitment. You can withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of data processing before withdrawal of consent.
VII. Recipients of personal data
We may transfer your personal data to the processors processing data on behalf of the Administrator to provide services to the Administrator, such as IT services (e.g. hosting, supply or maintenance of IT systems), accounting services, postal services, legal services, etc.
VIII. Your statutory rights related to the processing of personal data
You have the right to access the data and the right to request their rectification (if they are inconsistent with the facts), deletion, processing restrictions (in cases provided for by applicable law). To the extent that the basis for the processing of your personal data is the legitimate interest of the Administrator, you have the right to object to the processing of personal data. To the extent that the basis for the processing of your personal data is consent, you have the right to withdraw consent. Withdrawal of consent does not affect the lawfulness of processing until the consent is withdrawn. You also have the right to transfer personal data, i.e. to receive from the Administrator, in a structured, commonly used machine-readable format. The right to transfer data does not apply to data that is a business secret, cannot adversely affect the rights and freedoms of others, including trade secrets or intellectual property, and will be implemented to the extent technically possible. The first copy of the data is free.
In order to exercise your rights, please contact the addresses indicated in points I. or II.
IX. The right to lodge a complaint with the supervisory body
You also have the right to lodge a complaint with the supervisory body, which is the President of the Office for Personal Data Protection (00-193 Warszawa, ul. Stawki 2, e-mail: kancelaria@uodo.gov.pl)
X. Automated decision making
Decisions are not made in an automated manner, and your personal data is not subject to profiling by Personal Data Administrator.
XI. Transfer of data to third countries or international organizations
The data will not be transferred outside the European Economic Area.