General Data Protection Regulation

Dear Applicants!

Below you can find information on your personal data. Please read it carefully.

The processing of your personal data is necessary to consider your application and takes place under two legal bases. Basic data (listed in detail below) are used for the purpose of meeting a legal obligation. The scope of such data is provided for by the law – the Labor Code. These data are sufficient for us to conduct the recruitment process. If you wish, however, you may provide more information – defined as additional data. If your CV contains the so-called additional data, we will use them based on your consent. You may withdraw your consent at any time. Said withdrawal does not mean that you resign from applying for the job. In the event of consent withdrawal, we will cease to analyze additional data contained in your CV.

The new provisions allow consent to be given by taking a clear action that will confirm your intentions (art. 4(11) of the GDPR and recital 32 of the preamble). Please be advised that we will treat sending your CV to Fabres as such, i.e., as consent reading as follows:

I agree to the collection and use of my personal data in order to consider my application in the recruitment process. This consent applies to data contained in my CV and presented during a job interview but not required by the law. The consent is given to Fabres sp. z o.o. with its registered office at 61-129 Poznań, ul. Stanisława Małachowskiego 10.

Information Clause
1. In accordance with art. 13(1) and (2) of the General Data Protection Regulation 2016/679 (GDPR) of 27 April 2016 we inform that:
2. The Controller of your personal data is Fabres sp. z o.o. with its registered office at 61-129 Poznań, ul. Stanisława Małachowskiego 10.
3. You can contact our Data Protection Officer by writing at iod@fabres.pl.
4. We will use information about you to verify your application, arrange a meeting and assess your competences presented during the interview.
5. The processing of your personal data is justified by the necessity to comply with a legal obligation to which we are subject (art. 6(1)(c) GDPR). Said obligation is imposed on us by art. 22¹ § 1 of the Labor Code. The use of the following data is required by the law:

a. first name (names) and last name;
b. date of birth;
c. contact details contained in your CV;
d. education;
e. professional qualifications;
f. employment history.

5. The basis for the processing of your additional data, if contained in your CV, is voluntary consent (art. 6(1)(a) GDPR, and in the case of information about a disability, also art. 9(2)(a) GDPR).
6. You give said consent by sending us your CV containing such additional data.
7. You may withdraw your consent at any time by writing an e-mail to iod@fabres.pl
8. To make sure that we will promptly delete additional data contained in your CV in the case of consent withdrawal, please compose your CV in such a way as to separate such additional data from those that are required by the law.
9. Please be also advised that our clients have the right to assess the qualifications of persons taking part in projects carried out for them. Your ability to take part in such projects is a critical factor in considering your candidacy in the recruitment process. For this reason, your data (whenever possible, anonymous) will be made available to selected clients to the necessary extent. The basis for the above is a legitimate interest of the Controller (art. 6(1)(f) GDPR), which consists in the need to conclude contracts only with such employees, who may be included in the projects carried out by it.
10. Please be also advised that Fabres uses the services of recruitment agencies. An essential part of this cooperation is notifying the agencies whether communication concerning potential employment is being conducted with a given person. Your data may be transferred to recruitment agencies in order to demonstrate that communication with you is conducted through another channel and to calculate remuneration of these agencies for providing job candidates. Your data may also be transferred to entities providing streaming or video recording services if the recruitment, in whole or in part, is carried out remotely. A legal basis of this type of processing is a legitimate interest of the Controller (art. 6(1)(f) GDPR). Such processing is necessary to fulfill contractual obligations and fair settlements with subcontractors.
11. Your personal data will be stored for the period of collecting and selecting CVs, and then for the period necessary to arrange and conduct interviews. This period will not exceed three months. Then we plan to store your data until the end of the trial period of the selected candidate, because in the event this person decides not to extend their employment contract, we will need the data of other candidates. The total period of storage of your personal data will not exceed six months.
12. For applications sent in the “apply for future consideration” mode (to be taken into consideration in future recruitment processes) the above period will be counted from the moment the recruitment process for the position you take interest in begins.
13. If the period of storage of your CV prior to the recruitment process exceeds 12 months we will contact you to confirm your will to take part in the recruitment and to make any updates in your data.
14. In the recruitment process the Controller uses the services of outside entities – portals publishing job advertisements, platforms for collecting and managing CVs and electronic mail suppliers.
15. Please be also advised that once you are employed, the accounting office we cooperate with will also work on your personal data.
16. You have the right to access your data and obtain a copy of them, the right to rectify them if they turn out to be incomplete, out of date or incorrect, the right to request the Controller to delete your data or limit their processing, the right to transfer data to another controller and the right to withdraw your consent at any time without affecting the lawfulness of the processing which was carried out on the basis of consent before its withdrawal;
17. You also have the right to object further processing.
18. You also have the right to file a complaint with the President of the Personal Data Protection Office if you believe that the processing of your personal data infringes the provisions of GDPR;
19. Providing basic data (mentioned above in section 4) is mandatory. Failure to provide your personal data will result in being unable to participate in the recruitment process.
20. Providing additional data is voluntary and makes the selection process easier.
21. Your data will not be used for profiling (recruitment is not automated).