PRIVANCY STATEMENT
Who is the data controller of my personal data?
The data controller of personal data is Kappa Data Polska sp. z o.o., headquartered in Nowa Dęba at 50A Wczasowa Street, 39-460 (hereafter referred to as Kappa Data).
What personal data does the Controller process?
As the data controller under GDPR, Kappa Data processes the following personal data:
- Personal data of job applicants (data provided by applicants during recruitment processes, particularly the information contained in CVs).
- Personal data of contractors and their representatives (company data and contact persons’ data, including essential information for invoicing and bookkeeping such as name, tax ID (NIP), business address, and contact details like name, company name, job title, email address, and phone number).
- Personal data of individuals submitting inquiries via contact forms, email, or phone (basic contact information like name, surname, and email address).
- Personal data processed in connection with managing profiles on social media platforms such as LinkedIn, Facebook, YouTube, and Instagram.
- Individuals who have subscribed to the Newsletter service.
- Participants in events (e.g., training and webinars).
- Note: Company data is considered personal data only when it allows the identification of individuals related to the data. Data of capital companies is not treated as personal data.
- GDPR: Regulation (EU) 2016/679 of the European Parliament and Council of 27 April 2016 on the protection of individuals regarding the processing of personal data and the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).
On what basis does the Controller process my personal data?
The following rules apply to the processing of your personal data, explaining who has access to the data, how long it is stored, and the legal basis for its processing.
Personal data of job applicants
Purpose and legal basis for processing: Your personal data will be processed for the recruitment process or, with your consent, for future recruitment processes (the legal basis for processing is the applicable legal regulations, especially the Labor Code, and your consent).
Data recipients: This data may be shared with entities authorized under the law. It may also be accessed by entities providing IT support and infrastructure under appropriate agreements with Kappa Data.
Retention period: The personal data processed by the controller will be retained until the recruitment process is completed or until you withdraw your consent if the data is processed for future recruitment processes.
Transfer of data to third countries: Kappa Data generally does not transfer data outside the European Economic Area (EEA). However, there may be instances where Kappa Data uses IT service providers whose headquarters or servers are outside the EEA. In such cases, the data transfer is based on standard contractual clauses approved by the European Commission.
Automated decision-making/profiling: Kappa Data does not make decisions based on automated processing, including profiling, concerning the described processing purposes.
Voluntary/mandatory provision of data: Providing personal data as required by law, especially the Labor Code, is mandatory. In other cases, providing data is voluntary.
Personal data of contractors and their representatives
Purpose and legal basis for processing: Personal data of contractors is processed for fulfilling the contracts between the parties (under Article 6(1)(b) GDPR) and fulfilling legal obligations imposed on the controller (under Article 6(1)(c) GDPR), such as VAT invoicing under the Accounting Act and VAT Act. Personal data of contractors’ representatives is processed for contact purposes, including establishing and maintaining business relationships (based on the legitimate interest of the data controller under Article 6(1)(f) GDPR).
Data recipients: The data may be shared with entities authorized under the law and IT service providers supporting Kappa Data.
Retention period: Personal data will be stored for the legally required retention period. Contact data of contractors’ representatives will be retained until an objection is raised to the processing of such data.
Transfer of data to third countries: Kappa Data generally does not transfer data outside the EEA. However, if such transfers occur, they will be based on standard contractual clauses approved by the European Commission.
Automated decision-making/profiling: Kappa Data does not engage in automated decision-making or profiling.
Voluntary/mandatory provision of data: Providing personal data is voluntary but necessary for maintaining business relationships and fulfilling contracts.
Individuals submitting inquiries via contact forms, email, or phone
Purpose and legal basis for processing: Personal data will be processed for handling electronic correspondence and fulfilling requests (based on the legitimate interest of the data controller under Article 6(1)(f) GDPR).
Data recipients: The data may be shared with entities authorized by law, as well as IT service providers supporting Kappa Data.
Retention period: Data will be retained for the duration of the correspondence and subsequently for archival purposes in accordance with the controller’s internal policies.
Transfer of data to third countries: Kappa Data does not generally transfer data outside the EEA, but in case of IT services located outside the EEA, standard contractual clauses will apply.
Automated decision-making/profiling: Kappa Data does not use automated decision-making or profiling in this context.
Voluntary/mandatory provision of data: Providing personal data is voluntary but necessary for correspondence.
For more information on how personal data is processed in relation to social media profiles, newsletter services, events, and cookie usage, or to learn about your rights regarding your personal data and how to exercise them, please refer to the full policy provided.