| I hereby consent* to the processing of my personal data provided by me by Verita HR Polska sp. z o.o., with its registered office in Warsaw (02-670), ul. Puławska 182, for the purpose of: sending commercial information, including information about the latest offers and services (via email messages). The consent may be withdrawn at any time. Further information regarding the processing of your personal data can be found in the Information Clause for Recipients of Marketing Communications. Information Clause for Recipients of Marketing Communications Regarding the Processing of Personal Data by Verita HR Polska sp. z o.o. Pursuant to Articles 13 and 14 of the General Data Protection Regulation of 27 April 2016 (GDPR), we hereby inform you that: 1. The controller of your personal data is Verita HR Polska sp. z o.o., with its registered office in Warsaw (02-670), ul. Puławska 182. 2. Should you have any questions or concerns regarding the processing of your personal data, please feel free to contact us at: dane.osobowe@hropersonnel.com or in writing at the address of the Controller’s registered office. 3. Purposes and Legal Bases of Processing: Your personal data will be processed: a) For the purposes of pursuing the legitimate interests of the Controller, consisting of the marketing of its own products and services (Article 6(1)(f) GDPR), using the following communication method: · Email messages. NOTE: The use of certain communication methods requires separate consent for the use of such channels, pursuant to Article 398 of the Electronic Communications Law. b) To fulfill obligations arising from legal provisions, in particular the Telecommunications Law and the Act on Providing Services by Electronic Means (Article 6(1)(c) GDPR). c) In connection with the legitimate interest of the Controller, consisting of establishing, pursuing, or defending against claims related to the sending of marketing communications, should such claims arise (Article 6(1)(f) GDPR). d) In connection with the legitimate interest of entities cooperating with the Controller (partners and entities within the Controller’s capital group), consisting of the marketing of their products and services, provided you have given your consent thereto (Article 6(1)(a) GDPR). e) For the purposes specified in the content of consents to the processing of personal data, if such consents have been given (Article 6(1)(a) GDPR). 4. Your personal data has been obtained directly from you. 5. Recipients of Personal Data: Your personal data may be disclosed to: – Companies providing advisory and auditing services. – Subcontractors and suppliers of the organization. – Companies providing or supplying IT services and solutions. – Public authorities receiving data in connection with the fulfillment of the Controller’s legal obligations. 6. As a rule, your personal data will not be transferred outside the European Economic Area (EEA). However, given the services provided by the Controller’s subcontractors in relation to IT support and infrastructure, the Controller may commission specific IT-related tasks or activities to recognized subcontractors operating outside the EEA, which may result in the transfer of your data outside the EEA. Recipients outside the EEA, in accordance with Decisions of the European Commission, ensure an adequate level of personal data protection consistent with EEA standards. For recipients in territories not covered by a European Commission Decision, the Controller enters into agreements with such recipients based on standard contractual clauses issued by the European Commission pursuant to Article 46(2)(c) GDPR to ensure an appropriate level of protection. A copy of the standard contractual clauses may be obtained from the Controller by contacting us using the details provided above. The safeguards applied by the Controller comply with the principles set out in Chapter V of the GDPR. You may request further information about the safeguards applied, obtain a copy thereof, and information on where they are made available. 7. Your personal data will be retained until an objection to marketing activities is raised or consent is withdrawn, depending on the legal basis for sending marketing communications, i.e., until you indicate in any manner that you no longer wish to receive information about our activities or services. If you raise specific claims related to the marketing communications sent by us, your data will be retained until the expiry of the limitation period for such claims. Certain data will also be retained until the expiry of retention obligations under specific legal provisions. If certain data is processed based on the Controller’s legitimate interest (Article 6(1)(f) GDPR) and an effective objection to processing is raised before the primary retention period expires, such data will be processed for that specific purpose for a shorter period, i.e., until the objection is upheld (unless the objection pertains to processing for direct marketing purposes, in which case no justification is required). If certain data is processed based on your consent (Article 6(1)(a) GDPR) and consent is withdrawn before the primary retention period expires, such data will be processed for that specific purpose for a shorter period, i.e., until the withdrawal of consent. 8. In circumstances provided for by law, you have the following rights: a) The right to access your data and receive a copy thereof. b) The right to rectify (correct) your data. c) The right to erase your personal data. d) The right to restrict the processing of your data. e) The right to data portability – where the legal basis for processing is consent (Article 6(1)(a) or Article 9(2)(a) GDPR) or a contract (Article 6(1)(b) GDPR). f) The right to withdraw consent to the processing of your data where consent constitutes the legal basis for processing (Article 6(1)(a) GDPR), without affecting the lawfulness of processing prior to withdrawal. g) The right to object to the processing of your personal data – where the legal basis for processing is a legitimate interest (Article 6(1)(f) GDPR). 9. If you believe that the processing of your personal data violates the provisions of the GDPR, you have the right to lodge a complaint with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw. 10. The provision of your personal data is voluntary; however, failure to provide such data will prevent the performance of the contract. 11. Your personal data will not be subject to automated decision-making that produces legal effects or similarly significant impacts. |
