GDPR

Information obligation

 

Pursuant to Article 13 GDPR of the Regulation of the European Parliament and of the EU Council of 27 April 2016 on the protection of natural persons as regards the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC on personal data processing (i.e. OJ EU L. 2016.119.1), hereinafter referred to as the “GDPR,” and on the protection of privacy (the “Information”).

 

Progres Group Sp. z o. o. is an exclusive shareholder of the personally and equity-affiliated companies with the following subsidiaries: Progres HR Poland Sp. z o. o., Progres HR International Sp. z o.o., Progres Sp. o. o., Progres Advanced Solutions Sp. z o. o., all based in Gdańsk, 80-309 Gdańsk, at Aleja Grunwaldzka nr 411.

 

Each of the aforementioned entities is a separate Personal Data Controller (the “Controller”). This Notice applies to each of the Controllers.

 

The Controller will process your Personal Data in order to properly provide the services arising from the form you have filled in and to provide commercial and marketing information.

 

The Controller agrees and undertakes to protect your Personal Data and privacy.

 

Each consent authorising Grupa Progres Sp. z o.o. to perform an action will express permission for the subsidiary to perform the same action.

 

Using the Site, you may search and apply for positions, offered by the Company and its subsidiaries, matching your interests, skills or experience and ones that are available in the location where you are seeking employment.

 

By using www.grupaprogres.pl etc., you accept the provisions hereof.

 

Grupa Progres Sp. z o. o. is a leading company under which there are business lines directed respectively by each of the subsidiaries, i.e. Progres HR Poland Sp. z o. o., Progres Sp. o. o., Progres HR International Sp. z o.o. , Progres Advanced Solutions Sp. z o. o., personally and equity-affiliated with Grupa Progres Sp. z o. o., jointly responsible for the position of the brand “Grupa Progres” on the market.

 

The “Company Structure” tab contains the explanation of the wide range of services provided to you as the Site User.

 

The following information is provided in relation to the obligation imposed on the Controller by Article 13 GDPR.

 

What type of Personal Data is collected and processed by the Controller?

Personal data collected by the Controller includes:

1) Your name, date of birth, contact details, education, previous employment history;

2) if you contact us, we may keep a record of such correspondence in some cases;

3) in some cases, your browser preferences, IP address, traffic and frequency of your visits to the website of Grupa Progres, as well as location data and resources used.

 

The data collected is used to provide the best possible service and for administrative, statistical and advertising purposes, to protect the website and its users, and to provide commercial and marketing information.

 

Personal data will be processed until there is a basis for such processing i.e.:

 

1) where consent has been given until it is withdrawn, restricted or there is any other action on your part restricting that consent,

 

2) if the data is necessary for the performance of the agreement, for the duration of its performance and until claims thereunder are barred by the statute of limitations,

 

3) where the processing is based on the legitimate interest of the controller, until you raise an effective objection,

 

4) for tax and accounting purposes to the extent and for the duration in accordance with applicable legislation.

 

Rights related to personal data processing:

 

right to access personal data, including obtaining a copy thereof,

right to request that personal data be rectified,

right to erase personal data (right to be forgotten),

right to lodge a complaint with the supervisory authority for personal data protection, which in Poland is the President of the Office for Personal Data Protection,

right to restrict personal data processing.

right to object (objection to processing, objection to direct marketing including profiling, legitimate objection to the processing of personal data for the legitimate interest of the Controller),

right to withdraw the consent for processing. The withdrawal of such a consent does not affect the lawfulness of processing carried out under the consent prior to its withdrawal. If your data is processed under the consent or to perform an agreement.

Why do we process your personal data?

As regards the implementation of the recruitment process, in accordance with Article 22¹(1) of the Act of 26 June 1974 of the Polish Labour Code (ie. Polish Journal of Laws 2018, item 108, as amended), hereinafter referred to as the “Polish Labour Code,” in conjunction with Article 6(1)(c) GDPR for the fulfilment of a legal obligation incumbent on the personal data controller. The provision of data is voluntary and requisite to participate in the recruitment process.

For marketing purposes, in particular: sending information about new products and services and quotations, additionally informing about new forms of contact with the controller. The provision of data is voluntary and consent will be given pursuant to Article 6(1)(a) GDPR.

In the case of uploading a document with a photo (CV) or uploading a photo on an application form, the processing of the image is based on the consent indicated in Article 22²(1) of the Polish Labour Code in relation to Article 6(1)(a) GDPR, the consent is voluntary and requisite if the photo is submitted via the application form.

Due to the need for profiling – compiling information about you in an automated manner and automatically matching your profile under job vacancies in order to provide services based on the latest technological developments, in accordance with Article 6(1)(a), in conjunction with Article 22(1) and (4) GDPR.

Due to the need to develop, test and improve the website domain and other existing or new IT systems/processes to be able to provide an even better service.

On what basis do we process your personal data?

The processing of personal data takes place based on your consent in each and every case, in accordance with the GDPR and the DPA. You decide to give your consent to the processing of your personal data; this is not necessary; however, it is required in relation to the provision of services to you, as without your consent we will not be able to provide you with such services as which you are interested in.

 

Rights of the entity Progres Group Sp. z o.o. and personally and equity-affiliated subsidiaries, i.e.: Progres HR Poland Sp. z o. o., Progres Sp. o. o., Progres HR International Sp. z o.o. , Progres Advanced Solutions Sp. z o. o., all based in Gdańsk, 80-309 Gdańsk, at Aleja Grunwaldzka nr 411, are exercised pursuant to the GDPR and the Data Protection Act of 10 May 2018 (i.e. Polish Journal of Laws of 2018, item 1000, as amended), hereinafter referred to as the “DPA,” in relation to such data as you may entrust as the Site User based on your consent in the form of a declaration (legal grounds indicated, inter alia, in item 2 above).

 

For necessary and indispensable purposes justified by law, the Controller is authorised to entrust personal data to public administration bodies, only in cases where such entrustment of data results from a legal obligation to which the Controller is subject, or is necessary for the performance of a task carried out in the public interest or in the exercise of public authority.

 

If the processing is necessary within the framework of the legitimate interests of the Controller, we ensure that your interests and fundamental rights and freedoms will prevail.

 

Only with your consent will we process your personal data whose legal grounds for processing are not indicated herein (additional legal grounds for processing).

 

How long do we keep your personal data?

The Controller may store your personal data for no longer than two (2) years after you register on the website.

In the event that you are employed through this website, your personal data will be stored for a longer period in order to comply with legal provisions.

 

Do we share your personal data with other recipients?

As a leading company, Grupa Progres Sp. z o. o. processes and entrusts your personal data to its subsidiaries, personally and equity-affiliated companies, i.e. Progres HR Poland Sp. z o. o., Progres Sp. o. o., Progres HR International Sp. z o.o., Progres Advanced Solutions Sp. z o. o.

 

In each and every case, service users will be contractually obliged to maintain the confidentiality of your personal data and to respect your privacy. They will only have access to the data they need to discharge their duties and provide their services.

 

As regards other entities, entrusting and processing your personal data will only take place, due to a legitimate need of the controller, in accordance with applicable Polish law, in particular:

 

for the provision of services on behalf of Grupa Progres Sp. z o. o. and its subsidiaries, including but not limited to the performance of administrative and operational work in order to improve and support services provided; provision and improvement of hosting and support of IT systems; provision of services related to financial and management consultancy;

to cooperating entities or field offices of Grupa Progres Sp. z o.o. and its subsidiaries, located within the European Union or beyond, in cases necessary and indispensable in relation to rendering services on your behalf;

clients of Grupa Progres Sp. z o.o. and its subsidiaries, responsible for the recruitment process or offering jobs or projects that may be of interest to you or interested in your application for a specific position;

Clients/potential employers must comply with contractual and other confidentiality obligations in relation to such data as may be provided;

to governmental authorities, state supervision authorities, law enforcement authorities, including the police, if we, as the Controllers, are obliged to make such data available.

 

 

Do we process your personal data by automated means?

Yes, however, it does not occur and is not applied every time. We use automated systems/processes and automated decision-making (e.g. profiling) as we strive to provide the best services.

 

Among other things, we carry out automated searches for lists of candidates and job applicants, inputting automated criteria that take into account availability, skills, rates and, in some cases, feedback provided to us by clients to produce a shortlist that includes a ranked list of candidates who most closely meet the client’s requirements.

 

Do we transfer your personal data outside the European Union?

 

As a rule, the Controller does not transfer or process your personal data outside the European Union, including outside Poland.

 

The statement indicated in the sentence above will change when a quotation is made in relation to recruitment for overseas clients. In this case, personal data will be entrusted to the client indicated in the respective quotation or to a foreign entity/branch subordinate to the specified entity. Under such circumstances, your data may be transferred and processed in one or more countries in the European Union or beyond.

 

When your personal data is transferred to countries outside the European Union, these will be countries which, in the opinion of the European Commission, provide a sufficient level of data protection or where Grupa Progres Sp. z o.o. or its subsidiary has implemented sufficient protection to ensure the security of your personal data and privacy.

 

The rights of an individual, i.e. the Candidate, who is the Site User.

right to access personal data and to receive a copy thereof;

right to request confirmation as to whether we are processing any personal data of yours;

right to make changes to personal data and to update or correct it;

right to erase personal data (known as the right to be forgotten),

right to restrict personal data (in selected cases).

A request should then be made to the Controller to assess whether this is justified. In the event that the request is lawful, the Controller will delete this data without undue delay. Note that in this case the provision of services will be discontinued;

 

right to lodge a complaint with the Data Protection Officer, e-mail contact: iod@grupaprogres.pl, postal address: Al. Grunwaldzka 411, 80 – 309 Gdańsk.

right to object to the President of the Office for the Protection of Personal Data, which is the supervisory authority.

Objections can be filed to the processing of personal data and direct marketing, including profiling, in each case on a legitimate basis;

 

right to withdraw consent for personal data processing. The withdrawal of such a consent does not affect the lawfulness of processing carried out under the consent prior to its withdrawal if your personal data is processed under the consent or for the performance of an agreement.

Contact the Personal Data Controller. Any questions can be sent to the following e-mail address: iod@grupaprogres.pl and directly to: Al. Grunwaldzka No. 411, 80-309 Gdańsk, with the postscript “concerning personal data”.

Any questions will be replied to as soon as possible.