1.    Data Administrator

In accordance with Article 13 of general data protection regulation (GDPR) from 27th of April 2016 (OJ L 119, 04.05.2016) we inform that the administrator of candidates' personal data is FIXIT SA with its registered office at Nad Serafą 56a Street in Cracow, 30-864, e-mail: biuro@fixit.pl. In matters related to personal data one can contact the appointed Data Protection Officer, by e-mail: iod@fixit.pl or by writing to the correspondence address of FIXIT SA, Nad Serafą 56a Street, 30-864 Cracow.

2.    The purpose, legal basis and retention period of personal data

The personal data of candidates will be processed for recruitment purposes only:

1)    to the position for which the candidate applies, for the period necessary to conduct the recruitment process and to identify the candidate, according to the Labour Code (Article 6(1)(c) of the GDPR), and to the rest within any remaining scope based on the candidate's agreement expressed by a clear confirmatory action, consisting on including this data in the application declaration and sending them to the administrator (Article 6(1)(a) in Article 4(11) of the GDPR), until the job offer is accepted or rejected by a chosen candidate, and then for 6 months to defend against possible claims.

2)    if the candidate gives a separate voluntary agreement for processing his or her personal data for the purposes of further recruitment processes by making an appropriate statement in his or her application declaration (Article 6(1)(a) of the GDPR), also for the purposes of further recruitment processes for 1 year. The consent given may be withdrawn at any time without prejudice to the lawfulness of processing prior to their revocation.

To do this, please include the following in your job posting:

„I agree to the processing of my personal data included in my enrollment application by FIXIT SA with its registered office at Nad Serafą 56a Street in Cracow, 30-864, for the purposes of further recruitment processes”

3. Data recipients

1.    Personal information is not shared with other administrators.

2.    The personal data of candidates may be disclosed to processors on instruction and on behalf of the administrator in order to provide services, e.g. ICT services, such as hosting, provision or maintenance of information systems, recruitment services.

4. The rights of the data subject

1. On the basis of GDPR the data subject is entitled to: 

1)    access - obtain confirmation from the administrator that his or her personal data is being processed; if the data on a person is processed, he or she is entitled to access them and obtain the following information: about the purpose of processing, categories of personal data, recipients or categories of the recipients to whom the data has been or will be disclosed, the period of storage or the criteria for fixing the data, the right to request rectification, erasure or restriction of the processed personal data to the data subject, and to object to such processing (article 15 GDPR);

2)    receive a copy of the data – receive a copy of the processed data, whereby the first copy is complimentary, and the administrator may charge fee in a reasonable amount for subsequent copies which is based on its administrative costs (Article 7(3) GDPR);

3)    rectification - request rectification of personal data that are not correct or complement incomplete data (Article 16 GDPR);

4)    remove the data – request removing his or her personal data, if the administrator has no longer a legal basis for processing them or if the data is no longer essential for the purpose of processing (Article 17 GDPR);

5)    restriction of processing – request restriction of processing the personal data (Article 18 GDPR), when:

a)    the data subject questions the accuracy of the personal data – for a period of time that allows the administrator to verify the accuracy of this data,

b)    processing is unlawful, and the subject objects to their removal, requiring their use to be restricted,

c)    administrator does not need the data anymore, but they are needed by the data subject to establish, pursue or defend claims,

d)    he data subject objected to the processing - until it is determined whether the legitimate grounds on the part of the administrator are overriding the grounds of the subject's objecting;

6)    transfer the data – receive the provided personal data in a structured, widely used, machine-readable format

and request that this data be transferred to another administrator,

if the data are processed by consent of the data subject or a concluded agreement,

and if the data is processed by automated means (Article 20 GDPR);

7)    objection - object to the processing of the personal data for legitimate administrator purposes, for reasons of particular circumstances, including profiling; the administrator will then assess the existence of valid legitimate grounds for processing, superior to the interests, rights and freedoms of the data subjects, or grounds for the establishment, recovery or defense of claims. If, in accordance with the assessment, the interests of the data subject are concerned more important than the interests of the administrator, the administrator will cease processing for these purposes (Article 21 GDPR);

8)    withdraw consent at any time and without giving any reason but the processing of personal data made prior to the withdrawal of consent will continue to be lawful; if you opt out of consent, the administrator will stop processing your personal data for the purpose for which the consent was given.

2. To exercise the above rights, the data subject should contact the administrator using provided contact data and inform him which right and to what extent he or she wants to exercise.

5. Right to lodge a complaint 

The data subject has the right to lodge a complaint with the supervisory authority, in Poland the President of the Office for the Protection of Personal Data with his registered office in Warsaw, Stawki 2 Street, whom one can contact by:

1)    writing: Stawki 2 Street, 00-193 Warsaw;

2)    e-mail available on the page: https://www.uodo.gov.pl/pl/ p/kontakt;

3)    phone: (22) 531 03 00.