PRIVACY POLICY

Go back

PRIVACY POLICY

fulfilling the disclosure duty under Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC

________________________________________________

WBS sp. z o.o.

  1. Grochowa 7, 30-731 Kraków

Tax Identification Number [Numer Identyfikacji Podatkowej, NIP]: 520732982 | National Official Business Register Number [REGON]: 6793229136

Respecting your privacy and ensuring that you know how your personal data is processed, we would like to present a set of key information related to EU Regulation 2016/679, known as the General Data Protection Regulation (“GDPR“)

 

Recruitment clause

PERSONAL DATA CONTROLLER

The controller of your personal data is WBS Sp. z o.o., with its registered office at ul. Grochowa 7, 30-731 Kraków, Tax Identification Number [Numer Identyfikacji Podatkowej, NIP]: 520732982, National Official Business Register Number [REGON] 6793229136 (hereinafter: Company), e-mail contact: wbs@wbspraca.pl.

PURPOSES, LEGAL GROUNDS AND DURATION OF DATA PROCESSING

Please be informed that your personal data will be processed for the following purposes:

  1. selection of candidates for vacancies in the recruitment process based on:
    • provisions of the Labor Code with respect to the data set forth under Article 221 § 1 and § 2 of the Labor Code, i.e. Article 6 section 1 letter c of the GDPR;
    • your consent granted by means of action (Article 6 section 1 letter a of the GDPR) if in your application you provide data that exceeds the scope of data specified in the Labor Code.
  2. building a database of job offers from candidates for future recruitment processes on the basis of your consent to participate in future recruitment processes (Article 6 section 1 letter a of the GDPR)

In addition, we ask you not to disclose your health status in the submitted application, nor attach any additional documents indicating your health status. However, if you provide us with this information, the Company will not process your application in this regard and will anonymize or delete such data.

DURATION OF PERSONAL DATA PROCESSING

Your personal data will be processed for the following period:

  1. personal data processed for the purpose of selecting a candidate for a vacancy as part of a current recruitment process will be processed until the end of the recruitment process, after which the personal data will be deleted;
  2. personal data processed for the purpose of building a database of job offers from candidates for future recruitment processes will be processed until the candidate’s consent is withdrawn, however for no longer than 12 months from the moment the consent is given, and after this time even though the consent is not withdrawn, the personal data will be deleted.

 CATEGORIES OF DATA RECIPIENTS

Recipients of data may include entities in the following categories:

  • IT and hosting vendors providing email and website services, acting upon the order of the controller;
  • entities that provide cloud solutions for the Company’s databases and management;
  • postal service providers acting upon the order of the controller.

YOUR RIGHTS

As we process your personal data, you have the right to:

  1. request access to your personal data,
  2. request rectification of your personal data,
  3. request deletion or restriction of processing of your personal data,
  4. transfer your personal data to another controller (where data is processed on the basis of consent);
  5. withdraw consent at any time without affecting the lawfulness of the processing carried out on the basis of consent before its withdrawal. Consent may be withdrawn in person at the Company’s registered office (ul. Grochowa 7, Cracow), by mail to the Company’s registered office address or electronically to the Company’s e-mail address:
    wbs@wbspraca.pl.

RIGHT TO FILE A COMPLAINT

If you believe that your personal data is being processed in violation of the requirements of the law, you have the right to file a complaint with the supervisory authority, which is the President of the Office for Personal Data Protection (ul. Stawki 2, 00-193 Warsaw, https://www.uodo.gov.pl/).

 

INFORMATION AS TO THE MANDATORY OR VOLUNTARY NATURE OF PROVIDING DATA AND THE CONSEQUENCES OF FAILING TO PROVIDE DATA

Provision of the personal data indicated in the Labor Code is a legal requirement. Your provision of other data is voluntary and failure to provide it will not have any negative consequences for the job candidate in the recruitment process.

 

Clause for persons who are potential counterparties for the Company

PERSONAL DATA CONTROLLER

The controller of your personal data is WBS Sp. z o.o., with its registered office at ul. Grochowa 7, 30-731 Kraków, Tax Identification Number [Numer Identyfikacji Podatkowej, NIP]: 520732982, National Official Business Register Number [REGON] 6793229136 (hereinafter: Company), e-mail contact: wbs@wbspraca.pl.

PURPOSES AND LEGAL GROUNDS FOR DATA PROCESSING

Please be informed that your personal data will be processed for the purpose of establishing a relationship with a potential counterparty or persons acting on behalf of potential counterparties, including the submission of offers
and requests for quotation, as well as conducting other activities meant to establish any business contacts on the basis of the controller’s legitimate interest – Article 6 section 1 letter f of the GDPR.

DURATION OF PERSONAL DATA PROCESSING

Your personal data will be processed until the termination of contacts with the potential counterparty, and once the original purpose for which they were collected has been fulfilled, they will be processed for the period of the statute of limitations for claims.

CATEGORIES OF DATA RECIPIENTS

Recipients of data may include entities in the following categories:

  • IT service vendors (including email hosting providers);
  • advocates, attorneys-at-law and other providers of consulting and legal services who cooperate with the controller;
  • business information bureaus;
  • postal and courier service providers acting upon the order of the Company.

YOUR RIGHTS

As we process your personal data, you have the right to:

  • request access to your personal data,
  • request rectification of your personal data,
  • request deletion or restriction of processing of your personal data.

RIGHT TO OBJECT

In addition, you have the right to object to the processing of your personal data in the cases specified under Article 21 of the GDPR.

RIGHT TO FILE A COMPLAINT

If you believe that your personal data is being processed in violation of the requirements of the law, you have the right to file a complaint with the supervisory authority, which is the President of the Office for Personal Data Protection (ul. Stawki 2, 00-193 Warsaw, https://www.uodo.gov.pl/).

INFORMATION AS TO THE MANDATORY OR VOLUNTARY NATURE OF PROVIDING DATA AND THE CONSEQUENCES OF FAILING TO PROVIDE DATA

Providing your personal data is voluntary, however, it is necessary for the Company to establish a relationship with a potential counterparty, and the consequence of non-disclosure of personal data will be the inability to establish cooperation.

 

Clause for Company Counterparties

PERSONAL DATA CONTROLLER

The controller of your personal data is WBS Sp. z o.o., with its registered office at ul. Grochowa 7, 30-731 Kraków, Tax Identification Number [Numer Identyfikacji Podatkowej, NIP]: 520732982, National Official Business Register Number [REGON] 6793229136 (hereinafter: Company), e-mail contact: wbs@wbspraca.pl.

PURPOSES AND LEGAL GROUNDS FOR PERSONAL DATA PROCESSING

Please be informed that your personal data will be processed for the following purposes:

  • to conclude and perform a contract, to establish and maintain a relationship with a counterparty represented by the person in question, under Article 6 section 1 letter b of the GDPR and Article 6 section 1 letter f of the GDPR, which is to pursue the conclusion and proper performance of a contract (in the case of legal entities);
  • to fulfill legal obligations incumbent on the controller in connection with the maintenance of accounting and tax records, under Article 6 section 1 letter c of the GDPR and arising from the Accounting Act of 29 September 1994, the Corporate Income Tax Act of 15 February 1992 and the Value Added Tax Act of 11 March 2016;
  • to assert and defend claims on the basis of the controller’s legitimate interest – Article 6 section 1 letter f of the GDPR;
  • to register correspondence related to the contract and respond to any correspondence received, as well as to send correspondence on the basis of the controller’s legitimate interest – Article 6 section 1 letter f of the GDPR.

DURATION OF PERSONAL DATA PROCESSING

Your personal data will be processed for a period of 5 years from the end of the calendar year in which the tax payment deadline has passed and for the duration of the period of limitation of claims.

CATEGORIES OF DATA RECIPIENTS

Recipients of data may include entities in the following categories:

  • advocates, attorneys-at-law and other providers of consulting and legal services who cooperate with the controller;
  • entities authorized under applicable law (including, but not limited to courts and state authorities);
  • business information bureaus;
  • IT and email hosting vendors acting upon the order of the controller;
  • entities providing postal and courier services acting upon the order of the controller;
  • entities providing accounting and bookkeeping services to the controller.

YOUR RIGHTS

As we process your personal data, you have the right to:

  1. request access to your personal data,
  2. request rectification of your personal data,
  3. request deletion or restriction of processing of your personal data,
  4. portability of personal data (which are processed under a contract).

RIGHT TO OBJECT

In addition, you have the right to object to the processing of your personal data in the cases specified under Article 21 of the GDPR.

RIGHT TO FILE A COMPLAINT

If you believe that your personal data is being processed in violation of the requirements of the law, you have the right to file a complaint with the supervisory authority, which is the President of the Office for Personal Data Protection (ul. Stawki 2, 00-193 Warsaw, https://www.uodo.gov.pl/).

INFORMATION AS TO THE MANDATORY OR VOLUNTARY NATURE OF PROVIDING DATA AND THE CONSEQUENCES OF FAILING TO PROVIDE DATA

With regard to the processing of personal data for the purpose of fulfilling legal obligations incumbent on the controller, the obligation to provide data is a statutory requirement. For other purposes, the provision of personal data is voluntary, but it is necessary for the conclusion and performance of the contract or the proper provision of services.

 

Clause for correspondents

PERSONAL DATA CONTROLLER

The controller of your personal data is WBS Sp. z o.o., with its registered office at ul. Grochowa 7, 30-731 Kraków, Tax Identification Number [Numer Identyfikacji Podatkowej, NIP]: 520732982, National Official Business Register Number [REGON] 6793229136 (hereinafter: Company), e-mail contact: wbs@wbspraca.pl.

PURPOSES AND LEGAL GROUNDS FOR DATA PROCESSING

Please be informed that your personal data will be processed for the following purposes:

  • registering outgoing and incoming correspondence and responding to any correspondence received, on the basis of the controller’s legitimate interest – Article 6 section 1 letter f of the GDPR;
  • to assert and defend claims on the basis of the controller’s legitimate interest – Article 6 section 1 letter f of the GDPR.

DURATION OF PERSONAL DATA PROCESSING

Your personal data will be processed until the matter that is the subject of the correspondence is settled and then for the period specified in the cooperation contract (in the case of correspondence concerning the contract) and for the period of pursuing the claims.

CATEGORIES OF DATA RECIPIENTS

Recipients of data may include entities in the following categories:

  • advocates, attorneys-at-law, notaries and other legal service providers cooperating with the controller;
  • entities authorized under applicable law (including, but not limited to courts and state authorities);
  • entities providing IT services (including email hosting providers), accounting and financial services, postal and courier services acting upon the order of the controller.

YOUR RIGHTS

As we process your personal data, you have the right to:

  • request access to your personal data,
  • request rectification of your personal data,
  • request deletion or restriction of processing of your personal data,

RIGHT TO OBJECT

In addition, you have the right to object to the processing of your personal data in the cases specified under Article 21 of the GDPR.

RIGHT TO FILE A COMPLAINT

If you believe that your personal data is being processed in violation of the requirements of the law, you have the right to file a complaint with the supervisory authority, which is the President of the Office for Personal Data Protection (ul. Stawki 2, 00-193 Warsaw, https://www.uodo.gov.pl/).

INFORMATION AS TO THE MANDATORY OR VOLUNTARY NATURE OF PROVIDING DATA AND THE CONSEQUENCES OF FAILING TO PROVIDE DATA

Provision of personal data is voluntary, however, it is necessary in order to register incoming correspondence and respond. If you do not provide personal data, it will not be possible to handle the matters that are the subject of correspondence.

WEBSITE COOKIES AND ANALYTICS

 

  1. General information
  1. This policy applies to the Website available at wbspraca.pl
  2. The Website operator and personal data Controller is WBS sp. z o.o. ul. Grochowa 7, 30-731 Kraków, Tax Identification Number [NIP]: 520732982
  3. The operator’s contact email address: wbs@wbspraca.pl.
  4. The Operator is the Controller of your personal data with respect to the data you voluntarily provide on the Website.
  5. The Website uses personal data for the following purposes:
    1. Handling inquiries sent via the form
    2. Performance of services ordered
    3. Presentation of an offer or information
  6. The Website acquires information about users and their behavior in the following way:
    1. By storing in the Operator’s systems data voluntarily provided by the user when they complete forms.
    2. By storing cookies on end devices.
  1. Selected data protection methods used by the Operator
  1. Log-in locations and personal data entered are protected in the transmission layer (SSL certificate). This ensures that personal data and log-in information that is entered on the website is encrypted at the User’s computer and can only be read on the target server.
  2. The Operator periodically changes their administrative passwords.
  3. In order to protect data, the Operator regularly makes back-up copies.
  4. An important element of data protection is the regular update of any software used by the Operator to process personal data, which specifically means regular updates of software components.
  1. Hosting
  1. The Website is hosted (technically maintained) on the operator’s servers: home.pl
  2. The hosting company keeps logs at the server level to ensure technical reliability. The following may be registered:
    1. resources specified by a URL identifier (addresses of the requested resources – pages, files);
    2. time of receiving an inquiry;
    3. time of sending a response;
    4. name of customer’s station – identified by HTTP protocol;
    5. information on errors which occurred during the completion of a HTTP transaction;
    6. URL address of the website previously visited by the user (referrer link) – if the Website was accessed via a link;
    7. information on user’s browser;
    8. IP address information;
    9. diagnostic information related to the process of self-ordering services through registration applets on the website,
    10. information related to the handling of e-mails addressed to the Operator and sent by the Operator.
  1. Your rights and additional information about how your data is used
  1. In certain situations, the Controller has the right to transfer your personal data to other recipients, if this is necessary to perform the contract concluded with you or to fulfill the obligations incumbent on the Controller. This involves such groups of recipients as:
    1. hosting company (in the form of entrustment);
    2. postal operators;
    3. authorized employees and associates, who use the data in order to achieve the purpose for which the website was setup;
    4. companies providing marketing services to the Controller.
  2. Your personal data will be processed by the Controller for a period no longer than is necessary for the purposes of activities set forth under separate regulations (such as accounting). Marketing data will not be processed for a period longer than 3 years.
  3. You have the right to request the following from the Controller:
    1. access to your personal data,
    2. rectification,
    3. deletion,
    4. restriction of processing,
    5. and data portability.
  4. You have the right to object to the processing your personal data, as indicated under Section 3.2, for the purpose of carrying out the legitimate interests pursued by the Controller, including profiling, whereby the right to object will not be exercised if there are valid legitimate grounds for the processing that override your interests, rights and freedoms, including, but not limited to the establishment, assertion or defense of claims.
  5. You can complain about the Controller’s actions to the President of the Office for Personal Data Protection, ul. Stawki 2, 00-193 Warsaw.
  6. Provision of personal data is voluntary, but necessary to operate the Website.
  7. You may be subject to automated decision-making, including profiling for the purpose of providing services under the concluded contract and for the purpose of direct marketing by the Controller.
  8. Personal data is not transferred to third countries as defined under personal data protection laws. This means that we do not send them outside the European Union.
  1. Information in the forms
  1. The Website collects information voluntarily submitted by the User, including personal data, if such data is submitted.
  2. The Website may store the information concerning connection parameters (timestamp, IP address).
  3. The Website, in some cases, can store information which facilitates connecting data provided in the form with the e-mail address of the user completing the form. In such case, the user’s e-mail address appears within the form webpage URL address.
  4. The data provided in a form is processed as per the function of the specific form, e.g. to handle a service report and/or trade contact, register a service etc. Every time the description of the form provides clear information as to its purpose.
  1. Administrator logs
  1. Information concerning the users’ behavior on the website may be logged. This data is used for the purpose of website administration.
  1. Relevant marketing techniques
  1. The Operator uses statistical analysis of webpage traffic through Google Analytics (Google Inc. registered office in the USA). The Operator does not provide any personal data to this service operator, only anonymized information. The Website is based on the use of cookies on the user’s end device. As for the information on the user’s preferences collected by the Google advertising network, the user may view and edit the information resulting from cookies using the tool: https://www.google.com/ads/preferences/
  2. The Operator uses remarketing techniques, that allow matching advertising messages to the user’s behavior on the page, which may look as if the user’s personal data is used to track the user, however, in practice no personal data is provided to advertisement operators by the Controller. The technological requirement for such actions is enabling cookies.
  3. The operator uses Facebook Pixel. This technology lets Facebook (Facebook Inc. registered office in the USA) know that a given person registered on Facebook is using the Website. For this purpose, it relies on data for which they are the sole administrator and the Operator does not provide Facebook with any additional personal data. The Website is based on the use of cookies on the user’s end device.
  4. The Operator uses a solution that examines the behavior of users on the page by heat mapping and recording behavior on the page. Such information is anonymized before being sent to the service operator, so that they do not know what individual is concerned. Especially no entered passwords or personal data are recorded.
  5. The Operator uses a solution to automate the operations of the Website in relation to users, for example sending an email to the user, after they visit a specific subpage, as long as they expressed consent to receiving commercial correspondence from the Operator.
  1. Cookie statement
  1. The Website uses cookies.
  2. Cookies are IT data, in particular text files, which are stored on the end device of a Website User and intended to be used at the individual pages that make up the Website. Cookies usually include the name of the website they originate from, end device storage time and a unique number.
  3. The Website operator is the entity placing cookies at the Website User’s end device and accessing them.
  4. Cookies are used for the following purposes:
    1. maintaining Website user’s session (after logging) thanks to which the user does not have to reenter their login and password on each page of the Website;
    2. achieving the objectives set forth above under „Relevant marketing techniques”;
  5. Two basic types of cookies are used in the Website: session cookies and persistent cookies. Session cookies are temporary files which are stored at the User’s end device until the User logs out, leaves the website or shuts down the software (web browser). Persistent cookies are stored at User’s end device for a specified period determined in the cookies parameters or until they are deleted by the User.
  6. Software for browsing websites (a web browser) usually allows for storing cookies at User’s end device by default. Website Users may change those settings. Web browsers allow to delete cookies. Automatic blocking of cookies is also possible. For detailed information on this, see “help” or web browser documentation.
  7. Restriction of the use of cookies may impact certain functions available on the individual pages that make up the Website.
  8. Cookies placed on the Website User’s end device may also be used by entities cooperating with the Website Operator, including, but not limited to the following companies: Google (Google Inc. based in the USA), Facebook (Facebook Inc. based in the USA), Twitter (Twitter Inc. based in the USA).
  1. Managing your cookies – how to opt in and out in practice?
  1. If the user does not wish to receive cookies, they may change their browser settings. However, disabling cookies necessary for authentication processes, safety and maintaining user preferences may hinder and, in extreme cases, prevent the use of websites.
  2. To manage your cookie settings, select the web browser you are using from the list below and follow the instructions:

Mobile Devices:

Unsere Erfahrungen:
über
0
Rekrutierungen
über
0
Beschäftigte
über
0
Audits
über
0
Optimierungen

Wir laden Sie zur Kontaktaufnahme ein, um unser Angebot ausführlich zu besprechen und es an Ihre Erwartungen anzupassen.

Anfrage schicken