GDPR information notice

1. Data controller

The controller of your personal data is VIKTORIA V-GROUP SP. Z O.O., registered office at ul. 55 Pułku Piechoty 34, 64-100 Leszno, Poland, entered in the register of employment agencies under KRAZ no. 25466 (the "Controller"). Contact: biuro@viktoriagroup.pl, tel. +48 721 003 003.

2. Contact for personal data matters

The Controller has not appointed a Data Protection Officer. For any matters concerning the processing of personal data, you may contact the Controller directly at biuro@viktoriagroup.pl.

3. Purpose and legal basis for processing

If you are a job candidate:

• carrying out the recruitment process and presenting a job offer — Art. 6(1)(b) GDPR (steps prior to entering into a contract),
• processing the data contained in a submitted CV and participation in future recruitment processes — Art. 6(1)(a) GDPR (consent),
• fulfilling obligations related to legalising the stay and work of foreign nationals — Art. 6(1)(c) GDPR (legal obligation).

If you are an employer or represent a company:

• presenting a cooperation offer and entering into a contract — Art. 6(1)(b) GDPR,
• conducting correspondence and handling the enquiry — Art. 6(1)(f) GDPR (the Controller's legitimate interest).

4. Recipients of data

Data may be transferred to entities providing hosting and IT services and — for the purpose of carrying out recruitment — to employers for whom we conduct recruitment, only to the extent necessary to present the candidacy.

5. Transfer of data outside the EEA

Personal data is not transferred to third countries (outside the European Economic Area) or to international organisations.

6. Data retention period

Candidate data is kept for the duration of the recruitment process and for 12 months afterwards, or, where consent to participate in future recruitment processes is given, for up to 3 years. Data of employers and contact persons is kept for the duration of the cooperation and for the limitation period of any potential claims.

7. Your rights

You have the right to: access your data, rectify it, erase it, restrict its processing, data portability, object to processing, and withdraw consent at any time without affecting the lawfulness of prior processing. You also have the right to lodge a complaint with the President of the Personal Data Protection Office.

8. Voluntary nature of providing data

Providing data is voluntary but necessary to take part in the recruitment process, receive a job offer, or receive a response to an enquiry. Refusing to provide data may prevent these purposes from being fulfilled.

9. Automated decision-making

The Controller does not make decisions in an automated manner, and does not apply profiling within the meaning of Art. 22 GDPR.