In fulfilment of our obligation under Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation), referred to as GDPR, we wish to inform you about our processing of the personal data provided by you and the principles of said processing. Personal Data Controller. Your personal data will be controlled by individual KRUK Group companies, depending on the recruitment advertisement to which you have applied or for which you have given your consent to the processing of your data for specific purposes. These may include:
KRUK S.A., with its registered office in Wrocław (51-116), ul. Wołowska 8 Kancelaria Prawna RAVEN P. Krupa sp.k with its registered office in Wrocław (51-116), ul. Wołowska 8, KRUK TFI S.A., with its registered office in Wrocław (51-116), ul. Wołowska 8 Novum Finance sp. z o.o., with its registered office in Wrocław (51-116), ul. Wołowska InvestCapital Ltd The Hub, Suite E101 Triq Sant’ Andrija SGN 1612 San Gwann, Malta
Contact to Data Protection Officer
Each of the aforementioned Controllers has appointed a Data Protection Officer whom you may contact for all matters relating to the processing of your personal data and your pertinent rights. In matters related to the recruitment process conducted by KRUK S.A. as a controller or processor, please contact the Data Protection Officer at KRUK S.A. ul. Wołowska 8, 51-116 Wrocław, e-mail: dpo@kruksa.pl.
Purpose of Personal Data Processing
We process all personal data that you provide to us in order to carry out the recruitment process for the position you have chosen. The personal data that we process in this process are: name and surname, telephone number, e-mail address, place of residence, education, professional experience and skills.
Other personal data (e.g. image, additional information included in the CV or cover letter) will be processed on the basis of voluntary consent, which you expressed by sending us your recruitment application. Providing this additional data does not affect your possibility of participating in the recruitment process.
Your personal data will be processed in accordance with applicable European Union law and local Maltese law on the protection of personal data, in particular with the provisions of the GDPR and Maltese data protection legislation. The legal basis for processing your personal data is Article 6(1)(a) and (b) GDPR, i.e. your consent and taking action at your request before entering into a contract.
If you have also agreed to participate in future recruitment processes, your data will be processed for the purpose of your participation in possible future recruitment processes for the position you have selected or another similar position at the KRUK Group companies, and the basis for processing your personal data is Article 6(1)(a) GDPR. If you have given us your consent (Article 6(1)(a) GDPR) as part of the recruitment processes in which you participate, we may provide you with an email address and ask you to complete a short survey concerning your satisfaction with the recruitment process (Candidate Experience).
Recipients of Personal Data
Your data may be made available to entities supporting our activities, such as group companies, entities providing legal and accounting services, telecommunication operators, entities providing postal and courier services, entities supporting our IT infrastructure, our consultants or auditors and law enforcement authorities, as well as other authorities and entities, if the obligation to provide data results from legal regulations.
Personal Data Retention Period
Your personal data will be processed for the duration of the recruitment process you have chosen. Additionally, if you have also consented to participate in future recruitments, your data will be processed by us for a period of 18 months from the date you submit your application and consent. However, in the case of your personal data processed solely on the basis of your consent - for the duration of the recruitment process you have chosen, or for a shorter period if you withdraw your consent to its processing before its completion. The processing of your other personal data, which you have provided to us in your application documents, is based on your consent and is voluntary, i.e. you can withdraw it at any time (e.g. by sending an e-mail to rekrutacja2@kruksa.pl or by post to the Recruitment Department KRUK S. A., Ul. Wołowska 8, 51-116 Wrocław). Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal. If you have agreed to participate in the satisfaction survey your personal data will be processed until we close the recruitment process to which the survey relates.
Under the GDPR You Have the Following Rights: receive information regarding our processing of your data and a copy of it (Article 15 GDPR). rectify data when it is incorrect, e.g. outdated or incomplete (Article 16 GDPR). delete data (“right to be forgotten"), in the situations described in Article 17 GDPR. restrict the processing of data (Article 18 GDPR). transfer the personal data you have provided to another data controller (Article 20 GDPR) object to the processing of personal data (request to stop processing personal data, Article 21 GDPR). file a complaint with the data protection supervisory authority, i.e. President of the Office for the Protection of Personal Data (Article 77 GDPR) If you wish to exercise the above rights you may submit a request to us via: e-mail to: rekrutacja2@kruksa.pl; by post to the Recruitment Department, KRUK S.A., ul. Wołowska 8, 51-116 Wrocław
Profiling and Automated Decision Making
Your personal data will not be subject to automated decision making, including profiling.
Transfers of Data outside the European Economic Area (EEA)
We use suppliers and partners outside the EEA and transfers of personal data to countries outside the EEA are therefore possible. Such transfer of personal data may take place on the basis of a decision stating the appropriate level of protection or subject to appropriate safeguards, Art. 45, 46 GDPR.
