RODO

Information clause for employees and applicants for employment

In connection with the implementation of the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016. (Official Journal of the EU L 119 of 04.05.2016) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC, I inform you that:

1) The administrator of your personal data is the Foundation Centre for Business Solutions based in Lublin, 13 Grenadierów Street, 20-331 Lublin, e-mail contact: kontakt@crb.lublin.pl.

2) Contact the Personal Data Administrator: iod@crb.lublin.pl.

3) Your personal data, will be processed for purposes related to taking, at your request, actions aimed at establishing cooperation in the provision of services/employment, for employment-related purposes and for the purpose of fulfilling the employer's obligations under the law, in particular Article 22.1 , Article 94 of the Labour Code and other provisions of the labour law (Article 6(1)(b) and (c) of the General Data Protection Regulation of 27 April 2016), including:

a/ for the recruitment procedure;

b/ for the purpose of registering you and your family members for social insurance pursuant to Article 36 of the Social Insurance Act;

c/ for the purpose of enrolling you and your family members in health insurance under the terms of the Act on health care services financed from public funds;

d/ for the purpose of sending you for initial, control and periodic examinations and other health services to the occupational health unit, on the basis of Article 229 of the Labour Code and Article 12 of the Occupational Health Service Act;

e/ for the purpose of keeping your personal file and other documentation in matters related to the employment relationship, in accordance with the principles set out in the Regulation of the Minister of Labour and Social Policy on the scope of keeping documentation by employers in matters related to the employment relationship and the manner of keeping employee personal files;

f/ for purposes related to the provision of occupational health and safety, the fulfilment of obligations under health and safety legislation (including training), the management of accidents at work, as well as accidents on the way from home to work and from work to home, and the diagnosis of occupational disease pursuant to Articles 234-235 of the Labour Code;

g/ in order to prevent mobbing and discrimination on the basis of Article 94 para. 2 b and 94.3 of the Labour Code;

h/ for the purpose of responding to letters, requests, enquiries and requests for access to employee files that come from legally authorised public authorities or from entities authorised by you in this respect;

i/ for the payment of salaries and the settlement of other payments and costs related to employment, including tax settlements, as well as for public law settlements with the US, ZUS, PFRON and other public authorities;

4) In addition, the controller may process your personal data in order to comply with legal obligations incumbent on the controller in connection with the subject matter of its educational/training, project activities (Article 6(1)(c) of the General Data Protection Regulation of 27 April 2016), including: related to reporting to public authorities, including supervisory authorities.

5) In addition, in certain situations it is or may be necessary to process your data for purposes other than those indicated above, which are necessary for the pursuit of the legitimate interests of the controller (Article 6(1)(f) of the General Data Protection Regulation of 27 April 2016), in particular:

a/ for the purposes of IT support and ensuring IT and information security at the administrator, including in particular the management of mobile devices , administration of access and rights to systems and applications;

b/ for the purposes of ensuring the physical security of the Foundation, including internal and external video surveillance and the recording of persons entering and leaving;

c/ where applicable, for the purposes of litigation, proceedings before public authorities and other proceedings, including the investigation and defence of claims;

d/ where applicable , for purposes related to cooperation with suppliers, contractors, as well as for purposes related to the organisation of and participation in training courses, competitions, conferences, participation in events and events, as well as the statutory activities of the administrator;

6) In cases other than those indicated in points. 3), 4) and 5) above, your personal data will only be processed on the basis of your previously given consent within the scope and purpose specified in the content of the consent.

7) Your personal data will be processed for the period necessary for the purposes indicated in para. 3), 4) and 5) above for the purposes indicated, i.e. in the case of recruitment - until the end of the recruitment, in terms of the performance of the contract concluded by you with the controller, for the period until its completion, and after that for the period and to the extent required by law or for the controller's legitimate interest in the scope indicated in pt. 5) above, and if you have given your consent to the processing of your data (after the termination or expiry of the contract), your personal data will be processed until you withdraw that consent.

8) You have the right to request from the controller:

a/ access to personal data, including the right to obtain a copy of that data,
b/ the right to rectification,
c/ the right to restrict data processing where:
- the data subject questions the accuracy of the personal data,
- the processing is unlawful and the data subject objects to the erasure of the data by requesting instead that the data be restricted,
- the controller no longer needs the data for its purposes, but the data subject needs them for the establishment, defence or assertion of claims,
d/ the right to withdraw consent (to the extent that you have given your consent to the processing of personal data. Withdrawal of consent does not affect the lawfulness of data processing carried out on the basis of consent before its withdrawal),
e/ the right to object to the processing of personal data where the processing of personal data is based on the basis of necessity for purposes arising from a legitimate interest of the controller,
f/ the right to request the erasure of personal data (the so-called Right to be Forgotten) in the event that:
- the data are no longer necessary for the purposes for which they were collected or otherwise processed,
- the data subject has objected to the processing,
- the data subject has withdrawn the consent on which the processing is based and there is no other legal basis for the processing,
- data are processed unlawfully,
- data must be deleted in order to comply with a legal obligation.

9) You have the right to lodge a complaint with the competent supervisory authority, i.e. the President of the Office for Personal Data Protection.

10) Providing your personal data is a condition for conducting the recruitment process, a condition for concluding and performing a contract between you and the controller, results from the performance of duties resulting from the aforementioned legal regulations or is necessary for the performance of purposes resulting from the legally justified interests of the controller described above . Your failure to provide all the required personal data may, depending on the circumstances, constitute an obstacle or a hindrance to the conclusion of the contract and the provision of services. The provision of data other than those required by law is voluntary. To the extent that personal data are collected on the basis of consent, the provision of personal data is voluntary.

11) In connection with the processing of your personal data for the purposes indicated in points. 3), 4) and 5) above, your personal data may be made available to the following recipients or categories of recipients:

- public authorities and entities performing public tasks or acting on commission of public authorities, to the extent and for the purposes arising from the provisions of law, (e.g.: PIP, US, ZUS, occupational health services, Intermediate Bodies and Implementing Authorities for projects co-financed from public sources, e.g. Provincial Labour Offices, Marshall Offices, etc.): Provincial Labour Offices, Marshal Offices, etc.),
- the administrator's clients, suppliers, contractors and third parties in their relationship with the administrator to the extent and for the purpose necessary to carry out the obligations arising from the employment relationship, including for contact purposes, on behalf of and for the administrator;
- entities that support the controller in its business processes, including entities that process personal data on behalf of the controller, so-called Data Processors.

Information clause on the processing of personal data of contractors/customers

Pursuant to Article 13(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter: RODO) (Official Journal of the EU L119/1), we inform you that:

1. the administrator of your personal data is the Foundation Centre for Business Solutions based in Lublin, 13 Grenadierów Street, 20-331 Lublin, e-mail contact at: kontakt@crb.lublin.pl.

2 The controller has appointed a personal data controller and can be contacted by e-mail iod@crb.lublin.pl.

3. your personal data will be processed in accordance with the RODO for:
a) the performance of the contract concluded with you pursuant to Article 6(1)(b) of the DPA,
b) for the Administrator to comply with its legal obligations pursuant to Article 6(1)(c) of the DPA insofar as this is provided for in specific legislation,
c) to fulfil the legitimate interests of the Administrator in accordance with Article 6(1)(f) of the DPA, i.e. for the establishment, defence or assertion of potential claims.

The controller processes the following categories of your personal data: name including first name and surname (including business name), address including city, postal code, street, premises number, NIP (possibly PESEL), e - mail address and telephone.

5 The recipients of your personal data will be persons authorised by the Controller, public administration bodies and entities processing personal data on behalf of the Controller.

6. your personal data will not be transferred to a third country.

7. your personal data processed for the purpose indicated in:
a) point 3 a) will be kept for the duration and performance of the contract concluded with you,
(b) point 3(b) will be retained for the period provided for in the specific legislation,
(c) point 3(c) will be kept for the period necessary to establish, defend or assert claims.

8 You have the right to request from the Controller access to personal data concerning you, rectification, erasure, restriction of processing, data portability and the right to object.

(9) You have the right to lodge a complaint with the President of the Office for the Protection of Personal Data if you consider that the processing of your personal data by the Controller violates the provisions on the protection of personal data.

10. the provision of the personal data referred to in point 3 is voluntary but necessary for the performance of the concluded contract, and their failure to do so will prevent the performance of the concluded contract.

11. the processing of your data will not be subject to automated decision-making, including profiling as referred to in Article 22(1) and (4) of the RODO.