Privacy policy for Develocraft sp. z o.o.
We are committed to ensuring and protecting the privacy of people whose personal data is processed by us as a result of running our business processes.
Information clause for business partners - PLInformation clause for candidates - PLInformation clause - whistleblow - PLPolicy for Reporting Breaches and Protecting Whistleblowers - PL/ENGReport Whistleblowers - PL formReport Whistleblowers - ENG formINFORMATION ABOUT THE CONTROLLER.
The Controller is Company Develocraft sp. z o.o. with the statutory seat at al.Grunwaldzka 472B, 80-309, Gdańsk, NIP 5842768945, REGON 369656677 entered into the Commercial Register of the National Court Register under KRS number 0000722252, Registry Court: District Court for Gdańsk-Północ in Gdańsk, 7th Commercial Division of the National Court Register.
You can contact us by sending a correspondence to the address of our headquarters: Develocraft sp. z o.o. al.Grunwaldzka 472B, 80-309, Gdańsk, Poland or by sending an email to iod@develocraft.com or by sending an e-mail to other contact addresses published on the website at develocraft.com.
INFORMATION ABOUT DATA PROTECTION OFFICER.
On the subject of personal data processing by the Company, you can contact our Data Protection Officer by sending an email to iod@develocraft.com or by sending correspondence to the address of our headquarters: Develocraft sp. z o.o. ; Data Protection Officer; al.Grunwaldzka 472B, 80-309, Gdańsk, Poland
INFORMATION ABOUT COMPLIANCE WITH THE LAW.
The processing of personal data is carried out primarily in accordance with the Regulation of the European Parliament and Council (EU) 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repeal of the Directive 95/46 / EC (RODO, Regulation 2016/679, general regulation on data protection), as well as other regulations of the European Union and the Republic of Poland.
INFORMATION ABOUT OBTAINING PERSONAL DATA.
The personal data of which we are the controller are obtained by us directly from people whom they concern or indirectly from other persons or entities. Personal data in relation to which the Data Administrator is Develocraft are processed primarily in connection with the provision of the service, i.e. the implementation of recruitment processes, including for the benefit of Partners. These data are processed using information systems, and in the case of obtaining documents using paper documents also in a manual manner.
The legal basis for the processing of this personal data is: candidate’s application in order to participate in the recruitment process. It is an initiating action and aimed at concluding a contract. Another basis for processing is a legally justified purpose, i.e. conducting analyzes based on documentation of people who take part in recruitment processes. In addition, the data may be processed based on the request of the data subject, before concluding the contract in the scope enabling contact with a given person and providing it with answers to questions about the services offered by Develocraft.
The personal data of the Candidates are also processed after the completion of the Service to the extent necessary to fulfill the obligations under the law and to investigate or prevent claims from both the Candidates and Partners as well as after granting appropriate consent for marketing Develocraft services. Personal data in relation to which Develocraft is a Processing Entity, i.e. an entity to which the entity submitting the Candidates as Data Administrator, entrusted the processing of personal data, is processed on the basis of the data processor agreement (DPA).
More detailed information on this topic can be found in the document: develocraft.com/information-clause. The personal data obtained by us may contain various categories of personal data necessary to perform a given process or the purpose of processing personal data.
Each time we collect your personal information, we will inform you in detail, through appropriate information clauses, on all aspects related to the processing of personal data collected for the purposes of the process, activity or purpose of personal data processing.
PERSONAL DATA OBTAINED DIRECTLY.
We may collect personal data from you directly in connection with the implementation of processes related to our business. Every time we start processing your personal data, obtained directly from you, we will carry out the information obligation.
This means that we will inform you of: (1) the Controller; (2) contact details of the Data Protection Officer; (3) the purposes of processing personal data; (4) reasons for the legality of personal data processing; (5) the legal basis for the processing of personal data; (6) intent to transfer personal data to a third country or an international organization; (7) appropriate or appropriate safeguards for personal data; (8) about the possibilities of obtaining a copy of the data or about the place where the data is made available; (9) the period during which personal data will be stored, and if this is not possible, the criteria for determining this period; (10) the right to request access to personal data, rectification, deletion or limitation of processing or the right to object to the processing, as well as the right to data transfer; (11) if the processing takes place on the basis of consent to the processing of personal data – information about the right to withdraw consent at any time; (12) the right to lodge a complaint with the supervisory authority; (13) whether the provision of personal data is a statutory or contractual requirement or a condition for the conclusion of a contract and whether you are obliged to provide it and what are the possible consequences of not providing the data; (14) automated decision-making, including profiling, including relevant information about the rules for taking them, and the significance and envisaged consequences of such processing for the data subject.
In the event that we plan to continue processing personal data for another purpose for which we have collected, we will inform you before such processing begins and we will provide all relevant information in this regard.
We will do our best to provide this information in clear and understandable language and to receive this information before sharing your personal information with us or in the shortest possible time after obtaining it and to have access to it permanently, regardless of whether your personal data will be obtained by us directly from you or indirectly.
More detailed information on the processing of personal data can be found in the relevant information clause.
PERSONAL DATA OBTAINED INDIRECTLY.
We may collect personal data indirectly in connection with the implementation of processes related to our business operations. In the event that we will obtain personal data from other people or entities, we will make sure that the information obligation has been or will be correctly fulfilled. Depending on the arrangements with a person or entity providing us with your personal data, you may receive from us or a person or entity providing us with personal information, including information about the source of your personal data.
We will do our best to provide this information in clear and understandable language and to receive this information before sharing your personal information with us or in the shortest possible time after obtaining it and to have access to it permanently, regardless of whether your personal data will be obtained by us directly from you or indirectly.
More detailed information on the processing of personal data can be found in the relevant information clause.
DATA OBTAINED AUTOMATICALLY.
While using our websites or communicating with electronic means of communication, we can also obtain data provided by your browser, your device you use or your telecommunications network operator.
These data primarily relate to the use of our websites and services and are used to monitor the interest in our offers, improve the solutions applied or match content and offers of products and services, as well as to ensure communication.
More detailed information on the processing of personal data obtained automatically can be found in the relevant information clause.
INFORMATION ABOUT THE PURPOSES OF PERSONAL DATA PROCESSING.
While using our websites or communicating with electronic means of communication, we can also obtain data provided by your browser, your device you use or your telecommunications network operator. These data primarily relate to the use of our websites and services and are used to monitor the interest in our offers, improve the solutions applied or match content and offers of products and services, as well as to ensure communication.
More detailed information on the processing of personal data obtained automatically can be found in the relevant information clause.
INFORMATION ON THE LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA.
We undertake to constantly monitor and regularly verify the premises of legality about the legal basis for the processing of personal data and to delete or anonymize personal data if there are no further reasons or grounds for the processing of personal data.
Every time we start processing your personal data, we will inform you about the premises that legalize the processing of personal data and about the laws that oblige us or authorize us to process your personal data. We will do our best to provide this information in clear and understandable language and to receive this information before sharing your personal information with us or in the shortest possible time after obtaining it and to have access to it permanently, regardless of whether your personal data will be obtained by us directly from you or indirectly.
Your personal data may be processed by us if: (1) you agree to the processing of personal data; (2) the processing of these data is necessary to conclude the contract to which you are a party or results from the actions we undertake prior to the conclusion of the contract at your express request; (3) the processing of these data is necessary to fulfill our legal obligations; (4) the processing of these data is necessary to protect your vital interests or another natural person; (5) the processing of these data is necessary for the performance of a task carried out in the public interest; (6) the processing of these data is necessary to achieve the objectives arising from our legitimate interests or the interest of a third party – except when your legitimate interests or rights and freedoms will be override. With regard to the legal basis for the processing of personal data, the provisions of European Union law and the provisions of the Republic of Poland shall apply.
You can find more detailed information on the grounds of legality and legal grounds for personal data processing in the relevant information clause.
INFORMATION ABOUT THE PERIOD OF PERSONAL DATA PROCESSING.
We are committed to constantly monitor and periodically verify the processing of personal data and to delete or anonymize personal data in accordance with the designated processing period.
Each time we start processing your personal data, we will inform you about the period in which we intend to process your personal data. We will do our best to provide this information in clear and understandable language and to receive this information before sharing your personal information with us or in the shortest possible time after obtaining it and to have access to it permanently, regardless of whether your personal data will be obtained by us directly from you or indirectly.
You can find more detailed information about the processing of personal data in the relevant information clause.
INFORMATION ABOUT RECIPIENTS OF PERSONAL DATA.
We are committed to constantly monitor and periodically verify recipients of personal data, i.e. entities to which personal data will be shared.
Every time we start processing your personal data, we will inform you about recipients or categories of recipients of your personal data. We will do our best to provide this information in clear and understandable language and to receive this information before sharing your personal information with us or in the shortest possible time after obtaining it and to have access to it permanently, regardless of whether your personal data will be obtained by us directly from you or indirectly. The sharing of personal data will take place only in cases and to the extent it will be necessary.
Your personal data may be made available to our employees, co-workers, subcontractors and our Data Protection Officer in situations when it will be necessary to perform the tasks provided for in law, internal procedures or contracts.
You can find more detailed information about recipients of personal data in the relevant information clause.
INFORMATION ON THE RIGHTS OF THE DATA SUBJECT.
We are committed to developing, implementing continuous monitoring and periodic verification of procedures for the implementation of the rights of data subjects, i.e. persons whose data relate to.
Every time we start processing your personal data, we will inform you about the rules of exercising your rights, in connection with the processing of your personal data by us. We will do our best to provide this information in clear and understandable language and to receive this information before sharing your personal information with us or in the shortest possible time after obtaining it and to have access to it permanently, regardless of whether your personal data will be obtained by us directly from you or indirectly.
Below we present general information on the ways and scope of implementation of basic rights that you have in connection with the processing of your personal data.
REPORTING REQUESTS TO EXERCISE THE RIGHTS OF THE DATA SUBJECT.
We provide all possible and available technical and organizational measures so that persons whose personal data we process can exercise their rights without any problems. Therefore, please send us any applications and requests regarding the implementation of rights to our email address office@develocraft.com.
In justified cases, due to the correct identification of a person, we may ask you for additional information or provide the necessary documents confirming your identity. The right to freely express or withdraw consent to the processing of data.
You have the right to express or withdraw your consent to the processing of personal data. In the event that your personal data is processed on the basis of your consent, we will provide you with the option of withdrawing it at any time. Your personal data may also be processed by us on a legally justified purpose, which is, among others, marketing of products and services of our own. In this case, we also allow you to withdraw consent to such action or to object to such action.
The withdrawal of consent will have an immediate effect from the moment of doing so and will not affect the processing of data that took place before its withdrawal. Withdrawal of consent does not entail any negative consequences for you, but it may prevent you from continuing to use the services or our websites in a specific manner.
INFORMATION ABOUT THE PERIOD OF PERSONAL DATA PROCESSING.
We are committed to constantly monitor and periodically verify the processing of personal data and to delete or anonymize personal data in accordance with the designated processing period.
Each time we start processing your personal data, we will inform you about the period in which we intend to process your personal data. We will do our best to provide this information in clear and understandable language and to receive this information before sharing your personal information with us or in the shortest possible time after obtaining it and to have access to it permanently, regardless of whether your personal data will be obtained by us directly from you or indirectly.
You can find more detailed information about the processing of personal data in the relevant information clause.
THE RIGHT TO ACCESS PERSONAL DATA.
You have the right to access personal data provided to us. We implement this right primarily through electronic means of communication, providing you with up-to-date information you have provided to us – which we currently have.
You can also get copies of information we have from us. In this case, we will provide you with a copy of the personal information you provide in a structured, commonly used, readable machine format. We do not charge a fee for preparing, developing and publishing the first copy of the data.
In the case of subsequent requests, we may charge you a fee resulting from the costs of preparing, developing and delivering this data. In this case, you will be informed about the amount of the fee before another copy of the data is prepared.
THE RIGHT TO CORRECT PERSONAL DATA.
You have the right to correct your personal data. We implement this right primarily through electronic means of communication, allowing you to provide information about the change of your personal data. In the event that it is impossible, you have the right to demand that we immediately correct the data or delete it.
THE RIGHT TO DELETE PERSONAL DATA.
You have the right to request removal of your personal data. We implement this right on the basis of a clear request to delete data. A request to delete personal data may result in discontinuance of the service or use of the tools and services of our trusted partners that we have provided.
You may exercise the right to delete data if: (a) personal data is no longer necessary for the purposes for which it was collected or otherwise processed; (b) you withdraw your consent to the processing of the data on which the processing is based and there is no other legal ground for further processing; (c) personal data have been processed unlawfully; (d) personal data must be erased in order to comply with the legal obligation provided for in European Union or European Union member country law.
Implementation of the right to request the deletion of personal data may, however, be limited if such processing is necessary to fulfill our legal obligation or to determine, assert or defend claims. The right to limit the processing of personal data.
You have the right to request a restriction to the processing of personal data. We implement this right on the basis of a clear request to limit processing with reasons.You can exercise the right to limit the processing of your personal data: (a) if you dispute the correctness of the personal data provided – for a period allowing to verify the correctness of the data in question; (b) the processing of personal data is unlawful, but you oppose the removal of your personal data; (c) the personal data we process is no longer necessary to achieve the purpose for which we have processed it, but you need it to establish, assert or defend against claims; (d) you object to the processing of personal data due to the special situation that has been indicated in the regulations on the protection of personal data.
The right to object to the processing of personal data. You have the right to object to the processing of your personal data. We implement this right on the basis of a clear objection to the processing of your data.
You may exercise the right to object to the processing of your personal data in a situation where this processing takes place in connection with the implementation of our legitimate interest – for example, marketing of products and own services.
THE RIGHT TO PERSONAL DATA PORTABILITY.
You have the right to make a request to transfer your personal data to another service provider. However, due to security reasons and in the absence of standards related to data portability, we are unable to meet such a request. In accordance with our policies, you can receive a copy of the personal information you provide us with. The right to submit a complaint to the supervisory body.
You have the right to submit a complaint related to the processing of your personal data to the supervisory authority at any time, i.e. to the President of the Personal Data Protection Office, ul. Stawki 2; 00-193 Warszawa; Polska.
We respect your privacy and we guarantee you the opportunity to exercise rights under the law regarding the processing of personal data. In order to avoid unnecessary disputes, before submitting such a complaint, we encourage you to contact our Data Protection Officer iod@develocraft.com or directly with our team office@develocraft.comLimitations related to the implementation of the rights of the personal data subject.
The aforementioned rights and the manner of their implementation may be subject to restrictions in justified cases. Such a situation will take place in the event that this limitation will result from the obligations indicated in the legal provisions to which we are obliged. In this case, we will provide you with relevant information along with the reasons for our decision.
You can find more detailed information about the implementation of the rights of personal data subjects in the relevant information clause.
INFORMATION ABOUT THE OBLIGATION TO DISCLOSE DATA.
We are committed to continuous monitoring and regular verification of the obligation to disclose personal data.
Every time we start processing your personal data, we will inform you about the voluntary or obligation to disclose your personal data and the consequences of failing to do so. We will do our best to provide this information in clear and understandable language and to receive this information before sharing your personal information with us or in the shortest possible time after obtaining it and to have access to it permanently, regardless of whether your personal data will be obtained by us directly from you or indirectly.
You can find more detailed information about the obligation or voluntary submission of personal data in the relevant information clause.
INFORMATION ABOUT AUTOMATED DATA PROCESSING.
We are committed to continuous monitoring and regular verification of the rules and techniques used for the automated processing of personal data.
Every time we start processing your personal data, we will inform you about the automated processing of personal data, in particular about automatic decision making, as well as about the importance and anticipated consequences of automated processing of personal data. We will do our best to provide this information in clear and understandable language and to receive this information before sharing your personal information with us or in the shortest possible time after obtaining it and to have access to it permanently, regardless of whether your personal data will be obtained by us directly from you or indirectly.
You can find more detailed information on the automated processing of personal data and on automated decision-making in the relevant information clause.
INFORMATION ABOUT PROFILING.
We are committed to continuous monitoring and regular verification of the rules and techniques used for the profiling based on personal data.
Each time we initiate the processing of your personal data, we will inform you about profiling based on personal data, in particular regarding the analysis or forecast of aspects relating to the effects of your work, economic situation, health, personal preferences, interests, credibility, behavior, location or information on the movement and the importance and anticipated consequences of such profiling. We will do our best to provide this information in clear and understandable language and to receive this information before sharing your personal information with us or in the shortest possible time after obtaining it and to have access to it permanently, regardless of whether your personal data will be obtained by us directly from you or indirectly.
You can find more detailed information on profiling based on personal data in the relevant information clause.
INFORMATION ABOUT COOKIES
The Website uses files called cookies. We obtain information about User, when he is using our Website. By not changing his browser settings, the User gives his consent to the Website’s use of cookies.
Cookies serve in particular to establish and remember the User’s preferences in order to adapt the content of the Website to those preferences, to supply statistical data on the traffic of Users on the internet, to identify the devices used by Users and their location, to display webpages adapted to the individual needs of Users allowing for the saving of settings selected by Users and for personalization of the interface, and also to improve the configurations of selected Website functions along with optimization of the services provided electronically by the Website.
Cookies are not harmful for the User’s device, and will not cause changes in the configuration of those devices nor in software installed on them. The User may change his web browser’s configurations at any time in order to prevent the storage of cookies on his computer’s hard drive. Detailed information can be obtained from the producers of web browsing software, usually within the software in a section titled “Internet options” or similar.
The User may delete cookies at any time by using the functions available in the web browser he is using.
The type of cookies and other technologies used on our websites.
Technology: Session Cookies
Application: Session cookies are created each time in the system – a user’s browser after creating a user session – that is, establishing a connection between the user’s browser and a given web page.
Session cookies expire at the end of the user session – e.g. closing the web browser window. The information contained in session cookies is automatically deleted in this case.
Technology: Permanent Cookies
Application: Permanent cookies are created in the system – a user’s browser after the first visit to a given website or a certain action. Persistent cookies, unlike session cookies, are not removed at the end of the user session. Persistent cookies are deleted by the user’s browser automatically after a certain time. They can also be manually removed by the user.
Technology: Session Storage
Application: A data store that is the equivalent of Cookies, but with a much larger data capacity (Cookies have limitations related to their quantity and the amount of data they can contain). Information from the Session Storage browser store is saved and read only at the express request of the server sent to the user’s web browser. The data collected in the Session Storage warehouse is deleted as well as session cookies after closing the browser window
Technology: Local Storage
Application: A data store to which information is entered and which are stored permanently in the system / browser of the user’s web pages until they are deleted. Data stored in Local Storage is not available automatically by the web server presenting the given page, and through appropriate scripts (java script, flash) placed on a given page or sent to the user’s browser from other WWW servers (eg by placing a code fragment from another WWW server – social icons Facebook, Twitter, Google).
Technology: IndexedDB
Application: A data store is an internal database of a web browser used to store large amounts of data. This data store allows storing data in a structured form and in the form of files.
The data is stored in the form of objects, access to which is limited only to appropriate data sources – domains or subdomains from which they were saved.
We use cookies and similar technologies to improve efficiency and suggest to prospective Candidates and job seekers a more refined and tailored offer for employers. We are able to determine what can be improved and what elements to avoid, so that our websites are more friendly to you.
Purpose of use: Analytics & Statistics
Type of technology: Cookies, Local Storage, Session Storage, IndexedDB
Scope: The information processed in these data stores is used to conduct analyzes, compile statistics, monitor the behavior of Users and Clients on the Website and Services and present our ads (on our Website and on other websites served by the marketing platforms we use), which ultimately serves us to improve Website and Services.
Purpose of use: User Authorization
Type of technology: Cookies
Scope: Information processed in these data stores is used to carry out user authorization in the IT system. Thanks to the information contained in these data stores, we are able to correctly recognize the user.
Purpose of use: Service configuration
Type of technology: Cookies, Local Storage
Scope: Information processed in these data stores is used to store the preferred settings that you have selected as part of the Website and Services. Thanks to the information contained in these data stores, we can remember the settings and configurations of the website and services as well as selected elements and page views.
Purpose of use: Language settings of interfaces
Type of technology: Cookies
Scope: The information processed in these data stores is used to store the language settings of the website or service you have selected. Thanks to the information contained in these data stores, we can always present you the correct language version.
Purpose of use: Advertisement
Type of technology: Cookies
Scope: The information processed in these data stores serves to provide Users and Customers with general advertisements and tailored to their preferences.
Below we describe in detail the purposes of using particular technologies. Most web browsers allow you to block and delete all or selected cookies from the browser settings or set an appropriate warning before saving this information in the system or user’s browser.
However, it should be noted that changes to these settings consisting in limiting the use of cookies may affect some of the functions available on our websites, e.g. by preventing authorization and authentication (logging in to the Service User’s account). If you do not change these settings, you accept the use of cookies.
Changing cookie settings.
POLICY UPDATE RULES.
Depending on the needs, the rules of the conducted activity and changes in the law, we will update the Privacy Policy with appropriate records as soon as possible. We will inform the people who visiting our websites about any changes by posting relevant information on this Privacy Policy webpage.
In addition, in the event of significant changes related to the protection of privacy and the protection of personal data, we may send additional information to the e-mail address provided or require you to re-accept the rules for the processing of personal data and the protection of privacy in relation to the processing of information based on cookies and other similar technologies .
FINAL PROVISIONS.
This Privacy Policy applies from the date of publication, that is from 26.06.2018.
In addition, in the event of significant changes related to the protection of privacy and the protection of personal data, we may send additional information to the e-mail address provided or require you to re-accept the rules for the processing of personal data and the protection of privacy in relation to the processing of information based on cookies and other similar technologies .