Miejsko-Przemysłowa Oczyszczalnia Ścieków sp. z o.o.
-
1. Personal Data Controller
The Controller of your personal data is Miejsko-Przemysłowa Oczyszczalnia Ścieków Sp. z o.o. with its registered seat at Oświęcim 32-600, Nadwiślańska 46, 32-600 Oświęcim, Poland registered (entered) in the Commercial Register administered by the District Court for Kraków – Śródmieście in Kraków, XII Commercial Division of the National Court Register under KRS number: 0000120444, NIP 549-20-52-990, share capital: 54 809 415,00 PLN. The Controller can be contacted via correspondence data or by email to the following address:
2. Data Protection Officer
Miejsko-Przemysłowa Oczyszczalnia Ścieków Sp. z o.o. as the Controller of personal data has appointed a Data Protection Officer for the proper protection of personal data, who can be contacted at the following e-mail address:
3. Purpose and legal basis for personal data processing
The purpose of processing your personal data are activities related to the pursuit of conclusion and implementation of the contract with the Counterparty. The legal basis for processing your personal data is legitimate interest pursued by the Controller – contact regarding the conclusion of the contract and its implementation, as well as establishing, investigating and defending mutual claims in the event of their occurrence (pursuant to art.6 para.1 (f) GDPR). Personal data will also be processed in connection with the fulfilment of legal obligations imposed on the Controller, in particular those arising from tax law and financial reporting (pursuant to art.6 para.1 (c) GDPR). Providing personal data is voluntary, but necessary to conclude a contract.
4. Source of personal data
Your personal data could have been obtained by the Controller from a cooperation agreement or made available by the Counterparty with whom you have an employment contract or a civil law contract. In connection with the implementation of the contract, the Controller processes your personal data, among others: identification data (name and surname), contact details (e-mail address), other data (place of employment).
5. Recipients of personal data
The Controller informs that the recipients of your personal data will be:
- entities from the Synthos group;
- entities outside the Synthos group cooperating in the field of contracts implemented on the basis of concluded entrustment agreements and providing adequate safeguards for personal data;
- entities to which the Controller is required to provide data under applicable law.
Your data shall not be transferred to a third country.
6. Period of personal data storage
Your personal data will be processed for the duration of the contract with the Counterparty, and after its expiry for the period until the limitation of mutual claims arising from the contract. The personal data contained in the agreement will also be processed for the period resulting from the applicable laws, including tax regulations and financial reporting.
7. Rights of data subjects
You have the rights related to the processing of personal data by the Controller:
- the right to request access to the content of your data;
- the right to rectify personal data;
- the right to delete your personal data (“being forgotten”);
- the right to limit data processing by the Controller;
- the right to object to the processing of personal data when their processing takes place on the basis of legitimate interests pursued by the Controller (art.6 para.1 (f) GDPR) or the processing necessary to perform a task carried out in the public interest (art.6 para. 1 (e) GDPR). The law also applies to profiling based on the above premises.
8. The right to lodge a complaint with the Supervisory Body
In connection with the processing of your personal data by the Controller, you have the right at any time to lodge a complaint to the supervisory body – the President of the Office for Personal Data Protection, if you believe that the processing of personal data violates the provisions of the GDPR. Detailed information on the right to complain is available on the website: https://uodo.gov.pl/pl/83/155
9. Profiling
Miejsko-Przemysłowa Oczyszczalnia Ścieków Sp. z o.o. as the Controller does not make decisions regarding the processing of your personal data based on automated processing, including profiling.
-
1. Personal Data Controller
The Controller of your personal data is Miejsko-Przemysłowa Oczyszczalnia Ścieków Sp. z o.o. with its registered seat at Oświęcim 32-600, Nadwiślańska 46, 32-600 Oświęcim, Poland registered (entered) in the Commercial Register administered by the District Court for Kraków – Śródmieście in Kraków, XII Commercial Division of the National Court Register under KRS number: 0000120444, NIP 549-20-52-990, share capital: 54 809 415,00 PLN. The Controller can be contacted via correspondence data or by email to the following address:
2. Data Protection Officer
Miejsko-Przemysłowa Oczyszczalnia Ścieków Sp. z o.o. as the Controller of personal data has appointed a Data Protection Officer for the proper protection of personal data, who can be contacted at the following e-mail address:
3. Purpose and legal basis for personal data processing
Your personal data will be processed in connection with the need to identify persons staying on the Controller’s premises in order to ensure the safety of persons and property in the Controller’s area of activity, as well as to determine, investigate or defend any claims – the processing of personal data is carried out as legitimate interest carried out by the Controller (pursuant to art.6 para.1 (f) GDPR). Providing personal information is voluntary. Failure to provide data will result in the inability to enter the Controller’s area of activity.
4. Source of personal data
Your personal data could have been be obtained by the Controller from the cooperation agreement and/or made available by the Counterparty with whom you have an employment contract or a civil law contract. In connection with the implementation of the contract, the Controller processes your personal data, among others: identification data (name and surname).
5. Recipients of personal data
The Controller informs that the recipients of your personal data will be:
- entities from the Synthos group;
- entities outside the Synthos group cooperating in the field of contracts implemented on the basis of concluded entrustment agreements and providing adequate safeguards for personal data;
- entities to which the Controller is required to provide data under applicable law. Your data shall not be transferred to a third country.
6. The period of personal data storage
Your personal data on the pass will be deleted immediately after it is returned to the Controller; data contained in the IT system used to issue passes will be processed for the period necessary for the possible determination, investigation or defence of claims with systematic control of their suitability.
7. Rights of data subjects
You have the rights related to the processing of personal data by the Controller:
- the right to request access to the content of your data;
- the right to rectify personal data;
- the right to delete your personal data (“being forgotten”);
- the right to limit data processing by the Controller;
- the right to object to the processing of personal data when their processing takes place on the basis of legitimate interests pursued by the Controller (art.6 para.1 (f) GDPR) or the processing necessary to perform a task carried out in the public interest (art.6 para. 1 (e) GDPR). The law also applies to profiling based on the above premises.
8. The right to lodge a complaint with the Supervisory Body
In connection with the processing of your personal data by the Controller, you have the right at any time to lodge a complaint to the supervisory body – the President of the Office for Personal Data Protection, if you believe that the processing of personal data violates the provisions of the GDPR. Detailed information on the right to complain is available on the website: https://uodo.gov.pl/pl/83/155
9. Profiling
Miejsko-Przemysłowa Oczyszczalnia Ścieków Sp. z o.o. as the Controller does not make decisions regarding the processing of your personal data based on automated processing, including profiling.
-
1. Personal Data Controller
The Controller of your personal data is Miejsko-Przemysłowa Oczyszczalnia Ścieków Sp. z o.o. with its registered seat at Oświęcim 32-600, Nadwiślańska 46, 32-600 Oświęcim, Poland registered (entered) in the Commercial Register administered by the District Court for Kraków – Śródmieście in Kraków, XII Commercial Division of the National Court Register under KRS number: 0000120444, NIP 549-20-52-990, share capital: 54 809 415,00 PLN. The Controller can be contacted via correspondence data or by email to the following address:
2. Data Protection Officer
Miejsko-Przemysłowa Oczyszczalnia Ścieków Sp. z o.o. as the Controller of personal data has appointed a Data Protection Officer for the proper protection of personal data, who can be contacted at the following e-mail address:
3. Purpose and legal basis for personal data processing
Your personal data will be processed solely for the purpose of:
a) implementation of the recruitment process, including recruitment activities aimed at selecting persons to work from among candidates, in particular on the basis of:
-
Art. 6 paragraph 1 (b) GDPR – i.e. to take action at the request of the data subject before the conclusion of the contract;
-
Art. 6 clause 1 (c) GDPR – in the scope of exercising the employer’s rights under Article 221 § 1 of the Labour Code (i.e. name and surname, date of birth, contact details indicated by such a person, as well as when it is necessary to perform work of a specific type or in a specific position – education, professional qualifications, previous employment);
-
Art. 6 clause 1 (a) GDPR – consent, which may be withdrawn at any time, if you provide data in the recruitment application to a wider extent than the one to which the Controller is authorized by the Labour Code.
b) determination, investigation or defence against possible claims between you and the Controller – pursuant to art. 6 clause 1 (f) GDPR;
The Controller will process your personal data, including in subsequent recruitment processes, if you express your consent (legal basis: art.6 para.1 (a) GDPR), which can be withdrawn at any time.
If you take part in the recruitment process (regardless of the recruitment process selected), your personal data will also be processed for the purposes of personnel administration in a group of enterprises, in particular in order to implement operational activities in the field of planning and personnel policy (e.g. employment planning in Synthos Group, budget planning, etc.) – based on art. 6 clause 1 (f) GDPR.
Providing personal data is voluntary, while not providing personal data indicated in art. 22¹ § 1 of the Labour Code means that the received application documents of candidates for work will not be considered by the Controller.
4. Recipients of personal data
Personal data will be made available to employees and entities participating in this recruitment process and employees of the Controller.
Dane osobowe nie będą przekazywane innym podmiotom z wyjątkiem tych, które:
- are entitled to obtain them pursuant to the provisions of applicable law or
- provide the Controller with services requiring access to data, such as:
- recruitment agencies;
- entities providing services in the field of recruitment tests;
- entities belonging to the same Group of enterprises, i.e. SYNTHOS SA and its subsidiaries, as well as MS Galleon AG based in Vienna and Black Forest Sicav Sif Societe Anonyme seated in Luxembourg, based on recital 48 of the GDPR – to enable employees in companies associated with SYNTHOS S.A., participation in the recruitment process to the extent provided for in internal procedures (personnel administration in the Synthos Group); or
- are covered by the scope of consent that you have given.
Your data shall not be transferred to a third country.
5. Period of personal data storage
Your personal data will be stored for the duration of the recruitment process, but no longer than for a period of 12 months from its completion, and after that period for the purposes and for the period and to the extent required by law or to secure any claims and until their limitation period.
In the event of your consent to the use of personal data for the purposes of future recruitment processes, your personal data will be stored until the consent is withdrawn, but not longer than for a period of 36 months from the end of the year in which the personal data was provided. The Controller may process personal data longer as long as the law requires the storage of data or for the period of limitation of any claims.
6. Rights of data subjects
You have the rights related to the processing of personal data by the Controller:
- the right to request access to the content of your data;
- the right to rectify personal data;
- the right to delete your personal data (“being forgotten”);
- the right to limit data processing by the Controller;
- the right to transfer data, including receiving from the Controller in a structured, commonly used data format, which it provided to the Controller if the basis for processing was the consent of the data subject (Article 6 (1) (a) of the GDPR or Article 9 (2) (a) GDPR), or data processing is necessary for the performance of a contract to which the data subject is party or to take action at the request of the data subject prior to its conclusion (Article 6 (1) (b) of the GDPR). The right also applies when the processing takes place in an automated manner.
- the right to object to the processing of personal data when their processing takes place on the basis of legitimate interests pursued by the Controller (art.6 para.1 (f) GDPR) or the processing necessary to perform a task carried out in the public interest (art.6 para. 1 (e) GDPR). The law also applies to profiling based on the above premises.
- the right to withdraw consent to the processing of your data at any time, if the processing takes place on the basis of consent to the processing of data (Article 6 (1) (a) of the GDPR or Article 9 (2) (a) of the GDPR).
7. The right to lodge a complaint with the Supervisory Body
In connection with the processing of your personal data by the Controller, you have the right at any time to lodge a complaint to the supervisory body – the President of the Office for Personal Data Protection, if you believe that the processing of personal data violates the provisions of the GDPR. Detailed information on the right to complain is available on the website: https://uodo.gov.pl/pl/83/155
8. Profiling
Miejsko-Przemysłowa Oczyszczalnia Ścieków Sp. z o.o. as the Controller does not make decisions regarding the processing of your personal data based on automated processing including profiling.
-
-
1. Personal Data Controller
The Controller of your personal data is Miejsko-Przemysłowa Oczyszczalnia Ścieków Sp. z o.o. with its registered seat at Oświęcim 32-600, Nadwiślańska 46, 32-600 Oświęcim, Poland registered (entered) in the Commercial Register administered by the District Court for Kraków – Śródmieście in Kraków, XII Commercial Division of the National Court Register under KRS number: 0000120444, NIP 549-20-52-990, share capital: 54 809 415,00 PLN. The Controller can be contacted via correspondence data or by email to the following address:
2. Data Protection Officer
Miejsko-Przemysłowa Oczyszczalnia Ścieków Sp. z o.o. as the Controller of personal data has appointed a Data Protection Officer for the proper protection of personal data, who can be contacted at the following e-mail address:
3. Purpose and legal basis for personal data processing
The purpose of processing your personal data are activities related to the pursuit of the conclusion and implementation of the contract to which you are a party. The legal basis for processing your personal data is performance of activities related to the conclusion of the contract and its subsequent implementation, as well as establishing, investigating and defending mutual claims in the event of their occurrence – personal data processing activities are carried out as a legitimate interest pursued by the Controller (pursuant to art.6 para.1 (b) (f) GDPR). Personal data will also be processed in connection with the fulfilment of legal obligations imposed on the Controller (pursuant to art.6 para.1 (c) GDPR). Providing personal data is voluntary, but necessary to conclude a contract.
4. Recipients of personal data
The Controller informs that the recipients of your personal data will be:
- entities from the Synthos group;
- entities outside the Synthos group cooperating in the field of contracts implemented on the basis of concluded entrustment agreements and providing adequate safeguards for personal data;
- entities to which the Controller is required to provide data under applicable law. Your data shall not be transferred to a third country.
5. Period of personal data storage
Your personal data will be processed for the duration of the contract with the Controller, and after it expires until the limitation of mutual claims arising from the contract. Personal data contained in the contract will also be processed for the period resulting from applicable law, including tax regulations and financial reporting.
6. Rights of data subjects
You have the rights related to the processing of personal data by the Controller:
- the right to request access to the content of your data;
- the right to rectify personal data;
- the right to delete your personal data (“being forgotten”);
- the right to limit data processing by the Controller;
- the right to transfer data, including receiving from the Controller in a structured, commonly used format the data that it provided to the Controller if the basis for processing was the consent of the data subject (Article 6 (1) (a) of the GDPR or Article 9 (2) (a) a GDPR), or data processing is necessary to perform a contract to which the data subject is party or to take action at the request of the data subject prior to its conclusion (Article 6 (1) (b) of the GDPR). The right also applies when the processing takes place in an automated manner.
- the right to object to the processing of personal data when their processing takes place on the basis of legitimate interests pursued by the Controller (art.6 para.1 (f) GDPR) or the processing necessary to perform a task carried out in the public interest (art.6 para. 1 (e) GDPR). The law also applies to profiling based on the above premises.
7. The right to lodge a complaint with the Supervisory Body
In connection with the processing of your personal data by the Controller, you have the right at any time to lodge a complaint to the supervisory body – the President of the Office for Personal Data Protection, if you believe that the processing of personal data violates the provisions of the GDPR. Detailed information on the right to complain is available on the website: https://uodo.gov.pl/pl/83/155
8. Profiling
Miejsko-Przemysłowa Oczyszczalnia Ścieków Sp. z o.o. as the Controller does not make decisions regarding the processing of your personal data based on automated processing including profiling.