I consent to the processing of my personal data provided in the application documents by the The Institute of Biochemistry and Biophysics of the Polish Academy of Sciences , ul. Pawińskiego 5a, 02-106 Warsaw, for the purposes of recruitment process organized by the Administrator. I have been informed that I may withdraw this consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
To fulfil the obligation arising from Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter: GDPR), we are enclosing information regarding personal data processing.
PERSONAL DATA CONTROLLER
The Controller of your personal data is the Institute of Biochemistry and Biophysics of the Polish Academy of Sciences, with its registered office in Warsaw at ul. Pawińskiego 5a (02-106 Warszawa), entered in the register of institutes of the Polish Academy of Sciences, entry No. RIN-II-46/98, NIP [Tax Identification Number]: 526-10-39-742, REGON [statistical register number]: 000325819. The Controller can be contacted by phone: 22 592 11 08 and by e-mail: [email protected]
DATA PROTECTION INSPECTOR
The Controller has appointed the Data Protection Inspector. The Inspector can be contacted by e-mail: [email protected]
PERSONAL DATA PROCESSING
1. In order to exercises the rights and fulfil the obligations associated with recruitment process.
Legal basis: Article 6 (1)(a) of GDPR (the data subject has given consent to the processing of his or her personal data for one or more specific purposes).
Processing period: Personal data shall be processed for the recruitment process period.
2. In order to exercises the rights and fulfil the obligations associated with future recruitment process.
Legal basis: Article 6 (1)(a) of GDPR (the data subject has given consent to the processing of his or her personal data for one or more specific purposes).
Processing period: Personal data obtained in the recruitment process shall be processed for a period of 12 months from the end of the recruitment.
In order to exercise or defence of legal claims.
3. Legal basis: Article 6 (1)(f) of GDPR (processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interest are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child).
Processing period: The exercise period, but no longer than the claims’ prescription period.
CATEGORIES OF DATA RECIPIENTS
Personal data may be disclosed to:
a) the Controller’s staff – for the purpose of the execution of activities associated with the recruitment process;
b) the entities with whom the Controller has a valid cooperation agreement, including in particular entities providing accounting, legal, mailing, courier and IT services.
TRANSFER OF DATA
Personal data shall not be transferred outside the territory of the Republic of Poland.
YOUR RIGHTS
You have the right:
a) to access your personal data (Article 15 of GDPR) – the right to obtain from the Controller confirmation as to whether or not your personal data are being processed, and if so, to obtain access to such data. The Controller shall provide you, upon request, with a copy of your personal data being processed. For any subsequent copies you may request, the Controller shall be entitled to charge a reasonable fee based on administrative costs;
b) to have your personal data rectified (Article 16 of GDPR) – taking into account the purposes of the processing, you shall have the right to obtain, without undue delay, the rectification of inaccurate personal data and to demand that your incomplete personal data be completed;
c) to have your personal data erased (“the right to be forgotten”) (Article 17 of GDPR) – the right to demand that your personal data be erased without undue delay. In this event, the Controller shall have the obligation to erase your personal data without undue delay where one of the following grounds applies: (i) the personal data are no longer necessary in relation to the purposes for which they were collected; (ii) the consent on which the processing was based has been withdrawn and the Controller has no other legal ground for the processing; (iii) the personal data have been unlawfully processed; (iv) the personal data have to be erased for compliance with a legal obligation. You cannot exercise the right to erase your personal data if the Controller is obliged, under applicable legal regulations, to further process personal data to the extent as defined by these regulations or for the purpose of establishing, exercising or defending legal claims;
d) to restrict the processing of your personal data (Article 18 of GDPR) – the right to obtain from the Controller restriction of processing where one of the following applies: (i) you are contesting the accuracy of your personal data processed by the Controller; (ii) the processing of your personal data is unlawful but you have opposed to the erasure of that personal data; (iii) the Controller no longer needs your personal data for the purposes of the processing, but they are required for the establishment, exercise or defence of legal claims. If the right to restrict the processing of personal data has been exercised, the Controller may process your personal data, with the exception of their storage, only with your consent or in order to establish, exercise or defend legal claims, or to protect the rights of another natural or legal person, or on the grounds of important public interest;
e) of portability of your personal data – under certain conditions (Article 21 of GDPR) – the right to receive your personal data processed by the Controller, in a structured, commonly used and machine-readable format, and the right to transmit those data to another entity. This right applies if data are processed under consent or in connection with an agreement or contract;
f) to object – the right to object to the processing of persona data on the basis of the Controller’s legitimate interest (i.e. under Article 6 (1)(f) of GDPR). In this event, the Controller shall no longer be able to process your personal data for those purposes, unless there are compelling legitimate grounds or the data are needed to exercise legal claims. The right to object to data processing shall not apply if: (i) the processing of personal data is based on your consent – in this event, however, you may withdraw your consent, (ii) the processing is necessary for the performance of an agreement or contract to which you are a party, (iii) the processing is necessary for the fulfilment of a legal obligation by the Controller;
g) to lodge a complaint with a supervisory authority for personal data protection, if the processing of your personal data is considered to be in violation of GDPR;
h) to withdraw the consent – the right to withdraw your consent to the processing of your personal data at any time. The withdrawal of consent shall not affect the lawfulness of processing based on such consent before its withdrawal.
CATEGORIES OF DATA
We shall process the personal data necessary to achieve the objectives stated above, in particular:
a) the data for the purpose of identity verification, including name and surname;
b) the contact data, including telephone number, e-mail address;
c) the data on the education.
In addition, the Controller may processes other categories of personal data, provided that these data cannot be classified into any of the above indicated groups, and the processing is carried out for the purposes specified in this information or was freely provided by the data subject in the recruitment documents.
ADDITIONAL INFORMATION
Providing personal data was voluntary based on your consent – submitting the appropriate clause in the recruitment documents. Personal data shall not be used for automated decision-making or for profiling purposes.
