This Privacy Policy sets out the rules for the processing and protection of personal data by Consdata S.A. This document fulfills the information obligation arising from Article 13 of the General Data Protection Regulation (GDPR).
1. PERSONAL DATA CONTROLLER
The controller of your personal data is: Consdata Spółka Akcyjna with its registered office in Poznań, ul. Bolesława Krysiewicza 9/14, 61-825 Poznań, Poland. NIP (Tax ID): 7822261960 | REGON: 634422180 | KRS: 0000846039. In all matters regarding data protection, you can contact us via e-mail at: This email address is being protected from spambots. You need JavaScript enabled to view it. or in writing to our registered office address.
2. PURPOSES, LEGAL BASES, AND PROCESSING PERIODS
We process your data for the following purposes, depending on the nature of our relationship:
-
Recruitment:
-
Purpose: Conducting the current recruitment process and (with your consent) future recruitment processes.
-
AI in recruitment: We use Artificial Intelligence (AI) tools to support the analysis of CVs. AI serves solely an auxiliary function and does not make automated decisions - the final decisions regarding candidate selection are always made by our employees.
-
Legal basis: Legal obligation (Labor Code) and voluntary consent (Art. 6(1)(a) and (c) GDPR).
-
Retention period: Until the end of the recruitment process or up to 24 months (in the case of consent for future processes).
-
-
Service for Contractors and Clients (B2B):
-
Purpose: Concluding and performing contracts, establishing business relations, handling complaints, and asserting claims.
-
Legal basis: Necessity for the performance of a contract (Art. 6(1)(b) GDPR) and the legitimate interest of the Controller (Art. 6(1)(f) GDPR).
-
Retention period: For the duration of the contract, and after its termination, until the expiration of the statute of limitations for claims or the expiration of tax obligations (usually 5 years).
-
-
Correspondence and contact forms:
-
Purpose: Handling inquiries sent electronically and registering correspondence.
-
Legal basis: The legitimate interest of the Controller consisting in providing timely responses (Art. 6(1)(f) GDPR).
-
Retention period: Until the matter is resolved or an effective objection is raised.
-
-
Newsletter and marketing:
-
Purpose: Sending educational and technical materials from the IT industry.
-
Legal basis: Voluntary consent (Art. 6(1)(a) GDPR).
-
Retention period: Until consent is withdrawn.
-
-
Handling Whistleblower reports:
-
Purpose: Receiving and verifying reports of internal law violations.
-
Legal basis: Legal obligation arising from the Whistleblower Protection Act (Art. 6(1)(c) GDPR).
-
Retention period: For 3 years following the end of the calendar year in which follow-up actions were completed.
-
3. IS THE PROVISION OF DATA MANDATORY?
-
Statutory requirement: Providing data to the extent required by law (e.g., Labor Code in recruitment, data for invoices, Whistleblower Act) is mandatory. Failure to provide them will prevent participation in recruitment or the issuance of accounting documents.
-
Contractual requirement: Providing data necessary to conclude a contract is a condition for its signing.
-
Voluntary provision: In other cases (e.g., newsletter, additional data in the CV, marketing), providing data is voluntary, and failure to do so does not entail any negative consequences.
4. DATA RECIPIENTS AND INTERNATIONAL TRANSFERS
Your data may be transferred to entities processing data on our behalf: IT service providers (hosting, e-mail, CRM), accounting offices, law firms, and recruitment agencies.
In connection with the use of professional cloud tools, data may be transferred outside the European Economic Area (e.g., to the USA). Such transfers take place exclusively on the basis of appropriate safeguards, such as Standard Contractual Clauses or Adequacy Decisions (e.g., Data Privacy Framework).
5. YOUR RIGHTS
In connection with the processing of personal data, you have the right to:
-
Access your data and receive a copy of it.
-
Rectify (correct) your data.
-
Delete your data or restrict its processing.
-
Transfer your data (if the processing is based on consent or a contract).
-
Object to processing (if the basis is the legitimate interest of the Controller).
-
Withdraw consent at any time (without affecting the lawfulness of processing before its withdrawal).
To exercise your rights, please contact us at: This email address is being protected from spambots. You need JavaScript enabled to view it..
6. COMPLAINT TO THE SUPERVISORY AUTHORITY
You have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw), if you believe that the processing of your data violates GDPR regulations.
7. COOKIES AND SECURITY
The website uses cookies to ensure user convenience and collect statistics. We apply adequate technical and organizational measures (including encryption, SSL certificates) to prevent unauthorized access to your data.
