GDPR

Processing of personal data at Esotiq & Henderson S.A. is regulated by the provisions of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) and national regulations regarding the processing of personal data.

 

Information on the processing of personal data of contractors

I. PERSONAL DATA CONTROLLER

Esotiq & Henderson S.A. with the registered office in Gdańsk (80-298), ul. Szybowcowa 8a, phone numbers to Esotiq – office (58) 728 48 00, is the controller of your personal data.

II. DATA PROTECTION SUPERVISOR

We have appointed the Data Protection Supervisor you may contact with by e-mail: iod@esotiq.com  or in writing to the address of our registered office set forth in point I, with the following note: “Data Protection Supervisor”.

III. PURPOSES OF AND GROUNDS FOR PROCESSING

Your data is processed:

  1. in order to prepare an invitation to conclude or receive a contract, and then
  2. with regard to the preparation for the conclusion of the contract,
  3. with regard to the performance of the contract including:
    1. preparation of accounting documents
    2. delivery of the ordered goods (if applicable)
  4. for conclusion and performance of the contract, we process the data in order to:
    1. fulfill tax obligations
    2. collect debts, conduct court, arbitration and mediation proceedings
    3. carry out statistical analyzes
    4. store data for archival purposes and provide accountability

The following constitutes a legal basis for processing of your data by Esotiq:

  1. Your personal data is processed pursuant to Article 6 section 1 letter b) of the GDPR (due to the need to process your personal data and for the actions undertaken by ADO upon your request prior to the conclusion of the contract, i.e. with regard to establishing commercial cooperation), the grounds for the processing of your personal data may also be Article 6 section 1 letter a) of the GDPR, i.e. upon the consent of the individuals whose data is processed or Article 6 section 1 letter f) of the GDPR, i.e. due to the legitimate interest of ADO;
  2. In the event of conclusion and performance of the contract between you and ADO, your personal data is processed pursuant to Article 6 section 1 letter b) of the GDPR (i.e. processing of your personal data is necessary for the purposes of performance of the contract concluded with you), Article 6 section 1 letter f) of the GDPR (i.e. due to the legitimate interest of ADO), Article 6 section 1 letter c) of the GDPR (i.e. the processing is necessary to fulfill the legal obligation of ADO);

IV. DATA RECIPIENTS

Your personal data may be disclosed by Esotiq to the following third parties for the following purposes:

  1. to its employees in order to perform activities associated with the establishment of commercial cooperation and then associated with the preparation for the conclusion and performance of the contract – upon the employees being previously familiarized with the rules of personal data security, and above all upon reading the Personal Data Security Policy applicable at ESOTIQ & HENDERSON S.A. with the registered office in Gdańsk,
  2. entity with which ADO concluded the cooperation contract (“Party processing the data”), and particularly ADO may share your personal data to the entities such as: enterprises we cooperate with to provide IT services, and in the event of conclusion and performance of the contract also: entities providing accounting services, enterprises we cooperate with to provide storage services. Such entities will be obligated under the contracts entered into with ADO to apply appropriate security, technical and organizational measures to protect personal data and process it in accordance with legal provisions only,
  3. supervisory bodies, authorities and other third parties; if it is needed to achieve goals stipulated above and to fulfill obligations imposed by law. Personal data may be shared with supervisory authorities, courts and other authorities (e.g. tax and law enforcement authorities), independent external advisors (e.g. auditors) or service providers.

V. DATA STORAGE PERIOD

Your personal data is stored for the period of:

  1. duration of the contract,
  2. until the data processing obligations arising from legal provisions expire,
  3. until mutual claims arising from this contract expire.

VI. YOUR RIGHTS

You have rights related to personal data processing:

  1. right to access your data,
  2. right to rectify personal data,
  3. right to delete personal data or limit processing,
  1. right to data portability, i.e. the right to receive personal data from Esotiq & Henderson S.A., in a structured, commonly used, machine-readable IT format. You may send this data to another data controller or request that Esotiq & Henderson S.A. sends the data to another controller. However, Esotiq & Henderson S.A. will do so only if it is technically possible. The right to transfer personal data applies only to the data processed upon the consent or contract concluded with you,
  2. right to object – if Esotiq & Henderson S.A. processes your personal data based on its legitimate interest; objection may be made for the specific situation by sending an e-mail to: iod@esotiq.com  or a letter to the registered office of Esotiq & Henderson S.A. with the following note “Data Protection Supervisor”.

VII. RIGHT TO LODGE A COMPLAINT

You have the right to lodge a complaint to the President of the Personal Data Protection Office.

VIII. INFORMATION ON THE REQUIREMENTOF/VOLUNTARY PROVISION OF DATA

Providing your personal data is necessary for the conclusion and performance of the contract referred to in point III above. If you refuse to provide personal data, it will be impossible to conclude and perform the contract.

Information on the processing of personal data regarding persons involved in recruitment processes (work, training, internships, assignments)

I. PERSONAL DATA CONTROLLER

Esotiq & Henderson S.A. with the registered office in Gdańsk (80-298), ul. Szybowcowa 8a, phone numbers to Esotiq – office (58) 728 48 00, is the controller of your personal data.

II. DATA PROTECTION SUPERVISOR

We have appointed the Data Protection Supervisor you may contact with by e-mail: iod@esotiq.com  or in writing to the address of our registered office set forth in point I, with the following note: “Data Protection Supervisor”.

III. PURPOSES OF AND GROUNDS FOR PROCESSING

Your data is processed for the purpose of participation in the recruitment process at Esotiq & Henderson S.A. (work, training, internships, assignments) and in order to assess your professional skills, select an appropriate person for a specific position.

The legal basis for processing your personal data:

  1. The provision of law (Article 221 § 1 of the Labor Code) and the processing necessary to conclude an employment contract – regarding the following data: name and surname; parents’ names; date of birth; place of residence (correspondence address); education; employment history.
  2. Your consent to the processing of data specified in your CV, cover letter, recruitment form, if you provide data other than: name and surname; parents’ names; date of birth; place of residence (correspondence address); education; employment history.
  3. Your consent to the processing of data for future recruitment processes.
  4. Legitimate interest of Esotiq & Henderson S.A. – regarding data collected during the interview. Esotiq & Henderson S.A. has a legitimate interest in verifying your skills and abilities – it is necessary to assess whether you are the right person for the specific position.

IV. DATA RECIPIENTS

The below mentioned parties will be the recipients of your data:

  1. IT system provider, through which you send your application to Esotiq & Henderson S.A.

V. DATA STORAGE PERIOD

Your personal data will be stored for the period of 1 year from the date of sending the application under a specific recruitment process.

VI. YOUR RIGHTS

You have rights related to personal data processing:

  1. right to withdraw consent at any time with no lawfulness of the processing being affected (if the processing is based on a consent), which was made on the basis of a consent prior the withdrawal; the consent may be withdrawn by sending a letter to the address of Esotiq & Henderson S.A. , Inspektor Ochrony Danych, ul. Szybowcowa 8a; 80-298 Gdańsk, by e-mail: iod@esotiq.com
  2. right to access your data content,
  3. right to rectify personal data,
  4. right to delete personal data or limit processing,
  5. right to data portability, i.e. the right to receive personal data from Esotiq & Henderson S.A., in a structured, commonly used, machine-readable IT format. You may send this data to another data controller or request that Esotiq & Henderson S.A. sends the data to another controller. However, Esotiq & Henderson S.A. will do so only if it is technically possible. The right to transfer personal data applies only to the data processed upon the consent or contract concluded with you,
  6. right to object – if Esotiq & Henderson S.A. processes your personal data based on its legitimate interest, objection may be made for the specific situation by sending a letter to the address of Esotiq & Henderson S.A., Inspektor Ochrony Danych, ul. Szybowcowa 8a, 80-298 Gdańsk or by an e-mail to: iod@esotiq.com  or

VII. RIGHT TO LODGE A COMPLAINT

You have the right to lodge a complaint to the President of the Personal Data Protection Office, if you find that the processing of your personal data violates the provisions of the GDPR.

VIII. INFORMATION ON THE REQUIREMENTOF/VOLUNTARY PROVISION OF DATA

The necessity of providing your personal data arises from 221 § 1 of the Labor Code. If you refuse to provide personal data, you will not be able to participate in the recruitment processes at Esotiq & Henderson S.A. (work, training, internships, assignments). Providing the personal data to the extent greater than it arises from221 § 1 of the Labor Code is voluntary, however, it is necessary for full verification of your professional profile with regard to expectations specified in the recruitment announcement.