Privacy Policy of Incognito Human Resources Recruitment Platform

§ 1

Administrator of Personal Data on the website, at: www. incognitoHR.com, hereinafter referred to as "the Platform" is Plus48 Sp. z o.o. with its seat in, Wrocław Poland ul. Wałbrzyska 1/4 , 52-314 Wrocław NIP: 897-17-66-772 entered in the Register of Entrepreneurs kept by the District Court in, Wrocław Fabryczna VI Commercial Division of the National Court Register under number 0000366620, hereinafter also referred to as "Administrator".

§ 2

Respecting the rights of the personal data subjects (data subjects) and respecting applicable laws, including in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016. on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as "TODO", the Act of 10 May 2018 on the protection of personal data (Journal of Laws 2018, item 1000, hereinafter referred to as "the Act") and other relevant provisions on the protection of personal data, we undertake to maintain the security and confidentiality of the personal data collected. All employees have been properly trained in the processing of personal data, and as the Personal Data Administrator we have implemented appropriate safeguards and technical and organizational measures to ensure the highest level of personal data protection, thus ensuring compliance with the law and the reliability of data processing, as well as the enforcement of all rights of the data subjects.

§ 3

The following personal data may be collected on our Platform:
  1. name and surname;
  2. e-mail address;
  3. IP address;
  4. phone numbers;
  5. Skype ID
  6. information on the course of employment and qualifications;
  7. Linkedin Profile link
  8. Facebook Profile link
  9. Github Profile link
  10. Date of birth
  11. Bank account number
  12. Company website address
  13. Company name
  14. NIP
  15. Regon
  16. KRS

§ 4

The data listed in point 3 is provided in order to enable the use of the Platform, including the use of services provided by the Administrator. In accordance with the principle of minimisation, we process only those categories of personal data which are necessary to achieve the objectives referred to in this point

§ 5

The controller shall process personal data for the period necessary to achieve the objectives set out in point 1. 4 above, taking into account the legally justified interest of the Administrator referred to in point 4 above. 7 b. Personal data may be processed for a period longer than indicated in the preceding sentence, if such right or obligation imposed on the Administrator results from specific provisions of law or from the Administrator's legally justified interest referred to in point 7(b). 7(c) below (i.e. for the period of limitation of claims or completion of relevant proceedings if they were initiated during the limitation period).

§ 6

The sources processed by the Administrator are Platform users, i.e. data subjects.

§ 7

The legal basis for processing your personal data is:
  1. Article 6(1)(b) TODO, i.e. a necessity related to enabling the use of the Platform, including the use of services provided by the Administrator, or
  2. Article 6(1)(c) of the FAMILY, i.e. the necessity to fulfil the legal obligations incumbent on the Administrator, or
  3. Article 6(1)(f) of the TDC, i.e. the Administrator's legitimate interest in establishing, pursuing or defending claims until they are time-barred or until the relevant proceedings, if any, have been initiated within that period, or
  4. Article 6(1)(a) TYPE, i.e. the consent of the user to the processing of personal data for specified purposes when other legal grounds for processing personal data do not apply.

§ 8

Users' personal data are not transferred to a third country or international organisation within the meaning of the rules of the PCO. If personal data of users are transferred to a third country or international organisation, users will be informed about it in advance and the Administrator will apply the safeguards referred to in Chapter V of the PCO.

§ 9

Personal data may be transferred to potential contractors of the users (future employers), according to the rules set out in the Regulations, as well as entrusted to entities processing such data on our behalf as the Personal Data Administrator. In such a situation, as the Personal Data Administrator, we conclude an agreement on entrusting the processing of personal data with the processing entity. The entity processing the entrusted personal data shall process the entrusted data only for the needs, to the extent and for the purposes indicated in the entrustment agreement referred to in the preceding sentence.

§ 10

Personal data may be subject to profiling in certain cases. Thanks to automatic data processing, the Administrator evaluates selected factors concerning natural persons in order to direct to them the content corresponding to their preferences.

§ 11

According to the provisions of the PCOI, each person whose personal data we process as the Personal Data Administrator has the right, taking into account the rules of use and exercise of these rights under the provisions of the PCOI to:
  1. be informed about the processing of personal data referred to in Article 12 of the TYPE,
  2. access to their personal data as referred to in Article 15 of the TYPE,
  3. to correct, supplement, update, correct the personal data referred to in Article 16 of the PDA,
  4. the deletion of data (right to be forgotten), as referred to in Article 17 of the GEO,
  5. processing restrictions as referred to in Article 18 of the TYROM,
  6. the data transfer referred to in Article 20 of the TYPE,
  7. to object to the processing of personal data, as referred to in Article 21 of the PDA,
  8. in the case of the legal basis referred to in point 10(d) above - the right to withdraw consent at any time without affecting the lawfulness of the processing carried out on the basis of consent before its withdrawal,
  9. not to be subject to the proliferation referred to in Article 22 in conjunction with Article 4(4) of the TYPE,
  10. lodging a complaint to the supervisory authority (i.e. to the President of the Office for the Protection of Personal Data) referred to in Article 77 of the Council Framework,

§ 12

In order to exercise the rights referred to in the preceding point, as well as to submit an inquiry, request or complaint concerning the processing of personal data, one should send a message by e-mail to [email protected] or in writing to the Administrator's correspondence address - Wałbrzyska 1 lok 4, 52-314 Wrocław, Poland.

§ 13

The content of the application must be clearly indicated:
  1. the person(s) concerned,
  2. the event that is the reason for the report,
  3. to present their requests and the legal basis for those requests,
  4. indicate the expected way to handle the case.

§ 14

Each detected breach of security is documented, and if one of the situations specified in the provisions of the GDR or the Act occurs, the data subjects are informed about such a breach of personal data protection regulations.

§ 15

The provisions of this Privacy Policy shall, to the extent possible, apply mutatis mutandis to all persons with whom we have legal relations and to whom we are also the Administrator of their personal data.

§ 16

For matters not covered by this Privacy Policy, the relevant provisions of common law shall apply. In case of non-compliance of the provisions of this Privacy Policy with the above provisions, these provisions shall prevail.