Polices of data processing in the recruitment process

ALTO TAX sp. z o.o.

Information obligation for job candidate/co-worker candidate

The Controller of your personal data is ALTO TAX Sp. z o.o. with its registered office in Warsaw (00-189), ul. Inflancka 4b, building C.

The Controller may be contacted by email at rodo@altoadvisory.pl, via contact form at https://altoadvisory.pl/kontakt/, by phone at +48 22 652 27 51 or by letter sent to the address of the Controller’s registered office.

Your personal data collected in the course of the recruitment process will be processed:

• • in the case of employment based on an employment contract – to comply with the obligations arising from the law related to the recruitment process, including in particular the Labour Code – the legal basis for the processing is a legal obligation incumbent on the Controller (Article 6(1)(c) of the General Data Protection Regulation (GDPR) in connection with the provisions of the Labour Code); for the purpose of conducting the recruitment process in the scope of data not required by law – the legal basis for the processing is consent (Article 6(1)(a) of the GDPR);
  • in the case of employment based on a civil law contract – the legal basis for the processing of data contained in the application documents is to take steps prior to entering into a contract (Article 6(1)(b) of the GDPR, and to the extent that you have also provided optional data – the legal basis for the processing is consent (Article 6(1)(a) of the GDPR);
  • for the purpose of conducting future recruitment processes, in the event that consent is given to process data for this purpose – the legal basis for the processing is consent (Article 6(1)(a) of the GDPR);
  • in the case of expressing additional consent, your personal data will be shared with other companies from the ALTO Group and processed by other Group companies: ALTO Accounting Sp. z o.o. for their recruitment purposes – the legal basis for the processing is consent (Article 6(1)(a) of the GDPR);
  • to verify your qualifications and skills and to determine the conditions of cooperation – the legal basis for the processing is the legitimate interest of the Controller (Article 6(1)(f) of the GDPR). The legitimate interest of the Controller is to verify job candidates and to determine the conditions of possible cooperation with you;
  • to determine or pursue possible claims or to defend against such claims by the Controller – the legal basis for the processing is the legitimate interest of the Controller (Article 6(1)(f) of the GDPR).

Your personal data may be disclosed to entities providing services to the Controller in connection with conducting recruitment processes, such as recruitment agencies, as well as the providers of IT systems and services.

Your personal data will be processed until the completion of the current recruitment process and the selection of a candidate or candidates by the Controller, and to the extent that the processing is based on consent – until its withdrawal, and in the event of consent to the processing of data for the purposes of future recruitment, the data will be processed for no longer than two years. The processing period may be extended each time by the period of limitation of claims if the processing of your personal data is necessary for the Controller to determine or pursue possible claims or to defend against such claims. After this period, the data will be processed only to the extent required by law.

You have the right to: access the content of your data and the right to obtain a copy of it, request their rectification, erasure, restriction of processing, and the right to personal data portability. If your data is processed on the basis of the legitimate interest of the Controller, you have the right to object to the processing of data due to your particular situation.

To the extent your personal data is processed by the Controller on the basis of your consent, you have the right to withdraw it. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. For evidence purposes, the Controller requests that consent be withdrawn by written or electronic means.

In order to exercise your rights, please contact the Controller using the contact details provided above.

If you consider that the Controller processes your personal data in breach of the provisions of law, you have the right to lodge a complaint with a supervisory authority competent for the protection of personal data, in particular, in the EU Member State of your habitual residence, place of work or place of the alleged infringement. In Poland, such a supervisory authority is the President of the Personal Data Protection Office.

In the case of employment under a contract of employment, the provision of personal data is required by law, including in particular the Labour Code. The consequence of the failure to provide such data is that your job application cannot be considered in the recruitment process. With respect to data not required by law, including the Labour Code, the provision of data is voluntary.

ALTO ACCOUNTING sp. z o.o.

Information obligation for job candidate/co-worker candidate

The Controller of your personal data is ALTO Accounting Sp. z o.o. with its registered office in Warsaw (00-189), ul. Inflancka 4b, buliding C.

The Controller may be contacted by email at rodo@altoadvisory.pl, via contact form at https://altoadvisory.pl/kontakt/, by phone at +48 22 652 27 51 or by letter sent to the address of the Controller’s registered office.

Your personal data collected in the course of the recruitment process will be processed:

• • in the case of employment based on an employment contract – to comply with the obligations arising from the law related to the recruitment process, including in particular the Labour Code – the legal basis for the processing is a legal obligation incumbent on the Controller (Article 6(1)(c) of the General Data Protection Regulation (GDPR) in connection with the provisions of the Labour Code); for the purpose of conducting the recruitment process in the scope of data not required by law – the legal basis for the processing is consent (Article 6(1)(a) of the GDPR);
  • in the case of employment based on a civil law contract – the legal basis for the processing of data contained in the application documents is to take steps prior to entering into a contract (Article 6(1)(b) of the GDPR, and to the extent that you have also provided optional data – the legal basis for the processing is consent (Article 6(1)(a) of the GDPR);
  • for the purpose of conducting future recruitment processes, in the event that consent is given to process data for this purpose – the legal basis for the processing is consent (Article 6(1)(a) of the GDPR);
  • in the case of expressing additional consent, your personal data will be shared with other companies from the ALTO Group and processed by other Group companies: ALTO TAX Sp. z o.o. for its recruitment purposes – the legal basis for the processing is consent (Article 6(1)(a) of the GDPR);
  • to verify your qualifications and skills and to determine the conditions of cooperation – the legal basis for the processing is the legitimate interest of the Controller (Article 6(1)(f) of the GDPR). The legitimate interest of the Controller is to verify job candidates and to determine the conditions of possible cooperation with you;
  • to determine or pursue possible claims or to defend against such claims by the Controller – the legal basis for the processing is the legitimate interest of the Controller (Article 6(1)(f) of the GDPR).

Your personal data may be disclosed to entities providing services to the Controller in connection with conducting recruitment processes, such as recruitment agencies, as well as the providers of IT systems and services.

Your personal data will be processed until the completion of the current recruitment process and the selection of a candidate or candidates by the Controller, and to the extent that the processing is based on consent – until its withdrawal, and in the event of consent to the processing of data for the purposes of future recruitment, the data will be processed for no longer than two years. The processing period may be extended each time by the period of limitation of claims if the processing of your personal data is necessary for the Controller to determine or pursue possible claims or to defend against such claims. After this period, the data will be processed only to the extent required by law.

You have the right to: access the content of your data and the right to obtain a copy of it, request their rectification, erasure, restriction of processing, and the right to personal data portability. If your data is processed on the basis of the legitimate interest of the Controller, you have the right to object to the processing of data due to your particular situation.

To the extent your personal data is processed by the Controller on the basis of your consent, you have the right to withdraw it. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. For evidence purposes, the Controller requests that consent be withdrawn by written or electronic means.

In order to exercise your rights, please contact the Controller using the contact details provided above.

If you consider that the Controller processes your personal data in breach of the provisions of law, you have the right to lodge a complaint with a supervisory authority competent for the protection of personal data, in particular, in the EU Member State of your habitual residence, place of work or place of the alleged infringement. In Poland, such a supervisory authority is the President of the Personal Data Protection Office.

In the case of employment under a contract of employment, the provision of personal data is required by law, including in particular the Labour Code. The consequence of the failure to provide such data is that your job application cannot be considered in the recruitment process. With respect to data not required by law, including the Labour Code, the provision of data is voluntary.