Privacy Policy
Privacy Policy for Job Candidates at InnoThink Limited Liability Company
1. Data Controller
The Data Controller of your personal data is InnoThink Limited Liability Company (sp. z o.o.), with its registered office at ul. Twarda 18, 00-105 Warsaw, Poland.
- Tax Identification Number (NIP): 5252795941
- National Court Register (KRS): 0000796233
Hereinafter referred to as the “Controller.”
2. Purposes and Legal Bases for Processing Personal Data
The personal data of job candidates is processed exclusively for purposes related to recruitment processes conducted by InnoThink sp. z o.o., both for its own recruitment needs and on behalf of companies for which InnoThink acts as an external recruitment entity.
Personal data is processed on the following legal bases:
- Article 6(1)(b) GDPR: To take steps at the request of the candidate prior to entering into an employment contract or other forms of employment.
- Article 6(1)(a) GDPR: Based on the candidate’s consent for additional information provided voluntarily.
- Article 6(1)(f) GDPR: For the legitimate interests of the Controller, such as defending against claims or pursuing claims arising from the recruitment process.
3. Scope of Processed Personal Data
In the recruitment process, the Controller processes the following categories of personal data:
- First and last name,
- Contact details (email address, phone number),
- Information about education and professional experience,
- Additional information voluntarily provided by the candidate in their CV or other application documents.
4. Recipients of Personal Data
The personal data of candidates may be shared with external entities cooperating with InnoThink sp. z o.o., including companies for which InnoThink conducts recruitment processes. Data transfer occurs only to the extent necessary to carry out the recruitment process.
5. Retention Period for Personal Data
Personal data of job candidates will be retained:
- For the duration of the recruitment process and for a period of 6 months after its conclusion, in case further contact with the candidate is required.
- For a period necessary to defend against claims or pursue claims arising from the recruitment process, but no longer than 3 years.
If a candidate consents to participate in future recruitment processes, they may provide consent in writing or via an electronic consent form. In such cases, data will be retained for no longer than 2 years.
6. Rights of Data Subjects
Candidates whose data is processed have the following rights:
- The right to access their personal data,
- The right to rectify their personal data,
- The right to erase their personal data (“right to be forgotten”),
- The right to restrict processing,
- The right to object to processing,
- The right to data portability.
If processing is based on consent, candidates have the right to withdraw their consent at any time without affecting the lawfulness of processing carried out before withdrawal.
7. Transfer of Data to Third Countries
The personal data of candidates will not be transferred outside the European Economic Area (EEA).
8. Right to Lodge a Complaint
If you believe that your personal data is being processed by InnoThink sp. z o.o. in violation of GDPR regulations, you have the right to lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw).
9. Voluntary Nature of Providing Personal Data
Providing personal data is voluntary but necessary for participation in the recruitment process. Failure to provide required data may prevent consideration of your application and participation in the recruitment process.
10. Changes to this Privacy Policy
This Privacy Policy may be updated periodically. The updated version will be made available to candidates prior to any subsequent recruitment process.