1. PERSONAL DATA PROTECTION POLICY
This Privacy Policy is a set of rules designed to inform you about all aspects of the process relating to the collection, processing and protection of your personal data.
This policy specifies how and for what purposes your personal data will be processed, how they will be protected and what your rights will be. Barlinek processes personal data for different purposes, and different collection methods, legal grounds for processing, use, disclosure and storage periods may apply depending on the purpose.
The protection of personal data is especially important to us, and we give priority to the security of all data held by us. The guarantee of applying the highest standards and principles of personal data processing security are the policies, procedures and trainings implemented by us, including data protection, confidentiality and security, as well as appropriate IT systems, including independent certificates (SSL certificate). Regular checks on the measures taken to ensure their adequacy in order to secure the data held and the principle of minimising the processing thereof guarantee the security and transparency of the processes conducted.
Personal data are processed on the basis of the applicable provisions of the law, in particular the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data, and on the free movement of such data and the repeal of Directive 95/46/EC (hereinafter referred to as the GDPR) and the Act on Personal Data Protection.
We hope that this Privacy Policy will help you understand the principles, purposes and ways in which we collect personal information we provide, both through the website and in connection with our business activities with our customers, contractors and their employees, and marketing, including training, contests and loyalty programmes.
2. PERSONAL DATA CONTROLLER
The Controller of your personal data is Barlinek S.A. with its registered office in Kielce (25-323), Al. Solidarności 36, KRS 0000018891, NIP 959-08-21-486 (hereinafter referred to as: Barlinek / the Controller) If you have any questions regarding the processing of your data, please contact us via e-mail [email protected]
The process
Barlinek processes personal data of current and potential Contractors; this process also includes data of their employees co-workers, and/or natural persons related to them.
Personal Data
Processing of the Contractors’ personal data is initiated by an employee of Barlinek. Personal data include first and last name, name of the employer (NIP, REGON, KRS, business address, bank account number), position of contact person, telephone number, e-mail address, history of cooperation and other business contact details.
Purpose and legal basis of the processing
Personal data of our Contractors shall be processed for the purpose of:
In the case when personal data are collected for the purpose of conclusion and performance of the agreement, you providing your personal data is a necessary condition for its conclusion. The consequence of not providing the data is the lack of possibility of establishing cooperation between you and Barlinek. Providing the data for other purposes is voluntary, but necessary for their performance.
Data storage
Personal data will be kept by Barlinek for the period necessary for the aforementioned purposes, i.e. the period of performance of the cooperation agreement, the period necessary to consider the submitted complaint, until the dispute is resolved / the parties are settled, taking into account the relevant limitation period of claims of a debt collection nature, and in the case of direct marketing, until you file an objection.
However, each time Barlinek has the right to process your personal data after the periods indicated above, for the period for which the law requires data to be stored or for the period of limitation of possible claims.
Recipients
The recipients of your personal data will be entities providing Barlinek with services necessary to perform the agreement concluded with you and processing the data on the basis of an personal data processing outsourcing agreement concluded with the Controller, in particular entities from the Barlinek Capital Group, IT system providers, entities providing transport/courier/post services, services of professional document destruction. Barlinek, apart from the entities mentioned above, makes personal data available to entities authorised to receive them on the basis of the provisions of the law.
Proces
Barlinek przetwarza dane osobowe obecnych i potencjalnych Kontrahentów, w tym procesie mieszczą się także dane ich pracowników i współpracowników oraz/lub osób fizycznych z nimi związanych.
Przetwarzanie danych osobowych Kontrahentów inicjuje pracownik Barlinka. Dane osobowe obejmują imię i nazwisko, nazwę pracodawcy (NIP, REGON, KRS, adres prowadzenia działalności gospodarczej, numer rachunku bankowego), stanowisko osoby kontaktowej, numer telefonu, adres e-mail, historie współpracy oraz inne służbowe dane kontaktowe.
Dane osobowe naszych Kontrahentów przetwarzane są w celu:
zawarcia oraz realizacji umowy o współpracę, na podstawie art. 6 ust. 1 lit. b RODO (wykonanie umowy), a także
realizację ewentualnych roszczeń oraz podjęcia działań w związku z procesem windykacji należności, na podstawie art. 6 ust. 1 lit. f RODO (prawnie uzasadniony interes)
W przypadku kiedy dane osobowe zbierane są w celu zawarcia i realizacji umowy, podanie przez Panią / Pana danych osobowych jest warunkiem koniecznym do jej zawarcia. Konsekwencją niepodania danych jest brak możliwości nawiązania współpracy między Panią / Panem, a Barlinkiem. Podanie danych w pozostałych celach jest dobrowolne, jednak niezbędne do ich realizacji.
Dane osobowe będą przechowywane przez Barlinek przez okres konieczny dla określonych powyżej celów, tj. przez okres realizacji umowy o współpracę, okres niezbędny do rozpatrzenia złożonej reklamacji, do momentu rozstrzygnięcia sporu / rozliczenia stron, z uwzględnieniem właściwych terminów przedawnienia roszczeń o charakterze windykacyjnym a w przypadku marketingu bezpośredniego do momentu wniesienia przez Panią / Pana sprzeciwu.
Każdorazowo jednak Barlinek ma prawo przetwarzać Pani/Pana dane osobowe po okresach wskazanych powyżej, przez czas, w którym przepisy prawa nakazują przechowanie danych lub przez okres przedawnienia ewentualnych roszczeń.
Odbiorcami Pani/Pana danych osobowych będą podmioty świadczące na rzecz Barlinka usługi niezbędne do wykonania zawartej z Panią/Panem umowy a przetwarzające dane na podstawie umowy powierzenia przetwarzania danych osobowych zawartej z Administratorem, w szczególności podmioty z Grupy Kapitałowej Barlinka dostawcy systemów informatycznych, podmioty świadczące usługi transportowe/kurierskie/pocztowe, usługi fachowego niszczenia dokumentów. Barlinek, poza wskazanymi wyżej podmiotami udostępnia dane osobowe podmiotom upoważnionym do ich odbioru na podstawie przepisów prawa.
The process
Barlinek processes personal data of individuals who contact us in a traditional way, as well as through the website, e.g. through contact forms, inquiries, registration of architects. The personal data contained in this correspondence shall be processed solely for the purpose of communication and the handling of the issue to which it relates. In order to use the electronic form, it is necessary to provide personal data necessary for contact. The person contacting us may also provide other data in order to facilitate the contact or handling of the inquiry. Providing data marked as mandatory is required in order to accept and handle the inquiry, while failure to provide such data results in the inability to use the form. Providing data which are not required is voluntary.
In the event of contacting the Controller by phone, in matters not related to the concluded agreement or the services provided, we may only request personal data as long as it is necessary to handle the case to which the contact pertains.
Personal Data
The processing of personal data of the contact persons includes the name, last name, e-mail address, telephone number, locality, address (street, house number, postal code), company and membership of the architect zone (by selecting the appropriate field).
Purpose and legal basis of the processing
The legal basis for processing your personal data in the case of providing them in connection with the possibility of contact is Article 6(1)(f) of the GDPR (legally justified interest – replying to a message) in connection with the necessity of handling a reported issue, sending a catalogue or handling an enquiry.
In the case of giving additional consent to sending commercial information, your personal data (e-mail address, telephone number) may be processed in order to send commercial information by electronic means, including newsletters about Barlinek’s own products. In this case, the basis for processing these personal data will be Art. 6(1)(a) of the GDPR, (consent) given by clicking on the appropriate function windows located on the Barlinek Institute of Design website or when applying for participation in contests organised by the Controller.
If you have consented to the processing of your data, you have the right to withdraw your consent at any time by sending this information to [email protected]
Cookies
We use technologies on our websites, such as cookies, to collect and process personal data and operational data in order to personalise the provided content and advertising and to analyse traffic on our websites.
Cookies are small text files sent by the portal and stored on the User’s computer (or other device used by the User). Cookies are not used to collect personal data such as name, last name or email address. Cookies are used to recognise the User’s personal preferences. In other words, cookies used by the website allow to identify the User’s computer during the next visit to the portal and are intended only to facilitate the use of the portal.
Barlinek’s system logs collect data about IP addresses (network interface number), however, these data do not allow for unambiguous identification of the user (indication of a specific natural person using the computer or other device connected to the Internet).
Data storage
Personal data will be kept by Barlinek for the period necessary for the above purposes, i.e. for a period of one year from the end of the correspondence, and after this period for the period for which the law requires data to be stored or for the period of limitation of possible claims, and in the event of giving additional consent to sending commercial information, including profiling, until the withdrawal of consent for the processing of data for marketing purposes (sending of commercial information), and after this period for the period for which the law requires data to be stored or for the period of limitation of possible claims.
Recipients
The recipients of your personal data will be entities providing Barlinek with services necessary to perform the agreement concluded with you and processing the data on the basis of an personal data processing outsourcing agreement concluded with the Controller, in particular entities from the Barlinek Capital Group, IT and hosting system providers, entities providing transport/courier/post services, services of professional document destruction, as well as companies or natural persons enabling the implementation of the contest, in particular entities from the Barlinek Capital Group, or participation in the Barlinek’s architect zone. Apart from the entities mentioned above, it provides personal data to entities authorised to receive them on the basis of the provisions of the law.
The process
As part of the Barlinek recruitment processes, we collect personal data of the work candidates. We collect your personal data directly from you by submitting an application via the Barlinek website (e-recruitment), in the form of a traditional CV submitted to us, or from a third party, i.e. recruitment agencies, depending on the requirements of the recruitment process. If you give your additional consent, these data will also be used in future recruitment processes and will be made available for recruitment purposes to other, designated entities of the Group.
Personal Data
We process information provided to us in your CV, cover letter or other forms necessary for the recruitment process. The information we process includes necessary information specified by the provisions of the law, such as first name(s), last name, date of birth, telephone number, mailing address, e-mail address, education, employment history, skills, references and other information disclosed in the application documents. Therefore, information should not be provided in the broader scope, including any particular data, i.a., ethnic origin, sexual orientation, creed or any other similar belief, political opinion, state of health, sexual life. Should the applications be accompanied by such additional data, they will not be used and will not be taken into account during the recruitment process. In the case of applications for positions where applicable provisions of the law require that you provide information about no criminal record, we may ask you to provide such data. We only obtain such data insofar as this is appropriate and in compliance with local provisions of the law.
Purpose and legal basis of the processing
Your personal data are processed in order to fulfil the obligation resulting from the provisions of the law, in particular the Labour Code, and to take action at the request of a person who is a data subject prior to the conclusion of an agreement, related to the recruitment process on the basis of Art. 6(1)(c) of the GDPR (legal obligation) and Art. 6(1)(B) of the GDPR (taking action at the request of a person who is a data subject prior to concluding an agreement), and also after expressing separate consent for the purpose of conducting the recruitment process with respect to the data not required by the provisions of the law, for the purposes of future recruitment processes and recruitment conducted to the indicated entities of the Barlinek Capital Group, on the basis of Art. 6(1)(a) of the GDPR (consent of the data subject).
Providing data in the scope specified in the Labour Code or in other specific acts (as required by the notice) is necessary to participate in the recruitment procedure. The consequence of not providing such data may be the exclusion of a work candidate from the recruitment procedure. Providing other information is voluntary and does not affect the possibility of participating in the recruitment.
Data storage
In connection with your participation in the recruitment process your personal data will be stored:
a) until the end of the recruitment process for the position indicated in the notice,
b) in the case of giving consent to the processing of data for the purposes of future recruitment conducted by the Controller – until the moment of withdrawal of such consent, not later than one year from the moment of giving consent,
c) in the case of providing data to entities from the Barlinek Capital Group – until the withdrawal of this consent.
After the above mentioned period, for the period for which the law requires data to be stored or for the period of limitation of possible claims. In the event of successful recruitment, your personal data will be stored for the purpose of preparing an employment agreement or a civil law agreement, in accordance with statutory provisions.
Recipients
The recipients of personal data of the candidate will be entities providing services related to the handling of the recruitment process, entities providing services of destruction of documents and other carriers, as well as entities authorised to receive data on the basis of the provisions of the law. In the event that consent is given for the data to be made available, the Companies of the Barlinek Capital Group will be specified as the recipient.
4. LEGAL BASIS FOR THE PROCESSING
Barlinek will only process your personal data in accordance with the applicable provisions of the law. The legal basis for the processing of personal data in each process is specified in the relevant tab above.
Barlinek processes your personal data taking into account not only the legitimate interest of the Controller, but, above all, respecting your rights under the provisions on personal data protection and their impact on the activities undertaken in selected areas of activity.
5. DATA TRANSFER
Barlinek transfers personal data to other entities, including state authorities, exclusively on the basis of the provisions of the law.
In connection with its business activity which requires protection of many administrative and technical elements, Barlinek entrusts the processing of personal data to external entities. We make every effort to provide services of the highest quality with the support of external entities. The concluded and appropriate outsourcing agreements guarantee the highest standard of protection and confidentiality and security of personal data, as well as their use only for the purpose of performing the contractual or legal obligation of the Controller.
Personal data processed by us may be transferred to:
Barlinek hereby reserves the right to disclose selected information concerning the data subject to the competent authorities or third parties who request such information, on an appropriate legal basis and in accordance with applicable provisions of the law.
The transfer of personal data outside the EEA to a country which, in the opinion of the European Commission, does not guarantee an adequate level of protection of personal data, takes place on the basis of an agreement which takes into account the EU requirements regarding the transfer of personal data outside the EEA, with appropriate clauses ensuring the security of processing. The transfer of personal data to the United States is based on the Transatlantic Data Privacy Framework to organizations that are listed in the “List of Data Protection Frameworks”.
Automatic processing of personal data
Your personal data are not processed using tools based on automated decision-making (including in the form of profiling) in such a way that as a result of such automated processing, any decisions could be made that would produce legal effects or would similarly affect any effects. towards clients, contractors, their employees or associates, as well as the administrator’s employees or associates or job candidates
6. RIGHTS OF NATURAL PERSONS
You have the following rights in connection with the processing of personal data:
An application to exercise the rights described above may be submitted by post to the following address: Al. Solidarności 36, 25-323 Kielce or via e-mail [email protected]
The application should, as far as possible, precisely indicate to what it pertains, i.e. in particular the addressee of the application and which of the above mentioned rights the applicant wishes to use. If the Controller is unable to determine the content of the application or identify the applicant on its basis, the Controller shall request additional information from the applicant.
The notification will be answered without delay, not later than one month after its receipt. If it is necessary to extend this time limit, the Controller shall inform the applicant of the reasons for the extension. The reply shall be given in writing unless the application is submitted by e-mail or providing the response electronically was requested.
7. REVISION
To the extent not regulated by this Privacy Policy, the provisions of the Personal Data Protection Act and the GDPR shall apply.
The Policy is reviewed on an ongoing basis and updated as necessary.
We reserve the right to change individual provisions of our Privacy Policy without prior notice. Please check our Privacy Policy each time before using our offer in order to get acquainted with its current version in case of possible changes and updates.
8. COOKIE FILES
Information about cookies can be found at the link: Cookies Policy
9. QUESTIONS AND CONTACT
The Controller stores correspondence with the Customer for statistical purposes and the best and quickest possible response to inquiries, including the request to remove data or exercising the right of objection, the data collected in this manner will not be used for purposes other than execution of the application.
If you have any questions regarding the processing of your personal data, please contact us by post at the following address: Al. Solidarności 36, 25-323 Kielce or by e-mail to [email protected]
