SECURITY POLICY
Please be informed that in accordance with the implementation on 25 May 2018 Regulation No. 2016/679 of the European Parliament and the European Council of 27 April 2016 regarding the protection of individuals with respect to the personal data processing and to the unrestrained exchange of such data and to the repeal of Directive 95/46/EC (general regulation on data protection) FABRO company with its registered office in Miasteczko Śląskie has adopted the Personal Data Security Policy. The legal acts the present Policy is subordinate to constitute of: Regulation No. 2016/679 of the European Parliament and the European Council of 27 April 2016. ( in force since 25 May 2018) regarding the protection of individuals with respect to the personal data processing and to the unrestrained exchange of such data and to the repeal of Directive 95/46/EC (General Data Protection Regulation) – hereinafter named the GDPR and the Act of 10 May 2018 regarding the protection of personal data. The Policy objective is to indicate the necessary performed actions and establishing the rules and principles of conduct in order to fulfill the personal data controller’s duties in the area of personal data protection in accordance with the provisions on personal data protection, particularly GDPR. Security of personal data is defined as the protection of data through the implementation and exploitation of appropriate technical and organizational measures to prevent data from unauthorized processing. The policy applies to all Employees, Associates, Counterparties and Candidates willing to become a part of FABRO and to the individuals with access to company’s data
DATA CONTROLLER
1. The controller of the personal data is FABRO with its registered office in Miasteczko Śląskie (seat address: ul. Ks. Wyciślika 23, 42-610 Miasteczko Śląskie), Tax ID (NIP) 6451436352, Statistical ID (REGON) 243464429, e-mail: www.fabro24.eu, fabro@fabro24.eu
SECURITY CONTROLLER
2. Contact details of the Security Controller at FABRO with its registered office in Miasteczko Śląskie (seat address: ul. Ks. Wyciślika 23, 42-610 Miasteczko Śląskie), e-mail address: www.fabro24.eu, fabro@fabro24.eu, Tel., 790-526-999
THE LEGAL BASIS AND THE OBJECTIVES OF THE PERSONAL DATA PROCESSING
1. The processing of data is performed in accordance with subject’s own tasks or tasks specified by legal provisions, pursuant to Article 6(1)(c) of the GDPR.
2. Data processing may also be required in order to perform a contract which subject is a party of or to take a measure at subject’s request, prior to the conclusion of a contract pursuant to Article 6(1)(b) of GDPR.
3. Certain circumstances may arise in which the subject may be required to provide a consent regarding the processing of personal data for a particular purpose pursuant to Article 6(1)(a) of the GDPR.
4. In certain situations, the data processing may be based on the legitimately justified interest of the controller, i. e. person or property safety or debt recovery under Article 6(1)(f) of the GDPR.
THE RECIPIENTS OF THE PERSONAL DATA
1. Subject’s data shall not be transferred to other entities, with the exception of the entities authorized to process the data under the legal provisions and the entities providing technical support for IT and ICT systems in which subject’s data is processed.
STORAGE PERIOD OF THE PERSONAL DATA
1. Subject’s personal data shall not be stored for more than the time period necessary to achieve the data gathering purpose or for the time period specified by legal provisions.
After serving its purpose, the collected data may be stored only for archival for a time period determined by the Prime Minister’ s regulation on the registrar’s office instruction, uniform factual lists of files and instructions on the organizational structure and scope of operation of the company archives, unless specified otherwise.
DATA SUBJECT RIGHTS, INCLUDING PERSONAL DATA ACCESS
1.Subject is entitled to access gathered data content and to rectify, delete, restrict its processing, transfer or oppose its processing.
THE RIGHT TO WITHDRAW CONSENT
1. Subject is entitled to refuse personal data processing in the circumstances when it is required and to withdraw it in the event of prior consent.
2. The withdrawal of the consent shall not affect the processing of subject’s data until its withdrawal.
THE RIGHT TO LODGE A COMPLAINT WITH THE SUPERVISORY AUTHORITY
1. Subject is entitled to lodge a complaint with the FABRO Data Controller with its registred office in Miasteczko Śląskie (seat address: ul. Ks. Wyciślika 23, 42-610 Miasteczko Śląskie), Tax ID (NIP) 6451436352, Statistical ID (REGON): 243464429, e-mail address: www.fabro24.eu, fabro@fabro24.eu or to the President of the Office for Personal Data Protection, in the event subject’s personal data processing violates the regulations of GDPR.
AUTOMATED DECISION MAKING, PROFILING
1. Subject’s personal data shall not be processed automatically, including profiling..
RECRUITMENT CLAUSE
The Controller of Personal Data with its seat in Miasteczko Śląskie (address: ul. Ks. Wyciślika 23, 42-610 Miasteczko Śląskie), Tax ID (NIP) 6451436352, Statistical ID (REGON): 243464429 has appointed a Security Controller to whom subject is entitled to address in any matter concerning data processing at e-mail address: fabro@fabro24.eu
Candidate is entitled to request a telephone contact with the Security Controller by sending a request with a telephone number via e-mail address given above. FABRO company kindly asks to provide only information resulting from the labour law provisions in recruitment applications, including valid qualifications or extraordinary circumstances, if their existence / fulfillment is required by specific legal provisions to perform certain function.
Including personal data in your CV is optional, yet necessary to carry out the recruitment process. Failing to provide personal data shall result in the inability to complete the recruitment process. Personal data shall be processed pursuant to Article 6(1)(a) and (c) of the Regulation No. 2016/679 of the European Parliament and the European Council of 27 April 2016 regarding the protection of individuals with respect to the personal data processing and to the unrestrained exchange of such data and to the repeal of Directive 95/46/EC (Official Journal of the European Union No. L 119/1 of 4.5.2016; hereinafter: GDPR).
Subject’s data shall be accessible only to authorised employees of Company’s Management Board.
Subject is entitled to access gathered data and has the right to rectify, delete, restrict its processing, the right to transfer the data,the right to lodge a complaint , the right to withdraw processing consent at any time without affecting the lawfulness of processing performed on the grounds of consent prior to its withdrawal.
Subject is entitled to lodge a complaint against the data processing with the President of the Office for the Protection of Personal Data.You have the right to lodge a complaint against the processing of data with the President of the Office for the Protection of Personal Data.
Candidates’ personal data shall not be subject to automated processing.
Personal data shall be processed until the recruitment process is completed, subject to a maximum of three months from the date of submitting the CV. Within 1 year after the completion of the recruitment process additional consen shall be obtained in order to process candidates’ personal data in subsequent recruitments conducted by the personal data controller.
Candidate is responsible for including the following consent in the application:
“I hereby give my consent to FABRO company with its registered office in Miasteczko Śląskie to process the personal data contained in my application in order to conduct the recruitment process for the position of _____________________________”.
In case subject also consents to the personal data processing after the recruitment process completion for the purposes of future recruitments, please submit the following additional consent:
“I hereby give my consent to FABRO with its registered office in Miasteczko Śląskie to process the personal data contained in my application for the needs of future recruitment processes, including positions other than __________________________________, within 1 year from the date of the recruitment process completion for the position of __________________________________”.