Information on the processing of personal data by ERBUD International
1. Who is your personal data administrator?
The Administrator of the personal data (hereinafter referred to as “Data”) processed by us in connection with the conduct of our business activities is ERBUD International, with its registered office in Jasionka 942, 36-002 Jasionka , hereinafter referred to as the Administrator or ERBUD.
ERBUD is a member of the ERBUD Capital Group. The list of all companies of the Erbud Group can be found here.
The data shall be processed in accordance with currently applicable provisions, including the General Regulation on the Protection of Personal Data (GDPR).
Data means any information about an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name and surname, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of the natural person.
2. How do we process Data?
ERBUD takes particular care to protect the interests of Data Subjects, and in particular ensures that the Data collected is: – processed lawfully, fairly and in a manner transparent to the Data Subject; – collected for specified, explicit and legitimate purposes and not further processed in a way incompatible with those purposes; – adequate, relevant and limited to the purposes for which they are processed; – accurate and, where necessary, kept up to date; – stored in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the data are processed; – processed in a way which ensures appropriate security of the Data, including protection against unauthorised or unlawful processing and accidental loss, destruction or damage, by means of appropriate technical or organisational measures.
3. When do we process data?
We process Data in a number of situations. These may involve situations in which you have provided your Data to us personally through various communication channels (e.g. by submitting your application, sending us an enquiry/offer by email or telephone) or as part of our cooperation during conclusion or performance of a contract, but also in cases in which we have obtained your Data from other sources (e.g. from a company with which you cooperate and which is our contractor/customer).
4. Processing of Data in connection with business relationships and contact.
a. What types of Data do we process in connection with business relationships and contact?
As a Controller, we process the Data of our business partners (investors, subcontractors, contractors), their employees/co-workers, Data of other persons provided to us within the scope of performance of contracts, as well as other persons establishing contact with us via telephone or email.
We may process the following Data in connection with the business relationship and contact: Identification Data, Contact Data, Data concerning job position and professional entitlements and other Data provided to us in connection with the cooperation or contact.
We obtain the foregoing Data directly from the data subjects, as well as from other persons, e.g. their employers / principals.
b. What is the purpose and basis for processing the Data in connection with the business relationship and contact?
In connection with the business relationship and contact, we process Data for the following purposes: – establishing a business relationship; – conclusion and performance of the contract; – settling contracts; – responding to any queries or requests made and for further correspondence/contact in this regard; – marketing and contacting for other information and services from ERBUD; – defence against potential claims, as well as for the purpose of possible referral of claims.
The basis for the processing of Data by ERBUD is: – the necessity to perform the contract or undertake measures prior to its conclusion at the request of the Data Subject; – fulfilment of legal obligations imposed on the Administrator; – legally justified interest of the Administrator in the form of marketing products and services of the Administrator or a third party, contact, including correspondence and defence against potential claims.
Providing the Data is voluntary, however, it may be necessary in order to enter into or perform a contract or in order to reply to a directed enquiry or to conduct correspondence.
c. How long will the Data be processed in connection with the business relationship and contact?
Data collected for the purpose of concluding and performing an agreement will be processed for the duration of the agreement, and then until the expiry of the limitation period for potential claims.
Data of persons who have contacted ERBUD will be processed for the period necessary to respond and possibly conduct correspondence, and then until the expiry of the period of limitation of possible claims.
d. Who is the recipient of the Data in connection with the business relationship and contact?
Data processed by us in relation to business relations and contact may be disclosed to other Erbud Group companies, our business partners (e.g. investors and subcontractors as part of cooperation on a given project/investment) and our other contractors supporting us in the organisation of work, IT services and marketing.
5. Processing of Data in connection with recruitment.
a. What types of Data do we process in connection with recruitment?
As a Controller, we process the Data of applicants for employment provided through all available recruitment channels, including in particular the processing of any Data provided to us as part of the application and collected as part of the recruitment process.
We may process the following Data in connection with recruitment (the processing of some Data may depend on your consent): Identification Data, Contact Data, Education Data, Skills and previous employment Data, Eligibility Data and other Data provided to us during the recruitment process.
b. What is the purpose and basis for processing the Data in connection with the recruitment?
In connection with recruitment, we process Data for the following purposes: – examination of the candidature and execution of the recruitment process, and in the case of consent, also for the purposes of future recruitment or recruitment within the Erbud Group; – defence against potential claims, as well as for the purpose of potential claim referral.
The basis for processing of the Data by the Administrator are the provisions of the law in force, in particular the Labour Code and executive acts, and in the scope broader than specified in those provisions and in the scope of future recruitment, your consent.
Providing Data is voluntary, however, it is necessary to carry out the recruitment process and to establish possible further cooperation.
c. How long will the Data be processed in connection with the recruitment?
Data will be processed for the purposes set out above for the duration of the recruitment process or future recruitments and thereafter until the expiry of the limitation period for any claims.
d. Who is the recipient of the Data in relation to recruitment?
Data processed by us in connection with the recruitment process may be transferred to other Erbud Group companies and entities supporting us in the recruitment process and providing IT services on our behalf.
6. Does your Data go outside the European Economic Area (EEA)?
Your Data does not go outside the European Economic Area, and if a transfer to a location outside the EEA should take place in the future, ERBUD takes appropriate steps to ensure the protection of the Data, in particular by: – the use of specific contractual clauses called “standard contractual clauses” which have been approved by the European Commission; or – transferring to countries for which the European Commission has issued a decision recognising an adequate level of protection.
In this case, you have the right to obtain a copy of the relevant safeguards.
7. What rights are vested in you?
Under the terms of the applicable legislation, you are vested with the right of: – access to your Data, including the right of obtaining a copy of your Data; – request for rectification, erasure or restriction of processing; – objection to processing; – transferring them to another controller (within the scope in which the basis for their processing is necessity to perform a contract or your consent).
If the processing of your Data is based on your consent, you have the right to withdraw it at any time without affecting the lawfulness of the processing that has been carried out on the basis of your consent before its withdrawal.
You are also always entitled to lodge a complaint with the President of the Office for Personal Data Protection.
8. Contact:
You may contact ERBUD International or the Data Protection Officer – at iod@erbud.pl
