Information on personal data processing by Comarch group companies – recruitment process

 

THE CONTROLLER, CONTROLLER’S REPRESENTATIVE, DATA PROTECTION OFFICER

 

The personal data controllers are companies from the Comarch Group. The current list of Comarch Group companies and their contact details are available on the following websites: 

https://www.comarch.com/contact/worldwide-offices/

https://www.comarch.com/company/capital-group/

The Comarch Group companies established outside the EU have appointed Comarch S.A., the main company in the group, as their representative. 

Inquiries or requests related to the personal data processing by the Comarch Group companies should be directed to the following e-mail address : iod@comarch.pl.

 

The Data Protection Officer has been appointed by the following companies: Comarch S.A. (contact: iod@comarch.pl), Comarch Polska S.A. (contact: iod@comarch.pl), CA Consulting S.A. (contact: iod@comarch.pl), Comarch Software und Beratung AG (contact: datenschutzbeauftragter@comarch.de), Comarch AG (contact: datenschutzbeauftragter@comarch.de) and Comarch Healthcare S.A. (contact: iod@imed24.pl).

 

PURPOSE OF THE PERSONAL DATA PROCESSING

 

On our official website career.comarch.com we provide a contact form, a form for sending a reminder message about the job offer (available only on the mobile version) and recruitment forms.

In case of sending a contact form - your personal data will be processed for the purpose of servicing your inquiry. If you send a form for sending a reminder message about the job offer - your personal data will be processed for the purpose of sending you a reminder about the job offer you have chosen.

In the case of sending a recruitment form related to a specific offer - your personal data will be processed for the purpose of the recruitment process chosen by you and, but only if you give your additional consent, for the purpose of other (current and future) recruitment. In case you send a general recruitment form (not related to a specific offer) or provide us with recruitment documents in a different way - your personal data may be processed for the purpose of various (current and future) recruitment processes.

As part of the recruitment process, the data provided by the candidate may be processed in order to profile and match the candidate's application to current job offers, taking into account the requirements for a specific position, indicated preferences, education and work experience. However, the data provided is not processed for automated decision making.

 

SCOPE OF THE DATA BEING PROCESSED, PERIOD AND LEGAL BASIS FOR PROCESSING OF PERSONAL DATA

 

In the case of sending a recruitment form related to a specific offer - the legal basis for the processing of candidates data including: name (names) and surname, parents' names, date of birth, place of residence (address for correspondence), education, course of previous employment is art. 6 clause 1 point b of GDPR[i] (taking actions preceding concluding of the contract). If you provide us with other data or documents through this form, these data and / or documents will be processed on the basis of your consent, which is expressed just by the mere fact of sending the form (for specific recruitment) or checking the checkbox (for other recruitments).

In case of sending the general recruitment form (not associated with a specific offer) or in case of providing us with recruitment documents in a different way and in case, if you provide us with your data via the contact form or the form for sending a reminder message about the job offer – the legal basis for processing your personal data will be your consent, but in such the accident, just a mere fact of sending a form or providing us with recruitment documents in a different way constitutes your consent to the processing of personal data.

Lack of completion of the form fields indicated as required results in the inability of sending the form. In the remaining scope, providing data is voluntary and you decide yourself about the scope of data made available in the form, in shared documents or in another form during the recruitment process.

Participation in the Comarch Group companies’ recruitment process and the consent to the processing of personal data is voluntary and you can withdraw your consent at any time. In order to withdraw your consent or resign from participation in recruitment process, please send a relevant statement using the contact details provided above. The withdrawal of consent does not affect the lawfulness of the candidate's personal data processing prior to the withdrawal of his/her consent.

The data shall be processed for the period necessary to achieve the purposes of the processing specified above.

 

RIGHTS RESULTING FROM PERSONAL DATA PROTECTION REGULATIONS

 

In accordance with the GDPR provisions, the person whose personal data is processed has the right to access to data; right to rectification of data; right to erasure(right to be forgotten); right to restriction of processing of data; right to data portability; right to object (where the processing is based on the legitimate interest of the controller); right to withdrawal of consent (where the processing is based on the consent). Inquiries or requests should be directed to the following e-mail address : iod@comarch.pl.

The data subject has the right to lodge a complaint with the supervisory authority if they believe that the personal data processing concerning them violates the provisions of the GDPR. In Poland, the supervisory authority is the President of the Personal Data Protection Office.

 

RECIPIENTS

 

Job candidates’ data can be shared with Comarch Group companies and service providers with whom the Comarch Group companies undertake cooperation in the scope necessary to service the activities of the Comarch group companies, including service providers who conduct and promote recruiting process, legal and personnel advisors.

Data are stored on Comarch SA's servers, but they can be available remotely for representatives of other Comarch Group companies. Therefore, we would like to inform you that personal data may be transferred to a non-EU country in which the company from Comarch group operates. In the case of transferring data to another country in relation to which no decision of the European Commission stating an appropriate degree of protection has been issued, Comarch group companies apply appropriate safeguards, as a rule, through standard data protection clauses adopted by the European Commission or supervisory authority. Inquiries regarding the transfer of data to other countries and the method of obtaining copies of standard data protection clauses, should be sent to: iod@comarch.pl.

 

SCOPE OF APPLICATION OF THIS INFORMATION

 

This Information on personal data processing by Comarch Group companies is a purely informational document and it is available to you in order to fulfill the GDPR information obligation of Comarch Group companies.

Version valid from 05/10/2018.



[i] Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation