I declare that I have read the information obligation regarding the processing of my personal data.

NOTICE ON THE PROCESSING OF PERSONAL DATA (INFORMATION OBLIGATION)

1. 
   
   1. The controller of your personal data is Match-Trade Technologies spółka z ograniczoną odpowiedzialnością, a limited liability company having its registered office in Warsaw at ul. Giełdowa 5, 01-211 Warsaw, Poland, entered in the Register of Entrepreneurs of the National Court Register (Krajowy Rejestr Sądowy) maintained by the District Court for the Capital City of Warsaw in Warsaw, 12th Commercial Division of the National Court Register, under number KRS 0000749554, REGON: 381348297, NIP: 5272865455 (hereinafter referred to as the “Controller”).
   
   2. The Controller has appointed a Data Protection Officer – Krzysztof Teofilski. In all matters concerning the processing of personal data and the exercise of rights connected with such processing, you may contact us in writing at the address: ul. Giełdowa 5, 01-211 Warsaw, Poland, or by e-mail at: [email protected].
   
   3. Your personal data will be processed for the purpose of conducting a recruitment process for a position with the Controller in accordance with applicable law, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as the “GDPR”). Where the recruitment process includes a recruitment interview conducted by way of videoconference, your data may also be processed for the purpose of producing a textual transcript of that interview in order to support the documentation of the meeting.
   
   4. Within recruitment processes, the Controller expects you to provide personal data (e.g. in a CV) only to the extent set out in Polish employment law. Accordingly, you should not provide information going beyond that scope. Should applications submitted contain additional data exceeding the scope provided for by Polish employment law, the processing of such data shall be based on the candidate’s consent (Article 6(1)(a) of the GDPR), expressed by a clear affirmative action consisting in the candidate’s submission of the application documents. Where the applications submitted contain information that is not relevant to the purpose of recruitment, such information shall not be used or taken into account in the recruitment process.
   
   5. Where you give your voluntary and optional consent (Article 6(1)(a) of the GDPR), your data will also be processed for the purposes of future recruitment processes conducted by the Controller, in particular for the purpose of presenting new job offers to you, inviting you to take part in further recruitment processes, and verifying your willingness to participate in such future processes.
   
   6. Where the preferred form of engagement is an employment contract (umowa o pracę), the legal basis for processing shall be a legal obligation to which the Controller is subject (Article 6(1)(c) of the GDPR in conjunction with the provisions of Polish employment law) — for the purpose of fulfilling obligations arising from law in connection with the employment process, in particular under the Polish Labour Code (Kodeks pracy). Where the preferred form of engagement is a civil-law contract (umowa cywilnoprawna), the legal basis for the processing of the data contained in the application documents shall be the taking of steps at the data subject’s request prior to entering into a contract (Article 6(1)(b) of the GDPR) — for the purpose of conducting the recruitment process.
   
   7. For the purpose of verifying qualifications and skills, and of determining the terms of cooperation, the legal basis for the processing of data shall be the legitimate interest of the Controller (Article 6(1)(f) of the GDPR). The Controller’s legitimate interest consists in verifying candidates for employment and determining the terms of any potential cooperation. For the purpose of establishing, pursuing or defending against any claims by or against the Controller, the legal basis for the processing of data shall likewise be the legitimate interest of the Controller (Article 6(1)(f) of the GDPR).
   
   8. Where the documents you provide contain personal data referred to in Article 9(1) of the GDPR (special categories of personal data), such data shall be processed on the basis of your consent (Article 9(2)(a) of the GDPR), which may be withdrawn at any time.
   
   9. Processing of data for purposes other than those set out above may take place: (i) on the basis of additional consent obtained from you; (ii) on the basis of applicable law; or (iii) where such processing is compatible with the purpose for which the personal data were originally collected (Article 6(4) of the GDPR).
   
   10. Providing personal data to the extent specified in Article 22¹ of the Polish Labour Code (Kodeks pracy) is required by law, in particular by the Polish Labour Code, where you prefer employment under an employment contract, and is required by the Controller where you prefer engagement under a civil-law contract. Failure to provide such data shall result in your application being unable to be considered in the recruitment process. The provision of any other data is voluntary.
   
   11. You have the right of access to your personal data, the right to obtain the rectification thereof, the right to restriction of processing, the right to object to processing (where the processing is based on the Controller’s legitimate interest), as well as the right to data portability and the right to erasure.
   
   12. You have the right to lodge a complaint with the supervisory authority, namely the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych).
   
   13. You have the right to withdraw your consent to the processing of personal data at any time, which shall not affect the lawfulness of any processing carried out on the basis of consent before its withdrawal. Where consent has been given for several purposes, you have the right to withdraw such consent in respect of one or more of those purposes. Following the withdrawal of consent, your data shall be deleted without undue delay from the relevant database.
   
   14. You shall not be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. The use of a tool for the automatic production of a transcript of a recruitment interview shall not constitute a decision based on automated processing within the meaning of Article 22 of the GDPR — the tool serves solely to record the content of the interview in textual form, and any and all recruitment decisions are taken by the Controller’s authorised personnel on the basis of their own substantive assessment.
   
   15. The Controller may transfer the data to the following recipients where it is necessary to carry out the process: companies within the Controller’s corporate group, advisers, contractors, providers of server services and data storage services, providers of software used to support the recruitment process and the verification of candidates, including providers of interview transcription.
   
   16. In the event of any transfer of personal data to third countries, i.e. to recipients having their seat outside the European Economic Area (EEA) or Switzerland, in countries which, in the view of the European Commission, do not ensure an adequate level of data protection (third countries not ensuring an adequate level of protection), the Controller shall effect such transfers using mechanisms compliant with applicable law, which include, in particular: (i) the EU Standard Contractual Clauses; (ii) the EU-US Data Privacy Framework; and (iii) adequacy decisions, where the transfer of data is made to a third country in respect of which the European Commission has determined, by way of a decision, that that third country ensures an adequate level of protection.
   
   17. Personal data shall be processed for the following periods: (a) for the period necessary to conduct the recruitment process for which you are applying, and no longer than 90 days from its conclusion; (b) where consent to participation in future recruitment processes has been given, until such consent is withdrawn; (c) to the extent necessary for the establishment, pursuit or defence of claims, until the expiry of the limitation period for such claims under applicable law, in particular under Article 18³ᵈ of the Polish Labour Code (3 years).