Privacy policy
Pursuant to Article 13 section 1 and 2 and Article 14 section 1 and 2 of the Regulation of the European Parliament and of the Council of Europe (EU) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and the repeal of Directive 95/46/EC (General Data Protection Regulation) of the 27th of April 2016, hereinafter referred to as the GDPR, we inform you about the manner and purpose for which we process your personal data (hereinafter referred to as “data protection data”) and your rights.
One of the priorities of the Privacy Policy in force at Concession Europe Spółka z ograniczoną odpowiedzialnością is to respect the privacy of visitors to the Company’s website.
- Who is responsible for data processing and who can be contacted.
The controller of your personal data is Concession Europe Sp. z o.o., with its registered office (15-688) Białystok, ul. Gen. George Smith Patton 4, hereinafter referred to as “Controller” or “Concession”, which can be contacted:
1. in writing by directing correspondence to the address (15-688) Białystok, ul. Gen. George Smith Patton 4
2. by telephone at telephone number + 48 22290372
3. by e-mail: info@concession.pl - Why, what for and on what legal basis we process your personal data.
Concession Europe processes your personal data in connection with:
– recruitment process,
– conclusion of employment contract,
– signing of civil law contracts,
– signing of a contract with other economic operators.
– your subscription to the newsletter.
1. The processing of job applicant’s personal data is carried out on the basis of Article 221 § 1 of the Labour Code and Article 6 section 1 point a) of the GDPR as well as on the basis of your consent to the processing of data.
2. The processing of employees’ personal data, is carried out on the basis of:
– Article 221 § 1 of the Labour Code and Article 6 section 1 letter b of the GDPR – processing is necessary for the performance of a contract to which the data subject is a party,
– Article 6 section 1 point f) of the GDPR, the processing is necessary for the purposes of the legitimate interests pursued by the Controller (protection of claims),
– Article 221 § 4 of the Civil Code and Article 6 section 1 letter c) of the GDPR, the processing is necessary for the performance of a legal obligation incumbent on the Controller (this is related to the Controller’s obligations, in terms of tax law and social security).
-Article 221 § 5 of the Labour Code and Article 6 section 1 letter a) of the GDPR – consent given by the employee
3. The processing of personal data of persons who are party to a civil law contract is carried out on the basis of:
– Article 6 section 1 letter b) of the GDPR – processing is necessary for the performance of a contract to which the data subject is a party,
– Article 6 section 1 letter f) of the GDPR – processing is necessary for the purposes of the legitimate interests pursued by the Controller (protection of claims),
-Article 6 section 1 c) – processing is necessary for the performance of a legal obligation incumbent on the Controller (this is related to the Controller’s tax and social security law obligations).
4. In connection with the signing of a contract with other economic operators, the Controller will process the personal data of the following individuals:
1. those negotiating contracts on behalf of the counterparty (on the basis of Article 6 section 1 letter f) of the GDPR);
2. those signing contracts on behalf of the contractor (on the basis of Article 6 section 1 letter f) of the GDPR);
3. those carrying out certain activities in connection with the signing of a business contract by Concession Europe (on the basis of Article 6 section 1 letter f) of the GDPR);
4. representatives of contractors (on the basis of Article 6 section 1 letter f) of the GDPR);
The processing of the above-mentioned personal data on the basis of Article 6 section 1 letter f) of the GDPR is carried out for the purpose of a possible claim or defence against claims and is related to the protection of the Controller’s rights.
5. The processing of your data in connection with subscribing to the Newsletter takes place on the basis of your consent (Article 6 section 1 letter a) of the GDPR) as well as on the basis (Article 6 section 1 letter f) of the GDPR) of the controller’s legitimate interest in carrying out marketing activities.
Your data will be processed:
– to the extent stated by the entity for which you provide services or work. The scope of the data provided covers: name, surname, position held, e-mail address, telephone number or other contact details necessary for electronic communication, in order to perform the contract signed with Concession.
-for the purpose of settlements with the competent authorities and the archiving of documents, to the extent required by law, in particular the provisions of the Tax Code and the Accountancy Act, as well as the Anti-Money Laundering Act. The legal basis for the processing of your data arises from obligations imposed on the Controller under Article 6 section 1 letter c) of the GDPR. - Who can we transfer your personal
The data of job applicants will be made available to the Management Board of Concession Europe Sp. z o.o. and to the Company’s employees handling the recruitment process.
The data of the Company’s employees will be available to authorised employees, dealing with human resources and tax matters
The data of the persons representing the contractors will be made available to the employees of Concession Europe Sp. z o.o. directly negotiating and/or signing the contract with you and/or implementing the contract signed, as well as to the employees providing accounting services.
Your data may be shared with other recipients in order to perform a contract concluded with you and/or to comply with a legal obligation of Concession Europe, based on your consent or for purposes arising from the legitimate interests of the Controller or a contractor of Concession Europe. The relevant government offices (including tax and ZUS) may be, in particular, recipients of personal data. - Will your data be transferred to a third country (outside the European Union)?
Your data will not be transferred to a third country.
In the event of the intention to transfer data to a third country, Concession Europe will ask you to give the appropriate consent, based on Article 49 section 1 letter a) and b) of the GDPR. - How long will your data be processed (stored)?
1. Your data will be processed for the period of time necessary for the purposes of the processing as indicated in point 2 of this Privacy Policy, i.e.:
– in the recruitment process, until that process is completed. If the job applicant is not employed, the data sent by him/her will be immediately destroyed and the documents sent will be returned to the sender.
– during the period of employment, employees’ data will be processed throughout the entire period of employment and after its termination for the period required by the relevant legislation relating to tax and social security law. In the event of legal proceedings related to the employee’s employment, his or her data will be stored until the final conclusion of the aforementioned proceedings.
-in respect of the performance of the contract concluded with Concession Europe, until its completion, and thereafter for the period required by law or for the settlement of any claims.
– in respect of the fulfilment of legal obligations incumbent on Concession Europe, in connection with its activities and the performance of contracts entered into, until Concession Europe fulfils these obligations.
– with regard to processing carried out on the basis of consent, until you request the deletion of data.
– until the fulfilment of Concession Europe’s legitimate interests forming the basis for such processing or until you object to such processing, unless there are legitimate grounds for further processing.
2. Your personal data, processed during the negotiation of a contract with the entity that represents you or who is your employer, will be stored until you are informed that a contract has not been signed.
3. Your personal data processed in connection with the signing and/or execution of a business contract will be stored for the period during which claims relating to the business can be made (i.e. for 3 years from the date of signing the contract) and, if claims are made, your data will be stored until the conclusion of legal proceedings.
4.Your personal data stored in connection with the performance of the legal obligations imposed on Concession Europe Sp. z o.o. by the provisions of the Anti-Money Laundering Act will be retained for a period of 5 years, calculated from the end of the year in which the business activity was terminated, unless the General Inspector of Financial Information, on the basis of these provisions, requests the retention of these records for a longer period.
5. Your data will be stored for a period of 5 years, in terms of tax and accounting settlements, calculated after the end of the year in which the financial event took place.
6.Your personal data will be stored for the duration of the concluded contract, as well as after its termination, for the following purposes: the assertion of claims in connection with the performance of the contract, the fulfilment of legal obligations, including in particular tax and accounting obligations, as well as statistical and archiving obligations, for the period established in the relevant legislation. - What rights do you have to ensure that your data is adequately protected?
You have the right to obtain confirmation from the Controller as to whether your personal data is being processed and, in the event of confirmation, to request information on the purpose of the processing, the categories of data processed, the recipients of the data, the duration of the processing, the right to request rectification, erasure or restriction of data processing, the right to transfer data and to object to the processing.
You have the right to withdraw, at any time, any consent you have previously given for the processing of data to the extent to which that consent relates, with the proviso that the withdrawal of consent will not affect the lawfulness of the processing carried out on the basis of consent before its withdrawal;
You have the right to be informed about the source of access to your data.
You have the right to lodge a complaint with the President of Data Protection if you consider that the processing of your data violates the provisions of the GDPR.
In addition, you have the right to object at any time to the processing of your data:
– for reasons related to your particular situation, unless the Controller demonstrates the existence of compelling legitimate grounds for the processing, overriding your rights, which relate to the assertion or defence of claims (Article 21 section 1) of the GDPR),
– for direct marketing purposes, including against profiling for marketing purposes, to the extent that the processing is related to direct marketing (Article 21 section 2) of the GDPR). - Do you have an obligation to provide data?
The provision of your personal data is voluntary; however, it is necessary in order to initiate the recruitment process, to conclude an employment contract, to conduct negotiations related to the conclusion of a contract with a business contractor, to perform a contract with an entity you represent or which is your principal.
If you do not provide your personal data, it will be impossible, and in some cases very difficult, to conclude and perform the contract.
If you do not provide your personal data for the purposes of the obligations arising from the provisions of the Countering the Financing of Terrorism Act, Concession Europe will not be able to conclude a contract with you or with the entity you represent. - Where do we obtain your data from and what are the categories of data?
Most of the data processed by Concession Europe comes directly from you, in particular data obtained from you during the recruitment and employment process.
We obtain personal data from entrepreneurs either directly or from other public sources, i.e. the National Court Register or the Central Register of Business Activity.
In the case of data from persons representing or otherwise acting on behalf of entrepreneurs, we also obtain data from the aforementioned sources as well as from the entrepreneurs themselves. - Information on automated decision-making about the processing of personal data, including profiling.
Your personal data will not be used by Concession Europe for automated processing decisions or profiling. - Contact possibilities
Concession Europe uses the e-mail address given at the beginning of the document, as well as the business addresses, e-mail addresses of its employees, in order to send answers to requests for quotations, during contract negotiations, during contract performance and in the process of recruiting employees. In order to protect against unauthorised access by third parties to e-mail correspondence, Concession Europe uses appropriate security measures, however encrypted correspondence is preferred.
In addition, interested parties may contact Concession Europe Sp. z o.o. by submitting the form on the website concession.en/en/contact. In the form, the Concession Europe asks you to provide your:
name and surname (this is not obligatory),
e-mail address (necessary to establish and continue contact),
content of the message (necessary to make the request specific).
Filling in the mandatory data by the sender is a prerequisite for contacting the person concerned and clarifying all queries.
The personal data thus provided is processed:
– in order to take the necessary steps prior to signing a contract or to perform a contract with the person specified as the sender of the e-mail. (Article 6 section 1 letter b) of the GDPR;
-for statistical purposes relating to the scope of the requests made (Article 6 section 1 letter f) of the GDPR). - Data security
Only authorised persons have access to personal data at the Controller. Data is only used to the extent necessary for the performance of contracts. The Controller shall ensure that employees with access to personal data participate in data protection training. In order to minimise the risks associated with the breach or leakage of personal data at Concession Europe Sp. z o.o. , appropriate procedures and technical safeguards are in place - Cookies
Cookie files (commonly referred to as “cookies”), are IT data, usually text files, which are stored on a website user’s terminal equipment. The cookies found on the Concession Europe website.
Concession Europe uses cookies to collect statistics and for the correct functioning of the website. Any person accessing the Concession Europe website can disable the operation of cookies without being subjected to logging out of the website. - Amendments to the Privacy Policy
In the event of any changes concerning the Controller’s data or other information mentioned in the Privacy Policy, the Controller will promptly update this document.
This text of the Privacy Policy applies to Concession Europe Sp. z o.o. as of the 1st of August 2022.