General information clause
Pursuant to Art. 13 (1) and (2) and Art. 14 (1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (Official Journal of the EU L 119 of 4.05.2016 p. 1, as amended), hereinafter GDPR, we inform you that:

1. The Controller of your personal data is Estropol Sp. z o.o. with its registered office in Warsaw (post code: 04-187 Warsaw), at 1/233 Marii Rodziewiczówny Street (hereinafter: “Estropol” or “Controller”). In matters concerning data protection, you can contact the Controller via e-mail address: office@estropol.com.pl in writing to the address: ul. M. Rodziewiczówny 1/233, 04-187 Warszawa.

2. Your personal data will be processed by the Controller for the purpose of

• recruiting for the position applied for on the basis of your consent (under Art. 6(1)(a) of GDPR);
• concluding an agreement based on your interest in our offer (under Art. 6(1)(b) of GDPR);
• performing and pursuant to the agreement where we have concluded it with you (under Art. 6(1)(b) of GDPR);
• archiving (evidential purposes) in pursuit of our legitimate interest in securing information in the event of a legal need to prove facts (Art. 6(1)(f) of GDPR);
• potential establishing, investigating or defending against claims being the exercise of our legitimate interest in doing so (under Art. 6(1)(f) of GDPR);
• offering and establishing business contacts (direct marketing), which is the exercise of our legitimate interest (under Art. 6(1)(f) of GDPR);

4. Recipients of your personal data may be entities entitled by law to receive them. Data may also be shared with or entrusted to other cooperating entities if this is necessary for the fulfilment of the Controller's tasks.

5. Your personal data will be processed until the agreement is completed, for the period indicated by tax and accounting regulations and, in the case of the assertion of claims under the agreement concluded, until they are time-barred. In the case of the processing of your data for direct marketing or the presentation of a commercial offer, until you object. As part of the recruitment, your data will be processed for the duration of the recruitment for the position and, if you consent to participate in future recruitments, for a maximum of 12 months.

6. We inform you that you have the right to:

• Request access to your personal data
• Request rectification (correction) of your personal data
• Request the deletion of your personal data or the restriction of their processing, as well as to object to their processing, but this is only available if further processing is not necessary for the fulfilment of the Controller's legal obligation and there are no other overriding legal grounds for processing.
• Lodge a complaint with the President of the Data Protection Authority if you consider that the processing of your personal data violates the provisions of the GDPR.

7. Your personal data will not be shared with a third country or an international organisation.

8. Your personal data will not be subject to automated decision-making (profiling).

9. The provision of your personal data is voluntary, however, if you fail to do so, it will not be possible to fulfil the agreement concluded with the Controller / to participate in the recruitment for the position in question.