PRIVACY POLICY

This information is intended for individuals working on behalf of current and prospective business clients, suppliers, and subcontractors of CFE Polska Sp. z o.o.

It is also intended for prospective employees and contractors of CFE Polska Sp. z o.o.

Since 25 May 2018, the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the “GDPR”), has been applicable. Therefore, we would like to provide you with information regarding the legal basis and methods of processing your personal data by CFE Polska Sp. z o.o., as well as your related rights.

The controller of your personal data is CFE Polska Sp. z o.o., with its registered office at Komitetu Obrony Robotników 48, 02-146 Warsaw, hereinafter referred to as the “Controller”.

Your personal data obtained and processed by CFE Polska Sp. z o.o. originates directly from you, where you were the first to contact CFE Polska, or has been provided to us by your employers or their contractors in connection with existing or potential agreements between such entities and CFE Polska Sp. z o.o., or has been obtained from publicly available sources made available by you or your employers, such as company websites for contact purposes.

Your personal data is processed for the purpose of establishing and maintaining business relationships, including:

• providing information and presenting cooperation offers in response to your inquiries,
• concluding and performing contracts,
• managing relationships, customer service, and maintaining contact with current and prospective clients, suppliers, and subcontractors,
• verifying the financial and/or legal credibility of current and prospective clients, subcontractors, and suppliers,
• fulfilling legal obligations arising from concluded agreements,
• conducting recruitment processes and selecting suitable candidates for positions specified in job offers – where you contact us for the purpose of submitting an application.

The legal basis for processing your personal data is:

• the necessity of processing for the conclusion and performance of a contract (Article 6(1)(b) GDPR),
• compliance with legal obligations to which we are subject (Article 6(1)(c) GDPR),
• your consent (Article 6(1)(a) GDPR) – where personal data included in recruitment documents exceeds the scope required by law,
• the Controller’s legitimate interest in establishing and maintaining business relationships (Article 6(1)(f) GDPR).

The categories of personal data processed by CFE Polska Sp. z o.o. include:

• contact details, such as full name, residential address, email address, and telephone number,
• employment-related data, such as position, associated employer, qualifications, and authorizations,
• recruitment-related data, such as date of birth, information regarding education, professional qualifications, and previous employment history, as provided by the candidate.

Providing your personal data is voluntary; however, failure to provide such data will result in the inability to contact you regarding business matters and to conclude and perform contracts with you or your employer / contractor.

Depending on business needs, access to your personal data may be granted to authorized employees, associates, and contractors of CFE Polska Sp. z o.o. and companies within the CFE Group, as well as state authorities and/or public authorities, if necessary to fulfil contractual or legal obligations.

CFE Polska Sp. z o.o. does not transfer your personal data outside the European Economic Area.

Your personal data will be retained by CFE Polska for no longer than necessary to achieve the purposes for which the data is processed, or until you withdraw your consent (where consent constituted the legal basis for processing), unless another legal or contractual obligation requires further retention of such data.

You have the right to:

• request access to your personal data, rectification, erasure, or restriction of processing, or object to processing, as well as the right to data portability,
• withdraw consent to data processing at any time (where consent constituted the basis for processing), without affecting the lawfulness of processing carried out prior to withdrawal,
• lodge a complaint with the President of the Personal Data Protection Office (UODO).

Your personal data will not be used for profiling and/or automated decision-making.

To request the exercise of your rights, or if you obtain information regarding personal data protection breaches, comments, or concerns about how we handle personal data, please contact us at: rodo@cfe.com.pl