Re: Oxla Recruitment Privacy Notice

HOW WE PROCESS YOUR DATA:

Oxla sp. z o.o. with its registered seat in Warsaw at ul. Bukowińska 2/189, 02-703 Warsaw, Poland, KRS number: 0000851382, (referred to as “Oxla”) is the controller of your personal data for the purpose of recruitment, organizing trainings and informing about recruitment-related events.

The company will process your personal data on the following legal bases:

1. Consent, for the purpose of:

– processing your current recruitment applications, insofar as consent may be required, and for future recruitment purposes;

– processing your application for events or trainings;

– informing you about current initiatives in the area of recruitment and/or HR;

– participation in surveys;

2. To fulfill our contractual obligations:

– the processing of your personal data is necessary to take steps, at your request (by actively submitting your job application), prior to entering into a contract with you - to assess your eligibility for the job you are applying for;

3. Our legitimate interests, i.e:

– assessing your qualifications and suitability for the job position(s) you apply to and to manage our recruitment processes;

– defending against potential legal claims, should such arise in the future (for the purpose of exercising our legal rights);

– securing information in the event that such need arises based on provisions of law (for evidentiary purposes);

– keeping you informed about new job offers, events organized by the Company and other ongoing activities (for the purpose of keeping an ongoing relationship with you), provided that you expressed the will to take part in future recruitment and to receive such communication.

4. The processing of certain data may be necessary based on provisions of the Polish Labour Code.

Provision of your personal data through application form and in the attached CV is necessary in order for us to process your application. If you don’t provide us with the required data, we will not be able to invite you to take part in our recruitment process.

Your rights

You have the right to object to the processing based on our legitimate interest – you can exercise your right by contacting us privacy@oxla.com. If you do so, we will stop processing your data for the purposes listed above, unless we are able to prove that legally justified bases exist, which override your rights and interests, or that your data is necessary for the purpose of establishing, defense and exercise of legal claims, or when we have an obligation to keep your data based on binding provisions of law.

We process your data for the duration of recruitment process. We may process your data for a longer period, established based on the following criteria:

– whether we are planning to recruit for similar positions in the future, which you might find of interest;

– if you consented to processing of your data for future recruitment – in such case we will keep your personal data for a period of 2 years from the date of your application;

– whether processing of your personal data is necessary for defense of potential future claims.

Your data will be deleted if you withdraw your consent, object to the processing based on legitimate interest or if we establish that your data is outdated or no longer necessary for the purpose of collection (e.g. if you stop expressing your will to take part in future recruitment).

We do not make your data available to third parties. However, we may sometimes have to share your personal data with competent authorities (in particular the police or prosecution service), if they approach us with such a request, provided that there exists an appropriate legal basis for making your personal data available to them (e.g. a court order).

We entrust the processing of your personal data to entities, which provide us with hosting services and recruitment management software (e.g. HR database). In the event that we entrust the processing of your personal data to entities outside the European Economic Area, we make sure that appropriate safeguards are in place. In particular, we conclude a data transfer agreement based on Standard Contractual Clauses adopted by the European Commission.

Moreover, you have the right to:

– access your data and obtain a copy thereof;

– rectification (correction), erasure and restriction of processing;

– object to the processing of your data;

– data portability;

– file a complaint with data protection authority - Prezes Urzędu Ochrony Danych Osobowych