Information clause for job applicants,

employees and individuals employed under civil law contracts

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27.04.2016. on the protection of individuals with regard to the processing of personal data and on the free movement of such data and the repeal of Directive 95/46/EC (General Data Protection Regulation – RODO, Official Journal of the EU 2016 L 119, p. 1, as amended), we inform you that:

1. The administrator of your personal data is Lechia Gdańsk S.A., based in ul. Generations of Lechia Gdańsk 1, 80-560 Gdańsk .
2. The Data Protection Officer at Lechia Gdansk S.A. can be contacted at the following email address: rodo@lechia.pl
3. Your personal data will be processed for the following purposes:

• (a) in the case of job applicants: to carry out the recruitment process, where the legal basis is Art. 6 paragraph. 1(c) RODO ( i.e. the processing is necessary for the performance of our obligations under, among others, the Labor Code) and Art. 6 paragraph. 1(b) RODO, i.e.. the basis for processing is the desire to enter into an employment contract.
• b) in the case of persons employed under an employment contract, contract of mandate, contract for specific work – for the purpose of proper execution of the contract (legal basis: Article 6(1)(b) RODO ),
• c) in order to comply with legal obligations incumbent on us-as an employer or a party to a contract, such as the obligation to maintain and store employee files, fulfill tax, insurance, accounting obligations (legal basis: art. 6 paragraph. 1(c) RODO and Art. 9(2)(b) RODO i.e. processing is necessary for the performance of our obligations arising from, among other things. From the Labor Code, the Civil Code, or the Accounting Act.
• d) for the purpose of possible enforcement of claims under the Labor Code and civil law, and defense against such claims, if they arise (legal basis Article 6(1)(f) RODO, i.e. the administrator’s legitimate interest),
• e) in exceptional situations on the basis of your consent (legal basis of Article 6(1)(a) of the DPA), e.g. to use your image for the administrator’s marketing activities or if you provide additional information in your resume on your initiative.

4. Your personal data will be kept for the period necessary for the fulfillment of the mentioned purposes, as required by separate legislation. In case of non-cooperation, your data will be deleted at the end of the recruitment process, unless you give separate consent to store them for subsequent recruitment, in which case the processing period will be extended to 12 months. In the case of data processed on the basis of consent, it will be processed until the purpose of processing ceases or until consent is withdrawn. Please be advised that the withdrawal of consent does not affect the legality of the processing that was carried out before the withdrawal of consent.
5. Your data may be transferred to state agencies and institutions only on the basis of legal regulations. Your data may also be transferred to entities cooperating with us on the basis of concluded entrustment agreements (e.g., in the provision of IT services) and to ownership-related entities (shareholders of the company).
6. Under the terms of the DPA, you have the right to access your personal data, to correct it, to request its deletion, or to object on the grounds of your particular situation. You also have the right to request us to restrict the processing of your data, as well as to transfer it.
7. If you believe that your personal data is being processed in violation of legal requirements, you have the right to file a complaint with the supervisory authority, which is the President of the Office for Personal Data Protection.
8. We do not use methods involving automated decision-making and profiling in our data processing. As a rule, we do not transfer any personal data to third countries. It may happen that the personal data provided to us in e-mail correspondence is stored on Microsoft servers, e.g. in the United States, in which case Lechia Gdańsk S.A. ensures the appropriate conclusion of an agreement with Microsoft, in turn Microsoft, within the framework of the applicable regulations, ensures that the processing takes place, in accordance with applicable regulations and with the highest security standards
9. Your provision of data is voluntary, but it is necessary for the conclusion and execution of an employment contract or civil law contract.