This document ("Privacy Policy"), has been prepared by TransactionLink sp. z o.o. with its registered office in Warsaw, Rynek Nowego Miasta 9/9, 00-229 Warsaw, NIP: 525-281-29-29, REGON: 385349514 (hereinafter referred to as "Controller" or "TransactionLink").

The purpose of this Privacy Policy is to provide information on the terms, conditions and rules applicable to the processing of personal data in accordance with Article 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ EU L 119 of 04.05.2016), hereinafter referred to as "GDPR".

Contacting the Data Controller

The Controller can be contacted at the correspondence address given above. In matters concerning the processing of your personal data, including the exercise of your rights, by the Controller, you are welcome to contact the Controller's designated Data Protection Officer  Mateusz Pniewski, by email at [email protected].

How do we use your data?

We process your personal data for the following purposes:

• where it’s necessary to necessary in order to take steps at the request of the data subject prior to entering into a contract based on the article 6(1)(b) of the GDPR to conduct recruitment process, including to assess your skills, qualifications and experience for a role;
• where it’s necessary for our legitimate interests based on article 6(1)(f) of the GDPR to protect our business interests and legal rights. This includes establishing, pursuing and defending legal claims, security and fraud prevention;
• where it’s a legal requirement based on article 6(1)(c) of the GDPR to execute our obligations resulting from applicable legislation, including those resulting from the Labour Code;
• where you have given us your consent based on article 6(1)(a) of the GDPR, including if you consent to processing your additional data, which are not mandatory in our recruitment process or if you consent to processing your data for the purposes of the future recruitment processes. Where you have given us your consent, you are free to withdraw it at any time.

We may transfer Personal Data outside of the EEA where it has a lawful basis for that transfer under Articles 44-49 of the GDPR. In circumstances where we transfer your personal data to the processor, which is located outside of the EEA, we will ensure that those data transfers are conducted based on an adequacy decision of the European Commission under Article 45 of the GDPR, or subject to one of the appropriate safeguards as set out in Article 46 of the GDPR.

What personal data do we process?

We collect your personal data through the application and recruitment process, either directly from you or from third parties such as employment agencies, recruiters or HR consultants.

The data we process include information you have provided us in your application during the recruitment process in accordance with the data scope set out in article 221 of the Labour Code. If you decide to share with us some additional data, we will process them based on your prior consent.

Categories of data processed