Privacy Policy for Job Candidates

Information on the processing of personal data of job candidates at CRIF Sp. z o.o.

Controller The controller of your personal data is CRIF Sp. z o.o. with its registered office in Kraków, ul. Lublańska 34, 31-476 Kraków, registered in the Register of Entrepreneurs of the National Court Register kept by the District Court for Kraków-Śródmieście in Kraków, XI Commercial Division of the National Court Register under the number KRS: 0000185908, NIP: 5251556766, with a share capital of PLN 3,163,500.00, email: info.pl@crif.com, hereinafter referred to as CRIF.

Data Protection Officer For all matters related to data processing, you can contact the Data Protection Officer at dpo@crif.com or at CRIF, ul. Lublańska 34, 31-476 Kraków.

Purposes of data processing Your personal data, including: first name(s) and surname, date of birth, contact details provided by you, education, professional qualifications, and employment history, are processed for purposes related to the current recruitment process based on Article 6(1)(c) GDPR in connection with Article 221 of the Labor Code. If you provide data beyond the scope specified in Article 221 of the Labor Code or other legal provisions (e.g., your image), the basis for processing is Article 6(1)(a) GDPR, i.e., your consent expressed by sending application documents containing such data. Consent is voluntary and does not affect the possibility of participating in the recruitment. You can withdraw your consent at any time by sending a message to: career.pl@crif.com. Withdrawal of consent does not affect the lawfulness of processing carried out by CRIF before the withdrawal.

Additional information about criminal records In some cases, at later stages of recruitment, CRIF may ask you to provide certain information regarding criminal records. In such cases, the basis for data processing by CRIF will be Article 6(1)(f) GDPR, i.e., the legitimate interest of the controller, which in this case involves the necessity of conducting a responsible personnel policy aimed at preventing potential fraud and abuse, given that CRIF provides services to entities in the financial sector. CRIF's entitlement to request such information arises from the Act of April 12, 2018, on the principles of obtaining information about the criminal records of persons applying for employment and persons employed in entities in the financial sector.

Data retention period The data will be stored for the duration of the recruitment process in which you are participating.

Recipients of the data The recipients of your data may be entities supporting CRIF in business processes, including the recruitment process.

Providing personal data specified in Article 22(1) of the Labor Code is mandatory. Providing data regarding criminal records is voluntary but, in some cases, necessary to participate in the recruitment process. Providing data based on your consent is voluntary.

Your rights You have the following rights: the right to request access to personal data, its rectification, deletion, or restriction of processing. Additionally, you have the right to object to the processing of data based on Article 6(1)(f) GDPR on grounds related to your particular situation. You also have the right to lodge a complaint with the supervisory authority – in Poland, the supervisory authority is the President of the Personal Data Protection Office.