Job candidates and employees

Information about personal data processing for job candidates and employees

Job candidates

Version 0.1.2 

Release date 03.10.2022

Fulfilling the obligation to provide information pursuant to Article 13(1) and (2) of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) [Official Journal of the EU L.2016.119.1 of 4 May 2016], hereinafter referred to as GDPR, we inform you that:

  1. The Controller of your personal data is the AGH University of Krakow, al. A. Mickiewicza 30, 30-059 Krakow, hereinafter referred to as AGH University.
  2. The contact details of the Data Protection Officer are as follows: email: iodo(at)agh.edu.pl, phone: 12 617 53 25.
  3. Your personal data will be processed by the Controller in order to carry out the recruitment procedure for a job position with the Controller and to secure the data in case of possible claims.
  4. The legal basis for the processing of personal data derives from:
    a) Article 6(1)(c) of the GDPR – provisions of labour law (in particular, Article 221(1) of the Labour Code Act of 26.06.1974 [Journal of Laws of 2018, item 108, as amended]);
    b) Article 6(1)(a) of the GDPR – your consent to the processing of additional information, including additional powers, qualifications, skills, professional achievements, references, and image (photo);
    c) Article 9(2)(a) of the GDPR – your consent to the processing of additional information that constitutes special category data (e.g. health data);
    d) Article 6(1)(a) of the GDPR – your consent to the processing of data for the purposes of future recruitment.
  5. The recipients of your personal data may be:
    a) entities to which the Controller is obliged to provide data under applicable laws;
    b) entities providing services to the Controller to the extent necessary for the purposes in connection with which your personal data are processed.
  6. Your personal data may be transferred to state authorities, legal protection authorities (Police, Prosecutor's Office, Court), or local authorities in connection with legal proceedings.
  7. Your personal data shall be processed only for the time necessary to achieve the purposes of personal data processing, i.e. for the period resulting from the internal law of AGH University – Uniform Tangible File Inventory (JRWA), and until your possible withdrawal of consent for data processing in the recruitment process.
  8. You have the right to request from the Controller access to your data, as well as the right to rectify your data, the right to erase your data, the right to restrict the processing of your data, the right to object to the processing thereof in the cases and under the conditions specified in the GDPR.
  9. You have the right to submit a complaint with a supervisory authority – the President of the Office for Personal Data Protection pursuant to Article 77 of the GDPR (...every data subject shall have the right to lodge a complaint with a supervisory authority, (…) if the data subject considers that the processing of personal data relating to him or her infringes this Regulation).
  10. Your personal data shall not be subject to automated decision-making processes, including profiling.
  11. Your personal data shall not be transferred to third countries and international organizations.
  12. The provision of your personal data to the extent required by the labour law is necessary to participate in the recruitment procedure. Failure to provide it shall result in the exclusion from the recruitment procedure. The provision of other data (information on additional powers, qualifications, skills, professional achievements, references, and image) is voluntary (the Controller does not require this information) and requires your consent.
  13. At any time, you have the right to withdraw your consent to process additional personal data. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. You may withdraw your consent by submitting a written statement of withdrawal of consent to the place indicated in the job competition announcement as appropriate for the submission of documents.

Employees

Version 0.2.2
Release date 03.10.2022

Fulfilling the information obligation pursuant to Article 13(1) and (2) of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) [Official Journal of the EU L.2016.119.1 of 4 May 2016], hereinafter referred to as GDPR, we inform you that: 

  1. The Controller of your personal data is the AGH University of Krakow, al. A. Mickiewicza 30, 30-059 Krakow, hereinafter referred to as AGH University.
  2. The contact details of the Data Protection Officer are as follows: email: iodo(at)agh.edu.pl, phone: 12 617 53 25.
  3. Your personal data shall be processed by the Controller in order to exercise rights in the field of labour law, social security, social protection pursuant to the provisions of, in particular, the Labour Code Act of 26.06.1974 (Journal of Laws of 2018, item 108, as amended) and the Act of 04.03.1994 on the Company Social Benefits Fund (Journal of Laws of 2017, item 2191, as amended).
  4. The legal basis for the processing of personal data derives from:
    a) Article 6(1)(b) of the GDPR – to the extent necessary for the conclusion and performance of the employment contract to which you are or shall be a party, and to secure the data in case of possible claims;
    b) Article 6(1)(c) of the GDPR – to the extent necessary for the fulfilment of a legal obligation incumbent on the Controller (in particular, under Articles 221 and 222 of the Labour Code, the Act on the Social Insurance System, the Act on Old-Age and Disability Pensions from the Social Insurance Fund, the Act on Employee Capital Plans);
    c) Article 9(2)(h) of the GDPR – to the extent necessary for the purposes of preventive health care and occupational medicine, and for the assessment of the working capacity of the employee.
  5. The recipients of your personal data may be:
    a) entities to which the Controller is obliged to provide data under applicable laws;
    b) entities providing services to the Controller to the extent necessary for the achievement of the purposes in connection with which your personal data are processed, including, in particular, entities providing IT and administrative services to AGH University, as well as tasks in the field of occupational medicine services;
    c) information about your work email address, work telephone number, position or function held may be provided to external entities with which the Controller cooperates or will cooperate in the performance of its tasks. The Controller shall also have the right to make this information public on their website.
  6. Your personal data may be transferred to state authorities, legal protection authorities (Police, Prosecutor's Office, Court), or local authorities in connection with legal proceedings.
  7. Your personal data shall be processed for the time of employment and after its termination for the period of maturity of possible claims or for the period specified in relevant laws, including archiving regulations.
  8. You have the right to request from the Controller access to your data and the right to rectify your data, the right to erase your data, the right to restrict the processing of your data, the right to object to the processing thereof in the cases and under the conditions specified in the GDPR.
  9. You have the right to submit a complaint with a supervisory authority – the President of the Office for Personal Data Protection pursuant to Article 77 of the GDPR (...every data subject shall have the right to lodge a complaint with a supervisory authority, (…) if the data subject considers that the processing of personal data relating to them infringes this Regulation).
  10. Your personal data shall not be subject to automated decision-making processes, including profiling.
  11. Your personal data shall not be transferred to third countries or international organizations except when the Controller’s obligation to transfer the data results from the law.
  12. The provision of our personal data to the extent required by law is a statutory requirement and is necessary for the establishment and execution of the employment relationship. The refusal to provide your personal data shall prevent the establishment and implementation of the employment relationship between you and the Controller.