Business Development Manager (Financial Services Sector)

I consent to the processing of my personal data in order to participate in future recruitments by the Co-Controlers.

PRIVACY NOTICE Information on the processing of personal data under the GDPR 1. Controllers of personal data The controllers of your personal data are: a. Altkom Software & Consulting sp. z o.o., KRS: 0000448403, NIP: 7123276080, REGON: 061512913, b. Altkom Experts sp. z o.o., KRS: 0000532755, NIP: 7123291369, REGON: 360236318, and c. Kreatik sp. z o.o., KRS: 0000405020, NIP: 7773223125, REGON: 301995381, hereinafter jointly referred to as the Joint Controllers (the “Controller” or “Controllers”). The companies have their registered offices in Warsaw at ul. Przyokopowa 33, 01-208 Warsaw, Poland. 2. Contact details If you have any questions regarding the manner or scope in which we process your personal data, or regarding your rights in connection with our processing of your personal data, please contact us by email or by post at the following addresses: a. asc@altkomsoftware.pl, b. Altkom Software & Consulting sp. z o.o., ul. Przyokopowa 33, 01-208 Warsaw, Poland, c. Altkom Experts sp. z o.o., ul. Przyokopowa 33, 01-208 Warsaw, Poland, d. Kreatik sp. z o.o., ul. Przyokopowa 33, 01-208 Warsaw, Poland. 3. Data Protection Officer The Controller has appointed Mr Mariusz Zajkiewicz as the Data Protection Officer (DPO). You may contact the DPO by post by sending correspondence to the company’s address marked “GDPR”, or by email at: iod@altkomsoftware.com. 4. Purposes, legal bases and retention periods Below, we set out the purposes for which we process your personal data, the legal basis for such processing, and the period for which we will retain your personal data in relation to each specific purpose: a. To respond to your enquiry submitted via an electronic form available on the website or by other means (e.g. post or email). The legal basis for processing your personal data is Article 6(1)(a) of the GDPR, i.e. your consent. b. To conduct the recruitment process pursuant to Article 6(1)(a) of the GDPR (consent), if we receive from you personal data beyond the scope required by the provisions of law referred to in Article 22¹ of the Polish Labour Code. c. To conduct the recruitment process pursuant to Article 6(1)(b) of the GDPR (taking steps prior to entering into a contract) and Article 22¹ of the Polish Labour Code. d. To establish cooperation following the successful completion of the recruitment process. The legal basis for processing is Article 6(1)(b) of the GDPR, i.e. taking steps at the request of the data subject prior to entering into a contract or for the purpose of establishing such cooperation. e. To comply with the legal obligation to prepare and retain documentation. The legal basis for processing in this case is Article 6(1)(c) of the GDPR. Personal data will be retained for the period required under national legislation for the retention of accounting documents and documents confirming the conclusion and performance of a contract. f. To pursue the legitimate interests of the Controller pursuant to Article 6(1)(f) of the GDPR, including preparing offers, performing contracts, establishing, pursuing and defending claims, debt recovery, conducting court, arbitration and mediation proceedings, and audit purposes. g. To pursue the legitimate interests of the Controller pursuant to Article 6(1)(f) of the GDPR, consisting in ensuring an efficient and consistent preliminary screening of applications. 5. Retention periods in connection with recruitment a. If you participate only in the current recruitment process, your personal data will be processed for the duration of that recruitment process, but no longer than 24 months. b. If you consent to participation in future recruitment processes, your personal data will be processed for a period of 36 months from the date on which the current recruitment process commenced. c. Following the conclusion of a contract, personal data will be processed for a period of 5 years in the case of civil-law contracts and 10 years in the case of employment contracts. 6. Recipients of personal data To the extent necessary, we may disclose your personal data to: a. entities authorised to receive such data under applicable law (e.g. courts, law enforcement authorities, public administration authorities and supervisory authorities); b. entities processing your personal data on our behalf (e.g. service providers, entities maintaining our IT and telecommunications systems or providing us with IT tools, advisory and consulting service providers, Traffit in connection with recruitment and, additionally, PeopleForce following employment, etc.). 7. Data minimisation Whenever we disclose or entrust the processing of your personal data to another entity, we will ensure that only the minimum amount of information necessary to achieve the relevant purpose of processing is transferred. 8. Candidate scoring in the Applicant Tracking System (ATS) The tool compares the content of the CV and the responses provided in the application form against the criteria defined by the companies for a particular position and provides the recruiter with a score on a scale from 0 to 100, together with a brief explanation indicating which criteria have been met and which could not be confirmed on the basis of the application. The score is intended solely as a supporting tool. The system does not reject applications or automatically move them to subsequent stages of the recruitment process. The decision regarding a candidate’s further participation in the recruitment process is made by the recruiter after reviewing the application. 9. Your rights In connection with the processing of your personal data by the Controller, you have the following rights: a. Pursuant to Article 15 of the GDPR, the right of access to your personal data, including the right to obtain a copy of the personal data undergoing processing. b. Pursuant to Article 16 of the GDPR, the right to rectify personal data that is inaccurate, outdated or incorrect, as well as the right to have incomplete personal data completed. c. Pursuant to Article 17 of the GDPR, in the circumstances specified therein, the right to erasure of personal data (the so-called “right to be forgotten”). As a general rule, this right allows you to request that the Controller erase your personal data without undue delay. However, Article 17 of the GDPR provides for certain exceptions to this right, in particular where processing is necessary for the establishment, exercise or defence of legal claims. d. Pursuant to Article 18 of the GDPR, the right to request that the Controller restrict the processing of your personal data. In practical terms, this may include temporarily blocking access to your personal data or transferring it to another system. e. The right to lodge a complaint with the supervisory authority responsible for personal data protection, i.e. the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), if you consider that the processing of your personal data infringes the GDPR. f. Pursuant to Article 21 of the GDPR, the right to object to the processing of your personal data. In addition, in connection with the processing carried out within the ATS, you may: request that your application be reconsidered by a recruiter; present your position or submit comments regarding the assessment; obtain information about the role of the tool in the recruitment process and the main factors that influenced the score; obtain access to your assessment score. 10. Withdrawal of consent Where the processing of personal data is based on your consent, you may withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of that consent before its withdrawal. Withdrawal of consent will result in the removal of your personal data from our database. 11. ATS provider and subprocessors In connection with the operation of the tool, personal data is processed on behalf of the companies by the provider of the ATS used by the companies and by its subprocessors. 12. Place of processing and use of data The data is processed within the European Economic Area (EEA) and is not used to train AI models.