Information Clause

In connection with the implementation of the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016. (RODO), we would like to inform you about the following principles of personal data processing:

Personal Data Administrator (ADO)
MCP GROUP SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ spółka komandytowa

  1. Eastern 5A, 62-080 Swadzim

tel. 61 822 65 61

Data Protection Officer (DPO)
Katarzyna Slusarek, email address:iod@mcpolska.pl

ADO processes your data for the purpose of:

  1. Recruitment of employees

Legal basis: Article 6(1)(b) RODO, Article 22(1 ) Labor Code, and Article 9(2)(b) RODO
(sensitive data). The provision of these data is a statutory requirement and necessary for the purpose of recruitment. You are obliged to provide them, and the consequence of failure to do so will be the inability to participate in the recruitment. We process other personal data not required by law ( e.g. interests ) on the basis of Article 6(1)(a) RODO, i.e. on the basis of your voluntary consent, and their provision does not affect the possibility of participation in the recruitment.

Period of storage of personal data: We process your personal data until the end of the recruitment process, and when you have agreed to participate in future recruitments for no longer than 12 months from the date of submission of application documents.

  1. Employment of employees

Legal basis: Article 6(1)(b) RODO, Article 22(1) of the Labor Code, and Article 9(2)(b) RODO ( sensitive data ) – processing is necessary for the performance of the contract, Article 6(1) (c) RODO – processing is necessary to fulfill a legal obligation, Article 6(1)(f) RODO – the legal basis for processing is the legitimate interest of the Administrator, and Article 6(1)(a) RODO – with regard to personal data not required by law – the legal basis for processing is your consent.

Retention period for personal data: depending on the purpose for which personal data is processed, the retention period is: 50 years or 10 years for contracts concluded after January 1, 2019 (depending on the date of employment) from the end of the year in which the employment relationship ended. For contracts entered into after December 31, 1998 and before January 1, 2019, the employer may file a special information report with the Social Security Administration, as provided for in Article 4, paragraph 6a of the October 13, 1998 Law on the Social Security System, in which case the period may be reduced to 10 years, starting from the end of the calendar year in which the information report was filed.

  1. Cooperation with external companies with which ADO has a contract to provide services

Legal basis for processing: Article 6(1)(b) of the RODO – processing is necessary for the performance of a contract or to take action before entering into a contract, providing data is necessary for the purpose of cooperation.

Period of storage of personal data: for the period necessary for the execution of the concluded contracts and the rules set forth therein. A minimum of 5 years from the end of the year in which the last invoice/accounting receipt was issued.

  1. Execution of the contract

Source: data of employees and collaborators provided by the contracted entity.

Legal basis for processing: Article 6(1)(f) of the RODO, for purposes of contact for matters related to the performance of the Master Agreement, for administrative purposes, including those related to the organization of cooperation and supervision of the performance of the Services or the fulfillment of other obligations or rights performed under the Master Agreement, for evidentiary purposes related to the performance of the Master Agreement, for the purpose of asserting claims related to the performance of the Master Agreement.
Period of storage of personal data: Your personal data will be kept by the Administrator for at least the duration of the contracts concluded between the companies, and if necessary for evidentiary purposes – your personal data may also be kept until the statute of limitations for business claims or the end of legal proceedings related to the aforementioned contracts.

  1. Sale of services

Legal basis for processing: Article 6(1)(b) of the RODO – processing is necessary for the performance of the contract linking you to the Office, Article 6(1)(c) of the RODO – for the purpose of keeping accounting and tax records, and Article 6(1)(f) of the RODO – for the purpose related to the possible establishment, investigation of claims or defense against claims.

Period of storage of personal data: Your data will be kept for the duration of the contract. A maximum of 6 years from the end of the fiscal year in which the last invoice was issued.

  1. Future claims investigation

Legal basis for processing: Article 6(1)(f) RODO.
Period of storage of personal data: for the period of the statute of limitations for claims under the relevant type of contract: contract for work, orders – 2 years, cooperation agreement – 3 years.

  1. Conducting marketing activities related to the business

Legal basis for processing: Article 6(1)(a) RODO and Article 6(1)(f) RODO. Provision of data is voluntary.

Period of storage of personal data: Until the data subject withdraws consent or objects.

  1. Providing answers to questions sent via email
    Legal basis for processing: 6(1)(f) RODO – legitimate interest of ADO. Provision of data is voluntary.

Period of storage of personal data: until the response to the submitted request, a maximum of 12 months.

  1. Protection of persons and property residing on ADO premises

Source of data: monitoring data.
Legal basis for processing: Article 6(1)(f) RODO.
Period of storage of personal data: from the moment of recording for a period of max. 3 months.

If a purpose other than the above appears, the information obligation will be communicated to you directly in the form or during the first action directed to you.

Rights related to the processing of personal data:

  • If the legal basis is Article 6(1)(a) or (b) of the RODO:
  • the right of access to the content of the data
  • right to rectification
  • The right to erasure of data (the right to be forgotten)
  • The right to restrict data processing
  • right to data portability
  • If the legal basis is Article 6(1)(c) of the RODO:
  • the right of access to the content of the data
  • right to rectification
  • The right to restrict data processing
  • If the legal basis is Article 6(1)(e) or (f) of the RODO:
  • the right of access to the content of the data
  • right to rectification
  • The right to erasure of data (the right to be forgotten)
  • The right to restrict data processing
  • The right to object to the processing

Right to withdraw consent:
If the processing is carried out, based on your consent (Article 6(1)(a) RODO) we will process your data until you withdraw it. You can withdraw your consent at any time by sending an email to the address indicated above or in person at the Administrator’s office.Withdrawal of consent does not affect the lawfulness of processing that was carried out on the basis of consent before its withdrawal.

After withdrawal of consent, the data will be processed for the purpose of protection against claims (Article 6(1)(f) of the DPA) for a period in accordance with applicable law, of up to 3 years.

The right to lodge a complaint with a supervisory authority:
If you see violations on the part of ADO as to the security of the processing of this data, it is possible to lodge a complaint with a supervisory authority for the protection of personal data, i.e. the President of the Office for Personal Data Protection. The current address of the supervisory authority is: President of the Office for Personal Data Protection, 2 Stawki Street, 00-193 Warsaw.

Data security:
Your personal data will be processed, in accordance with the provisions of the RODO, in writing or electronically, for the purposes stated above and using appropriate methods to guarantee the security and confidentiality of personal data in accordance with Article 32 of the RODO. Cooperation between our company and business entities is governed by relevant laws and regulations.

Data recipients:

In connection with data processing, your personal data may be shared with other recipients or categories of recipients, such as:

  • To bodies and institutions and relevant entities of public administration and local government to the extent and for the purposes that result from the provisions of generally applicable law.
  • To companies providing services to ADO, in particular in the following areas: personal data protection, entities performing audit, IT support, computer software, financial, insurance, equipment service, correspondence services.
  • To other entities that process personal data for the controller under relevant contracts.

Your data will not be processed by automated means including profiling. Your data will not be processed outside the EEA.