Information clause

We kindly inform that:

The administrator of the job applicant's personal data for recruitment purposes is Commerce Media Tech Sp. z o.o. with its registered office in Krakow in Poland, (an address: Lubicz 17G, 31-503 Kraków, Poland), registered in the entrepreneurs register of the National Court Register held by the District Court for Krakow – Środmieście in Krakow, XI Commercial Division of National Court Register (Sąd Rejonowy dla Krakowa – Śródmieścia w Krakowie XI Wydział Gospodarczy Krajowego Rejestru Sądowego) under the number: KRS 0000830352, tax ID (NIP): PL5272922087 (hereinafter also referred to as: the Administrator or Commerce Media Tech).

Contact details to the Administrator regarding a recruitment process are: www.codewise.com/contact/ or by e-mail: hello@cm.tech. Contact details of the Administrator's Data Protection Officer: dpo@cm.tech

Personal data included in the form and application documents of the recruitment process is processed by the Administrator for the following purposes:

• for the needs of current recruitment,
• in order to conclude an employment contract in connection with current recruitment (applies only to job applicants with whom Commerce Media Tech decides to conclude such contract),
• in order to pursue claims or defend against claims resulting from the abovementioned recruitment process (applies only to job applicants with whom a recruitment interview took place),
• for future recruitment (applies only to job applicants who have given explicit and voluntary consent).

The legal basis for the processing of personal data in the field of recruitment includes the following legal provisions:

• Article 221 and following ones of the Labour Code of 26 June 1974 (applies to job applicants who are to be employed under an employment contract),
• art. 6 par. 1 p. a), b), f) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC, hereinafter referred to as: the GDPR (applies to all job applicants).
• Personal data of job applicants in the field of recruitment will be processed by Commerce Media Tech. Commerce Media Tech may transfer personal data of job applicants to trusted entities with whom it cooperates on recruitment process, in particular: professional companies supporting the recruitment process, hosting companies, companies providing IT services, and offices providing legal services.

Personal data of the job applicant may be transferred to a third country - outside the European Economic Area, which means the territory of the United States of America (USA), however, only to entities ensuring adequate safeguards with respect to the protection of privacy, rights and freedoms of the data subject, by means of standard contractual clauses on personal data protection, approved by the European Commission.

Personal data provided as part of recruitment will be kept for the period necessary to achieve the objectives indicated above in item 3 of this information clause, and this is:

• for the needs of the current recruitment process - for the period of recruitment,
• in order to conclude an employment contract in connection with current recruitment (applies only to job applicants with whom Commerce Media Tech decides to conclude such a contract) - until the conclusion of the employment contract,
• in order to pursue claims or defend against claims resulting from the above-mentioned recruitment process (applies only to job applicants with whom a recruitment interview took place) - for a period of 3 (three) years from the moment of completing recruitment,
• for future recruitment (applies only to job applicants who have given explicit and voluntary consent) - for a period of 3 (three) years from the date of granting consent. After the expiration of those periods, the data is deleted without unnecessary delay.

The following rights apply to the job applicant in connection with the processing of personal data for recruitment purposes:

• the right to confirm whether personal data is processed and the right to obtain access to it (Article 15 of the GDPR),
• the right to obtain copies of processed personal data (Article 15 of the GDPR),
• the right to obtain the rectification of inaccurate personal data and the right to have incomplete personal data completed (Article 16 of the GDPR),
• the right to obtain the erasure of personal data "right to be forgotten" (Article 17 of the GDPR),
• the right to obtain restriction of processing of personal data (Article 18 of the GDPR),
• the right to personal data portability (Article 20 of the GDPR),
• the right to object to processing of personal data (Article 21 of the GDPR). The job applicant may exercise the abovementioned rights by contacting the Administrator's Data Protection Officer at the following email address: dpo@cm.tech.

The job applicant is entitled to submit a complaint to the competent supervisory authority (currently it is the President of the Office for Personal Data Protection) at any time in the event of a breach of rights regarding the processing of personal data.

The processing of personal data is voluntary, however, to the extent specified by the provisions of the Labor Code of 26 June 1974, it is necessary to conduct current recruitment. Providing additional personal data or purposes of processing is voluntary and requires the explicit consent of the job applicant. In the event that recruitment involves the conclusion of a civil law contract, all data of job applicant is processed on the basis of their voluntary and explicit consent. In both cases, the job applicant has the right to withdraw their consent at any time by sending appropriate information to the contact email address of the Administrator's data protection officer, concerning that in case of current recruitment process, it shall cause excluding the job applicant from the recruitment process due to lack of legal basis for further processing of application documents by Commerce Media Tech. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.