Privacy Policy of MAX POWER Sp. z o.o.
www.max-power.com.pl
date of last modification: 15.03.2024
We have developed our Policy so that you can understand what information about you we collect within the Service, how we process it, and protect it.
Providing personal data, as well as consenting to their processing, is entirely voluntary, although necessary to enter into cooperation. All personal data provided to us are processed exclusively within the scope and purpose for which you have given consent or as allowed by applicable law.
Please note that at any time you have the right to access the content of your data, to rectify, delete, restrict processing, transfer, object, and withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. You can do this on your own or with our assistance, which we will gladly provide.
The information contained in the Privacy Policy pertains to Service Users, i.e., individuals visiting our websites, job candidates, employees, potential employers, employers.
We want to assure you that all personal data of Users obtained through our Service are processed in a manner ensuring their security, in accordance with the provisions of the universally applicable law.
I. Who is the controller of personal data?
The data controllers, responsible for ensuring the security of your personal data, are:
MAX POWER Sp. z o.o. with its registered office in Białystok, address: ul. Elizy Orzeszkowej 32/109, 15-084 Białystok, for which the District Court for Wrocław-Fabryczna, VI Economic Department of the National Court Register (KRS), maintains the company documentation, registered in the entrepreneurs' register under the KRS number 0000328802, Tax Identification Number (NIP) 8842690682, share capital PLN 50,000;
Max Power Poland Sp. z o. o. with its registered office in Białystok, address: ul. Elizy Orzeszkowej 32/109, 15-084 Białystok, for which the District Court in Białystok, XII Economic Department of the National Court Register (KRS), maintains the company documentation, registered in the entrepreneurs' register under the KRS number 0000592180, Tax Identification Number (NIP) 8971817512, share capital PLN 5,000;
HR POWER Sp. z o.o. with its registered office in Zabrze, address: ul. 3 Maja 1A, 41-800 Zabrze, for which the District Court in Gliwice, X Economic Department of the National Court Register (KRS), maintains the company documentation, registered in the entrepreneurs' register under the KRS number 0000432967, Tax Identification Number (NIP) 8961531464, share capital PLN 5,000;
Max Power Professional Sp. z o.o. with its registered office in Zabrze, address: ul. 3 Maja 1A, 41-800 Zabrze, for which the District Court Szczecin-Centrum in Szczecin, XIII Economic Department of the National Court Register (KRS), maintains the company documentation, registered in the entrepreneurs' register under the KRS number 0000727299, Tax Identification Number (NIP) 5482695545, share capital PLN 5,000;
Max Power Europe Sp. z o.o. with its registered office in Białystok, address: ul. Elizy Orzeszkowej 32/109, 15-084 Białystok, for which the District Court in Białystok, XII Economic Department of the National Court Register (KRS), maintains the company documentation, registered in the entrepreneurs' register under the KRS number 0001026410, Tax Identification Number (NIP) 5423465542, share capital PLN 20,000;
Max Power Service Sp. z o.o. with its registered office in Olsztyn at ul. Plac Gen. Józefa Bema nr 2, suite 2, 10-516 Olsztyn, for which the District Court in Olsztyn, VII Economic Department of the National Court Register (KRS), maintains the company documentation, registered in the entrepreneurs' register under the KRS number 0001067132, Tax Identification Number (NIP) 7393991355, share capital PLN 50,000
hereinafter collectively referred to as "Joint Controllers" or "Controllers."
We have appointed a Data Protection Officer, who can be contacted via email at dane.osobowe@max-power.com.pl. The Data Protection Officer can be contacted for all matters related to the processing of personal data and the exercise of rights related to data processing.
II. How do we protect your personal data?
The controllers have implemented internal procedures in accordance with the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, which ensure effective protection of your personal data.
III. Why do we request and what personal data do we ask for?
A. Contact Form
In case of contacting us through the contact form, we ask for the following data:
1. name and surname – necessary for identifying the person filling out the form and for contact regarding the inquiry;
2. telephone number – necessary for contact regarding the inquiry.
The legal basis for processing data is Article 6(1)(a) of the GDPR, i.e., processing is based on consent, which is expressed through the action. What does this mean? By clicking the "Send" button and submitting your inquiry to us, you agree to the processing by the Joint Controllers of personal data contained in your inquiry for the purpose of presenting job offers.
B. Job application form
In case of applying for a job based on a job offer posted on the website using the "Apply" button, we request the following data:
1. Name and surname – necessary for identifying the person applying for the job;
2. Telephone number and email address - necessary for contact regarding the application;
3. CV (optional) – data contained in the CV are processed for the purpose of conducting the recruitment process.
By clicking the "Send" button, you agree to the processing by the Joint Controllers of personal data contained in your job application for the position indicated in the job advertisement (consent includes additional personal data voluntarily provided in your job application, e.g., your image). If you do not want us to process additional data about you, do not include them in your documents.
Your data will be processed by the Joint Controllers for recruitment purposes, i.e., in the process of searching for suitable candidates for employment or in the case when you apply for a temporary/outsourced employee position to recommend them to our clients. In case of checking the checkboxes consenting to the processing of your data in the future, we will also process your data during future recruitment processes. Failure to provide personal data will result in the inability to participate in the recruitment process or receive commercial information.
Below you will find full information on how we process your personal data in connection with recruitment.
1. The legal basis for processing your data is:
a) Article 6(1)(c) of the GDPR, i.e., processing is necessary for compliance with a legal obligation to which the controller is subject - in connection with Article 221 of the Labor Code in the case of employment contracts,
b) Article 6(1)(b) of the GDPR - i.e., the processed data is necessary for the performance of a contract or for taking pre-contractual measures at the request of the data subject - in the case of civil law contracts,
c) Article 6(1)(a) of the GDPR, i.e., the data subject has given consent to the processing of their personal data - in the case of processing data during future recruitments and/or providing additional data in the CV not mentioned in the law,
d) In the case of asserting or defending against claims, also the legitimate interest of the controller in accordance with Article 6(1)(f) of the GDPR.
2. Providing personal data specified in the Labor Code is mandatory to participate in the recruitment process. Similarly, providing the above-mentioned data necessary to take action at your request before the conclusion of a contract and necessary for our legitimate interest is mandatory. Providing other data is voluntary.
3. Processing of data other than those specified in Article 221 § 1 and § 3 of the Labor Code occurs only when they are provided to the Controller at the initiative of the person applying for employment. In such a case, the Controller assumes that the person applying for employment has consented to their processing (Article 6(1)(a) of the GDPR in connection with Article 221a § 1 of the Labor Code in the case of temporary employment contracts).
Consent is voluntary and can be revoked at any time. Simply send such information to the email address: dane.osobowe@max-power.com.pl or directly submit a request at the Controller's headquarters.
5. In case you provide us with information about the degree of disability, we will process this data based on Article 9(2)(b) of the GDPR, i.e., processing is necessary for the performance of obligations and exercising specific rights by the controller or the data subject in the field of labor law, social security, and social protection, in accordance with the Act of August 27, 1997, on vocational and social rehabilitation and employment of persons with disabilities. Providing this data is initiated by you and is voluntary, but also necessary to grant benefits and allowances to the disabled person.
6. Within the framework of the Joint Controllership Agreement concluded between the Joint Controllers, they have agreed on the scope of their responsibility regarding the fulfillment of obligations arising from the GDPR. The content of these agreements between the Joint Controllers is available at each Joint Controller.
7. We may disclose your personal data to IT service providers such as hosting providers, providers of IT systems, and law firms. Furthermore, in case you apply for a temporary position, your personal data may be disclosed to potential employers on the basis of the provisions of the Act of 9 July 2003 on the employment of temporary workers.
8. In the case of recruitment for work abroad, we may disclose your data to a foreign employer based on the Act of 20 April 2004 on the promotion of employment and labor market institutions, and in connection with the provision of mediation services for work abroad by a foreign employer.
9. We process your personal data for the purpose of conducting recruitment for a period of 6 months, and if you have consented to participate in future recruitments, for a period of 12 months.
10. For other purposes, we process your personal data for the following periods:
for the purpose of establishing, asserting, or defending against claims related to the recruitment process for a period of 6 months;
in case we need to repeat this recruitment process, for a period of 6 months.
11. You have the right to access your data, including obtaining a copy of it, correcting the data, requesting its deletion, limiting processing, objecting to processing, and transferring the provided data (for which you have consented to processing or we process it at your request before concluding the contract) to another controller. You also have the right to lodge a complaint with the President of the Office for Personal Data Protection if you believe that the processing is carried out unlawfully. In the case of data processed based on consent, withdrawing consent does not affect the lawfulness of processing carried out before its withdrawal.
12. We do not make decisions in an automated manner, nor do we apply profiling, and we do not transfer data to third countries or international organizations.
C. Conducting marketing activities aimed at job candidates
In case you provide separate consent, we will process your personal data concerning your email address and/or phone number for the purpose of sending marketing information about products and services of the Joint Controllers. With your consent, we will be able to contact you via email/sms/mms and/or by phone.
Consent is voluntary. You can withdraw your consent at any time by sending an email to: dane.osobowe@max-power.com.pl,which does not affect the lawfulness of processing carried out before the withdrawal of consent.
All personal data provided by you may also be processed for the purpose of establishing, asserting, or defending against claims - the legal basis for processing personal data will be the legitimate interest of the Data Controller, consisting of the possibility of establishing and asserting claims (receivables) or defending against such claims in proceedings before courts or state authorities (Article 6(1)(f) of the GDPR).
In each case, we ensure that the scope of processed data is limited to the necessary minimum and adequate to the purpose pursued.
We may make automated decisions regarding your data, but only if it is necessary for the performance of a contract or with your consent.
D. Conducting marketing activities aimed at representatives of companies looking for employees
In case of contacting us through the contact form, we ask for the following data:
1. Name and surname
2. email address
3. telephone number – necessary for contact regarding the inquiry
4. company
The legal basis for processing data is Article 6(1)(a) of the GDPR, i.e., processing is based on consent, which is expressed through the action. What does this mean? By clicking the "Send" button and submitting the inquiry contained in the contact form, you agree to the processing of your personal data by Max Power Sp. z o.o.
In case you provide separate consent, we will process your personal data concerning your email address and/or phone number for the purpose of sending marketing information about products and services of Max Power Sp. z o.o. With your consent, we will be able to contact you via email/sms/mms and/or by phone.
Consent is voluntary. You can withdraw your consent at any time by sending an email to: dane.osobowe@max-power.com.pl, which does not affect the lawfulness of processing carried out before the withdrawal of consent.
All personal data provided by you may also be processed for the purpose of establishing, asserting, or defending against claims - the legal basis for processing personal data will be the legitimate interest of the Data Controller, consisting of the possibility of establishing and asserting claims (receivables) or defending against such claims in proceedings before courts or state authorities (Article 6(1)(f) of the GDPR).
IV. Your personal data, which is automatically collected upon entering the website www.max-power.com.pl
A. (server)
The IT system used by the website automatically collects data related to the device you are using in its logs. This data is collected solely for statistical purposes and includes: IP addresses, downloaded file addresses from the website, or exit addresses, and is used only for diagnostic purposes.
This data is never combined with the data provided as mentioned in Part III and serves solely as material for statistical analysis and mechanisms for correcting system errors.
B. (cookies)
Cookies are IT data, in particular text files, which are stored on the end device of the Website User and are intended for the use of subpages of the Website. Cookies usually contain the name of the website, which they come from, time of their storage on the end device as well as a unique number.
The Website uses two types of cookies:
a. Session Cookies – stored on the User's device and remain there until the end of the browser session. The saved information is then permanently deleted from the device's memory. The session cookies mechanism does not allow for the retrieval of any personal data or confidential information from the user's device.
b. Persistent cookies: are stored on the user's device and remain there until they are deleted. Ending the session of a particular browser or turning off the device does not result in their removal from the user's device. The persistent cookies mechanism does not allow for the retrieval of any personal data or confidential information from the user's device.
The following types of cookie files are used on the Site:
a. “essential” cookies. Essential cookies contribute to the usability of the website by enabling basic functions such as page navigation and access to secure areas of the website. The website cannot function properly without these cookies.
b. statistical cookies. Statistical cookies help website owners understand how different users behave on the site by collecting and reporting anonymous information.
The law stipulates that cookies can be stored on the user's device if it is necessary for the functioning of the Website. For all other types of cookies, the Administrator requires the User's permission.
Essential cookies are processed by the Administrator based on the legitimate interest of the Administrator and users. Other cookies are processed based on the user's consent.
When entering the www.max-power.com.pl Service for the first time, the User is shown information about cookies (at the bottom of the page). At this point, the user has the option to decide which cookies to consent to.
Furthermore, the user can withdraw their consent or change their preferences at any time by opening the cookie widget displayed on every page (in its bottom left corner), and then adjusting the settings in the banner that appears.
Additionally, by default, web browsing software (browser) allows for the handling of cookies on the user's device on which it is running. In most cases, users can configure this software themselves, including enforcing automatic cookie blocking. Configuration settings for handling cookies can be found in the software settings (web browsers). It should be noted that setting limitations on the handling of cookies may affect the functioning of some website functionalities.
V. Whom do we disclose your personal data to
The Controller carefully selects its business partners and thoroughly verifies the links to other websites placed on the www.max-power.com.pl website. However, the Controller is not responsible for the standards and privacy policies applied by the owners, operators, or administrators of those websites. Therefore, we recommend verifying each of our partners on your own and independently deciding whether you want to entrust them with your personal data.
Your personal data may only be disclosed to service providers that we use to conduct our business activities. These service providers act as processors, meaning they process the personal data entrusted to them by us and are subject to our instructions regarding the purposes and methods of data processing. These include providers who provide IT services and maintain the website on our behalf. Our providers guarantee a high level of data protection. We have signed appropriate data processing agreements with our providers.
In exceptional situations where applicable law requires us to disclose the collected data to authorized state authorities, we will do so. Except for these situations, your personal data will only be disclosed to the extent, for the purpose, and to the entities specified in this Privacy Policy.
All entities to whom we disclose your personal data process it only to the extent necessary to perform the functions entrusted to them and in accordance with our instructions.
Processing data in accordance with the Privacy Policy may involve transferring data to other countries, including countries outside the EEA. If the law of the country to which the data is transferred provides for a different level of data protection than Poland, we will ensure that the level of protection of personal data in that country is deemed adequate by the European Commission or we will enter into an agreement with that entity guaranteeing an adequate level of protection.
VI. Data Retention Period for Your Personal Data
Personal data is stored in a form that allows for the identification of the person to whom the data relates for no longer than is necessary for the purposes for which the data is processed.
Personal data provided for recruitment purposes will be processed for 6 months until the recruitment process for the specific position is concluded. In the case of candidate consent for future recruitments, data will be processed for 12 months from the date of submission.
Personal data processed based on consent (for marketing, future recruitments, additional data in CV) will be processed until the consent is withdrawn or until the purpose of processing ceases. It should be noted that withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal.
Data provided in the contact form is processed for the duration of correspondence and then additionally for the period of limitation of any claims specified by law.
After this period, the data is anonymized (stripped of identifying characteristics) or deleted. The deletion of personal data is complete and permanent.
VII. Exercising Rights Regarding the Processing of Your Personal Data
A. Right to Withdraw Consent
You have the right to withdraw consent you have given by contacting us. The withdrawal of consent takes effect from the moment of its withdrawal. The withdrawal of consent does not affect the processing carried out by us in accordance with the law before its withdrawal.
The withdrawal of consent does not entail any negative consequences for you. However, it may prevent further use of services or functionalities that we can provide only with consent according to the law.
Legal basis: Article 7(3) of the GDPR.
B. Right to Object
You have the right to object to the processing of your personal data at any time. If your objection is justified and we do not have another legal basis for processing your personal data, we will delete your data that you objected to being used.
Legal basis: Article 21 of the GDPR.
C. Right to Erasure ("Right to be Forgotten")
You have the right to request the deletion of all or some of your personal data.
You have the right to request the deletion of personal data if:
a. you have withdrawn a specific consent, to the extent that personal data have been processed based on your consent;
b. your personal data are no longer necessary for the purposes for which they were collected or processed;
c. you have objected to the use of your data for marketing purposes;
d. your personal data are processed unlawfully.
Despite the request for deletion of personal data, due to objection or withdrawal of consent, we may retain certain personal data to the extent necessary for the purposes of establishing, pursuing, or defending legal claims.
Legal basis: Article 17 of the GDPR.
D. Right to Restriction of Processing
You have the right to request the restriction of processing of your personal data. If you make such a request, we will prevent you from using certain functionalities or services until your request is processed, if their use involves processing of the data covered by the request.
You have the right to request the restriction of the use of your personal data in the following cases:
a. when you contest the accuracy of your personal data;
b. when the processing of your data is unlawful;
c. when your personal data are no longer necessary for the purposes for which we collected or used them, but you need them for the establishment, exercise, or defense of legal claims;
d. when you have objected to the use of your data - in such case, the restriction is implemented for the time needed to consider whether, due to your particular situation, your interests, rights, and freedoms override our interests in processing your personal data.
Legal basis: Article 18 of the GDPR.
E. Right to Access Data
You have the right to obtain confirmation from us as to whether we are processing your personal data, and if so, you have the right to:
a. access your personal data;
b. obtain information about the purposes of processing, the categories of personal data processed, the recipients or categories of recipients of this data, the planned period of storing your data or the criteria for determining this period, your rights under the GDPR, and the right to lodge a complaint with the supervisory authority, the source of this data, automated decision-making, including profiling, and the safeguards used in connection with the transfer of this data outside the European Union;
c. obtain a copy of your personal data.
Legal basis: Article 15 of the GDPR.
F. Right to Rectification of Data
You have the right to rectify and complete the personal data provided by you. You can do this by submitting a request to us to correct this data (if it is incorrect) and to complete it (if it is incomplete).
Legal basis: Article 16 of the GDPR.
G. Right to Data Portability
You have the right to receive your personal data that you have provided to us, and then transmit it to another data controller of your choice. You also have the right to request that your personal data be transmitted by us directly to such another data controller, if this is technically feasible.
Legal basis: Article 20 of the GDPR.
If, in exercising the above-mentioned rights, you make a request to us, we will fulfill or refuse to fulfill it immediately, but no later than within one month of receiving it. However, if - due to the complex nature of the request or the number of requests - we are unable to fulfill your request within one month, we will fulfill it within the next two months, informing you in advance of the intended extension of the deadline.
You can submit complaints, inquiries, and requests to us regarding the processing of your personal data and the exercise of your rights.
If you believe that your right to data protection or other rights granted to you under the GDPR have been violated, you have the right to lodge a complaint with the supervisory authority - the President of the Office for Personal Data Protection.
VIII. Changes to the Privacy Policy
The Controller reserves the right to change the privacy policy, if required by applicable law, if there are changes in the technological conditions of the operation of the website www.max-power.com.pl, or if the change introduces a standard higher than the minimum required by law.