THE INFORMATION OBLIGATION ARISING FROM Art. 13 and 14 GDPR

Based on Article. 13 and 14 of the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016. on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 / EC, hereinafter referred to as GDPR, KYOJI Sp. z o.o. informs that:

1. The Administrator of Personal Data is KYOJI Sp. z o.o., with headquarters in Libertów, address: Bartnicka 36/2, 30-444 Libertów, contact e-mail: kyoji@kyoji.pl.
2. Personal data will be processed by the Administrator pursuant to art. 6 sec. 1 letters a - c and art. 9 sec. 2 lit. b GDPR
1. in order to fulfill the obligations set out in legal provisions, resulting in particular from the following acts:
1. the Act of October 13, 1998 on the social insurance system
2. the Act of June 26, 1974, the Labor Code
2. in order to employ employees,
3. on the basis of consent - only for the purpose indicated in the content of the expressly granted consent.
3. Depending on the scope of the collected data, the recipients of the entrusted data may be: state and local government authorities (to the extent resulting from the provisions of law), IT service providers (to the extent necessary to provide IT services to the Data Administrator), recruitment agencies and other entities providing the final service ( to the extent resulting from contracts, agreements or other legal tools concluded with the Administrator). Personal data will be transferred to other recipients only in the event of a legal obligation.
4. The Administrator does not intend to transfer personal data to third countries or international organizations.
5. The Administrator makes every effort to ensure that personal data is properly and properly secured.
6. Each of the persons whose data is processed with the full rights in accordance with the GDPR, including the possibility of obtaining a copy of the data.
7. Each data subject has the right to access their data, rectify it, delete it, limit processing, the right to transfer data, the right to object.
8. The categories of personal data processed in the event of the secondary information obligation pursuant to Art. 14 GDPR: a. Name, b. Surname, c. Date of birth, d. Citizenship, e. Residence / registration / correspondence address, f. PESEL number, g. Education, h. Medical certificates required by the provisions of the labor code, i. Data children in the case of exercising parental rights resulting from the regulations, j. certificate of disability, k. bank account numbers of employees and contractors, l. employment and remuneration data, j. contact details.
9. Source of data in case of the secondary information obligation pursuant to Art. 14 GDPR: Nature of the data source - private source, incl. data from an organization providing professional support in the recruitment of employees for the Administrator.
10. Personal data will be processed during the recruitment process and during the implementation of the contract, possible determination, investigation or defense of claims, and will be stored after termination of employment for the period required by law and for archival purposes for a period consistent with the Act of July 14, 1983 on national archival resources and archives, and if the provision does not specify a period for a specific case, the data will be stored for the shortest possible time necessary to perform the obligation or service.
11. If the processing takes place on the basis of the consent expressed by the data subject, that person has the right to withdraw consent at any time without affecting the lawfulness of the processing which was carried out on the basis of consent before its withdrawal.
12. The Administrator does not use automated decision-making mechanisms, including profiling.
13. The data subject has the right to lodge a complaint with the supervisory body, i.e. the President of the Office for Personal Data Protection, if he considers that the processing of his personal data violates the provisions of the GDPR.
14. Depending on the case, providing personal data may be a statutory or contractual requirement or a condition for concluding a contract. Failure to provide all the required data may lead to the Administrator not taking action.