GDPR information for applicants

  1. Personal Data Controller is PIKRALIDA SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ based in Poznań, at ul. Uniwersytetu Poznańskiego 10, 61-614 Poznań, NIP: 7792503386, REGON: 382576965, registered under KRS 0000773180 by the District Court for Poznań Nowe Miasto and Wilda in Poznań, 8th Commercial Division of the National Court Register.
  2. Personal data of job applicants who send in their application documents (CV, cover letter, etc.) will be processed for the purpose of their participation in the recruitment process for the position they apply for.
  3. The data subject may contact the Data Controller at the following e-mail: or by postal mail at the Data Controller’s registered address.
  4. The provision of data is mandatory. Failure to provide data precludes participation in the recruitment process.
  5. The scope of the processed data of an applicant for employment ensues in particular from the provisions in the Labour Code Act of 26 June 1974. The provision of additional data is voluntary and requires your consent.
  6. The legal basis for data processing is as follows:
  • Article 6(1)(c) of the GDPR and Article 9(2)(c) of the GDPR – processing is necessary for compliance with a legal obligation to which the controller is subject, such as the exercise of obligations and rights under employment and social security law, in particular the Labour Code Act of 26 June 1974
  • Article 6(1)(b) of the GDPR – processing is necessary for the conclusion of a contract and settlement thereof where the data subject is a party thereto,
  • Article 6(1)(a) of the GDPR – consent of the data subject regarding the provision of additional data, and Article 9(2)(a) of the GDPR regarding consent to have sensitive data processed.
  1. The applicant’s personal data shall be entrusted to ICT service providers that are responsible for processing the data for the purpose of recruitment.
  2. The application documents (CV, cover letter, etc.) shall be stored for a period of 6 months from the date of the submission thereof (if applicable to the recruitment at issue). The data storage period may be extended to 12 months if the person agrees to their data being processed for the purpose of future recruitment procedures. In the case of employment, the data storage period shall be as required by law, of which those employed shall be informed in a separate notice.
  3. The applicant’s personal data is not subject to automated profiling.
  4. Personal data may be processed in third countries, in particular in connection with the use of the IT systems used for processing purposes. The servers on which personal data is stored are located outside the European Economic Area, in particular in the United States of America, Japan, and India. The list of sub-processors is available at:
  5. The processing of data outside the European Economic Area is based on standard contractual clauses concluded between the Personal Data Controller and the service provider. The data processing does not violate the privacy of any individuals. The Service Provider provides the highest data protection guarantees.
  6. Applicants shall have the following rights:
  • to access their personal data and rectify the content thereof,
  • to annul or restrict processing (unless further processing is required by law),
  • to object to the processing of data, in particular for the purposes of marketing of the Data Controller’s own products and services,
  • to monitor the processing of data and to be informed as to who the Data Controller is and to receive information regarding the purpose, scope and means of the data processing, the content of such data, the source of the data and the means of access, including on the recipients or categories of recipients of the data, including the right to obtain a copy of the data,
  • to withdraw consent to the provision of additional data, at any time, without it affecting the lawfulness of the processing done under consent before such withdrawal, or to withdraw consent to the processing of data for the purpose of future recruitment procedures,
  • to file a complaint with the President of the Office for Personal Data Protection (PUODO) if the processing of the data violates the provisions of the General Data Protection Regulation (GDPR) or those of currently applicable data protection laws.