Hero Coders job opportunity - GDPR Privacy Notice

Hero Coders job opportunity - GDPR Privacy Notice

At Hero Coders, we are committed to respecting your privacy. This Privacy Notice is designed to describe how HeroCoders Sp. z o.o. collects, uses, and processes personal information about job applicants as part of our recruitment process. This Privacy Notice does not cover the use of Hero Coders products or services. For more information, please read our Privacy Policy available at www.herocoders.com/privacy

1. Who we are and how to find us

Data Controller of applicant’s personal data is HeroCoders Sp. z o. o. with its registered in Gdansk Poland (address: ul. Zosi 16, 80-119 Gdansk), entered into the registry of entrepreneurs of the National Court Register under KRS number: 0000910925 (hereinafter referred to as: „HeroCoders” or “We”, „Us”).

We have appointed a Data Protection Officer (“DPO”) whom you may contact in all matters related to the processing of your personal data using e-mail: dpo@herocoders.com.

2. Purpose and legal basis for personal data processing

2.1. processing of your job application, managing the relationship between you and HeroCoders during your candidacy including scheduling meetings, responding to inquiries, and communications - necessity of processing to take steps at the request of the data subject prior to entering into a contract (Article 6 (1)(b) of the GDPR);

2.2. necessity of processing for the purposes of pursuing our legitimate interests (Article 6 (1)(f) GDPR). We have a legitimate interest in verifying your skills and abilities, in analyzing candidate and application trends, in protection against possible claims or for the purpose of pursuing claims;

2.3. fulfillment of any legal obligations of the Data Controller (Article 6 (1)(c) GDPR);

2.4. in the remaining scope processing is being carried out on the basis of the consent expressed by the candidate in accordance with Article 6 (1) (A) of GDPR) including, if you consent, conduct of future recruitment processes, contact about other employment positions for which you may be eligible,

3. To whom we disclose your personal data

Within the company, only those persons who need your data for the proper conduct of our application process have access to it. We also use Breezy HR, a web-based hiring platform, to assist in our recruiting process. As part of that process, Breezy HR will be processing the personal information you have shared. We may, in certain instances, also share your personal information with other service providers in connection with the recruitment process. The operations described above may involve transmission of your personal data to the so-called third countries (outside of the European Economic Area), where the GDPR is not applicable. This happens on the basis of legal instruments provided for in the GDPR, guaranteeing adequate protection of your rights and freedoms. In particular, your data may be accessible to i) Breezy’s staff in the USA or ii) may be stored by Breezy’s hosting service provider on servers in the USA as well as in the EU. The USA does not have the same data protection laws as EEA. We have entered into a "Data Processing Agreement" with Breezy. This is a contract in which Breezy undertakes to protect the data of our applicants and to process it on our behalf in accordance with its data protection provisions and in particular, not to pass it on to third parties.

4. How long do we process your personal data

Your personal data will be stored for up to 24 months and then deleted. If for some reason, we would like to retain your information longer, we will reach out to you for consent first. If you are offered a job and accept We will store and retain certain information in your personnel file.

5. What are your rights

Depending on applicable laws, you may have the following rights regarding your personal data:

the right of access by the data subject (regulated in Article 15 of the GDPR)
right to rectification of your data (regulated in Article 16 of the GDPR)
right to erase your data (regulated in Article 17 of the GDPR)
right to restrict of processing of your data (regulated in Article 18 of the GDPR)
right to data portability of your data (regulated in Article 20 of the GDPR)
right to object to the processing of your data (regulated in Article 21 of the GDPR).

To the extent that your data is processed on the basis of consent you have the right to withdraw your consent for data processing at any time (Article 7 par. 3 of the GDPR). The withdrawal of consent does not affect the lawfulness of the processing that was carried out before the withdrawal. These rights may be limited according to applicable data protection laws.

6. Complaint to the supervisory authority

According to Article 77 of the GDPR you may submit a complaint to the supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place where the alleged violation is committed, if you believe that the processing of personal data regarding you violates the provisions of the GDPR. In Poland, the supervisory body is the President of the Office for Personal Data Protection. You can make a complaint, among others by traditional mail to the following address: ul. Stawki 2, 00-913 Warsaw or electronically. You can get more detailed information on the website: https://uodo.gov.pl/.

7. Is the provision of data necessary

You are not required to provide us personal information. However, if you choose not to provide personal information, we may not be able to continue the recruitment process with you or we may not be able to take it into account all important information when assessing your application, and thus the assessment of your competence may be incomplete.

8. Automated decision-making and profiling

We do not make decisions in an automated manner or subject any personal data to profiling as understood by the GDPR. We may use Breezy’s technology to select appropriate candidates for Us to consider based on criteria expressly identified by us, or typical in relation to the role for which you have applied. The process of finding suitable candidates is automatic, however, any decision as to who We will engage to fill the job opening will be made by Our staff.

9. Disclaimer

This notice applies to all individuals globally, who are applying to work with us. General Data Protection Regulation (GDPR) is the most comprehensive privacy law and already includes most of the other privacy requirements globally. Therefore we sets out the GDPR as the standard for the processing of personal data. You have rights as per the GDPR and as set out in this Notice, irrespective of the country you are applying from. Additionally, you may have applicable rights as per the local legal requirements.

If there is any discrepancy between this Privacy Notice and applicable law in your jurisdiction, the applicable law will prevail. Nothing in this Privacy Notice is intended to curtail or impede your privacy rights under applicable law.

CHANGES TO THIS NOTICE

We may change this notice from time to time in response to technical, business, or legal developments. When updates are made, we will note the update date on this page. We recommend that you re-visit this Notice from time to time for information on how We processes your information.

CONTACT

We hope that We can resolve any query or concern you raise about our use of your data.

For any questions regarding this Privacy Notice you can contact our DPO at dpo@herocoders.com.