Information clause on the processing of personal data held Dear Sir or Madam, In connection with the entry into force on 25 May 2018, in accordance with Article 13, paragraphs 1 and 2 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), we would like to inform you about your rights and the purposes for which we process your personal data.

1. GENERAL PROVISIONS:

The Controller of personal data is Marcin Bzdek, conducting business activity under the name MARTIN LEASING JOBS, registered office address: ul. Piaskowa 36D, 44-304 Wodzisław Śląski NIP: 6472577448, REGON: 366735940, entered into the Central Register and Information on Business Activity and the National Register of Employment Agencies under the number: 15929, hereinafter referred to as the "Controller", who is also the Service Provider.

• The Service User’s personal data are processed in accordance with the Personal Data Protection Act of 29 August 1997 (Journal of Laws No. 133, item 883, as amended) and the Act on the provision of electronic services of 18 July 2002 (Journal of Laws No. 144, item 1204, as amended).
• The Administrator has appointed a Data Protection Officer, who should be contacted by correspondence at the company's registered office address or by sending correspondence to the e-mail address: inspektor@leasingjobs.pl
• The Administrator takes special care to protect the interests of data subjects, and in particular ensures that the data collected by him are:

1. a) processed in accordance with the law,
2. b) collected for specified, lawful purposes and not subject to further processing incompatible with those purposes,
3. c) factually correct and adequate in relation to the purposes for which they are processed and stored in a form which allows identification of the persons to whom they relate, no longer than is necessary to achieve the purpose of processing.2. PURPOSE AND SCOPE OF DATA COLLECTION

The personal data of Service Users and Contact Persons collected by the Administrator are used for:

• carrying out the service recipient's recruitment processes. The processing of personal data contained herein is based on your consent (in accordance with Article 6(1)(a) of the GDPR); providing your personal data is voluntary, but necessary for recruitment. Failure to provide personal data will result in the inability to carry out the recruitment processes. Personal data will be processed until you withdraw your consent to such processing.
• profiling service recipient data – automated compilation of the information you provide and automatic matching of my profile to job offers in order to provide services based on the latest technological solutions. Data profiling takes place if you consent to the processing of data in this regard (legal basis: Art. 6 sec. 1 letter a in conjunction with Art. 22 sec. 1 and 4 of the GDPR). Personal data will be processed until you withdraw your consent to such processing.
• contacting the service recipient.
• information purposes and other activities related to the Service User's activity on the website https://leasingjobs.pl
• marketing purposes (Newsletter).

3. DATA RECIPIENTS

In connection with data processing for the purposes indicated in point 2, your personal data may be shared with other recipients or categories of personal data recipients. Recipients of your data may include:

• persons responsible for recruitment and staff making decisions on employment, as well as persons responsible for IT supervision, supervision over the correctness of recruitment activities, including lawyers,
• processors that process your personal data on behalf of the Data Controller on the basis of a personal data processing agreement.

4. RIGHTS OF PERSONS WHOSE DATA ARE PROCESSED

In connection with the processing of your data by the Data Administrator, the service recipient is entitled to:

• the right to access the content of your data, in accordance with Article 15 of the GDPR – the right to receive confirmation as to whether your personal data are being processed, and if they are being processed, you are entitled to access them, obtain a copy thereof and to obtain the following information: about the purposes of processing, categories of personal data, information on the recipients or categories of recipients to whom the data have been or will be disclosed, the period of data storage or the criteria for determining them, your rights related to the processing of your personal data, the possibility of lodging a complaint with a supervisory authority, the source of personal data if they were not obtained directly from you, and about profiling and automated decision-making;
• the right to rectification of data, in accordance with Article 16 of the GDPR – if you become aware that your personal data processed by the Data Controller are incorrect, outdated or incomplete, you have the right to request their immediate rectification or completion;
• the right to erasure of data, in accordance with Article 17 of the GDPR, whereby if you have consented to the processing of personal data, the request for erasure will have the same effect as withdrawal of consent;
• the right to restrict the processing of data, in accordance with Article 18 of the GDPR – you can request that we cease processing your data, with the exception of storing it, in situations where:

1. a) you question the accuracy of your personal data – for the period in which the Data Controller will verify their accuracy;
2. b) you question the lawfulness of the processing of personal data by the Data Controller;
3. c) the Data Controller no longer needs the data, but you need it to establish, pursue or defend your claims;
4. d) You have objected to the processing – until the Data Controller makes a decision as to the validity of the objection;

• the right to object to data processing, in accordance with Article 21 of the GDPR;
• the right to data portability in accordance with Article 20 of the GDPR – to receive the personal data you have provided to the Data Controller in a structured, commonly used and machine-readable format, if their processing is based on your consent, or to request that these data be sent to another controller indicated by you;
• the right to lodge a complaint with the supervisory authority if you believe that the processing of your data violates the provisions of the GDPR.

5. VOLUNTARY CONSENT

Providing your personal data is not mandatory, but it is necessary for the provision of services, including the recruitment process. Where the processing of your data is based on consent, you have the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal. Where your data was processed based on consent, withdrawal of consent prevents further use of the services. Withdrawal of consent is done by sending a consent withdrawal request to the following email address: inspektor@leasingjobs.pl or in writing to the address of the Administrator's registered office indicated in point 1.

6. COOKIES„

The Service Provider's website uses cookies. Failure to change browser settings by the Service User constitutes consent to their use. Installing cookies is necessary for the proper provision of services on the website. Cookies contain information essential for the proper functioning of the website, particularly those requiring authorization. The website uses the following types of cookies:

• „"Persistent" cookies are stored on the Service User's end device for the time specified in the cookie file parameters or until they are deleted by the User.

Users have the right to control the access of cookies to their computer by selecting them in their browser window. Detailed information about the possibilities and methods of managing cookies is available in the software (web browser) settings.

7. PROFILING

The Administrator performs the functions of obtaining information about the Service User and collating the information provided by the Service User in an automated manner in order to automatically match the Service User's profile to job offers in order to provide services based on the latest technological solutions, using data voluntarily provided by Users. Personal data will be processed until the User withdraws consent to such processing.

8. FINAL PROVISIONS

The Administrator employs technical and organizational measures to ensure the protection of processed personal data appropriate to the threats and categories of data being protected. In particular, it protects data against unauthorized disclosure, unauthorized removal, processing in violation of applicable laws, and alteration, loss, damage, or destruction. The Service Provider provides appropriate technical measures to prevent unauthorized access and modification of personal data transmitted electronically.