Privacy Policy
I. Data Controller
In compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR), we inform you that:
The data controller is:
lxpro GmbH sp. z o.o. Oddział w Polsce
ul. Spacerowa 4, Masów
46-024 Łubniany, Poland
(referred to as “lxpro“)
You can contact the data controller via email at rodo@lxpro.pl.
II. Collection of Personal Data
lxpro collects your personal data when you contact us via email at info@lxpro.pl or when you submit your CV or other forms for recruitment purposes to praca@lxpro.pl.
Personal data such as your name, email address, business address, or phone number may be used for follow-up communication, preparing offers, responding to inquiries, or other necessary actions to facilitate communication and fulfill intended purposes.
III. Purposes, Legal Bases, and Retention of Personal Data
Personal data is not subject to profiling or automated decision-making.
The duration of personal data processing depends on the legal grounds that justify its processing by lxpro, and we ensure that data is not retained longer than permitted.
Data processing timelines and purposes are as follows:
- Job Applications:Personal data from CVs or other documents sent to praca@lxpro.pl or submitted by mail or in person is processed solely for recruitment purposes. For the position applied for, data is retained for the duration of the recruitment process based on the Labor Code (Article 6(1)(c) GDPR) and with the candidate’s consent (Article 6(1)(a) GDPR). If the application does not advance, data is retained for six months, or for three years for candidates with interview or other direct contact, to guard against potential claims.
- Future Recruitment:With explicit consent, candidates’ data may be retained for one year for future recruitment. Consent can be withdrawn at any time without affecting prior lawful processing. Include the statement: “I consent to the processing of my personal data by lxpro GmbH sp. z o.o. oddział w Polsce, contained in my application for future recruitment processes.”
Personal data may be shared with entities processing data on behalf of lxpro, such as occupational health services, IT system providers, or recruitment service providers.
- Legitimate Interests:Personal data may be processed until lxpro’s legitimate interest ceases, such as the expiration of civil law claims, or until the data subject objects, if allowed by law.
- Legal Obligations:Data may be retained for periods specified by law, e.g., data collected during recruitment under Article 221 of the Labor Code.
- Website Data (Cookies):Personal data collected via cookies or similar technologies (such as IP address, site location, and browsing history) is processed for statistical analysis, error detection, and website improvement as per the controller’s legitimate interest under Article 6(1)(f) GDPR. This data may be shared with lxpro’s technology partners (e.g., Google, hosting services). Cookie-based data processing can be disabled through browser settings, though this may affect website functionality.
lxpro will securely store and protect your data for any period during which processing could incur liability. Once any claims have expired, your personal data will be deleted.
IV. Rights of Data Subjects
lxpro has not appointed a Data Protection Officer. Contact for personal data processing, data correction, consent withdrawal, or exercising rights is available via rodo@lxpro.pl.
Under GDPR, individuals whose data is processed have rights to:
1. Access: Confirm if their data is being processed and, if so, receive details on purposes, categories, recipients, retention periods, and rights (Article 15 GDPR).
2. Data Copies: Receive copies of their processed data, with the first copy free and a reasonable fee for additional copies (Article 15(3) GDPR).
3. Correction: Request the correction of inaccurate or incomplete data (Article 16 GDPR).
4. Deletion: Request data deletion if no legal basis exists or if the data is no longer necessary for the initial purpose (Article 17 GDPR).
5. Restriction: Request restriction of data processing in cases such as data accuracy disputes, unlawful processing objections, or for legal claims (Article 18 GDPR).
6. Data Portability: Obtain personal data in a structured, machine-readable format for transfer to another controller if based on consent or a contract (Article 20 GDPR).
7. Objection: Object to data processing based on legitimate interests if the individual’s interests outweigh those of lxpro (Article 21 GDPR).
8. Withdraw Consent: Withdraw consent at any time, with the effect that processing based on consent ceases.
To exercise these rights, contact lxpro with details of the specific right and extent to be exercised.
Complaints can be filed with the supervisory authority in Poland:
President of the Office for Personal Data Protection
ul. Stawki 2, 00-193 Warszawa
Email: rzecznikprasowy@uodo.gov.pl
Phone: +48 (22) 531 03 00