Personal data controller
This document describes the principles of personal data protection and processing by j-labs sp. z o.o.
The personal data controller is j-labs sp. z o.o. of Kraków, ul. Zabłocie 43a, 30-701 Kraków (“j-labs”).
j-labs may be contacted in writing at j-labs sp. z o.o., ul. Zabłocie 43a, 30-701 Kraków, electronically at firstname.lastname@example.org, or by phone at +48 12 268-16-90.
A data protection coordinator has been appointed at j-labs. The coordinator may be contacted in all matters regarding the processing of personal data and the exercising of the rights related to data processing, electronically at GDPR@j-labs.pl or in writing at j-labs’ address, with a note on the envelope reading “Personal data.”
Purpose of personal data collection
Personal data, i.e.:
1) first (and middle) and last name,
2) date of birth
3) contact data,
4) education and qualifications,
5) history of employment,
is processed in order to carry out the recruitment process on the basis of the applicable legal regulations; provision of this data to the extent following from these regulations is voluntary, but necessary for this purpose. The other data contained in the application submitted to us is processed by us on the basis of voluntary consent expressed by means of submitting the application; provision of this data does not affect the possibility of participating in the recruitment process.
The personal data provided during the registration for the events organized by j-labs is processed by us for the purposes and to the extent related to participation in the event, including in order to book the ticket (legal basis: Article 6.1.b of the GDPR), for marketing purposes (legal basis: Article 6.1.a of the GDPR), for archiving (evidentiary) purposes, and in order to establish, exercise, and defend legal claims and ensure the protection of persons and property on the basis of a legitimate interest of j-labs (legal basis: Article 6.1.f of the GDPR). Provision of personal data in the form is voluntary, but necessary to take part in j-labs events.
The personal data provided when subscribing for the j-labs newsletter is processed by us on the basis of your consent (legal basis: Article 6.1.a of the GDPR), in order to inform you about job offers and the events organized by j-labs. Provision of personal data in the form is voluntary, but necessary to receive news from us.
In the sales process, we process personal data in order to prepare an offer, execute of perform an agreement (legal basis: Article 6.1.b of the GDPR), comply with a legal obligation the data controller’s is subject to (legal basis: Article 6.1.c of the GDPR), for archiving (evidentiary) purposes, in order to establish, exercise, and defend legal claims and ensure the protection of persons and property on the basis of a legitimate interest of j-labs (legal basis: Article 6.1.f of the GDPR), and as part of marketing activities for the purpose of presenting our products or services on the basis of a legitimate interest (legal basis: Article 6.1.f of the GDPR). In the sales process, we receive personal data directly from you, through an inquiry or form sent by you and from other sources if you have expressed separate consent in this respect (e.g. as part of a referral program).
Duration of personal data processing
We process the personal data provided in the application for the purpose of recruitment for the position specified in the relevant job advert for 6 months from the end of the recruitment process, and if you have agreed to be considered in future recruitment processes, then until you withdraw that consent.
We process the personal data provided during the registration process for the period necessary to achieve the purposes for which it has been collected, in accordance with the criteria laid down in legal regulations, including in order to secure potential claims for 6 years. If the participant’s personal data is processed for marketing purposes on the basis of his or her consent (Article 6.1.a of the GDPR), the processing continues until the consent is withdrawn.
We process the personal data provided during the process of signing up for the newsletter on the basis of consent (Article 6.1.a of the GDPR). This consent may be withdrawn at any time, by clicking the resignation link in any of the e-mails received from us or by writing to us at the contact data specified above.
Personal data will be stored by us for the term of the agreement, and afterwards for the period necessary to secure or pursue the potential claims for 6 years. Personal data processed for the purpose of marketing our products or services on the basis of a legitimate interest, including operating and developing the j-labs business, will be processed unless an objection is made with respect to such processing.
Sharing of personal data
We may share the personal data received as part of the recruitment process with suppliers of services in terms of publishing job adverts, suppliers of recruitment management systems, suppliers of IT systems used in recruitment processes, entities managing the IT projects (including but not limited to clients) in connection with which recruitment is being carried out and, as part of other processes, with suppliers of IT services such as hosting or e-mail marketing.
In the case of suppliers of IT services, if their servers are located outside of the EU/EEA, your personal data may be transferred to third countries or international organizations. Suppliers of services guarantee that data is transferred to third countries with respect to which an adequacy decision has been issued by the European Commission or which comply with the standard contractual clauses developed by the European Commission;
Rights of data subjects
1. the right of access to one’s personal data and the right to receive information i.a. about the categories of data and the purposes of its processing, as well as the right to receive a copy of this data;
2. the right to rectify incorrect data and supplement missing data, as well as the right to be forgotten, i.e. the right to erasure of the data processed without a legal basis and unlawfully (e.g. if the data is no longer necessary for the purposes for which it was collected);
3. the right to object to processing of data and the right to restriction of processing. In such a case, after complying with the request, j-labs shall not process the received personal data, unless it demonstrates compelling legitimate grounds for the processing which override the interests, rights, and freedoms of the data subject or for the establishment, exercise or defense of legal claims;
4. the right to portability of data that is processed in an automated manner, which means the right to demand that personal data is sent by j-labs directly to another data controller if this is technically possible;
5. the right to withdraw consent to data processing at any time, without affecting the lawfulness of processing based on consent before its withdrawal (if processing takes place on the basis of Article 6.1.a or Article 9.2.a of the GDPR);
6. the right to file a complaint with the President of the Polish Personal Data Protection Office if the participant believes that the processing of his or her personal data takes place in violation of the GDPR.
How to exercise rights
In order for a data subject to exercise his or her rights, he or she needs to file the relevant request. The requests are registered for archiving (evidentiary) purposes and in order to establish, exercise, and defend legal claims on the basis of a legitimate interest of j-labs (legal basis: Article 6.1.f of the GDPR) and are stored for 1.5 years from their submission. Requests made orally shall be confirmed with an official memo that shall be included in the register of requests.
When will we comply with your request?
When we receive a request made on the basis of one of the above rights, we shall comply immediately or inform you that compliance is impossible.
However, if, due to the number of requests or their complex nature, we are unable to comply with the request right away, we shall inform you about the amount of time we need to comply with it.
Data collected automatically when our website is visited
During a visit on our website, the system used by the operator automatically collects the user’s IP address, information about browser type, the referring website, geolocation, and in the case of users that enter the website from a search engine, also the keywords the use of which resulted in displaying the address of the website in search results. This data is collected exclusively for the purpose of statistics and is anonymous.
Cookies and tools used on websites
The user may at any time block the collection of information through cookies, by disabling cookies in the settings of his or her browser. The website operator does not guarantee proper functioning of the website when cookies are disabled.
In order to carry out effective advertising campaigns, j-labs uses analytical tools such as the Facebook Pixel and LinkedIn Insights that help measure the efficiency of ads through an analysis of the actions taken by users on the website.
j-labs makes any and all efforts to ensure efficient protection of the personal data that it processes. The personal data sent from the website to the j-labs server is protected by means of an encrypted SSL connection.
j-labs shall follow the rules described in this document that guarantee the confidentiality of the data of website users.
The scope of the data collected or the methods of securing this data may change slightly, but the privacy of users shall never be compromised.
This document shall not be a basis for any claims against j-labs sp. z o.o., unless these claims are based on legal regulations in force in the Republic of Poland.
j-labs reserves the right to amend this document; the amendments shall be published at j-labs.pl.