Privacy policy – the principles of personal data processing at j‑labs spółka z ograniczoną odpowiedzialnością
Personal data controller
This privacy policy lays down the rules concerning the storage of and access to personal data, as referred to in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (the “GDPR”).
This document describes the principles of personal data protection and processing by j‑labs sp. z o.o.
The personal data controller is j‑labs sp. z o.o. of Kraków, ul. Zabłocie 43a, 30-701 Kraków (“j-labs”).
j-labs may be contacted in writing at j‑labs sp. z o.o., ul. Zabłocie 43a, 30-701 Kraków, electronically at j‑labs@j-labs.pl, or by phone at +48 12 268-16-90.
A data protection representativehas been appointed at j‑labs. The coordinator may be contacted in all matters regarding the processing of personal data and the exercising of the rights related to data processing, electronically at GDPR@j-labs.pl or in writing at j‑labs’ address, with a note on the envelope reading “Personal data.”
Purpose of personal data collection
Recruitment process
Personal data, i.e.:
- first (and middle) and last name,
- date of birth
- contact data,
- education and qualifications,
- history of employment,
is processed in order to carry out the recruitment process on the basis of the applicable legal regulations; provision of this data to the extent following from these regulations is voluntary, but necessary for this purpose. The other data contained in the application submitted to us is processed by us on the basis of voluntary consent expressed by means of submitting the application; provision of this data does not affect the possibility of participating in the recruitment process.
j-labs events
The personal data provided during the registration for the events organized by j‑labs is processed by us for the purposes and to the extent related to participation in the event, including in order to book the ticket (legal basis: Article 6.1.b of the GDPR), for marketing and archiving (evidentiary) purposes, and in order to establish, exercise, and defend legal claims and ensure the protection of persons and property on the basis of a legitimate interest of j‑labs (legal basis: Article 6.1.f of the GDPR). Provision of personal data in the form is voluntary, but necessary to take part in j‑labs events. Personal data will not be processed in an automated manner and will not be profiled.
j-labs newsletter
From time to time, we send out industry information, related to the events during which you registered in our system to inform you about job opportunities and events organized by j labs.Provision of personal data in the form is voluntary, but necessary to receive news from us. Personal data will not be processed in an automated manner and will not be profiled.
Cooperation with clients and suppliers
In this process , we process personal data for the purpose of establishing cooperation as well as for contact and marketing purposes during the cooperation, in particular to prepare an offer, execute of perform an agreement (legal basis: Article 6.1.b of the GDPR), comply with a legal obligation the data controller’s is subject to (legal basis: Article 6.1.c of the GDPR), for archiving (evidentiary) purposes, in order to establish, exercise, and defend legal claims and ensure the protection of persons and property on the basis of a legitimate interest of j‑labs (legal basis: Article 6.1.f of the GDPR), and as part of marketing activities for the purpose of presenting our products or services on the basis of a legitimate interest (legal basis: Article 6.1.f of the GDPR). The personal data, including your first name, last name, business email address, business phone number, and job title, provided by your employer or the entity you represent has been collected as part of a contract with that entity. We receive personal data also directly from you, through an inquiry or form sent by you and from other sources if you have expressed separate consent in this respect (e.g. as part of a referral program).
Providing personal data is necessary to prepare an offer and to conclude the Agreement and its execution – without providing such data it is not possible to conclude the Agreement, its proper execution or to take actions related to its execution.
Providing personal data is a necessary requirement for taking actions before concluding the Agreement and its execution (putting a signature by the parties’ representatives and ensuring its proper execution by persons indicated in their content as contacts for the purpose of its proper execution). In the case of failure to provide personal data, it will not be possible to fulfill the above mentioned purpose.
Personal data will not be processed in an automated manner and will not be profiled.
Duration of personal data processing
Recruitment process
We process the personal data provided in the application for the purpose of recruitment for the position specified in the relevant job advert for 6 months from the end of the recruitment process, and if you have agreed to be considered in future recruitment processes, then until you withdraw that consent.
j-labs events
We process the personal data provided during the registration process for the period necessary to achieve the purposes for which it has been collected, in accordance with the criteria laid down in legal regulations, including in order to secure potential claims for 6 years. If the participant’s personal data is processed for marketing purposes on the basis of his or her consent (Article 6.1.a of the GDPR), the processing continues until the consent is withdrawn.
j-labs newsletter
We process the personal data provided during the process of signing up for the newsletter on the basis of consent (Article 6.1.a of the GDPR). This consent may be withdrawn at any time, by clicking the resignation link in any of the e-mails received from us or by writing to us at the contact data specified above.
Cooperation with clients and suppliersPersonal data will be stored by us for the term of the agreement, and afterwards for the period necessary to secure or pursue the potential claims for 6 years. After this time, your data will be deleted. Personal data processed for the purpose of marketing our products or services on the basis of a legitimate interest, including operating and developing the j‑labs business, will be processed unless an objection is made with respect to such processing.
Sharing of personal data
We may share the personal data received as part of the recruitment process with suppliers of services in terms of publishing job adverts, suppliers of recruitment management systems, suppliers of IT systems used in recruitment processes, entities managing the IT projects (including but not limited to clients) in connection with which recruitment is being carried out. In other processes, personal data may be entrusted for processing on the basis of contracts concluded pursuant to art. 28 GDPR to providers of services provided to J-LABS (e.g. accounting services, IT, hosting, e-mail marketing, electronic signature). These data recipients are obliged to keep this data in secret even after the legal relationship binding them with J-LABS expires.
In the case of suppliers of IT services, if their servers are located outside of the EU/EEA, personal data may be transferred to third countries or international organizations. Suppliers of services guarantee that data is transferred to third countries with respect to which an adequacy decision has been issued by the European Commission or which comply with the standard contractual clauses developed by the European Commission. Personal data will not be processed in an automated manner and will not be profiled.
Rights of data subjects
- the right of access to one’s personal data and the right to receive information i.a. about the categories of data and the purposes of its processing, as well as the right to receive a copy of this data;
- the right to rectify incorrect data and supplement missing data, as well as the right to be forgotten, i.e. the right to erasure of the data processed without a legal basis and unlawfully (e.g. if the data is no longer necessary for the purposes for which it was collected);
- the right to object to processing of data and the right to restriction of processing. In such a case, after complying with the request, j‑labs shall not process the received personal data, unless it demonstrates compelling legitimate grounds for the processing which override the interests, rights, and freedoms of the data subject or for the establishment, exercise or defense of legal claims;
- the right to portability of data that is processed in an automated manner, which means the right to demand that personal data is sent by j‑labs directly to another data controller if this is technically possible;
- the right to withdraw consent to data processing at any time, without affecting the lawfulness of processing based on consent before its withdrawal (if processing takes place on the basis of Article 6.1.a or Article 9.2.a of the GDPR);
- the right to file a complaint with the President of the Polish Personal Data Protection Office if the participant believes that the processing of his or her personal data takes place in violation of the GDPR.
How to exercise rights
In order for a data subject to exercise his or her rights, he or she needs to file the relevant request. The requests are registered for archiving (evidentiary) purposes and in order to establish, exercise, and defend legal claims on the basis of a legitimate interest of j‑labs (legal basis: Article 6.1.f of the GDPR) and are stored for 1.5 years from their submission. Requests made orally shall be confirmed with an official memo that shall be included in the register of requests.
When will we comply with your request?
When we receive a request made on the basis of one of the above rights, we shall comply immediately or inform you that compliance is impossible.
However, if, due to the number of requests or their complex nature, we are unable to comply with the request right away, we shall inform you about the amount of time we need to comply with it.
Data collected automatically when our website is visited
During a visit on our website, the system used by the operator automatically collects the user’s IP address, information about browser type, the referring website, geolocation, and in the case of users that enter the website from a search engine, also the keywords the use of which resulted in displaying the address of the website in search results. This data is collected exclusively for the purpose of statistics and is anonymous.
Cookies and tools used on websites
j-labs uses cookies in order to monitor the way in which users navigate through its websites. Cookies also allow users to save their navigation parameters on the website.
Furthermore, cookies are used by Google Analytics, which is implemented in the code of the website. The detailed purposes for which Google Analytics uses cookies are described in a separate document available at http://www.google.com/intl/en/policies/privacy/.
The user may at any time block the collection of information through cookies, by disabling cookies in the settings of his or her browser. The website operator does not guarantee proper functioning of the website when cookies are disabled.
In order to carry out effective advertising campaigns, j‑labs uses analytical tools such as the Facebook Pixel and LinkedIn Insights that help measure the efficiency of ads through an analysis of the actions taken by users on the website.
At j-labs.pl we use the Albacross Nordic AB tool, which identifies customers visiting the website. Details from Albacross Nordic AB below.
Information about Albacross’ processing of your personal data
We inform you regarding the processing of personal data on behalf of Albacross Nordic AB (“Albacross”).
Information collected from cookies set in your device that qualify as personal data will be processed by Albacross, a platform offering visitor identification and ad targeting services with offices in Stockholm and Krakow. Please see below for full contact details.
The purpose for the processing of the personal data is that it enables Albacross to improve a service rendered to us and our website (e.g “Intent” service), by adding data to their database about companies. The Albacross database will in addition to “Intent Data” be used for targeted advertising purposes towards companies and for this purpose data will be transferred to third-party data service providers. For the purpose of clarity, targeted advertising regards companies, not towards individuals.
The data that is collected and used by Albacross to achieve this purpose is information about the IP address from which you visited our website and technical information that enables Albacross to tell apart different visitors from the same IP address. Albacross stores the domain from form input in order to correlate the IP address with your employer.
For full information about our processing of personal data, please see Albacross’ Privacy Policy.
Albacross Nordic AB
Companyreg. no 556942-7338
Tegelbacken 4A
111 52 Stockholm, Sweden
www.albacross.com – contact@albacross.com
Data security
j-labs makes any and all efforts to ensure efficient protection of the personal data that it processes. The personal data sent from the website to the j‑labs server is protected by means of an encrypted SSL connection.
Liability
j-labs shall follow the rules described in this document that guarantee the confidentiality of the data of website users.
The scope of the data collected or the methods of securing this data may change slightly, but the privacy of users shall never be compromised.
This document shall not be a basis for any claims against j‑labs sp. z o.o., unless these claims are based on legal regulations in force in the Republic of Poland.
Changes to the privacy policy
j-labs reserves the right to amend this document; the amendments shall be published at j‑labs.pl.
