LPP Retail Sp. z o.o. Privacy Policy Recruitment

This privacy policy sets out the principles and scope of the processing of your personal data as well as your rights and our obligations as the Controller. With state-of-the-art technical and organisational measures, we seek to ensure a high level of protection for the personal data we process to safeguard them against unauthorised access.

According to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR), we would like to inform you that:

The controller of your personal data (Controller) is:

LPP Retail Sp. z o.o., based in Gdańsk, ul. Łąkowa 39/44, entered in the National Court Register, kept by the District Court Gdańsk-Północ in Gdańsk, 7th Commercial Division of the National Court Register (KRS), under KRS no. 0000188787, with its share capital amounting to PLN 50,000.00 (paid in full), carrying statistical no. (REGON) 192026714 and tax ID (NIP) 5832671977 (hereinafter: LPP Retail Sp. z o.o.)

Contact details of the Data Protection Officer (DPO), also in matters concerning personal data:

You can send all requests and other communication regarding personal data:
1. by e-mail: privacyretail@lpp.com
2. by letter: LPP Retail Sp. z o.o., Dział Personalny [Human Resources], ul. Łąkowa 39/44, 80-769 Gdańsk.

Purposes and legal basis of the processing of personal data:

a) to carry out the recruitment procedure within the scope of data provided for in the Labour Law (Article 22¹ of the Labour Code) and to take the necessary actions to conclude a contract with the selected candidate pursuant to Article 6 (1)(b) of the GDPR;
b) to carry out the recruitment, on the basis of consents granted by you, including personal data provided other than those resulting from the provisions of the law, pursuant to Article 6(1)(a) of GDPR (ordinary data) or pursuant to Article 9 (2)(a) of GDPR (special category data, e.g., data concerning health condition or degree of disability);
c) to conduct analyses and occupational aptitude tests in order to check skills and abilities for selected job positions through dedicated tools pursuant to Article 6(1)(a);
d) o participate in future recruitment processes, under the consent granted pursuant to Article 6(1)(a) of the GDPR.

Scope of data required: provision of data resulting from Article 22¹ of the Labour Code is required to participate in the recruitment. The mandatory data include: given name and surname, birth date, contact details (e.g. phone, e-mail, social network details, such as LinkedIn), education, professional qualifications, employment history.

Voluntary data: other personal data included in the application documents and the application form are voluntary and may include:
a) other data usually not prescribed by law, e.g., photo (image of the candidate), interests and additional skills;
b) special category data (specified in Article 9 of the GDPR, such as concerning health or disability certificates.

Source of data: We received your data directly from you or from our employee who suggested your candidacy in the recruitment process within the employee referral programme, in particular the data contained in your CV (first name, surname, e-mail address or telephone number).

The recipients of the personal data may include:
a) entities of the LPP S.A. Group, including in particular SilkyCoders Sp. z o.o., DockIT Sp. z o.o., LPP S.A. LPP Logistic,
b) entities providing legal services;
c) entities providing correspondence;
d) entities providing archiving services and destroying documentation;
e) entities providing service and technical maintenance of devices used by the controller;
f) entities providing IT services for the controller;
g) entities (web portals) publishing the announcement of the commenced recruitment process in case you submit your application via this portal or providers of recruitment management systems.

The controller may entrust personal data to providers of services or products acting on its behalf on the basis of an entrustment agreement for the processing of personal data, requiring such entities to perform activities upon documented instructions, while maintaining confidentiality and protecting the privacy and security of the entrusted personal data.

Period of data processing: the data will be processed until the end of the recruitment process, for no longer than 12 months from the date of submission of the application or for the period indicated in the possible consent for future recruitment, for no longer than one year from the end of the recruitment process.

Your rights:
a) to access your personal data and request a copy of it;
b) to rectify your personal data;
c) to request the restriction of the processing of his/her personal data;
d) to exercise data portability;
e) to withdraw consent at any time, whereby withdrawal of consent shall not affect the lawfulness of processing carried out on the basis of consent before its withdrawal;
f) to erase the data if no other purpose of the processing is pursued and there are no grounds excluding this right, as per Article 17 (3) of the GDPR;
g) object to the processing of personal data in the scope of the legitimate interest of the administrator;
h) to file a complaint with the President of the Office for Personal Data Protection (https://uodo.gov.pl).

You can exercise the above rights by contacting the DC or the DPI in writing or by e-mail.