Privacy Policy

Privacy policy

• § 1 [general provisions]

  1. Memory2.co website (hereinafter: „Website") is run by Memory2 spółka z ograniczoną odpowiedzialnością with its registered office in Kraków, Zamoyskiego 63, 30-519 Kraków, entered into the Register of Entrepreneurs of the National Court Register maintained by the District Court for Kraków-Śródmieście in Kraków, XI Commercial Division under KRS number: 0000983529, NIP 6762622200, REGON: 522636449, initial capital: PLN 5.000,00, e-mail: [email protected] (hereinafter: the „Controller").

  2. As part of the Website's activities or filing the form for the purpose of taking part in the Controllers recruitment processes, the data of the Website users and employee candidates (hereinafter: „Users"), including personal data, may be collected, processed and used.

  3. The Users' personal data provided by them voluntarily (e.g. as part of filling in the contact form), such as an e-mail address, also included in CV and recruitment forms by employee candidates such as name, surname, phone numbers, work experience or collected as part of the statistics and analysis of the Users' behaviour are processed.

  4. Moreover, information may be collected on the User's IP address, the time of receipt of the inquiry and sending the answer, the address of the website from which the User was redirected to the Website and the type of software used by the User. This information is used for the purposes of administering the Website and creating statistics and analyses.

• § 2 [personal data]

  1. The controller of Users' personal data is Memory2 spółka z ograniczoną odpowiedzialnością with its registered office in Kraków, Zamoyskiego 63, 30-519 Kraków, entered into the Register of Entrepreneurs of the National Court Register maintained by the District Court for Kraków-Śródmieście in Kraków, XI Commercial Division under KRS number: 0000983529, NIP 6762622200, REGON: 522636449, initial capital: PLN 5.000,00.

  2. The processing of personal data takes place in accordance with the provisions of generally applicable law, in particular in accordance with the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 (hereinafter: „GDPR"), and in accordance with this Privacy Policy.

  3. The Users' personal data refers to data such as: name and e-mail address.

• § 3 [purpose and duration of processing the data]

  1. The Controller may, through the Website, collect and then process personal data for purposes such as:

     1. 1.1. contacting the User who used the contact form, which is the Controller's legitimate interest (Article 6(1)(f) GDPR);

     2. 1.2. marketing, which is the Controller's legitimate interest (Article 6(1)(f) GDPR);

     3. 1.3. statistics and analysis of Users behaviour on website, which is the Controller's legitimate interest (Article 6(1)(f) GDPR).

  2. Regarding the recruitment processes (Users participating in those processes), the Controller processes personal data in order to enable the participation in the Controller's current and future recruitment processes.

  3. The legal basis for the processing of personal data for purposes of recruitment processes:

     1. 3.1. in the scope of currently conducted recruitment processes – is taking of action by the Controller at the request of the employee candidate (i.e. the examination of the job application), prior to the possible conclusion of a contract (Article 6(1)(b) GDPR);

     2. 3.2. for recruitment processes that may be conducted in the future – is the consent given by the employee candidate (Article 6(1)(a) GDPR).

  4. Personal data processed for the purpose of:

     1. 4.1. contacting the User who used the contact form – are processed for a period of 1 year from the date the correspondence ends;

     2. 4.2. marketing – are processed until there is an objection to their processing for this purpose, the consent is withdrawn or until the Controller decides to delete them;

     3. 4.3. keeping statistics and analysis of Users' behaviour on the Website – are processed for a period of 3 years from the date of collection;

     4. 4.4. recruitment processes – are retained for a period of 3 years from its collection - if the employee candidate has given the appropriate consent. If consent has not been given, personal data shall be deleted immediately after the end of the respective recruitment process.

• § 4 [transfer of personal data]

  1. The Controller may disclose personal data to entities providing the services to the Controller, such as providers of IT and marketing services, as well as entities with whom the Controller cooperates in the recruitment process (such as Productive).

  2. The Controller may use IT service providers who are based outside of the European Economic Area. Therefore, the Customer's data may be transferred there. The Controller uses only services of entities established in countries for which the European Commission has determined that they provide an adequate level of protection or entities that process personal data on the basis of the Standard Contractual Clauses adopted by the European Commission, referred to in Article 46 of the GDPR, concluded between the Controller and the entity, or process data on the basis of the Data Privacy Framework.

• § 5 [User's rights]

  1. The User, who is the data subject, has the following rights:

     1. 1.1. right to access personal data and the right to receive a copy thereof;

     2. 1.2. right to rectify personal data;

     3. 1.3. right to delete personal data;

     4. 1.4. right to request the restriction of the processing of personal data;

     5. 1.5. right to transfer personal data;

     6. 1.6. right to object to the processing of personal data;

     7. 1.7. right to lodge a complaint with the supervisory authority.

  2. Where processing is based on consent, Users also have the right to withdraw consent to process your personal data at any time. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.

  3. The Controller does not make decisions that are based solely on automated processing, including profiling.

  4. In order to exercise any of the abovementioned rights, the User may file a request to the Controller in writing via e-mail ([email protected]) or post (Memory2 sp. z o. o., Zamoyskiego 63, 30-519 Kraków).

  5. Providing personal data is voluntary, but without providing it, it is impossible to implement agreements or to undertake other activities by the Controller, for example to participate in the recruitment processes.

  6. The Controller ensures the protection of personal data that he processes. In particular, the Controller uses appropriate technical safeguards and organizational measures to ensure the protection of personal data being processed, appropriate to the threats and categories of data protected. In particular, it protects data against disclosure to unauthorized persons, removal by an unauthorized person, processing in violation of the provisions of law, as well as change, loss, damage or destruction.