Privacy policy

Recruitment privacy policy

This policy (the "Policy") is crucial for you, as it explains what information Gemius SA, its affiliates/subsidiaries, and AdOcean sp. z o.o. (collectively the "Gemius Group" and "we", "us") collect during the application and recruitment process, the purposes for which such information is collected, and how the Gemius Group uses, discloses, or otherwise processes such information.

Who processes your data?

The Gemius Group companies are considered joint controllers. Gemius SA (address: Domaniewska Street 48, 02-672 Warsaw, Poland) manages the recruitment process's online tool. The point of contact for processing personal data is the Gemius Group Data Protection Officer, who can be contacted by e-mail at privacy@gemius.com.

What is the legal basis for data processing?

Personal data for the recruitment process will be processed based on the provisions of the law, such as the Labour Code. If you provide us with any other data not required by law, we will process it based on your consent to processing personal data. In this case, you can give your consent voluntarily. If you agree, we will also process your data for future recruitment, and therefore if you're not selected for the current position, we may consider you for future opportunities. You can revoke any consent at any time.

We may process your data to protect your rights and to demonstrate that we have not discriminated in recruitment. The legal basis for this is our legitimate interest.

The legal basis we rely on for processing sensitive information is our obligations in employment and safeguarding your fundamental rights.

To whom is the data transferred, and with whom is it shared?

Your data may be shared between the companies of the Gemius Group for the purposes described above. Personal data recipients may also be providers of job advertisement publication services, recruitment management systems, IT service providers (hosting), legal advisors, medical facilities (occupational medicine), courier or postal service providers. If we transfer your data outside of the European Economic Area, we may transfer your data based on Standard Contractual Clauses.

How long is the data stored?

Personal data will be processed until the end of recruitment, which is understood as signing a contract with one of the candidates. In the case of consent to data processing for future recruitment processes, we will process the data for 24 months from the date of collection.

We will process your data for 24 months from the date of collection to protect your rights and freedoms and demonstrate our compliance with the law, particularly anti-discrimination legislation.

What are your rights?

You have the following rights under data protection laws:

  • Request access to your information
  • Request correction of the information that we hold about you
  • Request erasure (also called deletion) of your personal information
  • Object to certain processing of your information
  • Request to restrict your information

If you wish to exercise these rights, please contact privacy@gemius.com. We will respond to all requests in accordance with applicable law, so there may be circumstances in which we cannot comply with your request.

Depending on your country of residence, you may also wish to raise any questions or concerns with your local data protection authority.

Obligation to provide data

To participate in the recruitment process, you must provide personal data as required by law. The provision of other data is voluntary.

Contact regarding the processing of personal data

If you have any questions about this Policy or how we handle your personal information, please contact the Gemius Group Data Protection Officer at privacy@gemius.com