Data Protection Notice.

about Randstad

Randstad Polska Sp. z o.o.  (referred to in this notice as: “we” or “us” or “Randstad Polska”), will process your personal data in accordance with this data protection notice (such personal data sometimes also referred to as “information”). 

Except as otherwise set out below, Randstad Polska is the controller of the personal data (‘controller’ within the meaning of applicable data protection legislation). 

For the efficient operation and management of our business, Randstad Group Companies may in certain instances jointly define the purposes and means of Processing Personal Data therefore acting as joint controllers (‘joint controllers’ within the meaning of relevant data protection legislation). The contents of the Joint Controllership Agreement between the Randstad Group Companies are available at the following link to the Market information on joint controllership summary.

Please contact us (see the section “Contact us” below) if you want to know more about these jointly-controlled processing activities or would like to receive a summary of the joint controllers’ roles and responsibilities and/or exercise your data protection rights regarding any jointly-controlled processing of your personal data.

website visitor

When you visit our website or my Randstad app, we collect some information related to your device, your browser and to the way you navigate our content, as well as profile and information gathered by using one of our features (such as availability, shift scheduling, calendar integration, timesheets, payslips, contracting, inbox).

We may use cookies to collect this personal data. Cookies are small text files that are saved on your device when you visit our website or app. Cookies enable the website and app to remember your actions and preferences (for example, your choice of language) and recognize you when you return, so that we may analyze trends, determine your areas of interest and administer our website in order to speed up the navigation process and to make your site experience more efficient.

•  What personal data do we collect and Why do we need your personal data

• Purpose(s) for processing

To manage the website and the app and for system administration purposes (e.g., also for diagnosing technical problems, analyze the traffic to our website)

• Categories of personal data

Device Usage Data: Internet Protocol (IP) address of your device, IP address of your Internet Service Provider, device screen resolution, device type (unique device identifiers), browser and operating system versions, geographic location (country only), preferred language used to display, date and time of access to the website and app, internet address from which you were directly linked through to our website, operating system that you use, parts of the website or app that you visit, pages of the website or app that you have visited and the information that you viewed, hyperlinks you have clicked, material that you send to or download from our website 

• Legal basis for processing

(a) Legitimate interest of managing our website and our app, marketing and communications strategy; and/or 

(b) Where (a) is not possible because local mandatory law requires so, only in those limited cases may this be based on consent 

_______________________________

• Purpose(s) for processing

For web and app analytics, in order to optimize the user experience (analyzing the way our pages are visited, analyzing trends, observe and measure how our visitors engage with our website and/or app) and the quality of the content provided to you (e.g., job posting)

• Categories of personal data

Device Usage Data: Internet Protocol (IP) address of your device, IP address of your Internet Service Provider, device screen resolution, device type (unique device identifiers), browser and operating system versions, geographic location (country only), preferred language used to display, date and time of access to the website or app, internet address from which you were directly linked through to our website, operating system that you use, parts of the website or app that you visit, pages of the website or app that you have visited and the information that you viewed, hyperlinks you have clicked, material that you send to or download from our website

• Legal basis for processing

(a) Legitimate interest of improving our website and app, marketing and communications strategy; and/or 

(b) Where (a) is not possible because local mandatory law requires so, only in those limited cases may this be based on consent

____________________________________

• Purpose(s) for processing

To send you the content requested, to communicate with you (including, where you agree, to send you related information that might be of interest to you) and to improve our marketing and communication strategy

• Categories of personal data

Identification and Contact Data: Name, e-mail address, job title and company

• Legal basis for processing

Randstad will send whitepapers, newsletters, events and alerts only if you have explicitly opted in to receive them, for example by selecting the relevant tick box when submitting a form on our website, downloading a report, or subscribing to a newsletter. If you are no longer interested in these Randstad communications, you may withdraw your consent at any time by using the opt-out option provided in each communication.

From the moment you engage in one of the aforementioned actions, we will be able to relate the information listed above about your device, your browser and to the way you navigate our website content directly to you.

____________________________________

• Purpose(s) for processing

To manage the use of your my Randstad app for searching, finding, and applying for jobs, and for the management of the job relationship (including features for Job Search, Document View, Document Sign, Availability, Scheduling, Timesheets, Time Off, Payslips, Newsfeed, Punch Clock)

• Categories of personal data

Identification and contact data: name, contact information (including home address, phone number), date of birth, (in exceptional cases) gender, digital signature and languages spoken. Authentication Data: Passwords. 

App Usage/Feature Data: myRandstad app shifts, your contract (feature of contracting), valid ID card (feature of onboarding), tax forms (feature onboarding), work time and absences (feature of time-keeping), expense administration (e.g. travel costs) (feature of time-keeping), salary, overview of payments received, taxes paid (salary slip) (feature of payment), feedback on performance (feedback feature), any free text feedback provided via the my Randstad app. 

In principle, we will not collect any sensitive personal data of you. If this would in exceptional cases occur, we will take all measures to offer an even higher protection and do this according to the appropriate legal basis. Depending on local mandatory laws, some data may be offered a similar protection as sensitive personal data. Please be aware that we may process: 

Special personal: Payslip (including all data on it (differs per country)) and, or, contracts and Taxation documents.

• Legal basis for processing

Processing of your personal data is necessary for the performance of the contract and to provide you with the requested Services through the app, and is therefore based on (pre-) contractual necessity.

____________________________________

• Purpose(s) for processing

Cooperating with law enforcement agencies/courts, management of legal disputes/claims

• Categories of personal data

Legal/Dispute Data: Personal data that law enforcement authorities require us to disclose in connection with an investigation.  Personal data that is necessary for Randstad to defend its rights in connection with a dispute or with proceedings before a court of law (or other dispute resolution body).

• Legal basis for processing

Processing is necessary for the purpose of the legitimate interests pursued by Randstad, which include the protection of company assets, protecting its legal interests and managing legal claims/disputes

____________________________________

• Purpose(s) for processing

Responses to DSARs

• Categories of personal data

Identification and contact data: name, contact information, other categories of data necessary to confirm the identity of the individual person.

• Legal basis for processing

Processing is necessary for the purpose of the legitimate interests pursued by Randstad and legal obligations concerning data subject rights.

____________________________________

• Purpose(s) for processing

Responding to queries

• Categories of personal data

Identification and contact data: name, contact information, other categories of data necessary to confirm the identity of the individual person.

• Legal basis for processing

Processing is necessary for the purpose of the legitimate interests pursued by Randstad.

•  cookies

Please find more information on the cookies we use, for what purpose and further settings for configuring or deleting cookies in our cookie notice.

candidate

We use your personal data when providing our HR-services, which include services in the field of recruitment and selection, mediation, temporary staff, secondment, payroll, personal development, career guidance, coaching, planning, and personnel and salary administration as further described in the Terms and Conditions (collectively “Services”). This section also applies to candidates for internal corporate positions at Randstad.

By innovating at scale, Randstad will fulfill our compelling vision: to empower lifelong employability and deliver on our brand promise of proactivity, transparency and guidance to offer a truly enriching talent experience for finding a job around the world.

•  What personal data do we collect about you and Why do we need your personal data

• Purpose(s) for processing

To provide our Services to you (including matching and proposing you to clients, interviews, assessments). For example, we may process your personal data to recommend jobs to you based on your profile and enable our consultants to provide you with tailored job opportunities, career advice, reskilling options, inclusiveness, suggest additional training where necessary and introduce you to hiring managers. 

Training and updating of systems/statistical purposes. Some of the systems that we use to provide our Services are based on machine learning technology. In order for that technology to function reliably, it needs to be trained and updated on the basis of existing data. We may also process personal data in an aggregated manner for statistical purposes. 

• Categories of personal data

Identification and contact data:  name, contact information (including home address, phone number, email address), citizenship and country of residence, date of birth, (in exceptional cases) gender, digital signature and languages spoken; education, experience, job history, diplomas and certificates and other data which you will decide to make accessible to us.

Professional information: personal data related to your work including (without limitation) your job title, description and location, your department, professional email address, reporting levels, and employment status (full-time/part-time/etc.).

CV/resumes and other recruitment information: CV/resume, work history, information about your skills, your experience and educational background and other relevant information (such as your photograph, interview notes and personal data included in the cover letter or as part of the application process).

• Legal basis for processing

The processing of your data and the use of automated systems is necessary to provide you with the matching services, and is therefore based on (pre-) contractual necessity

Based on our legitimate interest in training and updating our systems. We have implemented mitigating measures to limit the privacy impact, such as de-identification and an easy opt-out in your choices.

____________________________________________________

• Purpose(s) for processing

Dispute management and litigation

• Categories of personal data

Legal/Dispute Data: Personal data that law enforcement authorities require us to disclose in connection with an investigation.  Personal data that is necessary for Randstad to defend its rights in connection with a dispute or with proceedings before a court of law (or other dispute resolution body)

• Legal basis for processing

Processing is necessary for the purpose of the legitimate interests pursued by Randstad, which include the protection of company assets, protecting its legal interests and managing legal claims/disputes

____________________________________________________

• Purpose(s) for processing

Compliance with labor, tax and social security laws and other legal or regulatory requirements (e.g. equal opportunity and workplace diversity requirements)

• Categories of personal data

Identification and contact data: name, contact information (including home address, home phone number and mobile phone number), citizenship and country of residence, date of birth, (in exceptional cases) gender, digital signature and languages spoken.

Special personal data: where necessary to comply with its legal obligations, or if otherwise permitted by or pursuant to law or if you include such data in your documents.

• Legal basis for processing

Processing is necessary for compliance with employment and compliance with our legal obligations under labor, tax, social security and other laws and regulations.

____________________________________________________

• Purpose(s) for processing

Business development and candidate engagement (including sending job-related communications, updates about our services and, where applicable, marketing communications that may be of interest to you).

• Categories of personal data

Identification information:

Your name and contact details (including email address and phone number), gender, digital signature, and languages spoken.

Professional information:

Information related to your professional background, including (without limitation) your job title or role, location, skills, and career interests.

• Legal basis for processing

Based on consent, where required, in particular for receiving marketing communications that are not strictly related to your job applications or account management; and/or

Based on our legitimate interest, where applicable, to maintain and develop our relationship with registered candidates, to inform you about relevant opportunities, services, and updates related to your professional interests.

You may withdraw your consent or object to receiving marketing communications at any time by using the opt-out option provided in each communication.

____________________________________________________

• Purpose(s) for processing

Events

• Categories of personal data

Identification and contact data:  name, contact information (including email address, phone number), languages spoken.

Photographs and video footage:  when participating in recruitment-related events, meetings, conferences etc.

• Legal basis for processing

Based on our legitimate interest in maintaining a good relationship with our community of candidates and promoting our Services by inviting you to our events. 

In the context of such events, photographs or video footage may be taken, which may involve the processing of your personal data.

____________________________________________________

• Purpose(s) for processing

Surveys (including satisfaction surveys)

• Categories of personal data

Identification information: your name, contact information (including email address, phone number), gender, digital signature and languages spoken.

Professional information: information related to your work including (without limitation) your job title, your location and your department.

Survey results: we may process your responses to questions in surveys.

Information you choose to share with us: we may process additional information if you choose to share that with us.

• Legal basis for processing

Based on our legitimate interest to survey our candidates so as to better understand their needs, to improve our Services and to build and maintain a good relationship with our candidates.

____________________________________________________

• Purpose(s) for processing

Facilities, security and contingency planning purposes

• Categories of personal data

Identification and contact data: name, contact information (including phone number).

Visitor information: when accessing our buildings, we may collect your name, contact details, car plate number, identification, etc. for security reasons. Where we are legally permitted to do so we may also ask you to disclose information about your health (including information related to viral infections, flu, etc.) for health and safety reasons.

CCTV footage: we may process footage of you obtained through our use of CCTV surveillance systems.

• Legal basis for processing

Processing is necessary for the purpose of the legitimate interests pursued by Randstad, which include safeguarding and securing our assets, our facilities, our information systems and our people. In this context, the collection and verification of identification and contact information is necessary for access control, on-site security, and effective contingency planning.

____________________________________________________

• Purpose(s) for processing

To conduct corporate transactions (including mergers, acquisitions and divestments)

• Categories of personal data

Identification information: your name and other contact information (including email address, landline phone number and mobile phone number), gender, digital signature and languages spoken.

Professional information: information related to your work including (without limitation) your job title, your location and your department.

• Legal basis for processing

Processing is necessary for the purpose of the legitimate interests pursued by Randstad, which include Randstad’s interest in developing its business through mergers, acquisitions and divestment.

____________________________________________________

• Purpose(s) for processing

Responses to DSARs

• Categories of personal data

Identification and contact data: name, contact information, other categories of data necessary to confirm the identity of the individual person.

• Legal basis for processing

Processing is necessary for the purpose of the legitimate interests pursued by Randstad and legal obligations concerning data subject rights.

_________________________________________________

• Purpose(s) for processing

Responding to queries

• Categories of personal data

Identification and contact data: name, contact information, other categories of data necessary to confirm the identity of the individual person.

• Legal basis for processing

Processing is necessary for the purpose of the legitimate interests pursued by Randstad.

____________________________________________________

This data may be obtained directly or indirectly from you. In the latter case, we will inform you of the purpose and data sources we use, when we communicate with you in connection with our Services (e.g. to alert you about a job opportunity), or in any event within one month of the time we indirectly obtain your data. The exception is where the provision of this information to you would cause disproportionate efforts. In that case, we may take alternative measures to protect your rights and freedoms.  

Randstad may collect your data from the following sources:

• Forms you complete: these clearly indicate mandatory and optional data. Please note that refusing to provide mandatory data may prevent your participation in selection processes;
• Interviews and direct correspondence: this includes personal data gathered during video, recorded, telephone, and in-person interviews, as well as information sent via email;
• Randstad Clients: clients may provide us with your personal data to facilitate your participation in their selection processes; and
• Third parties (referrers): individuals who provide employment references or information about your work or professional performance or through referral programs.

•  How long we keep your personal data

We may retain your personal data for a period of 24 months counting from the day you filed your recruitment documents for the purposes of providing you our Services on the basis of the accepted Privacy Policy; for marketing purposes - until you revoke your consent. 

We may keep your personal data long if necessary in connection with any actual or potential dispute (e.g. we need this personal data to establish or defend legal claims), in which case we will keep your personal data until the end of such dispute; and/or for us to comply with any legal or regulatory obligation (e.g. for tax or pension purposes), in which case we will keep your personal data for as long as required by that obligation.

temporary workers, persons employed for outsourcing services, contractors, interns and trainees

We process the personal data of temporary and outsourced employees during the provision of temporary employment and outsourcing services, secondment, payroll, personal development, career counseling, coaching, planning, and HR and payroll administration, as well as for the fulfillment of tax, insurance, and other legal obligations before, during, and after the period of employment.

•  What personal data do we collect about you and Why do we need your personal data

• Purpose(s) for processing

General HR management and administration purposes (including workforce management)

•  Categories of personal data

Identification information: (including home address, home phone number and mobile phone number), citizenship and country of residence, date of birth, (in exceptional cases) gender, digital signature and languages spoken.

Professional information: personal data related to your work including (without limitation) your job title, description and location, your department, professional email address, reporting levels, and employment status (full-time/part-time/etc.).

Performance-related information: including (without limitation) information on your performance reviews.

Family and dependent information: information related to your family and dependents including (without limitation) details regarding family composition (names, genders, ages), any "special needs" or education requirements for children or dependents, emergency contact information. 

•  Legal basis for processing

The processing is necessary for the performance of the temporary worker’s employment contract, contract for outsourcing services, internship and traineeship; and/or,

Processing is necessary for compliance with employment and social security legal obligations

_________________________________________________

•  Purpose(s) for processing

Compensation, payroll and expense reimbursement (including reporting and billing to clients)

•  Categories of personal data

Professional information: personal data related to your work including (without limitation) your job title, description and location, your department, professional email address, reporting levels, and employment status (full-time/part-time/etc.).

Financial information: financial information including (without limitation) your bank account number, bank details.

Salary information:  salary information including (without limitation) recurring payments and benefits, bonus.

Special categories of data, such as: 

• Health-related information: health-related information including (without limitation) disability, sickness and absences and maternity leave information, as legally required.

Performance-related information: including (without limitation) information on your performance reviews.

•  Legal basis for processing

The processing is necessary for the performance of the temporary worker’s employment contract, contract for outsourcing services, internship and traineeship; and/or,

Processing is necessary for compliance with employment and social security/tax legal obligations.

_________________________________________________

•  Purpose(s) for processing

Social security contributions (including pension, disability, and sickness insurance), health insurance, contributions to Employee Capital Plans (PPK), and other employee benefits

•  Categories of personal data

Financial information: financial information including (without limitation) your bank account number, bank details, PESEL.

Salary information:  salary information including (without limitation) recurring payments and benefits, bonus.

•  Legal basis for processing

The processing is necessary for the performance of the temporary worker’s employment contract, contract for outsourcing services, internship and traineeship; and/or,

Processing is necessary for compliance with employment and social security legal obligations.

_________________________________________________

•  Purpose(s) for processing

non-wage benefits (including sharing personal data with companies providing benefit-related services, e.g., medical care, lunch cards, sports cards, etc.)

•  Categories of personal data

Identification data: including first name, last name, residential address, date of birth, PESEL number, and other data necessary to provide the benefit.

Professional information: work-related personal data, including position, department, e-mail address.

•  Legal basis for processing

Data processing is necessary for the purposes of the legitimate interests pursued by Randstad, which include providing non-wage benefits, or the processing is based on the consent of the person interested in the benefit.

_________________________________________________

•  Purpose(s) for processing

Performance management, career development and training

•  Categories of personal data

Professional information: personal data related to your work including (without limitation) your job title, description and location, your department, professional email address, reporting levels, and employment status (full-time/part-time/etc.).

Performance-related information: including (without limitation) information on your performance reviews.

•  Legal basis for processing

The processing is necessary for the performance of the temporary worker’s employment contract, contract for outsourcing services, internship and traineeship; and/or,

Processing is necessary for the purpose of the legitimate interests pursued by Randstad, which include the development and training of employees.

_________________________________________________

•  Purpose(s) for processing

Fleet management

•  Categories of personal data

Identification information: name, home address, phone number.

Professional information: personal data related to your work including (without limitation) your job title, description and location, your department, professional email address, reporting levels, and employment status (full-time/part-time/etc.).

Vehicle information: information about your personal or company car including (without limitation) your license plate, parking tickets and driving fines.

•  Legal basis for processing

The processing is necessary for the performance of the temporary worker’s employment contract, contract for outsourcing services, internship and traineeship; and/or,

Processing is necessary for the purpose of the legitimate interests pursued by Ransdstad, which include safeguarding our assets.

_________________________________________________

•  Purpose(s) for processing

Disciplinary and grievance management, investigations, appeals (including managing complaints) and handling reports through Randstad’s misconduct reporting procedure.

•  Categories of personal data

Identification information: (including home address, email address, phone number), digital signature and languages spoken.

Disciplinary information: information relating to disciplinary measures taken against you, if any.

Grievance information: in order to assist in the reporting of grievances and (suspected) misconduct within the Randstad Group of companies, we have established dedicated channels through which stakeholders may voice concerns, either through local reporting mechanisms in place at the level of the local Randstad Group companies or, for serious misconduct (including whistleblowing), through our Integrity Line, the Randstad Group reporting facility. Whenever we receive a grievance report or a report about (suspected) misconduct we may process personal data related to the complainant, the other individuals mentioned in the complaint and the person(s) that is/are subject of the complaint and/or of the investigation into the complaint. 

•  Legal basis for processing

Processing is necessary for the purpose of the legitimate interests pursued by Randstad, which include the protection of company assets, protecting its legal interests and managing legal claims/disputes.

_________________________________________________

•  Purpose(s) for processing

Dispute management and litigation

•  Categories of personal data

Legal/Dispute Data: Personal data that law enforcement authorities require us to disclose in connection with an investigation. Personal data that is necessary for Randstad to defend its rights in connection with a dispute or with proceedings before a court of law (or other dispute resolution body).

•  Legal basis for processing

Processing is necessary for the purpose of the legitimate interests pursued by Randstad, which include the protection of company assets, protecting its legal interests and managing legal claims/disputes.

_________________________________________________

•  Purpose(s) for processing

Health and safety management

•  Categories of personal data

Special categories of data, such as: health-related information including (without limitation) injuries and exposure, incident reports, disability, sickness and absences and maternity leave information, as legally required, sobriety check results.

To the extent we process these special categories of data, we will protect, secure and use that information in a manner consistent with this notice and applicable laws

•  Legal basis for processing

The processing is necessary for the performance of the temporary worker’s employment contract, contract for outsourcing services, internship and traineeship; and/or,

Processing is necessary for compliance with employment and social security legal obligations.

If not based on the above grounds: Processing is necessary for the purpose of the legitimate interests pursued by Randstad, which include the protection of its employees, company assets, protecting its legal interests and managing legal claims/disputes; or

protection of the vital interests of the Data Subjects

_________________________________________________

•  Purpose(s) for processing

Managing holidays, leaves and other absences

•  Categories of personal data

Professional information: personal data related to your work including (without limitation) your job title, description and location, your department, professional email address, reporting levels, and employment status (full-time/part-time/etc.).

•  Legal basis for processing

The processing is necessary for the performance of the temporary worker’s employment contract, contract for outsourcing services, internship and traineeship; and,

Processing is necessary for the purpose of the legitimate interests pursued by Randstad, which include improving efficiency in the workplace and the proper conduct of its business.

_________________________________________________

•  Purpose(s) for processing

Compliance with labor, tax and social security laws and other legal or regulatory requirements (e.g. equal opportunity and workplace diversity requirements)

•  Categories of personal data

Identification information: your name and other contact information (including email address, phone number), gender, digital signature and languages spoken, PESEL.

Professional information: information related to your work including (without limitation) your job title, your location and your department.

Government issued identifiers: government issued identifiers including (without limitation) the national identification number, as legally required. This may include, without limitation, the provision of any further information that may be formally required by governmental or regulatory authorities. 

Special personal data: where necessary to comply with its legal obligations, or if otherwise permitted by or pursuant to law, Randstad may process data about race or ethnic origin, biometric data, health, sobriety control results, trade union membership, and/or personal data about unlawful or disruptive behavior. 

•  Legal basis for processing

Processing is necessary for compliance with employment and compliance with our legal obligations under labor, tax, social security and other laws and regulations.

_________________________________________________

•  Purpose(s) for processing

IT support

•  Categories of personal data

Professional information: information related to your work including (without limitation) your job title, your location and your department.

Information you choose to share with us:  including (without limitation) information you share when using IT support or calling the helpline, and information about you that may be conveyed by your use of a webcam in communicating with us.

•  Legal basis for processing

The processing is necessary for the performance of the temporary worker’s employment contract, contract for outsourcing services, internship and traineeship; and/or,

Processing is necessary for the purpose of the legitimate interests pursued by Randstad, which include safeguarding our assets and ensuring security of our information systems.

_________________________________________________

•  Purpose(s) for processing

Facilities, security and contingency planning purposes

•  Categories of personal data

Information related to identification/access control cards: employee identification and access control cards may contain your name, photograph, employee number and may be linked to other details on record (department, phone number, license plate).

Visitor information: when accessing our buildings, we may collect your name, contact details, car plate number, identification, etc. for security reasons. Where we are legally permitted to do so we may also ask you to disclose information about your health (including information related to viral infections, flu, etc.) for health and safety reasons.

CCTV footage: we may process footage of you obtained through our use of CCTV surveillance systems.

•  Legal basis for processing

The processing is necessary for the performance of the temporary worker’s employment contract, contract for outsourcing services, internship and traineeship, internship and traineeship; and/or,

Processing is necessary for the purpose of the legitimate interests pursued by Randstad, which include safeguarding and securing our assets, our facilities, our information systems and our people.

_________________________________________________

•  Purpose(s) for processing

Network and device usage optimization and related security controls (including company network access and authentication)

•  Categories of personal data

Information related to your usage of Randstad devices, software and access to Randstad’s network: information related to your use of our devices, software and access to our networks, including (without limitation) your browsing history, your use of email, internet and social media, whether at the workplace, on our equipment or otherwise through our networks.

•  Legal basis for processing

The processing is necessary for the performance of the temporary worker’s employment contract, contract for outsourcing services, internship and traineeship, internship and traineeship; and/or,

Processing is necessary for the purpose of the legitimate interests pursued by Randstad, which include safeguarding our assets and ensuring security of our information systems.

_________________________________________________

•  Purpose(s) for processing

Preventing, detecting and investigating fraud and other crimes, and compliance with sanctions regimes (including identification of politically exposed persons, specially designated nationals  and screening against sanctions lists)

•  Categories of personal data

Identification information: your name and other contact information (including email address, phone number), date of birth, system ID, gender, digital signature and languages spoken.

Professional information: information related to your work including (without limitation) your job title, your location and your department.

Trade sanctions information relating to you: we may verify whether you are a politically exposed person, a specially designated national or otherwise subject to sanctions under applicable laws or regulations.

•  Legal basis for processing

Processing is necessary for the purpose of the legitimate interests pursued by Randstad, which include the protection of company assets, protecting its legal interests and managing legal claims/disputes; and/or,

Processing is necessary to comply with our legal obligations (including when authorities or administrations ask information about a temporary worker).

_________________________________________________

•  Purpose(s) for processing

Emergency and disaster management

•  Categories of personal data

Identification information: your name and other contact information (including email address, landline phone number and mobile phone number), gender, digital signature and languages spoken.

Family and dependent information: information related to your family and dependents including (without limitation) details regarding family composition (names, genders, ages), any "special needs" or education requirements for children or dependents, emergency contact information. 

•  Legal basis for processing

Based on a legitimate interest pursued by Randstad, which includes ensuring the safety of talent; and,

Where the above ground is not possible because local mandatory law requires so, only in those limited cases may this be based on a consent.

_________________________________________________

•  Purpose(s) for processing

Relocation, mobility and travel management

•  Categories of personal data

Professional information: information related to your work including (without limitation) your job title, your location and your department.

Travel and expense data: travel and accommodation information and expenses including (without limitation) travel itineraries, hotel and travel reward cards.

•  Legal basis for processing

Processing is necessary for the performance of the temporary worker’s employment contract; and/or,

Processing is necessary for the purpose of the legitimate interests pursued by Randstad, which include improving efficiency in the workplace and the proper conduct of its business.

_________________________________________________

•  Purpose(s) for processing

To monitor and enforce compliance with Randstad policies and procedures

•  Categories of personal data

Identification information: your name and other contact information (including email address, landline phone number and mobile phone number), gender, digital signature and languages spoken.

Professional information: information related to your work including (without limitation) your job title, your location and your department.

Information related to your usage of Randstad devices, software and access to Randstad’s network: information related to your use of our devices, software and access to our networks, including (without limitation) your browsing history, your use of email, internet and social media, whether at the workplace, on our equipment or otherwise through our networks.

•  Legal basis for processing

For the purpose of the legitimate interests pursued by Randstad, which include safeguarding our assets and ensuring security of our information systems.

_________________________________________________

•  Purpose(s) for processing

To monitor and enforce compliance with legal obligations applicable to us (including the requirements set out in your contract with us)

•  Categories of personal data

Identification information: your name and other contact information (including email address, phone number), gender, digital signature and languages spoken.

Professional information: information related to your work including (without limitation) your job title, your location and your department.

•  Legal basis for processing

Processing is necessary for the purpose of the legitimate interests pursued by Randstad, which include the protection of company assets, protecting its legal interests and managing legal claims/disputes.

_________________________________________________

•  Purpose(s) for processing

Recruitment and staffing

•  Categories of personal data

Professional information: information related to your work including (without limitation) your job title, your location and your department.

CV/resumes and other recruitment information: CV/resume, work history, information about your skills, your experience and educational background and other relevant information (such as your photograph, interview notes and personal data included in the cover letter or as part of the application process).

Financial data: financial information including (without limitation) your bank account number, bank details, VAT number.

Information you choose to share with us: we may process additional information if you choose to share that with us.

•  Legal basis for processing

The processing is necessary for the performance of the temporary worker’s employment contract, contract for outsourcing services, internship and traineeship; 

_________________________________________________

•  Purpose(s) for processing

Employee surveys, statistical purposes

•  Categories of personal data

Identification information: your name and other contact information (including email address, phone number), gender, digital signature and languages spoken.

Professional information: information related to your work including (without limitation) your job title, your location and your department.

Survey results: we may process your responses to questions in surveys.

Information you choose to share with us: we may process additional information if you choose to share that with us.

•  Legal basis for processing

Based on our legitimate interest to survey our temporary workers so as to better understand their needs, to improve our services and to build and maintain a good relationship with our temporary workers and with the clients our temporary workers work at.

_________________________________________________

•  Purpose(s) for processing

Business development and temporary worker engagement (including sending job-related communications, updates about available assignments, services and, where applicable, marketing communications that may be of interest to you).

•  Categories of personal data

Identification information:

Your name and contact details (including email address and phone number), gender, digital signature, and languages spoken.

Professional information:

Information related to your professional background, including (without limitation) your job title or role, location, skills, and experience relevant to assignments.

•  Legal basis for processing

Based on consent, where required, in particular for receiving marketing communications that are not strictly related to your temporary assignments or account management; and/or

Based on our legitimate interest, where applicable, to maintain and develop our relationship with registered temporary workers, to inform you about relevant opportunities, services, and updates related to your professional interests.

You may withdraw your consent or object to receiving marketing communications at any time by using the opt-out option provided in each communication or through your account settings.

_________________________________________________

•  Purpose(s) for processing

Events

•  Categories of personal data

Identification information: your name and other contact information (including email address, phone number), gender, digital signature and languages spoken.

Professional information: information related to your work including (without limitation) your job title, your location and your department.

Photographs and video footage:  when participating in our events, meetings, conferences etc., we may process photographs or videos of you. 

•  Legal basis for processing

Based on our legitimate interest to organise events so as to better build and maintain a good relationship with the community of temporary workers and with the clients our temporary workers work at. 

In the context of such events, photographs or video footage may be taken, which may involve the processing of your personal data.

_________________________________________________

•  Purpose(s) for processing

To manage memberships of employees to professional associations

•  Categories of personal data

Professional information: information related to your work including (without limitation) your job title, your location and your department.

Trade union membership: personal data revealing your trade union membership.

•  Legal basis for processing

Processing is necessary for the purpose of the legitimate interests pursued by Randstad, which include improving efficiency in the workplace and the proper conduct of its business.

_________________________________________________

•  Purpose(s) for processing

To perform internal and external audits.

•  Categories of personal data

Identification information: your name and other contact information (including email address, phone number), gender, digital signature and languages spoken.

Professional information: information related to your work including (without limitation) your job title, your location and your department, system ID.

•  Legal basis for processing

Processing is necessary for the purpose of the legitimate interests pursued by Randstad, which include improving efficiency in the workplace and the proper conduct of its business, including compliance with laws and regulations.

_________________________________________________

•  Purpose(s) for processing

To conduct corporate transactions (including mergers, acquisitions and divestments).

•  Categories of personal data

Identification information: your name and other contact information (including email address, phone number), gender, digital signature and languages spoken.

Professional information: information related to your work including (without limitation) your job title, your location and your department.

•  Legal basis for processing

Processing is necessary for the purpose of the legitimate interests pursued by Randstad, which include Randstad’s interest in developing its business through mergers, acquisitions and divestment.

_________________________________________________

•  Purpose(s) for processing

Internal and external communication

•  Categories of personal data

Name, surname, image

•  Legal basis for processing

The processing is based on consent.

_________________________________________________

•  Purpose(s) for processing

Participation in contests and quizzes 

•  Categories of personal data

Name and other contact information (including email address, phone number), gender, digital signature and languages spoken.

•  Legal basis for processing

Processing is necessary for the purpose of the legitimate interests pursued by Randstad

_________________________________________________

•  Purpose(s) for processing

Responses to DSARs

•  Categories of personal data

Identification and contact data: name, contact information, other categories of data necessary to confirm the identity of the individual person.

•  Legal basis for processing

Processing is necessary for the purpose of the legitimate interests pursued by Randstad and legal obligations concerning data subject rights.

_________________________________________________

•  Purpose(s) for processing

Responding to queries

•  Categories of personal data

Identification and contact data: name, contact information, other categories of data necessary to confirm the identity of the individual person.

•  Legal basis for processing

Processing is necessary for the purpose of the legitimate interests pursued by Randstad.

•  How long we keep your personal data

Your personal data will be stored for:

1. Personal data covered by employee documentation, including employment contracts and documents related to the termination of employment - 10 years counted from the day the employee ceases work for a given employer;
2. Personal data covered by payroll documentation, including payroll lists – for the purpose of fulfilling the statutory obligation to store (archive) relevant documentation on the basis of which the basis for calculating retirement or disability benefits is determined - 10 years counted from the day the employee ceases work for a given payer;
3. Civil law contracts - 10 years from the end of the contract
4. Accident protocols - 10 years
5. Register of employees exposed to carcinogenic chemical substances - 40 years
6. Disciplinary penalties - 1 year of blameless work
7. Sobriety check results - 1 year

We may keep your personal data long if necessary in connection with any actual or potential dispute (e.g. we need this personal data to establish or defend legal claims), in which case we will keep your personal data until the end of such dispute; and/or for us to comply with any legal or regulatory obligation (e.g. for tax or pension purposes), in which case we will keep your personal data for as long as required by that obligation.

business relations

In the context of our Services, we process your personal data if you are working for companies with which we are conducting (or intending to conduct) business (e.g. to make offers for the Services and to maintain a business relationship with the company you work for).

•  What personal data do we collect about you and Why do we need your personal data

•  Purpose(s) for processing

To administer and manage the contractual relationship between Randstad and our clients and suppliers;

•  Categories of personal data

Identification information: your name and other contact information (including email address, phone number), gender, digital signature and languages spoken.

Professional information: information related to your work including (without limitation) your job title, your location and your department.

•  Legal basis for processing

Necessary for the performance of the contract between Randstad and the client or supplier; 

___________________________________________________________________

•  Purpose(s) for processing

Business development (including sending direct marketing and offers)

•  Categories of personal data

Identification information: your name and other contact information (including email address, phone number), gender, digital signature and languages spoken.

Professional information: information related to your work including (without limitation) your job title, your location and your department.

•  Legal basis for processing

Depending on the circumstances this may be based either on your consent or on our legitimate interest to maintain good relations with our current or prospective clients and suppliers; 

If you are no longer interested in these Randstad messages you are always able to opt-out from receiving such communications.

___________________________________________________________________

•  Purpose(s) for processing

Preventing, detecting and investigating fraud; 

•  Categories of personal data

Identification information: your name and other contact information (including email address, phone number), gender, digital signature and languages spoken.

Professional information: information related to your work including (without limitation) your job title, your location and your department.

Trade sanctions information relating to you:  we may verify whether you are a politically exposed person, a specially designated national or otherwise subject to sanctions under applicable laws or regulations.

•  Legal basis for processing

To comply with our legal obligations when some authorities or administrations ask information about our contact as a client (including personal data); and/or Processing is necessary for the purpose of the legitimate interests pursued by Randstad, which include the protection of company assets, protecting its legal interests and managing legal claims/disputes.

___________________________________________________________________

•  Purpose(s) for processing

Facilities, security and contingency planning purposes; 

•  Categories of personal data

Visitor information: when accessing our buildings, we may collect your name, contact details, car plate number, identification, etc. for security reasons. Where we are legally permitted to do so we may also ask you to disclose information about your health (including information related to viral infections, flu, etc.) for health and safety reasons.

CCTV footage: we may process footage of you obtained through our use of CCTV surveillance systems.

•  Legal basis for processing

Processing is necessary for the purpose of the legitimate interests pursued by Randstad, which include the protection of its employees, company assets, protecting its legal interests and managing legal claims/disputes; and/or protection of the vital interests of the Data Subjects

___________________________________________________________________

•  Purpose(s) for processing

Health and safety management.

•  Categories of personal data

Visitor information: when accessing our buildings, we may collect your name, contact details, car plate number, identification, etc. for security reasons. Where we are legally permitted to do so we may also ask you to disclose information about your health (including information related to viral infections, flu, etc.) for health and safety reasons.

•  Legal basis for processing

Processing is necessary for the purpose of the legitimate interests pursued by Randstad, which include the protection of its employees, company assets, protecting its legal interests and managing legal claims/disputes; and/or protection of the vital interests of the Data Subjects.

___________________________________________________________________

•  Purpose(s) for processing

To conduct corporate transactions (including mergers, acquisitions and divestments);

•  Categories of personal data

Identification information: your name and other contact information (including email address, landline phone number and mobile phone number), gender, digital signature and languages spoken.

Professional information: information related to your work including (without limitation) your job title, your location and your department.

•  Legal basis for processing

Processing is necessary for the purpose of the legitimate interests pursued by Randstad, which include Randstad’s interest in developing its business through mergers, acquisitions and divestment.

___________________________________________________________________

•  Purpose(s) for processing

Events

•  Categories of personal data

Identification information: your name and other contact information (including email address, phone number), gender, digital signature and languages spoken.

Professional information: information related to your work including (without limitation) your job title, your location and your department.

Photographs and video footage:  when participating in our events, meetings, conferences etc., we may process photographs or videos of you. 

•  Legal basis for processing

Based on our legitimate interest to organise events so as to better build and maintain a good relationship with our clients and our suppliers. 

In the context of such events, photographs or video footage may be taken, which may involve the processing of your personal data.

___________________________________________________________________

•  Purpose(s) for processing

IT Support

•  Categories of personal data

Professional information: information related to your work including (without limitation) your job title, your location and your department.

Information you choose to share with us:  including (without limitation) information you share when using IT support or calling the helpline, and information about you that may be conveyed by your use of a webcam in communicating with us.

•  Legal basis for processing

Processing is necessary for the purpose of the legitimate interests pursued by Randstad, which include safeguarding our assets and ensuring security of our information systems.

___________________________________________________________________

•  Purpose(s) for processing

Surveys (including satisfaction surveys)

•  Categories of personal data

Identification information: your name and other contact information (including email address, mobile phone number), gender, digital signature and languages spoken.

Professional information: information related to your work including (without limitation) your job title, your location and your department.

Survey results: we may process your responses to questions in surveys.

Information you choose to share with us: we may process additional information if you choose to share that with us.

•  Legal basis for processing

Based on our legitimate interest to survey our clients so as to better understand their needs, to improve our Services and to build and maintain a good relationship with our clients

___________________________________________________________________

•  Purpose(s) for processing

Dispute management, litigation and handling any reports through Randstad's misconduct reporting procedure.

•  Categories of personal data

Legal/Dispute Data: Personal data that law enforcement authorities require us to disclose in connection with an investigation.  Personal data that is necessary for Randstad to defend its rights in connection with a dispute or with proceedings before a court of law (or other dispute resolution body).

•  Legal basis for processing

Processing is necessary for the purpose of the legitimate interests pursued by Randstad, which include the protection of company assets, protecting its legal interests, managing legal claims/disputes with our clients and suppliers and handling reports of potential misconduct within or relating to Randstad.

___________________________________________________________________

•  Purpose(s) for processing

Compliance with legal or regulatory requirements

•  Categories of personal data

Identification information: your name and other contact information (including email address, landline phone number and mobile phone number), gender, digital signature and languages spoken.

Professional information: information related to your work including (without limitation) your job title, your location and your department.

This may include, without limitation, the provision of any further information that may be formally required by governmental or regulatory authorities.

•  Legal basis for processing

Processing is necessary for compliance with our legal or regulatory obligations (e.g. obligations under tax laws to keep certain information including personal data).

___________________________________________________________________

•  Purpose(s) for processing

To monitor and enforce compliance with Randstad policies and procedures.

•  Categories of personal data

Identification information: your name and other contact (email, phone number), gender, digital signature and languages spoken.

Professional information: information related to your work including (without limitation) your job title, your location and your department.

•  Legal basis for processing

For the purpose of the legitimate interests pursued by Randstad, which include safeguarding our assets and ensuring security of our information systems.

___________________________________________________________________

•  Purpose(s) for processing

To perform internal and external audits.

•  Categories of personal data

Identification information: your name and other contact information (including email address, landline phone number and mobile phone number), gender, digital signature and languages spoken.

Professional information: information related to your work including (without limitation) your job title, your location and your department.

•  Legal basis for processing

For the purpose of the legitimate interests pursued by Randstad, which include the proper conduct of its business and accuracy of financial reporting.

___________________________________________________________________

•  Purpose(s) for processing

Responses to DSARs

•  Categories of personal data

Identification and contact data: name, contact information, other categories of data necessary to confirm the identity of the individual person.

•  Legal basis for processing

Processing is necessary for the purpose of the legitimate interests pursued by Randstad and legal obligations concerning data subject rights.

•  How long we keep your personal data

Your personal data will be kept for:

• Contact persons at clients and suppliers - until the end of the contract and for archiving purposes
• Contact persons at prospecting clients - until the consent has been revoked.

We may keep your personal data longer if necessary in connection with any actual or potential dispute (e.g. we need this personal data to establish or defend legal claims), in which case we will keep your personal data until the end of such dispute; and/or for us to comply with any legal or regulatory obligation (e.g. for tax or pension purposes), in which case we will keep your personal data for as long as required by that obligation.

HR technologies

our use of innovative HR technologies for talent matching and services

Our ultimate goal is to support people and organizations in realizing their true potential. We believe that the best way to achieve that goal is by combining our passion for people with the power of today’s HR technologies. By HR technologies we mean technologies that help us digitize and enhance a variety of recruitment-related processes. 

For example we use chatbots and AI agents to improve your talent experience. Chatbots give candidates the opportunity to answer questions based on the requirements of the job they apply for.  This is a user-friendly way for candidates to:

• provide us with relevant information that may not be readily apparent from the application, profile or resume of a candidate.
• know promptly whether their skills meet a job’s essential requirements and, if not, to easily explore other jobs or to identify gaps in their skillset.
• answer at any moment convenient to the user.

As part of the larger recruitment process, HR technologies allow us to connect candidates more quickly to our consultants.  This, in turn, allows our consultants to better support candidates in exploring jobs and to deliver the right candidates more quickly to our clients. HR technologies also allow our consultants to find people based not only on the jobs they qualify for but also on the basis of jobs they are interested in. 

To support our recruitment processes for corporate positions, we may use technologies that rely on automated processing to help assess information provided by applicants (such as professional experience, skills, and qualifications). These tools may generate indicative results or recommendations (for example, suitability or match indicators) to support our recruitment teams.

Where such technologies are used in a way that involves automated decision-making or produces significant effects for individuals, we will provide affected applicants with specific and appropriate information, including meaningful information about the logic involved, the applicable legal basis, and their rights, in accordance with applicable data protection laws. Final decisions relating to recruitment are made by our recruitment teams.

• digital marketplace in the App

My Randstad app's digital marketplace automates the recruitment and placement processes. Automated decision-making is used to facilitate the recruitment and placement processes by automatically validating you for specific job profiles based on the personal data and documents (including certificates, licenses, and compliance frameworks) you upload, matching you to suitable job opportunities and creating the required contract. This means that decisions regarding your eligibility for certain roles are made without direct human involvement.

• What personal data is processed?

We process your identification and contact data, which includes your name, contact information, citizenship, country of residence, date of birth, languages spoken, and, in some cases, gender. Additionally, your CV/resume, work history, information about your skills, your experience and educational background and other relevant information (such as your photograph and personal data included in the cover letter or as part of the application process) as well as any documents you upload are processed to verify your qualifications and compliance with job requirements as well as labour law requirements. 

Certain sensitive personal data, such as your PESEL, health information or criminal background data, may be processed and collected earlier than in traditional recruitment processes, specifically when explicitly required to validate you for a job profile for the Digital Marketplace. This collection is required with a view to entering into a contract with you and is in full compliance with applicable data protection laws.

• How does automated decision-making work?

The information you provide directly feeds into this automated assessment process, which is integral to the Digital Marketplace. The system evaluates various personal aspects against the job requirements set by Randstad and the employer as applicable. This is achieved by analyzing your uploaded personal data, including documents, against a predefined set of rules and thresholds. For instance, if a mandatory criterion for a job is not met based on the information in your documents, the automated system will mark you as ineligible for that specific role. This process ensures a consistent and fair assessment by uniformly applying criteria to all candidates, thereby enabling the display of relevant job opportunities to you. 

Subsequently, based on your job preferences, such as your preferred commute distance and your availability, you are recommended suitable jobs or shifts. You are able to update your preferences, which in turn updates the recommended jobs and shifts.

While we are not providing a complex mathematical explanation of the underlying algorithms, our aim is to provide you with meaningful information about the rationale behind these decisions.

• Legal Basis for Processing

The processing of your data and the use of automated systems for matching services are necessary for the performance of a contract (or in anticipation of entering into a contract) between you and Randstad, specifically to enable your participation in and use of our Digital Marketplace. This means that the processing of your data is based on (pre-)contractual necessity.

Please ensure that all data and documents you provide are accurate and up-to-date, as eligibility decisions, which are driven by automated decision-making, rely solely on this information. We implement robust measures to verify data accuracy, and your active input plays a crucial role in maintaining this quality.

Requesting Human Intervention 

If you believe a decision made through the automated decision-making process is incorrect or wish to have a human review your profile and job matching, you have the right to request human intervention. You can do this by contacting us at dpo@randstad.pl.

• improving the client experience 

HR technologies help us to search through a broader and more diverse set of candidates so that we become even better at finding the best talent with the most relevant skill-set for our clients. Thanks to these technologies our consultants can focus on the tasks that require genuinely human traits that technology cannot emulate: creativity and emotion. 

• web beacons

Our emails may contain a single, campaign-unique "web beacon pixel" to tell us whether our emails are opened and verify any clicks through to links or advertisements within the email. We may use this information for purposes including determining which of our emails are more interesting to users, to query whether users who do not open our emails, wish to continue receiving them and to inform our advertisers in aggregate how many users have clicked on their advertisements. The pixel will be deleted when you delete the email. If you do not wish the pixel to be downloaded to your device, you should select to receive emails from us in plain text rather than HTML.

• responsible use of HR technologies

Randstad is committed to the ethical and responsible use of innovative HR technologies (you can read our AI principles here). Randstad does not use these technologies as a substitute for humans or human interaction in any part of its processes. Instead, our use of HR technologies is intended to make interactions with clients and candidates more personal, relevant and meaningful.

We strive to involve human beings whenever we make decisions that significantly impact you.  If, in exceptional cases, we were to make such decisions based on a fully automated process (ie. without involvement of humans), we will only do so where that is permitted by law and after having notified you.

To ensure all candidates are treated fairly we take steps to avoid bias where we use HR technologies. For example:

• We regularly test the output created by these technologies to identify potential unfair bias.
• We regularly obtain expert advice to continuously improve the way in which we identify and remove bias.
• Both our consultants and our search and match algorithms are thoroughly trained and always work together. 

with whom do we share your personal data

We may share your personal data:

• Randstad Group Entities: 

• with other entities of the Randstad group of companies. We are part of a multinational group of companies and sometimes we may share personal data with other Randstad groups of companies for the purposes of efficient management of business, compliance with legal and regulatory requirements and to provide our Services to you (include as matching) and to our clients. For an overview of these entities, click here.

Our "partner for talent" strategy focuses on building long-term relationships with clients and talents, understanding their unique challenges, and delivering tailored solutions to help them thrive in a dynamic global talent market. We leverage data, technology, and our deep industry expertise to connect the right talent with the right opportunities.

• External partners for service delivery:

• with Randstad clients. Within the scope of our Services, including recruitment, temporary work and outsourcing services;
• with third parties providing HR-related services to use (e.g. payroll service providers);
• with third party providers of IT-related services (e.g. we use an external provider to support our IT-infrastructure; e.g. an important part of our software and databases sit in a cloud-environment which is operated by a third party service provider);
• with third parties providers of marketing-related services (e.g. we may store your personal data in a cloud-based CRM-application that is hosted and provided by a third party service provider; e.g. when we use a third party service provider to organise an event we may share your personal data with that third party in order to invite you to that event);
• With providers of non-wage benefits (e.g. lunch cards, sports cards etc.;
• with providers of professional services (e.g. to our auditors, our tax advisors, our legal advisors);
• with banks and insurers (e.g. in order to pay the salaries of our temporary workers we share some of their personal data with our bank);
• with pension funds (PPK). 

• Public and Regulatory Authorities:

• with public authorities (e.g. pursuant to applicable law Randstad must disclose personal data to the social security authorities and to tax authorities);
• with law enforcement authorities, courts and regulatory authorities (e.g. as part of a criminal investigation police services may require us to disclose personal data to them).
  
   

• We may also disclose your personal data to third parties:

• in the event that we sell or buy any business or assets, in which case we may disclose your personal data to the prospective seller or buyer of such business or assets; or
• if all or a substantial part of our assets are acquired by a third party, in which case the personal data that we hold about you may be one of the transferred assets.

When we share your personal data as described above, such personal data may be transferred both within and outside the European Economic Area (EEA). 

In the event that we transfer your personal data internationally, we will only do so in line with applicable law, and we will require that there is an adequate level of protection for your personal data, and that appropriate security measures are in place.

Your personal data may be transferred from countries located within the EEA to countries located outside of the EEA (such as the United States). In such cases, we will require that the following safeguards are observed:

• The laws of the country to which your personal data is transferred ensure an adequate level of data protection. Click here for the list of non-EEA countries that, according to the European Commission, provide an adequate level of data protection; or
• The transfer is subject to standard data protection clauses approved by the European Commission. More information about those data protection clauses is available here; or
• Any other applicable appropriate safeguards under article 46 of the EU General Data Protection Regulation (2016/679).

For more information about the safeguards that we have implemented to protect your personal data internationally, please contact us at dpo@randstad.pl.

how will we protect your personal data

We have technical and organizational security measures in place to protect your personal data from being accidentally lost, used, altered, destructed, disclosed or accessed in an unauthorized way. We limit access to your personal data to those who have a genuine business need to know it. Those processing your personal data are governed by Randstad's rules for information and IT security, data protection and other internal regulations and guidelines applicable to the processing of personal data.

While we have measures in place to protect your personal data, it is important for you to understand that 100% complete security cannot be guaranteed. Accordingly, we have procedures in place to deal with data security incidents and to comply with legal requirements applicable to the detection, handling and notification of personal data breaches.

your data protection rights

Rights

What does this mean?

1. Right to be informed

You have the right to be provided with clear, transparent and easily understandable information about how we use your personal data and your rights. This is why we are providing you with the information in this notice. 

2. Right of access

You have the right to access the personal data we keep about you – this is because we want you to be aware of the personal data we have about you and to enable you to verify whether we process your personal data in accordance with applicable data protection laws and regulations.

3. Right to rectification

If your personal data is inaccurate or incomplete, you have the right to request the rectification of your personal data.

4. Right to erasure 

This is also known as ‘the right to be forgotten’ and, in simple terms, enables you to request the deletion or removal of your personal data where there is no compelling reason for us to keep it. This is not a general right to erasure, there are exceptions. 

5. Right to restrict processing

You have rights to ‘block’ or suppress further use of your personal data in certain circumstances. When processing is restricted, we can still store your personal data, but may not use it further. We keep lists of people who have asked for further use of their personal data to be ‘blocked’ to make sure the restriction is respected in future.

6. Right to data portability

You have the right to obtain and reuse your personal data in a structured, commonly used and machine-readable format in certain circumstances. In addition, where certain conditions apply, you have the right to have such personal data transferred directly to a third party.

7. Right to object to processing

You have the right to object to certain types of processing, in certain circumstances. In particular, the right to object to the processing of your personal data based on our legitimate interests or on public interest grounds; the right to object to processing for direct marketing purposes (including profiling); the right to object to the use of your personal data for scientific or historical research purposes or statistical purposes in certain circumstances.

8. Right to withdraw consent

If our processing of your personal data is based specifically on your consent, you have the right to withdraw that consent at any time. This includes your right to withdraw consent to our use of your personal data in the context of voluntary employee surveys.

9. Right to object to automated decision making

You have the right not to be subject to a decision based solely on automated Processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. Automated decision making takes place when an electronic system uses personal data to make a decision without meaningful human intervention.  

This right is subject to certain exceptions. For example, we may use automated decision-making when it is necessary for entering into or performing a contract with you (pre-contractual or contractual necessity) or based on your explicit consent (where you have freely given consent for such automated processing), provided that we implement appropriate safeguards, including:

• the right to obtain human intervention;
• the ability to express your point of view; and
• the right to contest the decision or request a review. 

If automated processing is necessary for entering into or performing a contract, your objection to the use of such processing may, in some cases, make it impossible for us to enter into or continue the contract. 

If automated processing is based on a legal basis other than contractual necessity (e.g., consent), you retain the right to object or withdraw your consent at any time, and we will review your objection in accordance with our data protection requirements.

For further information, please see the section “HR technologies”.

You can exercise your rights by writing to: dpo@randstad.pl.

We will handle your request with special care to ensure your rights can be exercised effectively. We may ask you for proof of identity to ensure that we are not sharing your personal data with anyone else but yourself! You must be aware that, in particular cases (for instance, due to legal requirements) we may not be able to make your request effective right away. In any case, within one month from your request, we will inform you on the actions taken.

You have the right to lodge a complaint with a supervisory data protection authority: Urząd Ochrony Danych Osobowych www.uodo.gov.pl

changes to this Data protection notice

We may update this notice from time to time. You can see the date on which the last change was made below in this notice. We advise you to review this notice on a regular basis so that you are aware of any changes.