Privacy

PROVISIONS COMMON TO EACH PROCESSING PURPOSE

Administrators of personal data
Companies forming the LeasingTeam Group, i.e.:

1. LeasingTeam sp. z o.o. – 7 Taśmowa St., 02-677 Warsaw, KRS 246710, NIP 1231069185;
2. LeasingTeam Professional sp. z o.o. – 7 Taśmowa St., 02-677 Warsaw, KRS 397410, NIP 5361909208;
3. LeasingTeam Brand Management sp. z o.o. – 7 Taśmowa St., 02-677 Warsaw, KRS 550844, NIP 9512390546;
4. LeasingTeam Outsourcing sp. z o.o. – 7 Taśmowa St., 02-677 Warsaw, KRS 344462, NIP 9512302358;
5. IT LeasingTeam sp. z o.o. – 7 Taśmowa St., 02-677 Warsaw, KRS 570690, NIP 5213703573;
6. LeasingTeam International sp. z o.o. – 7 Taśmowa St., 02-677 Warsaw, KRS 1010553, NIP 8992734079;
7. Talentpoint sp. z o.o. – 7 Taśmowa St., 02-677 Warsaw, KRS 458891, NIP 5361913552;
8. LeasingTeam Oddział Północ sp. z o.o. – Jarosława Dąbrowskiego 15/3 Street, 83-110 Tczew, KRS 948368, NIP 5932631032;
9. LeasingTeam GmbH, headquartered in Berlin – Potsdamer Platz 10, 10785 Berlin, registered in the German commercial register under number: HRB 246021 B;
10. LeasingTeam s.r.o. based in Ostrava – Křížkovského 617/10, Muglinov, 712 00 Ostrava, identification number 17618321;
11. LeasingTeam s.r.l., headquartered in Timisoara – Emanuil Ungureanu No. 15, floor 1, premises 4, identification number 51508225,

have adopted a model of co-management of personal data for the purpose of conducting extensive marketing and other activities leading to the acquisition of contractors, as well as for recruitment processes. The aforementioned companies are hereinafter referred to collectively as “Joint Administrators” and separately as “Administrator.”
The Co-Administrators operate in the field of broadly defined employment services (in particular, offering temporary labor, outsourcing or recruitment agency services to clients). Related fields of activity cause the Co-Administrators to be interested in a homogeneous customer base, so that in addition, by conducting marketing activities to promote their own services, they also promote other Co-Administrators. They also conduct recruitment processes both for themselves, to meet their own internal staffing needs, and to provide the aforementioned services to their clients. Hence the adopted model of data co-administration, described below.

DATA PROTECTION OFFICER

The Joint Administrators have appointed a single Data Protection Officer who can be contacted by phone, e-mail or snail mail:
tel. 698978143
e-mail: iod@leasingteam.pl
address: 7 Taśmowa St., 02-677 Warsaw, with a note indicating the name of any Administrator.

Basic principles of data co-administration

Each of the Joint Administrators processes data for the same purpose, i.e., to expand its contractor base, promote its business and build its reputation (and thus enhance the business and reputation of other Joint Administrators as well), including by offering users websites presenting the LeasingTeam Group, as well as for recruitment purposes.

Within the framework of the concluded co-management agreement pursuant to Article 26 of the RODO, each Administrator is responsible for:

1. Performance of information obligations to data subjects,
2. Responding to data subjects within the scope of their request,
3. ensuring the confidentiality of data,
4. Ensuring that only authorized persons have access to the data,
5. Receiving and processing requests and demands submitted in connection with RODO in accordance with internal procedures,
6. Conducting communications with data subjects regarding rights under RODO in accordance with internal procedures,
7. Proper implementation of procedures established in connection with RODO,
8. Notifying the President of the Office of Personal Data Protection and data subjects of personal data protection violations in accordance with internal procedures.

LeasingTeam Ltd. is responsible for maintaining records related to data protection.

IT LeasingTeam sp. z o.o. deals with: a) provision and maintenance of ICT infrastructure, b) granting/revoking rights to systems used by Administrators, c) data storage, d) implementation of technical security measures, e) servicing of servers and f) creation of backups.

TalentPoint sp. z o.o. is responsible for the operation of TalentPoint, which is a proprietary system supporting HR and administrative support for employees and associates in LeasingTeam Group. TalentPoint provides ongoing online access to employee and co-worker data and allows, among other things, efficient handling of vacation requests, absenteeism records, working time records, access to employment certificates, pay slips, PIT declarations.

LeasingTeam Brand Management sp. z o.o. is responsible for the marketing and promotion of LeasingTeam Group products and services, including the implementation of direct marketing services.

Notwithstanding the above division of responsibilities, each Co-Administrator may conduct marketing activities on its own, being then responsible for their consequences. In addition, each Joint Administrator shall be so responsible for the proper and lawful processing of personal data.

All requests and demands related to data processing can be addressed to any of the Joint Controllers.

PURPOSES, BASIS AND DURATION OF PROCESSING

Personal data provided via CONTACT FORMS (including those used to make inquiries) are processed on the basis of:

1. Article 6(1)(f) of the RODO, i.e. in the legitimate interest of the Co-Dministrators, which is to be considered:
2. Processing of data for purposes related to the implementation of the submitted inquiry/notification and possible further contact;
3. processing of data in the event of a legal need to assert or defend against claims;
4. Article 6(1)(a) of the RODO, i.e. on the basis of expressed consent for the purposes of carrying out other marketing activities or sending commercial offers (information).

Provision of data is voluntary, however, it is necessary in order to respond to the message sent or to carry out the agreed marketing/trade activities.

In the above scope, the data will be stored until the data subject submits a reasoned objection to such processing or revokes the granted consent, extended by the time of processing of the submitted request in the above scope, up to a maximum of 30 days.

In the case of contact forms that are not related to consent to carry out other marketing activities or send commercial offers, the contact data will be processed until the submitted inquiry is answered, and after the end of contact for a maximum of 2 years.

In any case, data processed for the purpose indicated in point. 1(b) will be kept until the expiration of the statute of limitations, but no longer than 7 years.

Personal data provided for the purpose of subscribing to the NEWSLETTER are processed on the basis of:

1. Article 6(1)(a) of the RODO, i.e. on the basis of expressed consent for purposes related to the implementation of this marketing activity;
2. Article 6(1)(f) of the RODO, i.e. in the legitimate interests of the Co-Dministrators, which is to be considered the processing of data in the event of a legal need to assert or defend against claims.

Provision of data is voluntary, however, it is necessary for the dispatch of the newsletter.

In the above regard, the data will be stored until the withdrawal of the granted consent to receive the newsletter, extended by the time of the execution of the submitted request in the above regard, up to a maximum of 30 days.

In any case, data processed for the purpose indicated in point. 2 will be kept until the expiration of the statute of limitations, but no longer than 7 years.

All personal data referred to above, to a limited extent, may also be processed for ANALYTICAL AND STATISTICAL purposes on the basis of Article 6(1)(f) RODO, i.e. for the legitimate interests of the Co-Dministrators.

To the above extent, the data will be stored until the data subject submits a reasoned objection to such processing, extended by the time the submitted request in the above extent is fulfilled, up to a maximum of 30 days, but for no longer than 10 years.

Personal data provided as a result of USER’S USE of the Website of any of the Joint Administrators derived from so-called cookies may also be processed for analytical and statistical purposes on the basis of Article 6(1)(f) RODO, i.e. for the Joint Administrators’ legitimate interests. Read more about the cookies used here.

To the above extent, the data will be stored until the data subject submits a reasoned objection to such processing, extended by the time the submitted request in the above extent is fulfilled, up to a maximum of 30 days, but for no longer than 10 years.

Rights of data subjects

Anyone whose data is being processed is entitled under the RODO:

1. The right to access your data and receive a copy of it;
2. The right to rectify (correct) your data if it is incorrect or outdated;
3. The right to request deletion of data in cases specified by law;
4. The right to revoke the consent granted for data processing, whereby revocation of consent does not affect the lawfulness of personal data processing performed on the basis of consent before its revocation;
5. The right to request restriction of processing in cases specified by law;
6. The right to object to the processing of data processed based on the premise of the legitimate interest of the Administrators, which shall not affect the lawfulness of the processing until such objection is taken into account;
7. The right to lodge a complaint with the President of the Office for Personal Data Protection (to the address of the Office for Personal Data Protection, 2 Stawki Street, 00-193 Warsaw).

Profiling and automated processing

The Joint Administrators do not provide for profiling or automated decision-making based on the collected data.

Transfers of data outside the EEA

As a rule, your personal data will not be transferred to countries outside the European Economic Area (EEA).

An exception may be the transfer of data outside the EEA in case of cooperation with IT solution providers located outside the EEA. In this case, the personal data safeguards referred to in Articles 46-49 of the RODO, e.g. in the form of standard contractual clauses adopted by the European Commission, will be applied. And in the case of the transfer of data to the United Kingdom of Great Britain and Northern Ireland, the transfer is based on a decision dated June 28, 2021 issued by the European Commission and stating an adequate level of protection for personal data.

POSTANOWIENIA

RELEVANT TO WEBSITE USERS

Purposes, basis and duration of processing

Personal data provided via CONTACT FORMS (including those used to make inquiries) are processed on the basis of:

1. Article 6(1)(f) of the RODO, i.e. in the legitimate interest of the Joint Administrators, which is to be considered:
2. Processing of data for purposes related to the implementation of the submitted inquiry/notification and possible further contact;
3. processing of data in the event of a legal need to assert or defend against claims;
4. Article 6(1)(a) of the RODO, i.e. on the basis of expressed consent for the purposes of carrying out other marketing activities or sending commercial offers (information).

Provision of data is voluntary, however, it is necessary in order to respond to the message sent or to carry out the agreed marketing/trade activities.

In the above scope, the data will be stored until the data subject submits a reasoned objection to such processing or revokes the granted consent, extended by the time of processing of the submitted request in the above scope, up to a maximum of 30 days.

In the case of contact forms that are not related to consent to carry out other marketing activities or send commercial offers, the contact data will be processed until the submitted inquiry is answered, and after the end of contact for a maximum of 2 years.

In any case, data processed for the purpose indicated in point. 1(b) will be kept until the expiration of the statute of limitations, but no longer than 7 years.

Personal data provided for the purpose of subscribing to the NEWSLETTER are processed on the basis of:

1. Article 6(1)(a) of the RODO, i.e. on the basis of expressed consent for purposes related to the implementation of this marketing activity;
2. Article 6(1)(f) of the RODO, i.e. in the legitimate interests of the Joint Administrators, which is to be considered the processing of data in the event of a legal need to assert or defend against claims.

Provision of data is voluntary, however, it is necessary for the dispatch of the newsletter.

In the above regard, the data will be stored until the withdrawal of the granted consent to receive the newsletter, extended by the time of the execution of the submitted request in the above regard, up to a maximum of 30 days.

In any case, data processed for the purpose indicated in point. 2 will be kept until the expiration of the statute of limitations, but no longer than 7 years.

All personal data referred to above, to a limited extent, may also be processed for ANALYTICAL AND STATISTICAL purposes on the basis of Article 6(1)(f) RODO, i.e. for the legitimate interests of the Joint Administrators.

To the above extent, the data will be stored until the data subject submits a reasoned objection to such processing, extended by the time the submitted request in the above extent is fulfilled, up to a maximum of 30 days, but for no longer than 10 years.

Personal data provided as a result of USER’S USE of the Website of any of the Joint Administrators derived from so-called cookies may also be processed for analytical and statistical purposes on the basis of Article 6(1)(f) RODO, i.e. for the Joint Administrators’ legitimate interests. Read more about the cookies used here.

To the above extent, the data will be stored until the data subject submits a reasoned objection to such processing, extended by the time the submitted request in the above extent is fulfilled, up to a maximum of 30 days, but for no longer than 10 years.

Recipients of data

Processed personal data may be provided to: authorized government offices and authorities and other entities based on a legitimate request; to processors who provide services to the Joint Controllers, such as service providers: IT, marketing, analytics, legal; as well as clients to whom the relevant Controller provides a service related to an inquiry made by a data subject.

PROVISIONS RELEVANT TO JOB APPLICANTS

Purposes, basis and duration of processing

Personal data of EMPLOYEE CANDIDATES is processed on the basis of:

1. Article 6(1)(c) of the RODO in order to carry out the recruitment process, based on the employer’s entitlement under Article 22¹ § 1 of the Labor Code;

2. Article 6(1)(a) or Article 9(2)(a) of the RODO in order to carry out the recruitment process, on the basis of consent to the processing of personal data in the scope of data provided voluntarily (other than those resulting from Article 22¹ § 1 of the Labor Code) and possibly for future recruitment with your participation;

3. Article 6(1)(f) of the RODO, i.e. in the legitimate interest of the Joint Administrators, which is to be considered:

   a) processing of data obtained in the course of the recruitment process in connection with the verification of your skills and abilities needed to work in the position specified in the advertisement,
   b) processing of data in the event of a legal need to assert claims or defend against claims.

Data processed for the purposes indicated in points. 1, 2 and 3(a) will be kept for the time necessary for recruitment, but no longer than for 1 year. When consent has been given to participate in future recruitments conducted by the Joint Administrators, the data will be processed for the time for which consent was given, but no longer than for 3 years.

Data processed for the purpose indicated in point. 3(b) will be kept until the expiration of the statute of limitations, but no longer than 7 years.

The personal data of CANDIDATES TO RECRUITERS is processed on the basis of:

1. Article 6(1)(b) of the RODO in order to carry out the recruitment process, to the extent that the acquisition of the data is necessary for the conclusion of the assignment contract;

2. Article 6(1)(a) or Article 9(2)(a) of the RODO in order to carry out the recruitment process, possibly also future recruitments, based on the candidate’s consent to the extent of the data provided voluntarily (other than those resulting from point 1 above);

3. Article 6(1)(f) RODO, i.e. in the legitimate interests of the Joint Administrators, which are:
   a) processing of data obtained in the course of the recruitment process in connection with verification of your skills and abilities needed to work in the position specified in the advertisement,
   b) processing of data in the event of a legal need to assert or defend against claims.

Data processed for the purposes indicated in points. 1, 2 and 3(a) will be kept for the time necessary for recruitment, but no longer than for 1 year. When consent has been given to participate in future recruitments conducted by the Joint Administrators, the data will be processed for the time for which consent was given, but no longer than for 3 years.

Data processed for the purpose indicated in point. 3(b) will be kept until the expiration of the statute of limitations, but no longer than 7 years.

Recipients of data

Processed personal data may be transferred to: authorized government offices and authorities and other entities based on a legitimate request; to processors who provide services to the Joint Controllers, such as service providers: IT, marketing, legal; and clients to whom the relevant Controller provides a service related to the employment of the data subject.