Information for Applicants

In accordance with Article 13 GDPR

Compliance with data protection regulations is a high priority for our organization. Below you will find information on how we collect and process your personal data.

Data Controller

The company to which you have submitted your job application is responsible for collecting and processing your personal data.

OIIS, Poland, TAXID: PL7471898145

Data We Process

As part of the recruitment process, we process the data necessary to evaluate your application. This may include:

• Contact details
• CV and application documents
• Certificates and qualifications
• Answers provided during the recruitment process

The legal basis for this processing is Article 6(1)(b) GDPR.

If you voluntarily provide additional data, it will be processed based on your consent in accordance with Article 6(1)(a) GDPR.

Obligation to Provide Data

Providing personal data as part of the recruitment process is voluntary. However, providing certain data (such as your name, contact details, and qualifications) is necessary for us to evaluate your application. If you do not provide the required data, we may be unable to consider your application.

Recipients of Your Data

Your data may be shared with the following categories of recipients, solely for the purposes of the recruitment process:

• IT service providers (e.g. hosting, email, and recruitment software)
• Document storage and destruction service providers
• External consultants or advisors involved in the recruitment process

All service providers are contractually bound to comply with data protection regulations (Art. 28 GDPR).

Transfer of Data to Third Countries

Your personal data will generally be processed within the European Economic Area (EEA). If, in exceptional cases, data is transferred to a country outside the EEA, we will ensure that an adequate level of data protection is guaranteed — for example, through Standard Contractual Clauses (Art. 46(2)(c) GDPR) or an adequacy decision by the European Commission (Art. 45 GDPR).

Data Retention and Deletion

If no statutory retention period applies, your data will be deleted once it is no longer required or when there is no longer a legitimate interest in retaining it.

If your application is unsuccessful, your data will generally be deleted no later than 24 months after the recruitment process ends.

In certain cases, some data may be retained longer (e.g. for travel expense reimbursement), depending on legal obligations (e.g. tax or commercial law requirements).

If we remain interested in your application, we may ask for your consent to retain your data for future recruitment processes.

Automated Decision-Making

We do not use automated decision-making, including profiling, as part of the recruitment process (Art. 22 GDPR).

Confidentiality of Your Data

OIIS operates a central HR function responsible for personnel matters.

For organizational purposes, correspondence during the recruitment process is conducted on behalf of:
OIIS, Poland, TAXID: PL7471898145

Your data will be treated confidentially and will not be shared with third parties beyond the recipients described above.

Your Rights

You have the following rights under GDPR:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing (Art. 21 GDPR)

If processing is based on your consent, you may withdraw it at any time with effect for the future.

You also have the right to lodge a complaint with a supervisory authority. The competent supervisory authority in Poland is:

Prezes Urzędu Ochrony Danych Osobowych (PUODO)
ul. Stawki 2, 00-193 Warszawa
Website: uodo.gov.pl

Data Protection Officer

You may contact our Data Protection Officer at any time. All inquiries will be treated confidentially.

📧 Email: data@oiis.io