If you are a Website user, we collect information obtained from you in connection with your activity on the website www.pichetsearch.com. These may include, in particular, information such as the IP address and information contained in cookies.

If you are a Candidate to work, we collect information obtained about you during or in connection with the recruitment processes carried out by the Controller for third parties. These may be, in particular, personal data contained in the application documents you sent or provided by you during telephone conversations, e-mail correspondence and meetings, personal data provided during correspondence via social media (e.g. LinkedIn, Facebook) or job search engine and job portals or personal data provided about you by the third parties as a part of recommendation or professional networking.

If you are a Potential client, we collect information obtained from you during telephone conversations, e-mail correspondence and meetings. These are, in particular: name and surname, company name, contact details, information about the need for the services of the Company and other data - if you facultatively decide to transfer them to us. Your data may also come from publicly available sources.

If you are a Client, we collect information obtained from you in connection with the conclusion and execution of the contract concluded with us. These are, in particular: name and surname, name and address of the company, correspondence address, NIP number, REGON number, bank account number, e-mail address, telephone number, information regarding the contract concluded with us. Your data may also come from publicly available sources.

If you are a Client’s Representative or Representative of potential client, we collect information provided to us by you or by the company you represent for the purpose of concluding and executing the contract with the Company. These are, in particular: name and surname, position, name of the company you represent, correspondence address, contact details.

If you are a Service provider, we collect information provided to us by you in sent documents, during telephone conversations, e-mail correspondence and meetings. These are, in particular, information necessary for the conclusion and execution of the contract, including: name, surname, name and address of the company, correspondence address, NIP number, REGON number, bank account number, e-mail address, telephone number, information about the contract between us. Your data may also come from publicly available sources.

If you are a Representative of service provider, we collect information provided to us by you or by the service provider you represent for the purpose of concluding and executing the contract with the service provider. These are in particular: name and surname, position, name of the service provider you represent, correspondence address, contact details.

If you are a Website User, we process your personal data on the basis of the legitimate interests pursued by the Controller, such as the administration (management) of the website www.pichetsearch.com (Article 6.1(f) of the GDPR).

If you are a Candidate to work, we process your personal data:

• on the basis of your consent, in order to take part in the future recruitment processes conducted by the Controller for third parties and to provide them with your application (Article 6.1(a) of the GDPR, Article 9.2(a) of the GDPR);

on the basis of the legitimate interests pursued by the Controller, such as establishing or pursuing possible claims or defending against such claims (Article 6.1(f) of the GDPR).

If you are a Potential client, we process your personal data:

• on the basis of the legitimate interests pursued by the Controller, such as presenting an offer at your request, ongoing contact in connection with the offer, maintaining relations, establishing or pursuing possible claims or defending against such claims (Article 6.1(f) of the GDPR);
• in order to take actions at your request, necessary before concluding a contract with the Controller (Article 6.1(b) of the GDPR).

If you are a Client, we process your personal data:

• in order to conclude and perform the contract with you (Article 6.1(b) of the GDPR);
• in order to comply with legal obligations imposed on the Controller resulting from legal provisions (Article 6.1(c) of the GDPR);
• on the basis of the legitimate interests pursued by the Controller, such as maintaining business relationships, ongoing contact, marketing activities, establishing or pursuing possible claims or defending against such claims (Article 6.1(f) of the GDPR).

If you are a Client’s Representative or Representative of potential client, we process your personal data on the basis of the legitimate interests pursued by the Controller, such as taking necessary actions before concluding the contract with the client, concluding and executing the contract, maintaining business relationships and ongoing contact, conducting marketing activities, establishing or pursuing possible claims or defending against such claims (Article 6.1(f) of the GDPR).

If you are a Service provider, we process your personal data:

• in order to conclude and perform the contract with you (Article 6.1(b) of the GDPR);
• in order to comply with legal obligations imposed on the Controller resulting from legal provisions (Article 6.1(c) of the GDPR);
• on the basis of the legitimate interests pursued by the Controller, such as maintaining business relationships, ongoing contact, establishing or pursuing possible claims or defending against such claims (Article 6.1(f) of the GDPR).

If you are a Representative of service provider, we process your personal data on the basis of the legitimate interests pursued by the Controller, such as concluding and executing the contract concluded with the service provider you represent, maintaining business relationships and ongoing contact, establishing or pursuing possible claims or defending against such claims (Article 6.1(f) of the GDPR).

When it is necessary to achieve the purposes in which we process your data, we can provide it to:

• entities authorized to receive data on the basis of legal regulations;
• entities that process your personal data on our behalf (for example entities providing consultancy, IT and other services);
• entities for which the Controller conducts recruitment processes in order to enable you to participate in these processes and be employed by the above-mentioned entity.

Whenever we disclose your personal data, we will ensure that only the minimum information necessary to achieve the purpose of data processing is transferred.

Your personal data will not be transferred outside the European Economic Area (EEA). Otherwise, we will ensure that cooperation with such entities will be based on an appropriate legal basis and that they ensure appropriate standards of protection.

If you are a Website user, we will store your personal data for the period of their usefulness, but no longer than it is useful for the purpose for which the data was collected, i.e. administration (management) of the website www.pichetsearch.com.

If you are a Candidate to work, we will store your personal data for as long as it is necessary to achieve the purpose for which the data was provided to us, but no longer than until you withdraw your consent to the processing of personal data for this purpose. In justified cases, we will store your personal data for as long as it is necessary to pursue our legitimate interests.

If you are a Potential client or a Representative of potential client, we will store your personal data for as long as it is necessary to achieve the purpose for which the data was provided to us, but no longer than until you object to the processing of personal data for this purpose. In the event of failure to conclude a contract with the Controller, your personal data will be immediately deleted. 

If you are a Client, a Service provider or a Representative of one of these entities, your personal data will be processed for the duration of the contract concluded with you or the entity you represent. After this period, we will keep your data to the necessary extent for a period of time resulting from legal requirements (e.g. the obligation to keep financial documentation for 5 years). In justified cases, we will store your personal data for as long as it is necessary to pursue our legitimate interests.

You can exercise your data subject rights by sending us the following requests:

• if we process your personal data based on your consent, you can withdraw your consent at any time; the withdrawal of consent does not affect the lawfulness of the processing we have made on its basis until its withdrawal;
• you can request access to your personal data and obtain a copy thereof;
• you can exercise your right to data portability;
• you can request rectifying or completing your personal data if it is incorrect or incomplete;
• in connection with your special situation, you may object to the processing of your personal data if we process it by invoking our legitimate interest;
• in cases specified by law – for example if your data is out of date, unnecessary, unlawfully processed, and if you withdrew your consent to processing them (if consent was the basis for such processing) or successfully filed an objection to the processing of your personal data – you can request erasure of your personal data;
• you can also request a restriction of data processing.

In order to exercise the above rights, please contact us by mail or e-mail address indicated in point 2 of the Policy.

In any case you believe that the processing of your personal data violates the provisions of GDPR, you also have the right to lodge a complaint to the data protection supervisory authority in your country of residence.

Your personal data will not be profiled.

Providing your personal data is voluntary in every case but remember that failing to provide them will prevent us from achieving the purposes for which the data are collected, for example:

• it will prevent you from taking part in recruitment processes conducted by the Controller for third parties;
• it will prevent or significantly hinder contact with you or presenting you with the offer you have asked for;
• it will prevent the conclusion or implementation of the contract concluded with you.

If you are a Candidate to work, Client’s Representative, a Representative of potential client or a Representative of service provider and you have not provided us with your personal data, it probably comes from the entity you represent or from the entity to which you have given consent to transfer it to the Controller. Your personal data may also come from public sources.

The Controller takes steps to ensure that your personal data is processed in a safe manner and in accordance with the requirements of the GDPR. The Controller has ensured, for example, that only persons authorized to do so, and only to the extent necessary due to the tasks performed by them, have access to personal data. In addition, the Controller takes all necessary steps to ensure that its subcontractors and other entities processing data on its behalf provide an appropriate guarantee of data security.

The Policy is constantly reviewed and updated as necessary. The current version of the Policy has been adopted and is effective from October 21, 2020.