Who is responsible for processing your personal data?
The administrator of your personal data is: The Stepstone Group Polska sp. z o.o. with its registered office in Warsaw, ul. Domaniewska 50, registered in the Register of Entrepreneurs of the National Court Register kept by the District Court for the m. st. Warsaw, XIII Economic Department of the National Court Register under the KRS number 0000287556, with the share capital of PLN 250,000.00, NIP: 5272547620, REGON: 141024103 (“Administrator”).
Contact details for information regarding the processing of your personal data.
You can contact us on all matters related to the processing of your personal data and the exercise of your rights related to the processing of personal data, at: e-mail: IODO@stepstone.com or address: ul. Domaniewska 50, 02-672 Warsaw, marked “IODO”.
Purposes and legal grounds for processing personal data and the duration of storage
Your personal data is processed in connection with your application for job opportunities and your desire to contact us.
- If you give your consent to the processing of personal data, Art. 6 paragraph. 1(a) RODO. The data subject has the right to withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.
- When processing your personal data necessary for the performance of a contract to which you, as the data subject, are a party, Art. 6 paragraph. 1(b) RODO. This also applies to processing operations necessary at the request of the data subject prior to entering into a contract.
- If the processing of personal data is necessary for the fulfillment of a legal obligation owed to us as the Controller, Art. 6 paragraph. 1(c) RODO.
- If the processing of your personal data is necessary for the purposes of legitimate interests pursued by the Controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject that require protection of personal data – Art. 6 paragraph. 1(f) RODO.
The data subject’s personal data is kept as long as the purpose lasts. Providing personal data is voluntary, failure to do so may result in the inability to process your data in recruitment processes.
What categories of personal data we process
We process the data necessary to apply for our job openings or to contact us. This data may include: Your name, surname, contact information, work experience and education.
I. Processing of personal data as part of the general use of our platform and as part of the services we provide General access to our Platform
When you access our Platform, we automatically collect your data and information from the calling device and store this data and information in server log files. We collect (1) the types and versions of browsers used, (2) information about the operating system used, (3) the addresses of the websites from which our pages were accessed (referrer), (4) the addresses of the sub-pages visited on our site, (5) the dates and times our pages/sub-pages were accessed, (6) IP (Internet Protocol) addresses, (7) information about the Internet service provider, and (8) other similar information to ensure security in case of attacks on our information systems. For security reasons and to analyze possible attacks on our platform, we store this data including the IP address for a period of 14 days, and then we anonymize the IP addresses or delete the data. The IP address is needed during the connection to transfer the content of our platform to your end devices.
Contact form, application form and contact via email
As part of our Platform, we provide contact and application forms to contact us. By clicking the “Submit/Apply” button, you agree to send us the data entered within the form. Personal information provided to us voluntarily is used to process your request and to contact you. In addition, we also provide you with an email address to contact us. In this case, your personal data, sent with the email and our response, will be stored. Personal information is used to process your inquiry and to contact you if necessary. Data for the above purpose will be processed until contact with you is completed. Contact will be terminated if it can be concluded from all the surrounding circumstances that all issues have been clarified in a manner that is clear to neither party. We may process some of your data longer if we have a legitimate interest in possibly handling complaints and claims related to our services.
Hosting, Platform security, administrative services, troubleshooting and support
In order to provide the best possible service to our Users, we use entities that are our processors to whom we entrust your personal data. These entities are subject to our instructions as to the purposes and means of processing. We only use such processing entities that provide sufficient guarantees to implement appropriate technical and organizational measures to ensure that the processing of your personal data meets the requirements of the RODO and that your rights are adequately protected. Data is entrusted on the basis of contracts concluded in accordance with Art. 28 RODO.
Hosting
We use contractors to host our platforms and maintain backups. Our processors are: Amazon Web Services, Inc., 410 Terry Drive Ave. North, WA 98109-5210 Seattle, USA (data processed in the EU only), StepStone GmbH, Axel-Springer-Str. 65, 10969 Berlin, Germany, StepStone Continental Europe GmbH, Völklinger Straße 1, 40219 Düsseldorf, Germany and StepStone NV, Koningsstraat 47 Rue Royale, 1000 Brussels Belgium. Your data will be processed by these entities for as long as the data is stored on our Platforms based on the purposes set forth in this Privacy Policy.
II. cookies and similar technologies
For details, see Cookie Policy (Appendix 1)
We also use cookies or other technologies provided to us by third-party providers in various areas. For websites, you can make the appropriate setting in your browser, and for our mobile apps, you can make the appropriate setting using the slider for anonymous statistics in “Settings.”
Adobe Analytics:
On our website, we use the web analytics tool Adobe Analytics to monitor user activity on our websites. Adobe Analytics uses cookies that are stored on your computer. Based on them, among other things. create user profiles. Information about visits and activity on the site is generally saved to Adobe servers in the US. You can change the cookie settings yourself in the settings of your web browser and thus stop the operation of Adobe Analytics. Disabling the recording and storage of cookies on your hard drive, or deleting those already stored, may result in reduced functionality on our website.
Tealium
Tealium iQ is a tool that allows us to implement other marketing technologies and analytics. With Tealium iQ, we are able to transfer data to other tools, such as Adobe Analytics. The IP address provided by your browser is also not linked to your user profile. To create user profiles, Tealium uses cookies or, in the case of mobile apps, similar technologies. You can prevent cookies from being set by adjusting your browser settings accordingly. However, please note that this may prevent you from taking full advantage of all the features of this website. You can object to the collection and storage of your data for web analytics purposes by following the relevant instructions at http://tealium.com/de/privacy/.
III. To whom we share your personal information
We share your data with our service providers. These may be our Processors, as detailed above, for the relevant processing purposes (e.g., hosting and cookies). In this case, the service providers to whom we provide your personal data are subject to our instructions as to the purposes and means of processing such data. In addition, we may transfer data to suppliers who will determine the purposes and uses of your personal data themselves – Administrators, which we will inform you about in the manner prescribed by law.
Entities that process personal data on our behalf:
– StepStone GmbH, Axel-Springer-Str.65, 10969, Application processing system administrator
– eArcu Ltd, Mardall House, 9-11 Vaughan Road, Harpenden, Hertfordshire, AL5 4HU, application processing system provider
IV. How long we keep your data
Your data will be stored until a decision is made on your application. If your application does not result in a contract with us, we may store your data for possible legal protection.
Your documents and application will be deleted after a period of 12 months from the decision to reject your application.
V. Your Rights:
Under the RODO, you have the following rights in connection with the processing of your personal data:
Right of access to personal data
The data subject is entitled to obtain confirmation as to whether or not personal data relating to him or her is being processed, and if this is the case, he or she is entitled to access it and the following information:
a. processing purposes;
b. categories of relevant personal data;
c. information about the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations;
d. as far as possible, the planned period of storage of personal data, and when this is not possible, the criteria for determining this period;
e. Information on the right to request from the controller the rectification, erasure or restriction of the processing of personal data concerning the data subject, and to object to such processing; information on the right to lodge a complaint with the supervisory authority;
f. if the personal data was not collected from the data subject – any available information about its source;
g. information about automated decision-making, including profiling, – relevant information about the principles of decision-making, as well as the significance and anticipated consequences of such processing for the data subject.
If your personal data is transferred to a third country or international organization, you have the right to be informed of the appropriate safeguards referred to in Art. 46 RODO, related to the transfer.
You have the right to receive a copy of the personal data subject to processing. For any subsequent copies requested by the data subject, the Administrator may charge a reasonable fee based on administrative costs. If the data subject requests a copy electronically, and unless he or she indicates otherwise, the information shall be provided in a commonly used electronic form.
The right to obtain a copy must not adversely affect the rights and freedoms of others.
Right to rectify personal data
You have the right to rectify personal data concerning you that is inaccurate. Taking into account the purposes of the processing, the data subject has the right to request the completion of incomplete personal data, including by providing an additional statement.
The right to restrict the processing of personal data
You have the right to request a restriction of processing in the following cases:
1. you question the accuracy of your personal data – for a period that allows the controller to verify the accuracy of the data;
2. the processing is unlawful and the data subject objects to the erasure of the personal data, requesting instead the restriction of its use;
3. the controller no longer needs the personal data for the purposes of the processing, but they are needed by the data subject to establish, assert or defend claims;
4. you file an objection under Art. 21 para. 1 RODO against processing – until it is determined whether the legitimate grounds on the part of the Administrator override your grounds for objection.
If processing has been restricted, such personal data may be processed, with the exception of storage, only with the consent of the data subject, or to establish, assert or defend claims, or to protect the rights of another natural or legal person, or for compelling reasons of public interest of the Union or a Member State.
Before lifting the restriction on processing, you will be informed by the Administrator.
The right to request deletion of personal data
You have the right to request the Administrator to immediately delete personal data concerning you, and the Administrator is obliged to delete personal data without undue delay if one of the following circumstances applies:
a. personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
b. you have withdrawn the consent on which the processing is based in accordance with Art. 6 paragraph. 1(a) or Art. 9 paragraph. 2(a) of the RODO, and there is no other legal basis for processing;
c. you file an objection under Art. 21 para. 1 RODO against the processing and there are no overriding legitimate grounds for the processing, or you raise an objection under Art. 21 para. 2 RODO against processing;
d. personal data were processed illegally;
e. personal data must be deleted in order to comply with a legal obligation under Union or Member State law to which the Administrator is subject;
f. personal data was collected in connection with the offering of information society services referred to in Art. 8 paragraph. 1RODO.
If personal data has been made public and the Administrator pursuant to the above is to delete such personal data, it shall, taking into account the available technology and the cost of implementation, take reasonable measures, including technical measures, to inform the controllers processing such personal data that the data subject requests that such controllers delete any links to such data, copies of such personal data or replications thereof.
Exceptions:
The administrator is not obliged to delete personal data to the extent that processing is necessary:
To exercise the right to freedom of expression and information;
to comply with a legal obligation requiring processing under Union law or the law of a Member State to which the Administrator is subject, or to perform a task carried out in the public interest or in the exercise of public authority vested in the Administrator;
for reasons of public interest in the field of public health in accordance with Art. 9 paragraph. 2(h) and (i), and Art. 9 paragraph. 3 RODO;
for archival purposes in the public interest, for scientific or historical research, or for statistical purposes in accordance with Art. 89 par. 1 RODO, insofar as the right to erasure is likely to prevent or seriously impede the purposes of such processing;
to establish, assert or defend claims
Right to portability of personal data
You have the right to receive, in a structured, commonly used machine-readable format, personal data concerning you that you have provided to the Administrator, and you have the right to send such personal data to another Administrator without hindrance from the Administrator to whom the personal data was provided, if:
processing is based on consent pursuant to Art. 6 paragraph. 1(a) or Art. 9 paragraph. 2(a) of the RODO or on the basis of a contract pursuant to Art. 6 paragraph. 1(b) of the RODO and
processing is carried out by automated means.
When exercising your right to data portability, you have the right to request that your personal data be sent directly to another controller, if technically possible.
The right to data portability does not apply to processing that is necessary for the performance of a task carried out in the public interest or in the exercise of public authority entrusted to the controller, and may not adversely affect the rights and freedoms of others.
Right to object
You have the right at any time to object – on grounds related to your particular situation – to the processing of personal data concerning you, based on Art. 6 paragraph. 1(e) or (f) of the RODO, including profiling under these provisions. The controller is no longer allowed to process this personal data unless it demonstrates that there are valid legitimate grounds for processing that override your interests, rights and freedoms, or grounds for establishing, asserting or defending claims.
If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing, including profiling, to the extent that the processing is related to such direct marketing.
If you object to processing for direct marketing purposes, your personal data may no longer be processed for such purposes.
In connection with the use of information society services and without prejudice to the RODO, you have the right to object through automated means using technical specifications.
If personal data is processed for scientific or historical research or statistical purposes under Art. 89 par. 1 RODO.
You have the right to object – on grounds related to your particular situation – to the processing of personal data, unless the processing is necessary for the performance of a task carried out in the public interest.
Right to withdraw consent
You have the right to revoke the consent you have given if the processing is based on the consent you have given, i.e. based on art. 6 paragraph. 1(a) or Art. 9 paragraph. 2(a) of the DPA – at any time without affecting the legality of the processing carried out on the basis of consent before its revocation.
The right to file a complaint with the supervisory authority
You have the right to lodge a complaint with the data protection supervisory authority if you believe that the processing of personal data concerning you is in violation of the RODO. The supervisory authority for the protection of personal data in Poland is the President of the Office for Personal Data Protection,
VI. Change in Privacy Policy
We reserve the right to change this privacy policy in accordance with the law of which you will be informed.
Appendix 1 to the Privacy Policy:
Cookie policy
What are cookies?
Cookies are IT data saved in files and stored on your terminal device, which your browser sends to the server each time you connect to the Platform from a given terminal device – while you visit various pages on the Internet (i.e. your computer, tablet, smartphone, etc.).
Cookies usually contain the name of the website from which they originate, their duration of existence, a generated unique number used to identify the browser from which the connection to the website is made, and other data needed. In this Policy, information regarding cookies also applies to other similar technologies used on our site.
For what purpose may we use cookies or other similar technologies?
StepstoneServices.co.uk uses cookies or other similar technologies for the following purpose:
to make the site run faster and easier to use,
to collect aggregate statistics that allow us to understand how people use our site (including: our services, our applications) and help us improve their functionality and content.
On our site can be used:
Session cookies – remain on your device only when you use our website;
Permanent cookies – remain on your device as long as they have a set existence time or until you delete them.
Based on the Internet domain from which the cookies originate, we divide them into: our own – set by the web servers of our site and third parties – set by the web servers of other sites than ours.
Do we use cookies or similar third-party technologies?
Yes, by using our site you may receive cookies from our Trusted Partners. We also use third-party analytics software (e.g., Adobe Analytics) that places codes on your end device to collect data about you.
How do I change the settings on the dot. cookies or delete them?
Most web browsers are set to automatically accept cookies. However, you can change your browser settings so that cookies are blocked – in whole or in some part, such as only from third parties, or to receive a message every time cookies are sent to your device. Please note, however, that if you block the cookies we use, it may adversely affect the convenience of our Platform, for example, you may not receive personalized information when you view them. You will also prevent us from collecting information on. use of our sites to continuously improve the content of the Sites and services.
Additional assistance.
For details on how to delete cookies, please refer to your browser settings. Remember that changing the settings of cookies and similar technologies may affect the way our website works.
More information.
You can also find more information about cookies and similar technologies at wszystkoociasteczkach.pl, youronlinechoices.com.