This privacy policy sets out the principles and scope of the processing of your personal data as well as your rights and our obligations as Controller. With state-of-the-art technical and organisational measures, we seek to ensure a high level of protection for the personal data we process to safeguard it against unauthorised access.

According to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR), we would like to inform you that:

The controller of your personal data (Controller) is:

LPP Retail Sp. z o.o., based in Gdańsk, ul. Łąkowa 39/44, entered in the National Court Register, kept by the District Court Gdańsk-Północ in Gdańsk, 7th Commercial Division of the National Court Register (KRS), under KRS no. 0000188787, with its share capital amounting to PLN 50,000.00 (paid in full), carrying statistical no. (REGON) 192026714 and tax ID (NIP) 5832671977 (hereinafter: LPP Retail Sp. z o.o.)

Contact details of the Data Protection Officer (DPO), also in matters concerning personal data:

You can send all requests and other communication regarding personal data:
1. by e-mail: privacyretail@lpp.com
2. by letter: LPP Retail Sp. z o.o., Dział Personalny [Human Resources], ul. Łąkowa 39/44, 80-769 Gdańsk.

1. TO RECRUIT EMPLOYEES

Purposes and legal basis of the processing of personal data:

a) carrying out the recruitment process involving the scope of data provided for in the labour law (Article 22¹ of the Labour Code) and taking the necessary actions to conclude a contract with a successful candidate, as per Article 6(1)(b) GDPR;
b) carrying out the recruitment process based on your consent, including the processing of personal data other than required by the laws, as per Article 6(1)(a) GDPR (ordinary data) or as per Article 9(2)(a) GDPR (special category of personal data, e.g. data concerning health or disability);
c) carrying out analyses and aptitude tests to verify your skills and qualifications for selected jobs using dedicated tools, based on Article 6(1)(a);
d) participation in future recruitment based on consent, as per Article 6(1)(a) GDPR.

Mandatory data: You are required to provide the data under Article 22¹ to be able to take part in the recruitment process. The mandatory data include: given name and surname, birth date, contact details (e.g. phone, e-mail, social network details, such as LinkedIn), education, professional qualifications, employment history.

Optional data: Other personal data specified in the application documents and the application form are optional and may include:
a) other data not typically required by law e.g. photograph (candidate image), hobbies, additional skills;
b) special categories of data (as per Article 9 GDPR, e.g. concerning health or certified disability).

Source of data: We have received your data directly from you or from our employee who recommended you in the recruitment process as part of our employee referral programme, in particular the data contained in your CV (given name, surname, e-mail, phone).

Possible recipients of personal data are:
(a) LPP S.A. Group members, including SilkyCoders Sp. z o.o., DockIT Sp. z o.o., LPP S.A., LPP Logistics Sp. z o.o.,
(b) providers of legal services;
(c) providers of mail delivery services;
(d) providers of archiving and document destruction services;
(e) providers of repair and maintenance of equipment used by the Controller;
(f) providers of IT services for the Controller;
(g) organisations (portals) publishing information on an initiated recruitment process when you apply through a portal or a provider of recruitment management systems.

The Controller may entrust your personal data to service or product providers acting on its behalf under a data processing agreement, which requires such parties to act based on documented instructions as well as to keep the entrusted personal data confidential, private and secure.

Period of data processing: Your data will be processed until the recruitment process has ended, for up to 12 months from the date of your application or for the period specified in your optional consent to future recruitment, for up to one year after the end of the recruitment process. Your data for the purposes of future recruitment will be processed for 12 months from the date of consent.

You have the right to:
a) access and request a copy of your personal data;
b) request rectification of your personal data;
c) request restriction of processing of your personal data;
d) data portability;
e) withdraw your consent at any time, but the withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal;
f) data erasure if no other purpose of processing is pursued and there are no grounds to preclude this right, as per Article 17(3) GDPR;
g) object to the processing of your personal data within the scope of a legitimate interest pursued by the Controller;
h) lodge a complaint with the President of the Personal Data Protection Office (https://uodo.gov.pl).

To exercise the above rights, contact the Controller or the DPO in writing or by e-mail.