PRIVACY POLICY

I. YOUR DATA CONTROLLER AND DATA PROCESSOR

Your data controller and data processor is Yameo Sp. z o. o., based in Gdańsk,  Piastowska 11, 80-332 Gdańsk, Poland (hereinafter referred to as „Yameo”).

To exercise your rights, give or withdraw consent, and talk about all security aspects of your Personal Data, contact us via email: contact@yameo.eu, or send us a letter to the above address.

 

II. PERSONAL DATA SOURCES

We process data that we receive directly from you, i.e. your personal details included in the email messages you send us or in the resume files you submit. In such cases you have full control over how much data you disclose to us. We may also process your data disclosed to us by a third party (e.g. a recruitment agency).

 

III. WHY, ON WHAT LEGAL BASIS AND HOW LONG WE PROCESS YOUR DATA

As a part of our business, we can process personal data for the following purposes:

• Handling correspondence

If you are contacting us via email or traditional mail, we may process your data based on a legitimate interest in replying to your query.

We process your data for a period of time necessary for handling correspondence, and we may continue processing it for the duration of the limitation period of possible claims.

Sharing your data is voluntary but it is necessary for making it possible for us to contact you and answer your query.

• Fostering and maintaining business relations

We may process your data as a part of our contractual obligations to you or in order to take action upon your demand before signing a contract with you.

Additionally, we may process your data to fulfill our legal obligation resulting from tax laws and financial reporting regulations.

Based on our legitimate interest, we may process your data to exercise or for defense of possible claims resulting from the contract we signed with you.

We process your data for a period of time necessary for performing the contract and for the limitation period of possible claims.

Sharing your data is voluntary but it is necessary for making it possible for you to sign a contract with us, and to perform the contract.

• Recruitment

We may process your personal data referred to in Article 22 [1] of the Labor Code as a part of a current recruitment process. In that case the basis for data processing are the actions taken before the contract was signed. If you disclose more personal data, then the basis for its processing will be your consent.

Based on your consent, we may process your data for the purpose of future recruitments.

Your personal data will be processed for as long as the particular recruitment process lasts (including possible investigation or defense of claims), and in case you gave your consent to participate in future recruitment processes – for a period of 2 years or until you withdraw your consent.

Sharing your data is voluntary but to the extent resulting from the Article 22 [1] of the Labor Code it is necessary for making it possible for you to take part in the recruitment.

 

• Referral Program

We may process your personal data to allow you to participate in our Referral Program, based on our legitimate interest in promoting Yameo as an employer, and the necessity of meeting obligations resulting from the Referral Program Rules of Procedure.

In case we offer employment to a candidate referred by you, we may process your additional data in order to fulfill our legal obligations resulting from the tax law.

Your data will be processed until the recruitment process for the position you have referred a candidate for is finished, and if your referral has been successful – for the period allowed by the law but not longer than 24 months.

Sharing your data is voluntary but it is necessary for making it possible for you to participate in the Referral Program.

We wish to stress that Yameo will not make any automated decisions based on your personal data, including decisions resulting from the profiling.

 

IV. WHAT ARE YOUR DATA PROTECTION RIGHTS?

In accordance with general principles, you have the following data protection rights:

• The right to access,
• The right to rectification,
• The right to erasure,
• The right to restrict processing,
• The right to data portability,
• The right to object to processing (when the basis for processing is Yameo’s legitimate interest),
• The right to withdraw your consent (when the basis for processing is your consent),
• The right to lodge a complaint with a supervisory authority.

Exercise of the above rights depends on the conditions set out in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, hereinafter referred to as „GDPR”. In case your claim is rejected, you will receive a reasoned reply.

Please note that:

– the right to data erasure shall be granted only in cases listed in the GDPR regulations, i.e.:

• The data will no longer be necessary for the purposes for which they were collected by Yameo in the first place,
• You will withdraw your data processing consent,
• You will object to your data processing,
• Your data will be processed unlawfully,
• Your data should be erased in order to fulfill an obligation resulting from the law.

– the right to restrict data processing shall be granted only in cases listed in the GDPR regulations, i.e.:

• You’ll notice that you data is incorrect – you can request the restriction of its processing for the period necessary for us to verify it,
• Your data will be processed unlawfully but you will object to its erasure, asking instead for restricting its processing,
• Your data will no longer be necessary for us but you may need it to be able to defend or bring claims,
• You will object to your data processing – until we establish if our legitimate interests are overriding to the basis for your objection.

– the right to data portability shall be granted only in cases when the legal basis of the processing of personal data is a consent or the contract execution.

– Yameo may refuse to erase personal data if any of the conditions listed in the GDPR is met, e.g. if data processing is required for compliance with a legal obligation or for the establishment, exercise or defense of legal claims.

– In some cases we can refuse your objection to data processing based on Yameo’s legitimate interest, when there is a compelling legitimate basis for data processing that override the interests or the fundamental rights and freedoms of the data subject, or where there are grounds for the establishment, exercise or defense of legal claims. Yameo shall not be entitled to such a power if the data are processed for direct marketing.

 

V. RECIPIENTS OF PERSONAL DATA

Your personal data may be disclosed to third parties that process personal data for Yameo, e.g. IT service or accounting service providers – although they process data based on a contract with us and according to our instructions.

We may disclose your personal data to other recipients when it is necessary for the execution of a given purpose of processing, e.g. banks, postal operators, law offices.

Your personal data may also be disclosed to entities authorized in accordance to the provisions of law, including judicial authorities.

 

VI. AUTOMATIC DATA GATHERING

Whenever you visit our website, we send to your device one or more ‘cookies’, i.e. small text files that may be stored on your device so we can recognize you when you visit us again.

The information stored in cookies include basic information about users (e.g. IP number, type of browser, type of search engine, data and time of the visit), as well as data used for optimization and proper display of the contents of our website.

Our website may use the following cookie types:

Necessary cookies – necessary for proper functioning of our website. You can disable them by changing settings in your Internet browser, but it may affect the proper performance of the website.

Analytical cookies – used for analysis of your behavior on our website. They allow us to analyze traffic on our website and improve its efficiency.

We analyze data using Google Analytics – a tool provided by Google Inc. Your cookies, as described here: https://policies.google.com/privacy?hl=pl, are forwarded to and stored on Google Server in the USA. We use Google Analytics with the „anonymizeIp()” extension, which means that your IP address is processed after shortening, ensuring your anonymity and making it impossible to relate it to a specific person.

You can stop providing us with this data at any time by deleting cookies from your device. To do so you need to change your Internet browser settings. You can also enable cookies blocking for all or selected websites.

Additionally, we use social media plug-ins, such as Facebook and LinkedIn. Data collected in connection to the social media plug-ins can only be transferred between your Internet browser and the selected social media operator. We have no way of knowing what data is collected and transferred. Consequently, we encourage you to read the information on the data processing on the websites of the social media operators:

• Facebook Ireland Limited Company – you can access their privacy policy here: https://www.facebook.com/policy.php.
• LinkedIn Ireland Unlimited Company – you can access their privacy policy here: https://www.linkedin.com/legal/privacy-policy?_l=pl_PL

 

VII. TRANSFER OF PERSONAL DATA TO THIRD COUNTRIES

When automatically gathering data (point VI above), we use the services of data providers who transfer data under the EU-U.S. Privacy Shield outside the European Economic Area based on European Commission’s adequacy decision to perform such actions.

 

VIII. CHANGES TO OUR PRIVACY POLICY

We may change this Privacy Policy at any time, especially when there is a change in regulations, technology or the way our website works. You can always find the most up-to-date version of our Privacy Policy on our website.