Your personal data will be processed for the following purposes:

1. to monitor the work of employees through the use of company computer equipment, to monitor company email accounts, to verify the legality of software used on company equipment, to monitor network transfers carried out using company computer equipment, and to monitor telephone calls at selected employer helpline stations – based on legal provisions (Article 6(1)(c) GDPR in connection with the provisions of the Labor Code);
2. to monitor the work of individuals engaged under agreements other than employment contracts through the use of company computer equipment, to monitor company email accounts, to verify the legality of software used on company equipment, to monitor network transfers carried out using company computer equipment, and to monitor telephone calls at selected employer helpline stations – based on the controller’s legitimate interest in detecting workplace irregularities, mitigating the risk of misuse, and ensuring IT security (Article 6(1)(f) GDPR).

Your personal data may be shared with entities processing data on behalf of the controller to support its day-to-day business operations (subcontractors, suppliers, including providers of external systems). Such entities act on the basis of a contract with the controller and only under the controller’s instructions.

Your personal data will not be transferred outside the EEA.

Your data will be retained for the duration of work performed under the agreement concluded with the controller. Your data may also be retained for the period necessary to pursue or defend against claims, should the need for such action arise after the occurrence of relevant circumstances.

In relation to the processing of your personal data, you have the right to:

1. access your personal data and request rectification;
2. request the erasure of your data, under the conditions provided in Article 17 GDPR;
3. request restriction of processing, under the conditions provided in Article 18 GDPR;
4. object to processing under the conditions set out in Article 21 GDPR.

If you believe that the processing of your personal data does not comply with applicable law, you have the right to lodge a complaint with the President of the Personal Data Protection Office.

Providing your personal data is mandatory under the internal regulations adopted by the controller.

We do not make any decisions that significantly affect you through automated means, including profiling.