Information on the processing of personal data
In accordance with Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), referred to below as the "GDPR", we inform you that:
1. Data controller
The controller of your personal data is Quality Island Sp. z o.o., with its registered office in Warsaw at ul. Grzybowska 87, 00-844 Warsaw, Poland, entered in the Register of Entrepreneurs of the National Court Register, holding Tax ID (NIP): 5273002880, REGON: 522066058.
2. Contact details of the Controller
Address: ul. Grzybowska 87, 00-844 Warsaw, Poland
Email: kontakt@qualityisland.pl
Phone: +48 531 119 616
3. Data Protection Officer
The Controller has not appointed a Data Protection Officer. For matters relating to the processing of personal data, please contact the Controller directly.
4. Purposes of processing and legal bases
Your personal data will be processed for the following purposes and on the following legal bases:
Performance of an agreement, or steps taken at the data subject’s request before entering into an agreement (Article 6(1)(b) GDPR) – registration, operating and maintaining an account on the platform.
Consent (Article 6(1)(a) GDPR) – presenting a specialist profile on the platform, disclosing a specialist’s contact details to a company after the specialist has accepted that company’s enquiry and the Controller has approved it, and sending commercial information, the newsletter and notifications about new job offers.
Legitimate interest of the controller (Article 6(1)(f) GDPR) – analytics, pursuing claims, ensuring security.
Compliance with a legal obligation (Article 6(1)(c) GDPR) – tax and accounting rules.
5. Recipients of the data
The recipients of the data may be:
employers and recruitment agencies using the platform
providers of IT, hosting and maintenance services
providers of accounting, legal and administrative services
payment service operators
public authorities entitled to the data under the law
6. Transfers of data to third countries
Personal data will not be transferred outside the European Economic Area, except where this is necessary in connection with hosting or IT services and subject to appropriate safeguards in accordance with the GDPR.
7. Retention period
Personal data will be stored for the period:
enquiry data: for the time it takes to handle the matter and then for up to 3 years from the end of the contact
contractual data: for the term of the agreement and the limitation period for claims
accounting data: for 5 years, in accordance with tax and accounting law
until the claims become time-barred
candidate and specialist data: for the duration of the process and, for the purposes of future recruitment, for up to 24 months from the last contact
technical logs: for up to 12 months
data processed on the basis of consent: until that consent is withdrawn
After that period the data will be permanently deleted or anonymised.
8. Rights of data subjects
You have the right to:
access to data – confirmation of processing and access to the data
rectification of data – correction of inaccurate or incomplete data
erasure of data – the "right to be forgotten"
restriction of processing – suspension of operations on the data
data portability – receiving the data in a structured format
objection – to processing for marketing purposes
withdrawal of consent – at any time, without affecting earlier processing
9. Right to lodge a complaint
You have the right to lodge a complaint with the supervisory authority:
President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych)
ul. Stawki 2, 00-193 Warsaw, Poland
Email: kancelaria@uodo.gov.pl
Phone: +48 22 860 70 86
10. Voluntary nature of providing data
Providing personal data is voluntary, but it is necessary in order to register and to use the services of the platform.
11. Automated decision-making
Personal data will not be subject to decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you. The Controller uses tools that support the filtering of profiles and their matching to projects, but final decisions, including the decision to disclose contact details, are taken by a human.
12. Source and categories of data
Where personal data has not been obtained directly from you, we inform you of its source and of the categories of data that we process:
source: the data subject, a client, a partner, a contractor, a referrer or another third party, publicly available sources including public professional profiles, and data collected automatically while the platform is being used
categories of data: identification and contact data, data on professional experience, role, technologies, certificates and availability, data concerning an enquiry or a project, communication data, and technical and usage data
A full list of the categories of data is set out in section 5, and a list of sources in section 9, of the QA Board Privacy Policy.
13. Contact for data protection matters
Quality Island Sp. z o.o.
ul. Grzybowska 87, 00-844 Warsaw, Poland
Email: kontakt@qualityisland.pl
Phone: +48 531 119 616
This notice is published in Polish and in an English translation. The binding version is the Polish one. In the event of any discrepancy between the language versions, the Polish wording prevails.