Skip to content ↓

Job candidates and employees within projects

Information about personal data processing for job candidates and employees within projects

Job candidates within projects

Version 0.3.2
Release date 03.10.2022

Fulfilling the obligation to provide information pursuant to Article 13 (1) and (2) of the Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) [OJ EU L.2016.119.1 of May 4, 2016], hereinafter referred to as "GDPR", we inform you that:

  1. The Controller of your personal data is the AGH University of Science and Technology in Krakow, 30 A. Mickiewicza Avenue, 30-059 Krakow, hereinafter referred to as the AGH UST;
  2. The contact details of the Data Protection Officer are as follows: e-mail: iodo(at)agh.edu.pl, phone: 12 617 53 25;
  3. Your personal data will be processed by the Controller for the following purposes:
    a) Carrying out the recruitment procedure for a job position with the Controller;
    b) Documenting the procedures applicable to the Controller's implementation of the ........................... project (hereinafter: "Project") for the purposes of performing inspections and audits by authorised entities;
    c) Securing the data in case of possible claims;
  4. The legal basis for the processing of personal data derives from:
    a) Article 6(1)(c) of the GDPR – provisions of labour law (in particular, Article 221 § 1 of the Labour Code Act of 26.06.1974 [Journal of Laws of 2018, item 108, as amended]);
    b) Article 6(1)(c) of the GDPR in connection with the provisions of the Act of July 11, 2014 on the principles of implementation of programmes within the scope of cohesion policy financed by the 2014–2020 financial perspective – to the extent necessary for the documentation of the procedures in force in relation to the implementation of the Project for the purpose of performing inspections and audits by authorised entities;
    c) Article 6(1)(a) of the GDPR – your consent to the processing of additional information, including additional powers, qualifications, skills, professional achievements, references, image (photo), and for future recruitment purposes;
  5. The recipients of your personal data may be:
    a) Entities to which the Controller is obliged to provide data under applicable laws,
    b) Entities providing services to the Controller to the extent necessary for the purposes in connection with which your personal data are processed;
  6. Personal data processed for the purpose of documenting the procedures in force for the implementation of the Project may be transferred to entities authorised under the provisions of law and concluded agreements, in particular to control and audit the Project documentation,
  7. Your personal data may be transferred to state authorities, legal protection authorities (Police, Prosecutor's Office, Court), or local authorities in connection with legal proceedings;
  8. Your personal data shall be processed only for the time necessary to achieve the purposes of personal data processing, i.e. for the period resulting from the internal law of the AGH UST – Uniform Tangible File Inventory (JRWA), and until your possible withdrawal of consent for data processing in the recruitment process;
  9. You have the right to request from the Controller access to your data, as well as the right to rectify your data, the right to erase your data, the right to restrict the processing of your data, the right to object to the processing thereof in the cases and under the conditions specified in the GDPR;
  10. You have the right to submit a complaint with a supervisory authority – the President of the Office for Personal Data Protection pursuant to Article 77 of the GDPR (...every data subject shall have the right to lodge a complaint with a supervisory authority, (…) if the data subject considers that the processing of personal data relating to him or her infringes this Regulation);
  11. Your personal data shall not be subject to automated decision-making processes, including profiling;
  12. Your personal data shall not be transferred to third countries and international organizations;
  13. The provision of your personal data to the extent required by the labour law is necessary to participate in the recruitment procedure. Failure to provide it shall result in the exclusion from the recruitment procedure. The provision of other data (information on additional powers, qualifications, skills, professional achievements, references, and image) is voluntary (the Controller does not require this information) and requires your consent;
  14. At any time, you have the right to withdraw your consent to process additional personal data. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. You may withdraw your consent by submitting a written statement of withdrawal of consent to the place indicated in the job competition announcement as appropriate for the submission of documents.

Employees within projects

Version 0.4.2
Release date 03.10.2022

Fulfilling the obligation to provide information pursuant to Article 13(1) and (2) of the Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) [Official Journal of the EU L.2016.119.1 of May 4, 2016], hereinafter referred to as: “GDPR”, we inform you that:

  1. The Controller of your personal data is the AGH University of Science and Technology in Krakow, 30 A. Mickiewicza Avenue, 30-059 Krakow, hereinafter referred to as the AGH UST;
  2. The contact details of the Data Protection Officer are as follows: e-mail: iodo(at)agh.edu.pl, phone: 12 617 53 25;
  3. Your personal data shall be processed by the Controller for the following purposes:
    a) Exercising rights in the field of labour law, social security, and social protection pursuant to the provisions of, in particular, the Labour Code Act of 26.06.1974 (Journal of Laws of 2018, item 108, as amended) and the Act of 04.03.1994 on the Company Social Benefits Fund (Journal of Laws of 2017, item 2191, as amended);
    b) Implementation by the Controller of the project within which you are employed (hereinafter: "Project"), including for the purposes related to evaluation, monitoring, auditing, control, settlement, and reporting of the Project;
    c) Securing the data in case of possible claims;
  4. The legal basis for the processing of personal data derives from:
    a) Article 6(1)(b) of the GDPR – to the extent necessary for the conclusion and performance of the employment contract to which you are or will be a party;
    b) Article 6(1)(c) of the GDPR – to the extent necessary for the fulfilment of a legal obligation incumbent on the Controller (in particular, under Articles 221 and 222 of the Labour Code, the Act on the Social Insurance System, the Act on Old-Age and Disability Pensions from the Social Insurance Fund, the Act on Employee Capital Plans);
    c) Article 6(1)(c) of the GDPR – to the extent necessary for the Controller to carry out the Project – in connection with the provisions of:
    I. Regulation (EU) No. 1303/2013 of the European Parliament and of the Council of December 17, 2013 laying down common provisions on the European Regional Development Fund, the European Social Fund, the Cohesion Fund, the European Agricultural Fund for Rural Development, and the European Maritime and Fisheries Fund; and laying down general provisions on the European Regional Development Fund, the European Social Fund, the Cohesion Fund, and the European Maritime and Fisheries Fund; and repealing Council Regulation (EC) No 1083/2006,
    II. the Commission Implementing Regulation (EU) No. 1011/2014 of September 22, 2014 laying down detailed rules for implementing Regulation (EU) No. 1303/2013 of the European Parliament and of the Council as regards models for submission of certain information to the Commission and the detailed rules concerning the exchanges of information between beneficiaries and managing authorities, certifying authorities, audit authorities and intermediate bodies;
    III. the Act of July 11, 2014 on the principles for implementing programmes in the area of the cohesion policy financed in the 2014–2020 financial perspective and the guidelines issued pursuant to Article 5 (1)(5) and (8) of that Act, i.e. "Guidelines on the conditions for collecting and submitting data in electronic form for the years 2014–2020" and "Guidelines on the eligibility of expenditure under the European Regional Development Fund, the European Social Fund, and the Cohesion Fund for the years 2014–2020";
  5. Article 9(2)(h) of the GDPR – to the extent necessary for the purposes of preventive health care and occupational medicine, and for the assessment of the working capacity of the employee;
  6. The recipients of your personal data may be:
    a) Entities to which the Controller is obliged to provide data under applicable laws,
    b) Entities providing services to the Controller to the extent necessary for the achievement of the purposes in connection with which your personal data are processed, including, in particular, entities providing IT and administrative services to the AGH UST as well as tasks in the field of occupational medicine services,
  7. Information about your work e-mail address, work telephone number, position or function held may be provided to external entities with which the Controller cooperates or will cooperate in the performance of its tasks. The Controller shall also have the right to make this information public on their website;
  8. Your personal data may be transferred to state authorities, legal protection authorities (Police, Prosecutor's Office, Court), or local authorities in connection with legal proceedings;
  9. Personal data related to the implementation of the Project may be transferred, in particular, to Managing Authorities, Intermediate Bodies, Implementing Authorities, beneficiaries implementing the Project, entities that participate in the implementation of the Project on behalf of the beneficiary, as well as entities carrying out evaluation studies, inspections, and audits;
  10. Your personal data collected in connection with the implementation of the Project will be entered into the Central IT System (SL2014) supporting the implementation of operational programmes according to the provisions of the Act of July 11, 2014 on the principles of implementation of programmes within the scope of the cohesion policy financed in the 2014–2020 financial perspective and executive regulations. The data may be entered into another IT system if required by the Project funding agreement or by law;
  11. Your personal data shall be processed for the time of employment and after its termination for the period of maturity of possible claims or for the period specified in relevant laws, including archiving regulations, and the period resulting from the Project funding agreement;
  12. You have the right to request from the Controller access to your data and the right to rectify your data, the right to erase your data, the right to restrict the processing of your data, the right to object to the processing thereof in the cases and under the conditions specified in the GDPR;
  13. You have the right to submit a complaint with a supervisory authority – the President of the Office for Personal Data Protection pursuant to Article 77 of the GDPR (...every data subject shall have the right to lodge a complaint with a supervisory authority, (…) if the data subject considers that the processing of personal data relating to him or her infringes this Regulation);
  14. Your personal data shall not be subject to automated decision-making processes, including profiling;
  15. Your personal data shall not be transferred to third countries or international organizations except when the Controller’s obligation to transfer the data results from the law;
  16. The provision of our personal data to the extent required by law is a statutory requirement and is necessary for the establishment and execution of the employment relationship. The refusal to provide your personal data shall prevent the establishment and implementation of the employment relationship between you and the Controller.

Stopka