Privacy Policy

The policy is addressed to users of the shlproduction.com website (hereinafter: the Website). The Policy describes the rules for collecting and using website users’ data, which are collected directly from them or via cookies and similar technologies.

SHL Production sp. z o.o., the owner of the Website, makes every effort to ensure that your privacy is properly protected. In order to carry out lawful, transparent and secure processing of your personal data, we adopt the Privacy Policy, which in this wording is effective from May 16, 2022.

The Privacy Policy refers to the GDPR, i.e. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

Personal data controller

The administrator of your personal data collected in connection with the use of the Website is SHL Production sp. z o. o. (NIP: 9591890302, KRS: 0000352694). The Administrator appointed a Personal Data Protection Inspector in the person of Roland Mrówka running the Legal Counsel’s Office in Kielce at Warszawska 30 premises 21, 25-312 Kielce.

If you have any questions about the processing of your personal data and your rights, please contact us by e-mail: iod.shl@shlproduction.com.

1. Scope of collected data.

The Website allows you to contact the Administrator and provide him with your identification, contact and information related to the content of the message.

The administrator collects data related to your activity, such as the time spent on the website, search phrases, the number of pages viewed, the date and source of the visit.

2. Security of your data

The Administrator makes every effort to ensure the security of your personal data and undertakes to:

1. securing data against their disclosure to unauthorized persons, taking away by an unauthorized person, changes, damage or destruction,

2. allowing the processing of personal data only to persons with authorization,

3. ensure control over the correctness of personal data processing,

4. keeping records of persons authorized to process personal data, taking special care that persons authorized to process these data keep them secret, also after the end of cooperation with the Administrator,

5. keeping documentation required by law describing the method of processing entrusted personal data and ensuring technical and organizational measures to ensure the protection of the processing of such data,

6. ensure that IT and telecommunications equipment and systems used to process personal data comply with legal requirements.

In the case of personal data obtained in a different way than by the Website (by phone, e-mail, etc.) The administrator processes them only for the purpose for which they were made available and for the time necessary to achieve this purpose. In the event of a planned change in the purpose of processing, the Administrator will inform the data subject about this fact and obtain his consent to further processing of data.

The Administrator may combine the personal data sent by the user with other personal data that the Administrator has obtained about the user for the same purposes from other sources, including if the user has made the user’s personal data available to the Administrator in other places or through another medium (such as social media platforms). These sources include: LinkedIn, Facebook, Youtube, Instagram, Snapchat, Tweeter.

The Administrator may not use the user’s personal data for new purposes that have not yet been provided for in this Policy, except where the relevant statutory permissions in this respect apply. In any case, before using personal data for other purposes, the Administrator is obliged to inform the user about such a change. In the case of actions based on the user’s consent, the Administrator will not process personal data for such new purposes without the prior consent of the user.

The Administrator will not collect or process a special category of personal data. Special categories of personal data include data revealing racial or ethnic origin, political opinions, religious or philosophical or other beliefs of a similar nature, trade union membership, genetic data, biometric data enabling the unambiguous identification of a natural person, information on health, sex life or sexual orientation.

The Service is not intended for or directed at children under 16 years of age. The Administrator does not knowingly collect any information from such persons. If, in the opinion of the user, his child has provided the Administrator with personal data, please contact the Administrator at iod.shl@shlproduction.com.

3. General Regulations.

Purpose and legal basis for the processing of personal data

In the event that you are not a person who uses the Website in connection with the recruitment and employment process at the Administrator, your data may be processed in order to:

› analysis of network traffic, ensuring security within the Website and adapting content to the needs of users on the basis of the legitimate interest of the Administrator (Article 6(1)(f) of the GDPR);

› answering questions, forwarding the ordered offer and conducting correspondence in order to settle the matter, based on your consent and the legitimate interest of the administrator, which is to implement user requests (Article 6(1)(a) and (f) of the GDPR).

The legal bases for processing are:

› Conclusion and performance of concluded contracts;

› Compliance with legal obligations;

› Legitimate interest;

› Consent to data processing.

Right to withdraw consent

You can withdraw your consent to the processing of contact details at any time by contacting the Administrator. Withdrawal of consent may make it difficult or impossible to contact you.

Obligation to provide data

Providing data by you for purposes related to handling the case is voluntary, but necessary. Failure to provide them may make it difficult or impossible to consider the case.

Providing data necessary for static analysis of Website users is voluntary. You can use the so-called incognito mode to browse the website without providing the Administrator with information about your visit to the Website. The use of incognito mode, and therefore failure to provide data, does not affect the ability to use the Website.

Rights resulting from the GDPR in the scope of processed data

You have the right to:

› request the Controller to inspect your data and to receive a copy thereof (Article 15 of the GDPR);

› request the Administrator to rectify or correct the data (Article 16 of the GDPR) – in relation to the request for rectification of the data, when you notice that the data is incorrect or incomplete;

› request the Controller to delete the data (Article 17 of the GDPR);

› request the Controller to restrict processing (18 GDPR) – e.g. when you notice that the data is incorrect – you may request the restriction of the processing of your data for a period allowing us to check the correctness of this data;

› lodge a complaint in connection with the processing of your personal data by the Administrator to the President of the Office for Personal Data Protection.

To exercise your rights, please contact us at the following e-mail address: iod.shl@shlproduction.com

If you make a request to us related to the exercise of the rights listed above, we will respond to this request immediately, but no later than one month after its receipt. However, if – due to the complicated nature of the request or the number of requests – we are unable to comply with your request within one month, we will comply with it within the next two months by informing you in advance of the extension of the deadline.

Recipients of your personal data

In addition to the Administrator and its employees and associates with appropriate authorizations, your data will be made available, if necessary, to entities cooperating with the Administrator – providers of technical/organizational services and solutions (IT service providers, courier companies, postal companies, diagnostic equipment suppliers, etc.), legal and advisory services (law firms, debt collection companies, etc.) in accordance with the provisions on the protection of personal data and provided that the provisions on the protection of personal data are maintained.  Confidentiality. The sharing of your data takes place on the basis of appropriate authorizations or data entrustment agreements, guaranteeing their security.

Duration of data storage

Your personal data will be stored until the consent is withdrawn or until the matter is settled, and then until the expiry of the limitation period for the parties’ claims related to its implementation.

Data related to the analysis of web traffic collected through cookies and similar technologies may be stored until the cookie expires. Some cookies never expire, therefore the duration of data storage will be equivalent to the time necessary for the controller to achieve the purposes of data collection, such as ensuring security and analysis of historical data related to website traffic.

Transfer of data to a third country or international organisation

Your data will not be transferred to third countries or international organizations.

Automatic profiling

The Administrator will not apply automated decision-making, including profiling, to you.

4. Recruitment of employees

Purpose and legal basis for the processing of personal data

In connection with the recruitment process for the Administrator’s employees, the Administrator will process your personal data for the following purposes:

a. in order to carry out the recruitment process, on the basis of the right resulting from Article 22¹ of the Labor Code, in the scope of: name and surname, date of birth, contact details, education, professional qualifications and the course of previous employment. The basis for the processing of the above-mentioned personal data is a legal obligation (Article 6(1)(c) of the GDPR),

b. in order to carry out the recruitment process, based on your consent to the processing of your personal data, i.e. personal data other than those indicated in the point above, provided in the CV, form, cover letter and other documents.  The basis for processing is the above-mentioned consent (Article 6(1)(a) of the GDPR).

c. in order to implement the Administrator’s legitimate interest in the scope of data obtained from you during the recruitment process in connection with checking your skills and abilities needed to work in the position specified in the advertisement.  The basis for the processing of this data is the legitimate interest of the Administrator (Article 6(1)(f) of the GDPR),

d. in order to pursue the legitimate interest of the administrator in the event of a legal need to prove facts, demonstrate the performance of obligations (Article 6 (1) (f) of the GDPR),

e. in order to carry out future recruitment processes, based on your consent to the processing of personal data provided in the CV, form, cover letter and other documents. The basis for processing is consent (Article 6(1)(a) of the GDPR).

The right to withdraw consent.

Consent to the processing of personal data for the purpose of ongoing and/or future recruitment is possible by selecting the appropriate checkbox or checkboxes in the application form on the job offer subpage, or in the form of a statement on the submitted recruitment documents.

Obligation to provide data

Providing your personal data is mandatory to the extent resulting from applicable law, in particular indicated in Article 22¹ of  the Labor Code. Failure to provide data results in the inability to establish an employment relationship.

Recipients of your personal data

In the case of establishing an employment relationship, personal data may be made available to other authorized entities, on the basis of legal provisions, when such an obligation results from the provisions of applicable law (m.in ZUS, NFZ, National Tax Administration). Your personal data may also be made available to providers of technical/organizational services and solutions (IT service providers, courier companies, postal companies, diagnostic equipment providers, etc.), legal and advisory services (law firms, debt collection companies, etc.) in accordance with the provisions on the protection of personal data and provided that confidentiality is maintained. Your personal data will also be made available to partners, contractors and customers, only in the scope of business data, and in the remaining scope only after obtaining a separate, voluntary consent.

Transfer of data to a third country or international organisation

The Administrator does not intend to transfer your personal data to a third country (outside the European Economic Area) or an international organization. [R3] 

Automatic profiling

The Administrator will not apply automated decision-making, including profiling, to you.[R4] 

Rights resulting from the GDPR in the scope of processed data

Taking into account applicable law, you have the right to access your personal data, the right to receive a copy of the data, the right to rectify it, request its deletion or restriction of processing.

You also have the right to object to the processing of personal data on the basis of the legitimate interest of the Administrator, indicating your special situation, which in your opinion justifies the cessation of processing of data covered by the objection. The Administrator will cease to process your personal data for these purposes, unless it demonstrates that the grounds for processing your data by the Administrator override your rights or that your personal data are necessary for us to establish, exercise or defend claims.

You have the right to lodge a complaint with the supervisory authority, which in Poland is the President of the Office for Personal Data Protection, when you consider that the processing of personal data concerning you violates the provisions on the protection of personal data.

To exercise your rights, please contact us at the following e-mail address: iod.shl@shlproduction.com

If you make a request to us related to the exercise of the rights listed above, we will respond to this request immediately, but no later than one month after its receipt. However, if – due to the complicated nature of the request or the number of requests – we are unable to comply with your request within one month, we will comply with it within the next two months by informing you in advance of the extension of the deadline.

Duration of data storage

The Administrator stores your personal data for no longer than it is necessary to prepare a personalized offer / conduct the recruitment process / respond to other inquiries and enabling the Administrator to perform his duties. We remind you that users can delete data at any time.

5. Cookies

We use cookies to ensure the proper operation of the Website, and in particular to adapt its content to the user’s preferences and optimize use. In particular, these files allow to recognize the basic parameters of the user’s device (such as: device type, screen resolution, country from which the entry is made) and thus properly display a website tailored to his needs.

You can independently and at any time change the settings for cookies, specifying the conditions for their storage and access by cookies to the user’s device. Changes to the settings can be made using the settings of the web browser. These settings can be changed in such a way as to block the automatic handling of cookies or inform you about each placement of cookies on your device. Detailed information about the possibilities and ways of handling cookies are available in the web browser settings.

You can delete cookies at any time by using the available functions in the web browser you are using.

The user has the option of setting the browser to block certain types of cookies and other technologies, by specifying, for example, that only those that are necessary for the correct display of the website will be allowed. By default, most browsers allow the use of all cookies, but the user has the option to change these settings at any time, he can also delete already installed cookies. Each of the browsers allows this action through one of the options available in the settings or preferences.

The user also has the option of using the website in the so-called incognito mode, which blocks the possibility of collecting data about his visit.

Using the website without changing the browser settings, i.e. with the default acceptance of cookies and similar technologies, means consent to their use for the purposes specified above. The Administrator does not use the information obtained for marketing purposes.

Restricting the use of cookies may affect some of the functionalities available on the website.