PRIVACY POLICY

1. general provisions

1.1 The administrator of the personal data is Grupa Njob sp. z o.o., 40 Braniborska St., 53-680 Wrocław, e-mail: rodo@njob.eu KRS: 0000463437, NIP: 9131615853, REGON: 02214082400000, hereinafter referred to as "Company" or "Administrator".

1.2 Contact with the Administrator is possible at e-mail address: rodo@njob.eu or in writing to the registered office address.

1.3 The Company implements the principles and legally required obligations of data security and information security. This also has reference to respecting the privacy of visitors and users of the website: www.njob.eu.

1.4 The purpose of the website is to provide information about the Company and its activities, and to enable a visitor to the website, with his/her exclusive and prior consent, to contact the Company. The website's functionalities prevent the automatic or without the knowledge and approval of the person concerned from providing information or data that such person does not wish.

1.5 This privacy policy is for informational purposes and primarily contains rules regarding the processing of personal data by the Administrator, including the grounds, purposes and duration of personal data processing and the rights of data subjects, as well as information regarding the use of cookies and analytical tools.

2 Basics of processing

2.1 Personal data shall be processed by the Administrator in accordance with applicable laws, in particular in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) - hereinafter referred to as "RODO" or "RODO Regulation".

2.2 The legal basis for the processing of personal data is the necessity to provide the user with the ability to use the functions of the site and to contact the Administrator, in connection with the conclusion of a contract for the use of the site by accepting its rules (Article 6(1)(b) RODO).

2.3 Your data will also be processed on the basis of the Administrator's legitimate interest in ensuring the security of the website and conducting statistics and analysis for the purpose of optimizing the website (Article 6(1)(f) RODO).

2.4 In the case of the use of cookies for analytical or marketing purposes, processing will be carried out only if the user consents (Article 6(1)(a) of the RODO).

2.5 The controller shall exercise special care to protect the interests of persons whose personal data it processes, and in particular shall be responsible for and ensure that the data it collects are:

(a) processed in accordance with the law;

(b) collected for designated legitimate purposes and not subjected to further processing incompatible with those purposes;

(c) substantively correct and adequate in relation to the purposes for which they are processed;

(d) stored in a form that allows the identification of the persons to whom they relate for no longer than necessary to achieve the purpose of processing and,

(e) processed in a manner that ensures adequate security of personal data, including protection against unauthorized or unlawful processing and accidental loss, destruction or damage, by means of appropriate technical or organizational measures.

2.6 Taking into account the nature, scope, context and purposes of the processing and the risk of violation of the rights or freedoms of natural persons of varying probability and severity, the Administrator shall implement appropriate technical and organizational measures for the processing to be carried out in accordance with this Regulation and to be able to demonstrate this. These measures shall be reviewed and updated as necessary. The Administrator shall apply technical measures to prevent unauthorized persons from obtaining and modifying personal data sent electronically.

3 Scope, purposes and duration of data processing

3.1 During the use of the site, personal data of users may be processed, in terms of:

(a) IP address;

(b) device and browser data;

(c) information about activity on the site (cookies, traffic data);

(d) data voluntarily provided by the user (e.g. name, e-mail address, telephone number).

3.2 The data is processed for the following purposes:

(a) to ensure that the site's features can be used;

(b) ensuring the security of the site and protecting it from abuse;

(c) conducting visitor statistics and analysis;

(d) tailoring content to users' needs;

(e) recruitment;

(f) marketing;

(g) day-to-day business contacts within the framework of persons representing a party to the concluded contract and persons designated as contacts in the implementation of the contract;

h) to establish, assert or defend claims that the Administrator may raise or that may be raised against the Administrator;

(i) to enable contact with the Administrator.

3.3 Data related to the use of the site shall be stored for the period necessary to fulfill the purposes indicated in this privacy policy, and thereafter for the time required by law or until the statute of limitations for claims.

4 Recipients of data and transfers to third countries

4.1 In order to function properly, it is necessary for the Administrator to use the services of third parties (such as a software provider or payment processor). The Administrator shall only use the services of such processors that provide sufficient guarantees for the implementation of appropriate technical and organizational measures so that the processing meets the requirements of the RODO Regulation and protects the rights of data subjects.

4.2 Personal data may be transferred by the Administrator to a third country, in which case the Administrator shall ensure that this shall be done with respect to a country providing an adequate level of protection - in accordance with the RODO Regulation, and in the case of other countries, that the transfer shall be done on the basis of standard data protection clauses. The controller shall ensure that the data subject has the opportunity to obtain a copy of his/her data. The Administrator shall transfer the collected personal data only in the case and to the extent necessary to fulfill the given purpose of data processing in accordance with this Privacy Policy.

4.3 Recipients of the data may be entities providing IT services to the Administrator and the provider of the Google Analytics tool - Google Ireland Ltd.

4.4 User data may be transferred outside the European Economic Area (EEA), in particular to Google LLC, based in the USA.

4.5 Google LLC participates in the EU-US Data Privacy Framework, which has been recognized by the European Commission as providing an adequate level of protection for personal data (EC decision of July 10, 2023).

4.6 In situations where data would be transferred to third countries not covered by a decision of the European Commission finding an adequate level of protection, the Administrator shall apply appropriate safeguards, such as standard contractual clauses (pursuant to Article 46 of the RODO).

4.7 It is possible for a person to easily block information about his/her activity on the website from being made available to Google Analytics - for this purpose, for example, you can install a browser add-on provided by Google Ireland Ltd. available here: https://tools.google.com/dlpage/gaoptout?hl=pl

4.8 The transfer of data by the Administrator does not take place in every case and not to all recipients or categories of recipients indicated in the privacy policy - the Administrator transfers data only when it is necessary for the realization of the given purpose of personal data processing and only to the extent necessary for its realization.

4.9 Personal data may be transferred to the following recipients or categories of recipients:

a) service providers supplying the Administrator with technical, IT and organizational solutions that enable the Administrator to conduct its business (in particular, computer software providers, e-mail and hosting providers, and providers of business management and technical support software to the Administrator) - the Administrator shall make the collected personal data available to the selected provider acting on its behalf only in the case and to the extent necessary to realize the given purpose of data processing in accordance with this Privacy Policy;

(b) accounting, legal and advisory service providers providing accounting, legal or advisory support to the Administrator (in particular, an accounting firm, law firm or debt collection company) - the Administrator shall make the collected personal data available to the selected provider acting on its behalf only in the case and to the extent necessary to realize the given purpose of data processing in accordance with this Privacy Policy.

5. user rights

5.1 The data subject has the right to request from the Controller access to his/her personal data, rectification, erasure ("right to be forgotten") or restriction of processing, and has the right to object to processing, and has the right to portability of his/her data. The detailed conditions for exercising the rights indicated above are indicated in Articles 15-21 of the RODO Regulation.

5.2 You have the right to withdraw your consent at any time if the processing is based on consent.

5.3 At any time you have the right to lodge a complaint to the President of the Office for Personal Data Protection (www.uodo.gov.pl), about the processing carried out by the Administrator.

6 Cookies and analytics

6.1 Cookies (cookies) are small text information in the form of text files, sent by the server and stored on the side of the visitor to the website (e.g. on the hard drive of a computer, laptop, or on the memory card of a smartphone - depending on what device the visitor uses).

6.2 The administrator may process data contained in cookies when visitors use the website for the following specific purposes:

a) storing data from the Forms you fill out (essential and/or functional/preference cookies);

b) keep anonymous statistics showing how the website is used (analytical and performance cookies);

(c) displaying and rendering ads, limiting the number of times ads are displayed and ignoring ads that the user does not want to see, measuring the effectiveness of ads, and personalizing ads, that is, studying the behavioral characteristics of site visitors through anonymous analysis of their actions (e.g., repeated visits to certain pages, keywords, etc.) in order to create their profile and provide them with ads tailored to their anticipated interests, including when they visit other websites on the advertising network of Google Ireland Ltd. and Facebook, i.e., Meta Platforms Ireland Ltd. (marketing, advertising and social media cookies).

6.3 By default, most web browsers available on the market accept the storage of Cookies by default. Everyone has the ability to determine the conditions of use of Cookies through the settings of their own web browser. This means that you can, for example, partially restrict (e.g. temporarily) or completely disable the ability to save Cookies - in the latter case, however, this may affect some of the functionality of the website.

6.4 Cookies are not used to obtain any information about users of the site or to track navigation. Cookies used on the site do not capture personal information or other information about the user.

6.5 During the first visit to the site, a message about cookies is displayed. The user of the site can give full consent to their use, choose only certain files or refuse the right to use them. The sentence can be changed at any time. However, the Company cannot guarantee that the site will display correctly in such a case, in the absence of acceptance of cookies.

6.6 Cookies can be managed by:

- changing the cookie settings of the user's browser;

- browsing the site in incognito mode;

- file management from the site.

6.7 In connection with the Administrator's ability to use advertising and analytical services provided by Google Ireland Ltd. the Administrator points out that full information about the principles of processing of data of website visitors (including information stored in cookies) by Google Ireland Ltd. can be found in the privacy policy of Google services available at: https://policies.google.com/technologies/partner-sites.

7 Final provisions

7.1 The Administrator reserves the right to make changes to the Privacy Policy in connection with the development of technology, changes in the law or expansion of the functionality of the site.

7.2 The site may contain links to other websites. The administrator urges that when you go to other sites, you should read the privacy policy established there.

7.3 This privacy policy applies only to the Administrator. If you have any questions related to our processing of your personal data or wish to exercise your rights under the RODO, please use the contact form or write to our email address: rodo@njob.eu