PRIVACY

1. Data controller
   The administrator of personal data is MADONIS Sp. z o.o., 98-400, Wieruszów, ul. Bolesławiecka 15a, with tax identification number (NIP): 9970153559, entered in the National Court Register under KRS number: 0000590524, whose documentation is stored by the District Court for Łódź-Śródmieście in Łódź, XX Division of the National Court Register.
   
   
2. Scope and sources of personal data
   Personal data may be collected in the following ways:
   a) via the application form on the ‘Career’ page, where the User voluntarily provides: name and surname, e-mail address, telephone number, CV, cover letter, information about professional experience, education and other data related to the recruitment process.
   b) automatically when using the website: IP address, connection time, browser type, operating system, referrer – this data may be processed for analytical purposes.
   
   
3. Purposes and legal basis for processing
   a) Purpose: conducting the recruitment process for Madonis Sp. z o.o.
   Legal basis: Article 6(1)(a) of the GDPR (consent of the data subject) and Article 6(1)(b) – where the provision of data is necessary for taking steps prior to entering into a contract.
   b) Purpose: maintenance and administration of the website, ensuring its functioning, traffic analysis.
   Legal basis: Article 6(1)(f) – legitimate interest of the controller (e.g. optimisation of the website’s functioning).
   c) Purpose: conducting analytical and marketing activities (if applicable).
   Legal basis: Article 6(1)(a) (consent) or (f) (interest).
   
   
4. Data recipients / transfer outside the EEA
   Data is not transferred outside the European Economic Area.
   
   
5. Data retention period
   5.1. The data of applicants will be stored for up to 12 months after the end of the recruitment process, unless the applicant consents to longer storage, in which case it will be stored until consent is withdrawn.
   5.2. Technical data (e.g. analytical cookies) will be stored for a period consistent with accepted agreements or statutes.
   
   
6. Rights of data subjects
   Every data subject has the right to:
   – access their data,
   – rectify their data,
   – erase their data (‘right to be forgotten’),
   – restrict processing,
   – transfer data,
   – object to data processing,
   – withdraw consent at any time (if consent was the basis) – this only affects the future.
   In order to exercise the above rights, please contact us at madonis@madonis.pl
   The data subject also has the right to lodge a complaint with the supervisory authority, i.e. the Office for Personal Data Protection.
   
   
7. Voluntary provision of data
   Providing data in the application form is voluntary, but necessary to participate in the recruitment process. Failure to provide data may result in your application not being considered.
   
   
8. Automated decision-making/profiling
   The administrator does not use automated decision-making or profiling within the meaning of Article 22 of the GDPR in the recruitment process. (However, if it does, this must be disclosed.)
   
   
9. Security measures
   The administrator shall implement appropriate technical and organisational measures to ensure the security of personal data processing, including protection against unauthorised access, loss of data, and unauthorised alteration.
   
   
10. Changes to the Privacy Policy
    The Administrator reserves the right to make changes to this Policy. The current version is available at: https://madonis.pl/
    Effective date: 14 October 2025