top of page
polityka prywatności rekrutacja.png

Privacy Policy

Recruitment

I. General provisions

1. Personal data are processed based on the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ EU L 119, p. 1) – hereinafter referred to as: "GDPR".

2. This Privacy Policy for the purposes of recruitment specifies the principles of processing personal data of persons seeking employment and applying for the offered positions (hereinafter referred to as "Candidates") by the Administrator or the Companies available in the "Career" tab on the website maintained at: https://txb.pl/kariera (hereinafter referred to as the "Website").

3. The general privacy policy can be found on our Website.

II. Personal data administrator

1. The controller of personal data in relation to running the recruitment portal and providing access to the recruitment portal available on the Website in the "Career" tab is: Taxenbach spółka z ograniczoną odpowiedzialnością with its registered office in Warsaw, ul. Jana III Sobieskiego 104/39, 00-764 Warsaw, NIP: 5213786458, KRS: 0000684673, e-mail address: office@txb.pl .

​

2. The administrator of personal data in relation to submitting applications for positions offered on the Website in the "Career" tab is one of the companies conducting recruitment for the offered position:

​

a) Taxenbach spółka z ograniczoną odpowiedzialnością with its registered office in Warsaw, ul. Jana III Sobieskiego 104/39, 00-764 Warsaw, NIP: 5213786458, KRS: 0000684673, e-mail address: office@txb.pl.

​

b) Taxenbach LEGAL Kollar-Ryszard spółka komandytowa with its registered office in Warsaw, ul. Jana III Sobieskiego 104/39, 00-764 Warsaw, NIP: 523949966, KRS: 0000038863, e-mail address: office@txb.pl.

​

c) Taxenbach Finanse spółka z ograniczoną odpowiedzialnością with its registered office in Warsaw, ul. Jana III Sobieskiego 104/39, 00-764 Warsaw, NIP: 5213901037, KRS: 0000850074, e-mail address: office@txb.pl.

​

d) Certified Auditor and Tax Advisor Michał Kollar-Ryszard with its registered office in Warsaw, ul. Jana III Sobieskiego 104/39, 00-764 Warsaw, NIP: 7122880632. e-mail address: office@txb.pl .

​

3. Each Company takes special care to respect the privacy of Candidates visiting the Website in the "Career" tab.

II. Personal data administrator

Candidates’ personal data are processed on the basis of:

a) Article 6, section 1, letter c) of the GDPR in connection with Article 22(1) of the Labour Code – in relation to job offers based on an employment contract (name, surname, date of birth, contact details provided by the Candidate, education, professional qualifications, course of previous employment);

b) Article 6 paragraph 1 letter a) and Article 9 paragraph 2 letter a) of the GDPR – in relation to job offers based on an employment contract (data which the Candidate provides voluntarily and which go beyond the above-mentioned scope);

c) Article 6 paragraph 1 letter b), Article 6 paragraph 1 letter a) and Article 9 paragraph 2 letter a) of the GDPR – in relation to employment offers based on civil law contracts (e.g. contract of mandate, cooperation agreement).

2. Candidates’ personal data are collected and processed for the following purposes, scope and legal bases:

a) Presenting a recruitment offer for the indicated positions by determining whether the Candidate is the right person for the given position, informing the Candidate about the acceptance or rejection of the Candidate's application, internal administrative purposes, conducting appropriate verification of the Candidate's personal data for the purposes of recruitment, ensuring a smooth recruitment process - categories of personal data processed:

- Name and surname;

- Date of birth;

- Contact details, i.e. home address, e-mail address, telephone number;

- PESEL identification number;

- Nationality/citizenship/place of birth;

- Biological gender;

- Photo;

- Marital status;

- CV;

- Education;

- Employment history and previous jobs;

- Candidate's Signature;

- Additional information provided by the Candidate.

The legal basis is the legitimate interest of the Administrator (Article 6 (1) (f) of the GDPR), consisting in conducting the recruitment process.

b) Determining, pursuing, enforcing and defending against claims – categories of processed personal data: first name, last name, contact details. The legal basis is the legitimate interest of the Administrator (Article 6 paragraph 1 letter f) of the GDPR), consisting in determining, pursuing and enforcing claims and defending against claims in proceedings before courts and other state authorities.

c) During future recruitment processes, data provided via the "Career" tab are processed based on the Candidate's consent in accordance with Article 6 paragraph 1 letter a) of the GDPR.

3. If a Candidate applies for multiple positions in the Companies, the persons responsible for recruitment may have access to information from other applications, within the limits defined by the selected visibility option. The scope of information provided may include: application date, job title and application status.

IV. Providing personal data

1. Providing personal data is voluntary, with the reservation, however, that providing the data is necessary to provide the Administrator's services, and failure to provide certain personal data will prevent the provision of services, in particular the possibility of using the contact form and providing the Newsletter subscription service.

2. If the Candidate expresses consent, it is expressed voluntarily by clicking the checkbox containing the terms of the consent granted.

V. Data recipients

1. The Candidate's personal data may be transferred to third parties cooperating with the Administrator or the Companies: providers of IT, programming, service and maintenance services and providers of hosting services and providing information tools, e-mail providers, providers of programs for sending electronic messages on behalf of the Administrator or the Companies, providers of systems for issuing invoices and storing information related to the Candidate's financial history, entities providing auditing, accounting, consulting and advisory services used by the Administrator or the Companies in the recruitment process and with which the Administrator or the Companies have concluded agreements that include data processing principles and confidentiality. Service providers to whom personal data are transferred, depending on the contractual arrangements and circumstances, are either subject to the instructions of the Administrator or the Companies as to the purposes and methods of processing this data (as processors) or process this data as independent administrators. This data is not shared and none of these companies has the right to process the data in a manner other than specified in the agreement. The Candidates' data may be processed only for the proper conduct of the recruitment process.

2. In the event of a request, the Companies will make personal data available to authorized state authorities under applicable law, in particular to the competent judicial authorities, organizational units of the Public Prosecutor's Office, the Police, the President of the Office for Personal Data Protection, the President of the Office for Competition and Consumer Protection or the President of the Office of Electronic Communications.

VI. Transfer of data outside the European Economic Area (hereinafter referred to as "EEA")

1. The Candidate's personal data may be transferred to third parties cooperating with the Administrator or the Companies: providers of IT, programming, service and maintenance services and providers of hosting services and providing information tools, e-mail providers, providers of programs for sending electronic messages on behalf of the Administrator or the Companies, providers of systems for issuing invoices and storing information related to the Candidate's financial history, entities providing auditing, accounting, consulting and advisory services used by the Administrator or the Companies in the recruitment process and with which the Administrator or the Companies have concluded agreements that include data processing principles and confidentiality. Service providers to whom personal data are transferred, depending on the contractual arrangements and circumstances, are either subject to the instructions of the Administrator or the Companies as to the purposes and methods of processing this data (as processors) or process this data as independent administrators. This data is not shared and none of these companies has the right to process the data in a manner other than specified in the agreement. The Candidates' data may be processed only for the proper conduct of the recruitment process.

2. In the event of a request, the Companies will make personal data available to authorized state authorities under applicable law, in particular to the competent judicial authorities, organizational units of the Public Prosecutor's Office, the Police, the President of the Office for Personal Data Protection, the President of the Office for Competition and Consumer Protection or the President of the Office of Electronic Communications.

VII. Data storage period

1. Personal data of Candidates related to the recruitment process will be processed until the claims expire, but no longer than for a period of 3 years.

2. Personal data consisting in the determination, pursuit and enforcement of claims and defense against claims in proceedings before courts and other state authorities will be processed until the limitation period for any claims expires.

3. Candidates’ personal data relating to future recruitment processes will be processed for a period of 12 months or until the Candidate withdraws their consent.

4.The cookie storage period can be found in the general Privacy Policy.

VIII. Withdrawal of consent

1. The consent granted by the Candidate may be withdrawn at any time by e-mail to the following address: office@txb.pl.

2. If the Candidate has consented to the processing of personal data (legal basis: art. 6 sec. 1 letter a) GDPR), the data is processed until the consent is withdrawn, but after this period, information on who and when and what consent was granted may be archived (for the purpose of establishing, pursuing or defending legal claims). In other cases, the data is processed for a period justified by the implementation of the purpose (e.g. implementation of the recruitment process, accounting and tax regulations, limitation of claims, etc.). The processing period depends on the possibility of establishing, pursuing or defending claims or when data retention is required due to legal or tax regulations.

3. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. Withdrawal of consent results in cessation of actions taken to the extent to which consent was granted and to the extent to which consent was withdrawn.

4. If the Applicant initiates the deletion of data, it will be done within 24 hours, unless this conflicts with data retention requirements or our legitimate interests.

IX. Rights of data subjects

1. Right to Withdraw Consent – Legal Basis: Article 7(3) of the GDPR:

a) The Candidate has the right to withdraw any consent given to the Companies.

b) The withdrawal of consent takes effect from the moment it is withdrawn.

c) The withdrawal of consent does not affect processing carried out by the Companies lawfully before the withdrawal.

d) The withdrawal of consent does not result in any negative consequences for the Candidate, but it may prevent further use of services or functionalities that the Companies can legally provide only with consent.

e) Consent for the processing of personal data can be withdrawn by contacting us via email at: office@txb.pl.

2. Right to Object to Data Processing – Legal Basis: Article 21 of the GDPR:

a) The Candidate has the right to object at any time—on grounds relating to their particular situation—to the processing of their personal data based on a legitimate interest.

b) If the processing of data was based on the above legal basis, opting out of receiving marketing communications via email will constitute an objection to the processing of their personal data.

c) If the Candidate's objection is justified and the Companies do not have other important legally justified grounds for processing the personal data that override the interests, rights, and freedoms of the Candidate, the data to which the objection applies will be deleted.

3. Right to Data Erasure ("Right to be Forgotten") – Legal Basis: Article 17 of the GDPR:

a) The Candidate has the right to request the immediate deletion of all or some of their personal data.

b) The Candidate has the right to request the deletion of personal data if:

  • The personal data are no longer necessary for the purposes for which they were collected or processed.

  • They have withdrawn their specific consent, to the extent that the processing of personal data was based on that consent, and there is no other legal basis for processing.

  • They have objected to the use of their data for marketing purposes.

  • They have objected to the processing of their data based on the legitimate interest of the controller, and there are no overriding legitimate grounds for processing.

  • The personal data have been processed unlawfully.

  • The personal data must be deleted to comply with a legal obligation under EU law or the law of a Member State to which the Companies are subject.

  • The personal data were collected in connection with offering information society services.

4. Right to Restrict Processing – Legal Basis: Article 18 of the GDPR:

a) The Candidate has the right to request the restriction of the processing of their personal data. Submitting such a request, until it is reviewed, prevents the use of certain functionalities or services that require the processing of the data covered by the request. The Companies will also not send any communications, including marketing messages.

b) The Candidate has the right to request the restriction of the use of personal data in the following cases:

  • When they question the accuracy of their personal data—the Companies will then limit their use for the time necessary to verify their accuracy, but no longer than seven days.

  • When the processing of the data is unlawful, and instead of deleting the data, the Candidate requests the restriction of their use.

  • When personal data are no longer necessary for the purposes for which they were collected or used, but they are needed by the Candidate to establish, assert, or defend legal claims.

  • When they have objected to the processing of their data—the restriction will apply for the time necessary to determine whether, due to the specific situation, the protection of the Candidate’s interests, rights, and freedoms outweighs the interests pursued by the Controller in processing the Candidate’s personal data.

5. Right to Access Data – Legal Basis: Article 15 of the GDPR:

a) The Candidate has the right to obtain confirmation from the Controller as to whether their personal data are being processed, and if so, the Candidate has the right to:

  • Access their personal data.

  • Obtain information about the purposes of processing, categories of processed personal data, recipients or categories of recipients of those data, the planned storage period for the Candidate’s data, or the criteria for determining this period (if specifying the planned processing period is not possible), the rights available to the Candidate under the GDPR, the right to lodge a complaint with a supervisory authority, the source of these data, automated decision-making, including profiling, and the security measures applied in connection with the transfer of these data outside the European Union.

  • Obtain a copy of their personal data.

6. Right to Rectify Data – Legal Basis: Article 16 of the GDPR:

a) The Candidate has the right to request that the Controller immediately correct any incorrect personal data concerning them. Considering the purposes of processing, the Candidate has the right to request the completion of incomplete personal data, including by providing an additional statement, by sending a request to the email address: office@txb.pl.

7. Right to Data Portability – Legal Basis: Article 20 of the GDPR:

a) The Candidate has the right to receive their personal data, which they have provided to the Controller, and then transmit them to another data controller of their choice. The Candidate also has the right to request that personal data be sent directly by the Controller to such another controller, if technically feasible. In this case, the Controller will transmit the Candidate's personal data in a .csv file format, which is widely used, machine-readable, and allows the data to be transferred to another data controller.

8. If the Candidate exercises any of the above rights, the Companies will fulfill the request or refuse to fulfill it immediately, but no later than one month after receiving the request. However, if—due to the complexity of the request or the number of requests—the Companies are unable to fulfill the request within one month, they will fulfill it within the next two months, informing the Candidate in advance, within one month of receiving the request, of the intended extension of the deadline and the reasons for it.

9. The Candidate may submit complaints, inquiries, and requests regarding the processing of their personal data and the exercise of their rights to the Controller.

10. The Candidate has the right to lodge a complaint with the President of the Personal Data Protection Office.

X. Automated decision-making

The Candidate's personal data will not be subject to automated decision-making and will not be profiled.

XI. General Provisions and Changes to the Privacy Policy for Recruitment Purposes

1. The Company reserves the right to make changes to this Privacy Policy for recruitment purposes. The Company will inform Candidates of any changes 14 days in advance by publishing the new content of the Privacy Policy for recruitment purposes on the Website.

2. In case of any questions regarding the Privacy Policy for recruitment purposes, please contact us at the following e-mail address: office@txb.pl .

3. This Privacy Policy for recruitment purposes is effective from 1 March 2025.

bottom of page