INFORMATION CLAUSE

OF  CO-ADMINISTRATORS REGARDING THE PROCESSING OF PERSONAL DATA

Pursuant to Article 13(1)-(2) and Article 26(1)-(2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, OJ EU L119 of May 4, 2016, p. 1) – hereinafter: GDPR – we kindly inform you that:

I. Personal data administrators

The following entities belonging to the ARTTIME Group are co-administrators of your personal data:

1. “ARTTIME HR” sp. z o.o., with its registered office in Warsaw at Aleje Jerozolimskie 180, building A, postal code 02-486 Warsaw, entered in the National Register of Entrepreneurs under KRS number: 0000868432, REGON: 387531536, NIP: 8351614401,
2. EPS sp. z o.o., with its registered office in Włocławek at ul. Duninowska 9, 87-800 Włocławek, entered in the National Register of Entrepreneurs under KRS number: 0001126515, REGON: 529658030, NIP: 7011222937,
3. EPS OUSTOURCING sp. z o.o., with its registered office in Łódź at ul. Łąkowa 7a, 90-562 Łódź, entered in the National Register of Entrepreneurs under KRS number: 0001001620, REGON: 523702964, Tax Identification Number (NIP): 5252931947

– each individually hereinafter also referred to as: “Administrator”. More information in this regard can be found in the Privacy Policy [available here].

II. Joint agreements between Administrators

Under the  co-administrators Agreement (hereinafter: “Agreement”), we have agreed on the scope of our responsibilities regarding the fulfillment of obligations under the GDPR, in particular, we have agreed that:

1. We, as  co-administrators, are responsible for fulfilling our information obligation towards you.
2. As  co-administrators, we are responsible to you for enabling you to exercise your rights. Notwithstanding this arrangement, you may also exercise your rights against us. In such a case, we will forward your request to the co-administrators who is obliged to comply with it.
3. The purpose and manner of processing personal data by the co-administrators is set out in the Agreement. In particular, the Agreement stipulates that the common purpose of processing is:
   • Maintaining and administering the ARTTIME Group website: art.-time.pl
   • Communicating via contact forms on the website: art-time.pl
   • Maintaining the ARTTIME Group’s social media profiles and marketing campaigns, including direct marketing.
   • Maintaining a joint database of candidates for employment/cooperation.

Ensuring that the transfer and storage of personal data in our IT systems is protected by adequate technical and organizational measures.

4. Each Party to the Agreement separately processes, in the course of its activities, as a administrator, personal data of, among others, customers, job candidates, contractors, subcontractors, suppliers, contractors, and other entities with which it cooperates.
5.  co-administration applies to all personal data processing operations performed by each of the  co-administrators in connection with the administration of such data, and in particular includes: collecting, recording, organizing, structuring, storing, adapting, modifying, downloading, viewing, using, transferring, disseminating or otherwise making available, matching, combining, restricting, deleting, or destroying.
6. Personal data is processed for the purpose of performing or concluding a contract, exchanging correspondence and maintaining contact by electronic means, telephone, creating a database of job candidates, conducting marketing campaigns using social media, direct marketing, and ensuring security.

III. Contact point

We have not appointed a data protection officer, but we have decided to establish a joint contact point that you can contact regarding the protection of your personal data at the following e-mail address: rodo@art-time.pl or in writing by sending correspondence to the address of the  co-administrators: EPS sp. z o.o., ul. Duninowska 9, 87-800 Włocławek.

IV. Type of personal data processed

As part of this contact form, we will process the following personal data voluntarily provided by you:

– first and last name

– email address

– contact telephone number

– place of residence/business (if applicable)

– company name and tax identification number (if applicable)

V. Basis and purposes of processing

1. The administrators operate in accordance with applicable law and internal procedures, including the Privacy Policy available here.
2. The legal basis for the processing of your personal data in the contact form is your consent – i.e., your voluntary consent to the processing of your data (Article 6(1)(a) of the GDPR), as well as situations where processing is necessary for the purposes of the legitimate interests pursued by the Administrator or by a third party (Article 6(1)(f) of the GDPR), e.g., in the form of the possibility of pursuing claims and defending against possible claims.
3. Administrators process your personal data for the following purposes:
   • Communication with you, in particular handling complaints regarding the Administrator’s products or services;
   • Providing you with commercial information by electronic means;
   • Providing you with commercial information by telephone;
   • To send you information by electronic means as part of your subscription to the Administrator’s newsletter;
   • Administrators may also process your personal data obtained via the website form for the following purposes:
4. To conclude and perform a possible contract between you and the Administrator and to serve you as a customer of the Administrator in accordance with Article 6(1)(b) of the GDPR;
   • for the purpose of conducting financial settlements with you as the Administrator’s customers,
   • for the performance of a possible contract concluded between the parties, as well as for the possible pursuit of claims against you within the scope of the Administrator’s legitimate interest in accordance with Article 6(1)(f) of the GDPR and the fulfillment of the Administrator’s legal obligations towards tax authorities on the basis of separate regulations in accordance with Article 6(1)(c) of the GDPR;
   • for the purpose of carrying out the Administrator’s marketing activities within the scope of the Administrator’s legitimate interest within the meaning of Article 6(1)(f) of the GDPR, as well as in accordance with the declarations of will regarding marketing communication submitted to the Administrator (Article 6(1)(a) of the GDPR).
5. You may withdraw your consent at any time, which will not affect the lawfulness of the processing carried out on the basis of your consent prior to its withdrawal; however, refusal to give consent or its withdrawal will result in the Administrator being unable to process your data for the purposes indicated in the consent. Consent may be withdrawn in the following manner: by sending a letter to the Administrator’s address indicated in point III above; or by sending an email to: rodo@art-time.pl

VI. Data recipients

1. Your personal data may be transferred, if necessary, to the following categories of recipients:
   • persons authorized by the co-administrators, including its employees and associates (regardless of the legal basis for their employment) who will have access to your personal data in connection with the performance of their duties,
   • entities providing services to the co-administrators, e.g., IT service providers, auditors, advisors, law firms, accountants, subcontractors who may assist in responding to your request expressed in the contact form or at a later stage of cooperation in order to perform the contract concluded with you,
   • other authorized entities, only to the extent specified by law,
   • other third parties only if you give your separate consent or request such disclosure.
2. Your personal data will not be transferred to a third country/international organization.
3. Your personal data will not be automatically profiled.
4. Your personal data will be processed until the purpose specified in the consent is fulfilled or until the consent is withdrawn, whichever occurs first, and then for the period of limitation of claims and until the completion of civil, enforcement, administrative, and criminal proceedings requiring data processing—in each case, no longer than necessary.
5. If you voluntarily consent to being contacted via instant messaging services (WhatsApp, Viber, Messenger, Signal, Telegram), the Administrator will process your data for the purpose of presenting job offers and conducting recruitment communication. The recipients of your personal data may be communication service providers and social media operators, including: Meta Platforms Ireland Ltd. (WhatsApp, Messenger) , Viber Media S.? r.l., Telegram Messenger Inc., and Signal Messenger, LLC. The use of instant messaging services implies acceptance of the terms and conditions and privacy policies of the respective providers. You have the right to withdraw your consent to contact via instant messaging services at any time, which does not affect the lawfulness of the processing prior to its withdrawal.

VII. Rights of data subjects

Please be advised that, in accordance with current regulations, you have the following rights:

1. Right of access to data (Article 15 of the GDPR),
2. Right to rectification (Article 16 of the GDPR),
3. Right to erasure of data (“right to be forgotten”) (Article 17 of the GDPR),
4. Right to restriction of processing (Article 18 of the GDPR),
5. Right to data portability (Article 20 of the GDPR),
6. Right to object to processing (Article 21 of the GDPR).
7. You can exercise your rights by sending a request to the following e-mail address: rodo@art-time.pl. The request can also be submitted by post – by sending it to the Administrator’s mailing address indicated in point III above.
8. You have the right to lodge a complaint with the President of the Personal Data Protection Office if you believe that the processing of your personal data violates the provisions of the GDPR or other provisions regarding the processing of personal data.