Privacy Policy for the Infotree Global Solutions employer branding and recruitment
Date of update: 16-05-2025
1. General provisions
We at Infotree Global Solutions manage our employer branding and recruitment process through our career site (the “Career Site”), and by using a related applicant tracking system.
In this Privacy Policy, we explain how we process your personal data if:
- You visit our Career Site (you being a “Visitor”)
- You connect with us via our Career Site, to create a profile with us and receive information about current or future vacancies with us (you being a “Connecting Candidate”)
- You apply for a position with us, via our Career Site or a third party service (you being an ”Applying Candidate”)
- We collect information about you from other parties, sites and services, since we believe your profile is of interest for our current or future vacancies (you being a “Sourced Candidate”)
- We receive information about you from our employees or partners, since they believe your profile is of interest for our current or future vacancies (you being a “Referred Candidate”)
- We receive information about you from a Candidate, who lists you as their reference (you being a “Reference”).
This Privacy Policy also describes what rights you have when we process your personal data, and how you can exercise these rights.
When we use the term “Candidate” in this Privacy Policy, we are referring to each of Connecting Candidates; Applying Candidates; Sourced Candidates; and Referred Candidates, unless it’s stated otherwise.
2. The Controllers of your personal data processed in connection with the operation of this website and the provision of services using the website are:
► Infotree Poland sp. z o.o. Address: ul. Grzybowska 87, 00-844 Warsaw, Poland. Registration number: KRS 0000666439. Tax number (NIP): 5272798888;
► Infotree Service Sweden Filial: Address: Kungsgatan 29, Våning 8, 111 56 Stockholm, Sweden. Tax identification number (VAT): 516410-94060;
► INFOTREE SWEDEN AB: Address: Vasagatan 16, 111 20 Stockholm, Sweden. Registration number: 556123-4567. Tax identification number (VAT): SE556123456701;
► Infotree Romania SRL: Full name: Infotree Romania SRL. Address: Strada Aviatorilor 12, 011863 Bucharest, Romania. Registration number: J40/12345/2020. Tax identification number (CUI): RO12345678;
► Infotree Technology SL Address: Avda Lisboa (de) num 7, Portal 2 Planta Baj Puerta B, 28500 Arganda del Rey - (Madrid), Tax Identification Number: B05473616;
► Infotree Denmark: Infotree Service ApS, a limited liability company under Danish law;
► Infotree Germany: Infotree Service GmbH, a limited liability company under German law;
Requests, statements and all correspondence concerning personal data should be sent in writing to the above addresses of the registered offices of the Companies from the Infotree Capital Group or by e-mail to the following address: rodo@infotreeglobal.com
3. Purposes and legal basis of personal data processing
Your personal data are or may be processed by the Controllers for the purposes indicated below:
a) conducting the current recruitment process (legal basis: art. 221 § 1 of the Labor Code in connection with art. 6 sec. 1 letter b of the GDPR Regulation), i.e. in order to conclude a contract, while other data, including contact details, based on consent (art. 6 sec. 1 letter a of the GDPR), which may be withdrawn at any time. Providing data is voluntary, but necessary to register in the candidate database and take part in recruitment;
b) conducting future recruitment processes (legal basis: art. 221 § 1 of the Labor Code in connection with art. 6 sec. 1 letter a of the GDPR Regulation) if voluntary consent is expressed, which may be withdrawn at any time. Providing data is voluntary, but necessary to register in the candidate database and take part in future recruitment;
c) processing of image or health data in the event of expressing consent by voluntarily supplementing the Candidate's application documents (CV) with special category data (legal basis: art. 222 § 1 of the Labor Code in connection with art. 6 sec. 1 letter a of the GDPR Regulation). Consent to the processing of special category data may be revoked at any time;
d) providing answers to the extent indicated in the Contact Form. The processing of personal data contained therein takes place on the basis of the expressed consent (in accordance with art. 6 sec. 1 letter a) of the GDPR); Providing personal data is voluntary, but necessary to use the form's functionality. Failure to provide personal data will result in the inability to send data via the form.
e) direct marketing carried out by the Controller on the basis of a legitimate interest (legal basis: art. 6 sec. 1 letter f of the GDPR Regulation). Consent to direct marketing using an e-mail address and telephone number, including the use of telecommunications terminal equipment and automated calling systems, is voluntary (legal basis: art. 6 sec. 1 letter a of the GDPR Regulation and in connection with art. 10 sec. 1 and 2 of the Act on the provision of services by electronic means and in connection with art. 172 of the Telecommunications Law) and may be revoked at any time;
f) any determination, pursuit or securing of claims (legal basis: art. 6 sec. 1 letter f) of the GDPR), i.e. the legitimate interest of the Controller
4. Duration of personal data processing
Personal data will be stored for the period necessary to achieve the purpose of data processing, i.e. for the purpose:
1) specified in letter a) for the period of the recruitment process;
2) for the purpose specified in letters b) and c) for a period of 2 years from the date of consent or until the consent is withdrawn;
3) for the purpose specified in letters d) and e) until the consent is withdrawn,
4) for the purpose specified in letter f) for the period of limitation of claims resulting from the provisions of law.
5. What personal data do we process?
All individuals
- Device information - If you visit our Career Site, we will collect information about your device, such as IP address, browser type and version, session behaviour, traffic source, screen resolution, preferred language, geographic location, operating system and device settings/usage.
- Technical and statistical data - If you visit our Career Site, we will collect technical and statistical data about your use of the site, such as information about which URLs you visit, and your activity on the site.
- Communications data - We will collect and store your communication with us, including the information you provided in the communication. This may include the content of emails, video recordings, messages on social media, the information you add to your account with us, surveys, etc.
- Contact details - Such as your name, email address, telephone number and physical address.
Candidates
- Data from interviews, assessments and other information from the recruitment process - Such as notes from interviews with you, assessments and tests made, salary requirements.
- Information in your application - Such as your CV, cover letter, work samples, references, letters of recommendation and education.
- Information in your public profile - Meaning the information we collect about you from public sources related to your professional experience, such as LinkedIn or the website of your current employer.
- Information provided by references - Meaning the information we receive from our employees or partners who refer you to us, or by the persons you have listed as your references.
6. Where do we receive your personal data from?
All individuals
- From the Career Site. If you visit our Career Site, we collect technical and statistical information about how you use the Career Site, and information from your device.
- Directly from you. Most of the information we process about you, we receive directly from you, for example when you apply for a position with us or connect with us. You can always choose not to provide us with certain information. However, some personal data is necessary in order for us to process your application or provide you the information you request to get from us.
References
- From the person for whom you are a reference. If a Candidate lists you as their reference, we will collect your contact details from the candidate to be able to contact you.
Candidates
- From public sources. We may collect personal data about you from public sources, such as LinkedIn or the website of your current employer.
- From our references. We may receive information about you from our employees or partners (such as recruitment service providers), when they believe your profile is of interest for our current or future vacancies.
- From your references. If you provide us with references, we may collect information about you from them.
- Data we create ourselves or in cooperation with you. Information about your application and profile is usually created by us, or by us in cooperation with you, during the recruitment process. This may for example include notes from interviews with you, assessments and tests made.
7. Whom do we share your personal data with?
In connection with the processing of data for the purposes indicated above, Personal Data registered in the Candidate's database may be made available to joint controllers from the Capital Group sharing the IT system in which the Candidate's personal data is stored or to the categories of recipients of personal data indicated below:
- entities authorized under separate regulations (ZUS, US, etc.),
- entities cooperating with the Administrator on the basis of agreements on joint data administration,
- potential Employers and Employer Users
- entities providing services on behalf of the Administrator on the basis of a processing entrustment agreement, e.g. for the operation of the Website and other available Services, in particular in the field of IT services, marketing services, analytical services, archiving, professional consulting. The Administrator will make this data available on the basis of a personal data processing entrustment agreement or another legal instrument in accordance with Art. 28 of the GDPR, which will ensure appropriate protection of the Personal Data provided.
If you consent to it, cookies are set by other companies than us, who will use the data collected by these cookies in accordance with their own Privacy Policy. You can find information about which cookies this applies to in our Cookie Policy.
8. When do we transfer your personal data outside of the EU/EEA, and how do we protect it then?
We always strive to process your personal data within the EU/EEA area.
However, some of our service providers process your personal data outside of the EU/EEA. We also use suppliers whose parent company, or whose subcontractor’s parent company, is based outside the EU/EEA. In these cases, we have taken into account the risk that the personal data may be disclosed to countries outside the EU/EEA, for example because of an authority request.
In cases where another recipient of your personal data (as described in Section 5 above) is based outside the EU/EEA, this will also mean that your personal data is transferred outside the EU/EEA.
When we, or one of our suppliers, transfer your personal data outside the EU/EEA, we will ensure that a safeguard recognized by the GDPR is used to enable the transfer. We use the following safeguards:
- Entering into the EU Commission’s standard clauses with the recipient of the personal data outside the EU/EEA. This means that the recipient guarantees that the level of protection for your personal data afforded by the GDPR still applies, and that your rights are still protected.
When your personal data is transferred outside the EU/EEA, we also implement appropriate technical and organizational safeguards, to protect the personal data in case of a disclosure. Exactly which protective measures we implement depends on what is technically feasible, and sufficiently effective, for the particular transfer.
If you want more information about the cases in which your personal data is transferred outside the EU/EEA you can contact us using the contact details in Section 9 and 10 below.
9. What rights do you have, and how can you exercise them?
In this section, you will find information about the rights you have when we process your personal data. As described below, some of the rights only come into play when we process your personal data under a particular legal basis.
If you want to exercise any of the rights listed here, we suggest that you:
- Visit the Data & Privacy page on our Career Site, where we offer features to let you exercise your rights;
- Log in to your account with us, where you can use the settings in the account to exercise your rights; or
Right to be informed
You have the right to be informed about how we process your personal data. You also have the right to be informed if we plan to process your personal data for any purpose other than that for which it was originally collected.
We provide you with such information through this Privacy Policy, through updates on our Career Site (see also Section 11 below), and by answering any questions you may have for us.
Right to access your personal data.
You have the right to know if we process personal data about you, and to receive a copy of the data we process about you. In connection with receiving the copy of your data, you will also receive information about how we process your personal data.
Right to access and to request a transfer of your personal data to another recipient (“data portability”).
You can request a copy of the personal data relating to you that we process for the performance of a contract with you, or based on your consent, in a structured, commonly used, machine-readable format. This will allow you to use this data somewhere else, for example to transfer it to another recipient. If technically feasible, you also have the right to request that we transfer your data directly to another recipient.
Right to have your personal data deleted (“right to be forgotten”).
In some cases, you have the right to have us delete personal data about you. This is for example the case if it’s no longer necessary for us to process the data for the purpose for which we collected it; if you withdraw your consent; if you have objected to the processing and there are no legitimate, overriding justifications for the processing. (For the separate right to object, see below.)
Right to object against our processing of your personal data.
You have the right to object to processing of your personal data which is based on our legitimate interest, by referencing your personal circumstances.
Right to restrict processing.
If you believe that the personal data we process about you is inaccurate, that our processing is unlawful, or that we don’t need the information for a specific purpose, you have the right to request that we restrict the processing of such personal data. If you object to our processing, as described just above, you can also request us to restrict processing of that personal data while we make our assessment of your request.
When our processing of your personal data is restricted, we will (with the exception of storage) only process the data with your consent or for the establishment, exercise or defence of legal claims, to protect the rights of another natural or legal person, or for reasons relating to an important public interest.
Right to rectification.
You have the right to request that we rectify inaccurate information, and that we complete information about you that you consider incomplete.
Right to withdraw your consent.
When we process your personal data based on your consent, you have the right to withdraw that consent at any time. If you do so, we will stop processing your data for the purposes you’ve withdrawn your consent for. However, it doesn’t affect the lawfulness of processing that was based on your consent before it was withdrawn.
Right to raise a complaint.
If you have complaints about our processing of your personal data, you can raise a complaint with the data protection authority in Poland. You can find their contact details here.
You can also lodge a complaint with your national data protection authority, which you can find listed here if you are based in the EU. If you are based in the UK, you can lodge a complaint with the Information Commissioner’s Office, here.
10. Where can you turn with comments or questions?
If you want to get in touch with us to exercise your rights, or if you have any questions, comments or concerns about how we handle your personal data, you can reach us by sending an email to rodo@infotreeglobal.com
11. Updates to this Privacy Policy
We update this Privacy Policy when necessary - for example, because we start processing your personal data in a new way, because we want to make the information even clearer to you, or if it’s necessary to do so in order to comply with applicable data protection laws.
We encourage you to regularly check this page for any changes. You can always check the top of this page to see when this Privacy Policy was last updated.
