Spontaneous application

In connection with the processing of personal data of Candidates for work, based on the provisions of Art. 13 section 1 and item 2 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 / EC (General Data Protection Regulation) , further: "GDPR", below we provide the information required by law. Personal Data Controller (Controller): ENDEGO sp. z o.o. [Polish limited liability company] with its registered office in Kraków, ul. Samuela Bogumiła Lindego 1C, 30-148 Kraków, KRS: 000042015 Purpose of processing: Assessment of the Candidate's qualifications, assessment of the Candidate's abilities and skills needed for work, choosing the right person for employment Legal grounds for processing: Contract of employment, legal obligation, data processing agreement, Candidates consent, the legitimate interest of Controller Data recipients: Entities processing data on behalf of Controller Rights related to data processing: - The right to withdraw consent to data processing - The right to access personal data and the right to request their rectification, their removal or restrictions on their processing - Other rights specified in the Detailed Information More information about the processing of personal data is available in Detailed Information about the processing of personal data below: DETAILED INFORMATION ABOUT DATA PROCESSING Data Controller The controller of the Candidate's personal data (hereinafter: "Controller") is ENDEGO sp. z o.o. [Polish limited liability company] with its registered office in Kraków, ul. Samuela Bogumiła Lindego 1C, 30-148 Kraków, KRS: 000042015. The Candidate may contact the Controller as follows: By post to the following address: ul. Samuela Bogumiła Lindego 1C, 30-148 Kraków By e-mail: info@endego.com By phone: (+48) 12 397 21 82 The purposes of processing personal data and the legal basis for processing Candidate's personal data will be processed to: conducting recruitment procedure for those who gave their consent to it or sent the Controller their CV. The legal basis for data processing is the necessity to act on Candidates request prior to conclusion of employment contract or a civil law contract (pursuant to the Article 6 section 1 letter b of GDPR), necessity to fulfil the obligation resulting from Article 22(1) of the Labour Code (pursuant to the Article 6 section 1 letter a of GDPR) and legally justified interest of the Controller (pursuant to the Article 6 section 1 letter f of GDPR) which is the staff recruitment procedure; fulfilment of legal obligations imposed on the Controller, in particular under the provisions of tax law (pursuant to the Article 6 section 1 letter c of GDPR); determining, securing and the pursuing possible claims of both the Controller and the Candidate. The legal basis is a legally justified interest of the Controller (pursuant to the Article 6 section 1 letter f of GDPR) consisting of the possibility of determining, pursuing or defending claims. Data recipients (categories of recipients) The Candidate's personal data may be shared with external entities providing services to Controller, such as legal, auditing and accounting services, as well as IT service providers, including electronic mail. Controller may disclose personal data only to entities with which it has concluded a contract entrusting the processing of personal data. The Controller may disclose Candidates personal data to third countries outside the EU and EEA only if an adequate level of protection of personal data is ensured in that country. Period of storage of personal data The Controller will store the Candidates data for the period necessary to achieve the objectives set out hereinabove. If: the Candidate has agreed to participate in the recruitment process just after the recruitment process is finished, the Candidate has agreed to participate in future recruitment processes - after two years from receiving the application the Candidates personal data are processed in connection with using the Social Media Profile for the period of having an account on the said Social Media (subscribing, liking, commenting), the Candidates personal data are processed on the basis of the consent until the consent is withdrawn. If the Candidates personal data will no longer be necessary for the purposes for which they were processed, the Controller will keep them in order to determine, pursue or defend potential claims of both the Controller and the Candidate only for periods of limitation set out in the provisions of law. Consequences of not providing personal data Providing personal data by the Candidate is voluntary, although necessary to carry out the recruitment process. Failure to provide personal data is associated with the inability of the Candidate to participate in the recruitment process. Consent to the processing of personal data for future recruitments will result in the Candidate's recruitment documents being taken into account in the case of subsequent recruitments conducted by Controller. Failure to provide data or lack of consent will exclude this possibility. Information on automated decision making When processing Candidate's personal data, we do not use automated decision making or profiling. Rights related to the processing of personal data The candidate has the following rights related to the processing of personal data: The right to access personal data, the right to request rectification, deletion or limitation of the processing of personal data, provided that these rights are not excluded or limited by law. The right to object to the processing of personal data due to the particular situation of the Candidate in cases where the personal data of the Candidate are processed on the basis of our legitimate interest. With respect to data processed on the basis of consent - the right to withdraw consent to the processing of personal data at any time, whereas withdrawal of consent does not affect the lawfulness of the processing which was carried out on the basis of consent before its withdrawal. The right to transfer personal data, i.e. the right to receive personal data in a structured, commonly used, machine-readable IT format. The Candidate may send this data to another data controller or request that we send the data to another controller. However, we will only do this if this message is technically possible. The right to lodge a complaint with the body the President of the Personal Data Protection Office. Other rights arising from generally applicable laws. To exercise the above rights, please contact the Controller.

I consent to the processing of my personal data contained in the application documents for the purposes of future recruitments processes carried out by Endego Sp. z o.o. with its registered office in Kraków, ul. Samuela Bogumiła Lindego 1C, 30-148 Kraków, KRS: 000042015 and by other entities within the capital group.