Privacy policy

Reason for collecting, processing and storing your personal data

Art. 1. "Devnox" collects and processes your personal data in connection with the conclusion and execution of contracts with the Company on the grounds of Art. 6, para. 1, Regulation (EC) 2016/679 (GDPR), and in particular on the following grounds:

• To take steps on your request to sign a contract if you are a candidate for work with us;
• To execute a contract or take steps to conclude a contract with a trading partner.
• Compliance with a statutory duty applicable to the Administrator;
• For the purposes of the legitimate interests of the Administrator or a third party

Goals and principles of collecting, processing and storing your personal data

Art. 2. (1) Upon conclusion of a contract with a trading partner or a commercial company-client we collect and process personal data about the names of the legal representative of the legal person - a party to the contract, for the purpose of individualization of the party to the contract and its execution.

(2) The contact details of the legal representative or contact person shall be official information and as such shall not be considered as personal data.

Art. 3. (1) We collect and process the personal data you provide to us by applying for work at Stenik Group, including for the following purposes:

individualisation of the applicant;
making contact with you and conducting communication;
selection of candidates.

(2) We keep your personal data you have provided to us for the entire duration of the job announcement, and in the event that we would like to continue storing your data after this period for the purpose of further communication with you, we will send you by email, to give your explicit consent that your data will continue to be stored.

Art. 4. We comply with the following principles when processing your personal information:

• lawfulness, good faith and transparency;
• limitation of the purpose of processing;
• relevance to processing goals and minimization of data collection;
• accuracy and timeliness of the data;
• Restriction of storage in order to achieve the objectives;
• integrity and confidentiality of processing, and ensuring an adequate level of security of personal data.

Art. 5. When processing and storing personal data, the Administrator may process and store personal data to protect the following legitimate interests:

fulfilling its obligations to the National Revenue Agency, the Ministry of Interior and other state and municipal authorities.

What kind of personal data collects, processes and stores our company

Art. 6. (1) "Devnox" performs the following operations with the personal data you provide as job applicants for the following purposes:

Conclusion and performance of an employment or civil contract with a physical person: To process a selection of job applicants, we process the personal data you have sent us to your resume.

Conclusion of the Impact Assessment: Given the small volume of data subjects that are processed and given the limited amount of personal data collected, an impact assessment is not necessary for the current operation.

(2) The administrator does not collect or process any personal data related to the following:

• reveal racial or ethnic origin;
• reveal political, religious or philosophical beliefs, or membership of trade unions;
• genetic and biometric data, health data, or data on sexual life or sexual orientation.

(3) The personal data are collected by the Administrator from the persons to whom they refer.

(4) The administrator does not make automated decision making with data.

Art. 7. (1) "Devnox" carries out the following transactions with the personal data you provide as legal representatives or proxies of legal persons - trading partners and clients for the following purposes:

Concluding and executing a commercial deal with a contractor or a client contract: For the conclusion and execution of a commercial transaction with a trading company, we process only the full names of the legal representative or the person authorized by the company.

Conclusion of the Impact Assessment: Given the small volume of data subjects that are processed and given the limited amount of personal data collected, an impact assessment is not necessary for the current operation.

(2) The personal data are collected by the Administrator from the persons to whom they refer also from the Commercial Register to the Registry Agency.

(3) The administrator does not perform automated decision making with data.

Art. 8. (1) "Devnox" performs the following operations with the personal data provided by you as participants in events organized by the Administrator for the following purposes:

• Participant Registration and Sending Information: To participate in events organized by Devnox, we process three names, an email address and a phone number of the physical person involved in events.

Conclusion of the Impact Assessment: Given the small volume of data subjects that are processed and given the limited amount of personal data collected, an impact assessment is not necessary for the current operation.

(3) The personal data are collected by the Administrator from the persons to whom they refer.

(4) The administrator does not make automated decision making with data.

Art. 9. (1) "Devnox" performs the following operations with the personal data provided by you as a person who has requested the receipt of a newsletter for the following purposes:

Send a newsletter (Newsletter): To send a newsletter, we process three names and an email address of the individual.

Conclusion of the Impact Assessment: Given the small volume of data subjects that are processed and given the limited amount of personal data collected, an impact assessment is not necessary for the current operation.

Art. 10. (1) "Devnox" performs the following operations with the personal data provided by you as persons who have made a request through the Company's website form - https://devnox.com:

Processing queries sent through the form of the website https://devnox.com - the purpose of this operation is to contact the requestor by email for the purpose of responding to the requestor, Identifying the subject of the data as an applicant and sending reply to a quote or offer.

Conclusion of the impact assessment: Given the limited scope of the collected personal data, no impact assessment of the operation is necessary.

(2) The personal data are collected by the Administrator from the persons to whom they refer.

(3) The administrator does not perform automated decision making with data.

Term of storage of your personal data

Art. 11. (1) "Devnox" keeps your personal data as a candidate for work for a period no longer than the availability of a current job offer, published on our website or elsewhere. After the expiration of the notice or the completion of the selection, Devnox takes the necessary care to erase and destroy all your data without undue delay or to anonymize them (ie to bring them in a form that does not reveal your personality) , unless you expressly agree that your data will continue to be stored and processed for the future.

(2) "Devnox" shall store the personal data of the legal representatives of the legal persons - parties to the contract with the company for an indefinite period, in order to protect the legitimate interest of Devnox and fulfill its legal obligations to state bodies and institutions.

(3) The Administrator shall notify you in case the period for storing the data needs to be extended in order to comply with a statutory obligation or in view of the legitimate interests of the Administrator or otherwise.

Transmitting your personal data for processing

Art. 12. (1) The administrator may, at its own discretion, transmit all or part of your personal data to processor personal data for the fulfillment of the processing purposes you have agreed to, subject to the requirements of Regulation (EC) 2016/679 (GDPR) .

(2) The Administrator notifies you in case of intent to transfer some or all of your personal data to third countries or international organizations.

Your rights in collecting, processing and storing your personal data

Withdrawal of consent to process your personal data

Art. 13. (1) If you do not wish all or any of your personal data to continue to be processed by Devnox for any or all processing purposes, you may at any time withdraw your consent to processing by sending a request to free text or fill in the form in Appendix 1.

(2) The Administrator may ask you to certify your identity and identity with the person to whom the data relate by requesting you to present an identity document on site.

(3) Withdrawal of consent does not affect the merits of processing the personal data you provide until the withdrawal of the consent.

(4) "Devnox" may continue to process part or all of your data if there is a legal obligation for this or for the purpose of protecting its legitimate interests.

(5) Regarding legal representatives and natural persons under the contract with the company, par. 4.

Right of access

Art. 14. (1) You have the right to request and obtain from the Administrator a confirmation that personal data relating to you is being processed.

(2) You have the right to access the data relating to you as well as information relating to the collection, processing and storage of your personal data.

(3) The Administrator shall provide you, upon request, with a copy of the processed personal data relating to you in electronic or other appropriate form.

(4) The provision of access to the data is free of charge, but the Administrator reserves the right to impose an administrative fee in case of repeatability or excessive demand.

Right of correction or completion

Art. 15. You have the right to ask the Administrator to:

• correct inaccurate personal data associated with you;
• to fill in the incomplete personal data associated with you.

Right to delete ("to be forgotten")

Art. 16. (1) You have the right to ask the Administrator to delete any or all personal data related to you and the Administrator has the obligation to delete them without undue delay when any of the following reasons exists:

• personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
• You withdraw your consent on which the processing of the data is based and there is no other legal basis for the processing;
• You object to the processing of your related personal data, including for the purposes of direct marketing, and there are no legitimate grounds for the processing that will take precedence;
• personal data has been tampered with;
• personal data must be deleted in order to comply with a legal obligation under EU law or the law of a Member State that applies to the Administrator;
• personal data have been collected in connection with the provision of information society services.

(2) The administrator is not obliged to delete the personal data if he / she keeps them and processes them:

• for the exercise of the right to freedom of expression and the right to information;
• to comply with a legal obligation that requires treatment provided for under EU law or the law of the Member State that applies to the Administrator or for the performance of a task of public interest or the
• exercise of official authority conferred on him;
• for reasons of public interest in the field of public health;
• for purposes of archiving in the public interest, for scientific or historical research or for statistical purposes;
• for the establishment, exercise or protection of legal claims.

(3) In the event that you exercise your right to be forgotten, the Company will delete all your data, except your three names as a candidate for employment, for reporting purposes.

(4) The data of the legal representatives of partner companies and clients under contract with the company shall continue to be preserved and processed, despite a request for forgotten, on the grounds of observance of a legal obligation of the company, observance of the legitimate interest and establishment, the protection of legal claims.

(4) In order to exercise your right to be forgotten, it is necessary to send a request in free text or to fill in the form in Appendix 2 and to identify yourself with an identity document on the spot.

Right of limitation

Art. 17. You have the right to require the Administrator to restrict the processing of your related data when:

• contest the accuracy of personal data for a period that allows the Administrator to verify the accuracy of personal data;
• processing is illegal, but you do not want personal data to be erased but only to be limited;

The administrator no longer requires personal data for the purpose of processing, but you require them to establish, exercise or protect your legal claims;

You have objected to the processing pending verification that the legal grounds of the Administrator have an advantage over your interests.

Right of portability

Art. 18. (1) If you have consented to the processing of your personal data or the processing is necessary for the performance of the agreement with the Administrator, or if your data is processed in an automated manner, you may, after you have been identified by the Administrator:

• ask the Administrator to provide you with your personal data in a readable format and transfer it to another Administrator;
• ask the Administrator to directly transfer your personal data to an administrator you provide when it is technically feasible.

(2) You may exercise your right of portability by sending a request in free text or by completing the form in Appendix 3.

Right to receive information

Art. 19. You may ask the Administrator to inform you of all recipients to whom the personal data for which correction, deletion, or limitation of the processing has been requested has been disclosed. The administrator may refuse to provide this information if this would not be possible or would require disproportionate effort.

Right of objection

Art. 20. You may object at any time to the processing of personal data by the Administrator that relates to you, including if it is being processed for profiling or direct marketing purposes.

Your rights to violate the security of your personal information

Art. 21. (1) If the Administrator detects a breach of security of your personal data that may pose a high risk to your rights and freedoms, he shall notify you without undue delay of the breach and of the measures taken or to be taken .

(2) The administrator is not obliged to notify you if:

• has taken appropriate technical and organizational protection measures with respect to the data affected by the security breach;
• has subsequently taken measures to ensure that the violation will not lead to a high risk for your rights;
• notification would require disproportionate efforts.