Privacy policy

This document governs the policy applied by Trans.eu Group S.A., with its registered office in Wrocław, at ul. Racławicka 2-4, 53-146 Wrocław, entered into the register of entrepreneurs maintained by the District Court for Wrocław-Fabryczna in Wrocław, 6th Commercial Division of the National Court Register under number 0000720763, NIP (Tax ID): 8942764658, REGON: 932920615 (hereinafter: the Controller), in the scope of protection of users’ personal data and information that may constitute users’ trade secrets.

This policy applies to services offered by the Controller via the website https://joinus.trans.eu/. The above policy does not cover websites and services of third parties, access to which may be obtained via links available on the above-mentioned site. Detailed information regarding data protection is available separately from each service provider. The Controller recommends that users always read the relevant documents on the providers’ websites.

Collected Data

To use the services offered by the Controller, it is necessary to register an account via the form provided on the website https://joinus.trans.eu/ as part of the provided recruitment offer (a separate recruitment tool) or to use the contact form.

Providing data is voluntary, but necessary to participate in the recruitment process (via the dedicated recruitment tool) and to establish contact with the Controller via the contact form. If the required information is not provided to the Controller, the Controller will not be able to carry out the recruitment process or respond.

Some data is also collected passively, i.e., through the use of the website (e.g., IP address, resolution, location, browser type).

Use of Data

Users’ personal data will be processed:

• based on your consent (Article 6(1)(a) of the GDPR), given for specific purposes (e.g., participation in the given recruitment process or future processes – collected via a separate recruitment tool);
• if necessary, for purposes arising from the legitimate interests pursued by the Controller or a third party (Article 6(1)(f) of the GDPR), such as: user support – responding to inquiries, sending the Controller’s newsletter regarding the latest recruitment offers, ensuring the Controller’s IT security, evaluating satisfaction, pursuing or defending claims, for internal administrative purposes such as preparation of statistics, analyses (e.g., how the website is used, user preferences);
• to fulfill legal obligations (Article 6(1)(c) of the GDPR), as the Controller of your data in the recruitment process may be subject to various legal obligations, including those under data protection regulations, labor law, etc. Where necessary, your data will be processed to meet the requirements imposed by these regulations, such as conducting recruitment processes and fulfilling obligations under other laws. The recruitment process will apply to individuals seeking employment under labor law, as well as under civil law contracts, contracts for specific work, and/or contracts with self-employed individuals.

Consent to the processing of personal data may be withdrawn at any time, although it will not affect the lawfulness of processing carried out before the withdrawal.

Recipients of Personal Data

Data may be disclosed to other recipients in order to fulfill a legal obligation imposed on the Controller, based on your consent, or for purposes arising from the legitimate interests of the Controller or a third party.

In particular, recipients may include entities from the Trans.eu capital group, entities legally authorized to receive your data based on relevant legal provisions (e.g., law enforcement or judicial authorities), and entities processing data on behalf of the Controller and their authorized employees, provided that such entities process data based on a contract with the Controller and only in accordance with its instructions and under confidentiality obligations. These entities may include providers of technical infrastructure necessary for service provision, such as payment providers, IT providers, and website administrators. The Controller exercises due diligence when transferring data, using safeguards to prevent unauthorized access (e.g., SSL, encrypted connections).

Transfer of Data Outside the European Community

The level of protection for personal data outside the European Economic Area (EEA) may differ from that ensured under European law. With this in mind, the Controller transfers personal data outside the EEA only when necessary. In such cases, the Controller ensures an appropriate level of protection, primarily through:

a. transferring personal data to countries for which the European Commission has issued a decision recognizing the country as ensuring an adequate level of data protection; b. applying standard contractual clauses issued by the European Commission; c. implementing other appropriate safeguards.

Rights of the Data Subject

The user has the right to access personal data and request their rectification, restriction of processing, or deletion, to withdraw consent at any time (to the extent consent was given), and to data portability.

The user has the right to lodge a complaint with the supervisory authority, which in the Republic of Poland is the President of the Personal Data Protection Office, if the user believes their data is being processed in violation of the GDPR.

Additionally, the user has the right to object at any time to data processing on grounds relating to their particular situation when the Controller processes the data based on legitimate interests, including for direct marketing and profiling purposes.

Upon confirming the user’s identity, the Controller will fulfill the indicated rights based on an assessment of the legitimacy of the request and applicable law. The Controller will make every reasonable effort to satisfy users’ requests regarding their personal data, unless the data must be retained under legal requirements or other legitimate interests of the Controller.

Data Retention Period

Personal data will be processed and retained by the Controller for the period necessary to achieve the purposes, i.e.:

• for the period required by law or to pursue potential claims;
• for data processed based on consent – until the consent is withdrawn;
• until the legitimate interests of the Controller that justify the processing have been fulfilled or until the user objects to such processing, unless there are overriding legitimate grounds for further processing.

Data collected during users’ visits to the Controller’s website will be processed until they become outdated or no longer useful. This applies to data processed for analytical or statistical purposes, including the use of cookies and website administration.

Cookies

The Controller uses so-called “cookies” to track user visits and store their preferences, such as language, login data, and to tailor services to their needs. These cookies are used to compile general statistics on users’ usage of the website. The files will be stored until they become outdated or no longer useful. Cookies will not be shared with third parties and will only be transferred to entities providing technical support services necessary for their handling, as well as to entities within the Trans.eu Group.

Cookies can be disabled in the web browser, which does not prevent the use of services but may cause some issues – e.g., the Controller’s website may not function properly.

Cookie categories can also be managed via the “Consent” window, which appears when a user first visits our website. Detailed rules for the use of cookies are specified in the Cookie Policy available at: https://www.trans.eu/pl/polityka-plikow-cookies-eu/.

Social Media Plugins

Please note that social media plugins may be placed on the Controller’s website, including: Facebook, Twitter, LinkedIn, Instagram, etc. Due to their presence, the user is obliged to independently review the privacy policies of these providers to obtain current information on personal data protection.

Data in Google Analytics

Traffic on the Controller’s website is monitored using the Google Analytics system, which collects data on how the sites are used and their popularity. This data (e.g., browser used or IP address) will not be disclosed to third parties by the Controller.

Security

To ensure security, the Controller:

• uses SSL encryption;
• enables account access only after entering a login and password (it is recommended to set passwords with at least 8 characters, including upper and lowercase letters, special characters, and numbers), which the user should keep confidential;
• monitors methods of collecting, storing, and processing information, including physical security measures, to protect against unauthorized system access;
• grants access to personal data only to employees, contractors, and collaborators who need it for processing on behalf of the Controller; additionally, under contract, they are bound by strict confidentiality, and if data is entrusted, they are bound by data processing agreements.

Privacy Policy Statement

This Privacy Policy came into effect on ………………………. We may update the Privacy Policy from time to time to reflect changes in our information processing practices and standards. Such modifications may occur without notifying the user. If there are any significant changes affecting personal data processing rules, the user may be notified via email or a notice on the website. Changes take effect upon their publication at https://joinus.trans.eu/, along with the effective date.

Contact Information

If you have any questions or comments regarding the Privacy Policy, please contact the Controller:
Trans.eu Group S.A., Wrocław, ul. Racławicka 2-4, 53-146 Wrocław
(Contact: +48 71 734 17 00, info@trans.eu).

The Controller has appointed a Data Protection Officer who can be contacted via email at: iod@trans.eu