Onwelo S.A. is the owner of the Hello Astra application intended for managing recruitment processes. with its registered office in Warsaw (01-207 Warsaw), ul. Karolkowa 30 (hereinafter "Onwelo" or " Controller").
Onwelo is the controller of data that we collect when you use the Application. You can contact us by e-mail: firstname.lastname@example.org or in writing to the address of the registered office.
We have also appointed a data protection officer, whom you can contact by e-mail: email@example.com or in writing (to the registered office with the note: Data Protection Officer).
The scope of your personal data that we collect, the purposes and the basis for their processing depend on the services you use via our website or Application. You will find the required information for each service in the table below.
Scope of dataPersonal data
Purpose of data processingContact, verification of
Basis of data processing3 years from the date
Period of data storageOur legitimate interest
Contact regarding the application
Scope of dataProvided when completing the online contact form and data on your business activities obtained from publicly available sources (e.g. CEIDG)
Purpose of data processingThe accuracy of the data provided in the form, communication in matters related to the Application
Period of data storage(art.6 par.1 lit.f GDPR) which is to enable you to become familiar with the Application and its functions
Conclusion and performance of contracts
Scope of dataPersonal data provided when completing one of the forms to conclude a contract
Purpose of data processingConclusion, performance and settlement of Agreements and performance of tax and accounting obligations, debt collection and determination, investigation or defense against claims arising from non-performance or improper performance of Agreements
Basis of data processing6 years from the date of expiry or termination of the Agreement and for tax and accounting purposes for the period specified in specific tax and accounting regulations
Period of data storageActions necessary to conclude and perform the contract (art.6 par.1 lit.b GDPR) Compliance with legal obligations incumbent on Onwelo SA (art.6 par.1 lit.c GDPR) Our legitimate interest (art.6 par.1 lit.f GDPR) which is the ability to establish, investigate or defend against claims
Using the application
Scope of dataLogin and data contained in the user's profile and data related to the user's activity in the Application (e.g. the frequency of using certain functions)
Purpose of data processingAuthentication in the Application, enabling the use of specific functions and monitoring activity in the Application in order to improve it and provide technical support
Period of data storageOur legitimate interest (art.6 par.1 lit.f GDPR), which is to ensure security in the Application and its proper functioning as well as keeping statistics for technical support and development of the Application
Scope of dataE-mail address
Purpose of data processingOngoing information on events organized by us (e.g. webinars), published articles, new Application functionalities and other Onwelo offers
Period of data storageOur legitimate interest (art.6 par.1 lit.f GDPR) which is the promotion of our products and services, if you agree to receive the newsletter
Marketing of our products and services
Scope of dataPersonal data provided when completing one of the online forms or when subscribing to the newsletter
Purpose of data processingSending commercial information, including direct marketing, understood as directing marketing messages (including information, commercial and promotional content) via e-mail
Period of data storageOur legitimate interest (art.6 par.1 lit.f GDPR), consisting in direct marketing of your own products and services - if you have consented to communication by e-mail or telephone to receive such information from us or you have subscribed to our newsletter
Answering questions, applications and complaints
Scope of dataFirst name, last name, email address, data on the use of the Application related to the inquiry, information contained in the content of the inquiry
Purpose of data processingAnswering questions, applications and complaints
Basis of data processingUntil the answer to the question, consideration of the application or complaint, but no longer than 3 years from the receipt of the question.
Period of data storageOur legitimate interest (art.6 par.1 lit.f GDPR), which is communication with the client and handling his inquiries
Determination, investigation and defense against claims
Scope of dataName, email address, data on the use of the Application
Purpose of data processingDetermination, investigation and defense against claims, including claims for damage caused by unlawful use of the Application
Basis of data processing6 years from stopping using the Application
Period of data storageOur legitimate interest (art.6 par.1 lit.f GDPR), which is the ability to establish, investigate or defend against claims
Providing the indicated scope of data is a condition of access to and use of the Application or is required for the implementation of other services - such as answering an inquiry, receiving a newsletter or receiving ordered marketing and promotional information.
The processing of your personal data does not include automated decision making, including profiling.
The recipients of your personal data will be our authorized employees, persons cooperating with us on the basis of civil law contracts and entities providing services to us, including IT, hosting, legal and consulting services.
Some of our suppliers may be based outside the European Economic Area (EEA), in which case we transfer data on the basis of standard contractual clauses adopted by the Commission (EU) or participation in the "Privacy Shield" program established by Commission Implementing Decision (EU) 2016/1250 of on July 12, 2016 on the adequacy of protection provided by the EU-US Privacy Shield. The conditions for the transfer of personal data to third countries can be found at:
Contact via social media - contact with us is also possible through our social profiles on Facebook, LinkedIn and Twitter. We can use the services of our partners to keep in touch with you or provide you with content. We only use the data obtained in connection with the inquiry addressed to us through social networking sites to provide the answer. Nevertheless, social media collects personal data independently (in connection with the user profiles created in them), therefore the User should read the privacy policies of these portals.
Links to other companies 'websites - the website contains links to other companies' websites, you should read their privacy policies. We also use the so-called Facebook, Instagram, Linkedin and Twitter plugins that allow direct redirection to our profiles on these websites. When you click the plug-in, your browser directly connects to the server of the given portal. If you are logged in to one of the social networks at that time, information about your visits to our Website will be sent to their servers, which will be able to be assigned to your account on this portal. If you do not want to transfer this data, you should log out of the respective social network before clicking on the plugin.
Demands for the exercise of rights should be sent via e-mail to firstname.lastname@example.org.
You have the right to lodge a complaint with the supervisory body if you feel that the administrator is processing your personal data contrary to legal requirements. The supervisory body for the processing of personal data by Onwelo SA is the Polish Office for Personal Data Protection https://uodo.gov.pl.
We make every effort to ensure the security of your personal data, including by encrypting data transmission during registration and logging into the Application.