Information clause for candidates in recruitment processes conducted by Anshar Studios S.A.
Last update: July 2026
Dear Candidate,
This information clause applies to all personal data concerning you that we process in the course of our recruitment processes. It is also available at: https://ansharstudios.com/personal-data-processing/
By providing you with this clause, we fulfil our obligations under Articles 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation “GDPR“”). We would like to inform you that regardless of the method of informing about the positions we offer, the recruitment process, including the review and evaluation of the application, is always carried out taking into account the principles of personal data processing described below.
If you are also interested in participating in future recruitment processes, we always ask you to include the following consent in the content of your application:
“I agree to the use of my personal data contained in the recruitment application (including CV) in future recruitment processes organized by Anshar Studios S.A.”.
Who is the Administrator of your data?
1. The administrator, i.e. the entity deciding how and for what purpose your personal data will be processed, is Anshar Studios S.A. with its registered office in Katowice (40-007), 13 Uniwersytecka Street, entered into the register of entrepreneurs by the District Court Katowice – East in Katowice, VIII Commercial Division of the National Court Register under KRS number 0000489367, NIP 6342820399, REGON 243337429, share capital: PLN 287,500.00, paid in full (hereinafter referred to as the “Administrator”).
How to contact the Administrator of your data?
2. If you have any questions regarding the manner and scope of processing of your personal data within the scope of the Controller’s activities, as well as your rights, you can contact us at the following address: privacy@ansharstudios.com or in writing to the Administrator’s address indicated above.
What is the purpose and legal basis for the processing of your personal data by the Administrator?
3. Your personal data will be processed for the following purposes and on the following legal grounds:
a. in the event that the personal data processed by the Administrator include your personal data specified in Article 221 of the Labour Code, i.e. when you are a candidate for employment on the basis of an employment contract – in order to fulfil a legal obligation incumbent on the Administrator (legal basis: Article 6(1)(c) of the GDPR, i.e. performance of an obligation imposed by law);
b. in the scope of data other than those indicated above – for the purpose of assessing the candidacy, presenting an offer of employment or taking other actions before concluding the contract (legal basis: Article 6(1)(b) of the GDPR – processing is necessary to take action at the request of the data subject before concluding the contract); in the scope of data not required by labour law (including if the recruitment does not concern employment under an employment contract) or by the Administrator in the the recruitment process, i.e. when the application documents sent by you or the information provided contain personal data that are not required by law or the Administrator, we process such data – for the purpose of evaluating the candidacy, presenting an offer of employment or taking other actions before concluding the contract (legal basis: Article 6(1)(a) of the GDPR – consent to the processing of personal data, expressed by an unambiguous confirmatory action, i.e. sending application documents and/or providing information);
c. in the scope of personal data collected from publicly available professional profiles on industry social networks (LinkedIn or other industry social networks) – in order to verify your qualifications and skills (legal basis: Article 6(1)(f) of the GDPR, i.e. the legitimate interest of the Administrator consisting in analyzing and verifying publicly available (on a professional profile) information about experience and education in relation to the information contained in your application);
d. for the purpose of conducting future recruitment (if you have given your consent in this regard) (legal basis: Article 6(1)(a) of the GDPR – consent to the processing of personal data for the purposes of future recruitment);
e. alternatively, in order to establish and pursue claims related to recruitment, employment and cooperation or to defend against such claims (legal basis: Article 6(1)(f) of the GDPR – legitimate interest pursued by the Administrator consisting in establishing and securing the claims to which the Administrator is entitled or defending against such claims);
f. in order to fulfil legal obligations, including accounting, tax, labour law, related to the inspection of an authorised state authority or other statutory obligations (legal basis: Article 6(1)(c) of the GDPR – performance of an obligation imposed by law).
What is the source of personal data processed by the Administrator?
4. The data is collected directly from the candidate on the basis of the submitted application documents. In the case of applying for employment on the basis of an employment contract, these may include, in particular, the data indicated in Article 221 § 1 of the Labour Code, which entitles the Administrator to request them from the candidate. In addition, in order to properly consider the candidacy, the Administrator may, in some cases, supplement the data collected from the candidate with further information, also in order to verify the data already collected by inspecting the candidate’s professional profile in publicly vailable industry portals, such as data on their skills, experience, education or previous jobs available on this profile.
5. The Administrator may also collect personal data about the candidate from sources other than directly from the candidate or from the candidate’s profile on the industry portal (Article 14 of the GDPR). In such a case, the candidate’s consent to the processing of such data will be obtained each time.
6. The Administrator does not provide for the processing of special categories of personal data within the scope of the recruitment process.
What are the recipients of your personal data?
7. In connection with the processing of data for the purposes referred to in point 3, the recipients of your personal data may be entities from the following categories:
a. members of the Administrator’s staff and the Administrator’s affiliates (Anshar Publishing sp. z o.o.) involved in recruitment, including recruitment meetings;
b. entities providing services to the Administrator in the field of delivery and operation of the Administrator’s IT systems, including hosting providers, mail system providers, messenger providers (m.in. Confluence system provider – Atlassian Pty Ltd, Slack Technologies
Limited messenger provider, MS365 system provider, including mail system and cloud solutions – Microsoft Ireland Operations Limited);
c. entities providing legal services in the field of ongoing proceedings before common courts and public administration bodies, as well as for the purpose of day-to-day legal services;
d. operators of recruitment platforms and portals through which candidates apply for the offered positions or through which the Administrator acquires candidates – in the scope of data necessary to carry out the recruitment process; these entities may process your data as separate controllers, in accordance with their respective privacy policies;
e. the company managing the building in which the Administrator’s registered office and office are located – in the scope of data necessary to ensure the safety and protection of the building, access control to the facility and parking lot operation; this entity processes the data made available to it as a separate, independent controller, independently determining the purposes and methods of their processing, therefore you will be informed about the details of this processing and your rights directly by this entity.
What is the time of processing your data by the Administrator?
8. Your personal data will be stored for the period necessary to achieve the purposes set out in this notice. Personal data will be deleted after the recruitment process is completed (i.e. once we have hired the person or persons for the position that is currently being offered or after we have informed you that we do not decide to make an offer of employment).
9. An exception is the case when the candidate has given consent to the processing of personal data for the purposes of future recruitment processes – then the candidate’s personal data will be processed in subsequent recruitment processes for the same or similar position, but no longer than 1 year from the consent, as well as the case when the law requires us to store your personal data for a longer period.
10. Your personal data will be processed for a further period of time, in the event of accepting an offer of employment or concluding another type of cooperation agreement. In such a case, you will be informed separately about the rules of personal data processing.
What are your rights towards the Administrator in the scope of processed data?
11. In connection with the processing of your personal data by the Administrator, you have the right to:
a. object to the processing of data, if the basis for the processing is the legitimate interest of the Administrator in accordance with Article 6(1)(f) of the GDPR. In such a case, the Administrator will no longer process these personal data, unless it demonstrates the existence of important, overriding, legally justified grounds for processing, or grounds for establishing, pursuing or defending claims;
b. withdrawal of consent at any time. This withdrawal does not affect the compliance of the processing that was carried out on the basis of consent before its withdrawal. Withdrawal of consent may be made by sending information in this regard to the Administrator’s e-mail address or correspondence address indicated in point 2;
c. request access to their data from the Administrator;
d. request from the Administrator to correct them;
e. request the Administrator to delete their data to the extent provided for by law;
f. request the Administrator to restrict data processing;
g. transfer your data, if the processing is carried out by automated means and if the data is processed in connection with a contract.
12. If you become aware of unlawful processing of your personal data by the Administrator, you have the right to lodge a complaint with the President of the Office for Personal Data Protection.
Is providing your personal data voluntary?
13. Providing your personal data to the Administrator is voluntary, however, failure to provide the data required by the Administrator (including in the recruitment advertisement) or the provisions of law will result in the inability to take part in the recruitment.
Will your personal data be subjected to automated decision-making, including profiling?
14. Your data will not be subjected to automated decision-making, including in the form of profiling, i.e. no decisions that produce legal effects on you or similarly significantly affect you will be based on automated decision-making.
Will your personal data be transferred outside the EEA?
15. Due to the fact that the Administrator uses IT tools, the providers of which have their registered offices outside the European Economic Area, when it is not possible to choose the location of data storage in the EEA, your data may be transferred outside the EEA. In such cases, the Controller shall verify each time whether the contractors located outside the EEA ensure a high level of personal data protection and whether an dequate level of personal data protection is guaranteed by the regulations of the third country to which the personal data would be transferred (including, in particular, whether the European Commission has issued a decision stating an adequate level of personal data protection in such a country). The security measures applied by the Administrator in such cases are, in particular, the use of standard contractual clauses approved by the European Commission. The administrator also ensures appropriate technical security measures each time.
16. In order to obtain from the Administrator a copy of the decision of the European Commission or standard contractual clauses, you may contact the Administrator using the data indicated in point 2.
