Privacy Policy

VERSION DATED 19 DECEMBER 2025

ManpowerGroup's primary goal is to ensure the confidentiality and security of the personal data of our Clients, Employees, Job Candidates and Users of the Manpower.pl and Experis.pl websites, as well as transparency and compliance with the law in relation to their processing.

The Privacy Policy of the Website/Experis Website describes how personal data is protected and processed in accordance with the standards set out in applicable law.



I. PERSONAL DATA CONTROLLER

The controller of your personal data processed for the purposes specified in the Terms and Conditions of Electronic Services of ManpowerGroup Websites is the Service Provider, i.e. the companies comprising the ManpowerGroup Capital Group, namely ManpowerGroup Sp. z o.o., MP Transactions Sp. z o.o., MP Services Sp. z o.o., ManpowerGroup Solutions Sp. z o.o., MP Actions Sp. z o.o. with its registered office at ul. Prosta 68 in Warsaw, and MP Management Sp. z o.o. with its registered office at ul. Kopcińskiego 79, 90-033 Łódź (hereinafter: Joint Controllers or JCC).




II. METHODS OF DATA COLLECTION

Your data will be collected:

•  directly from you in connection with your visit to the Website/Experis Website or in connection with your use of one or more services or functionalities described in the Terms and Conditions of Electronic Services of ManpowerGroup Websites (hereinafter: Terms and Conditions)


III. CATEGORIES OF PERSONAL DATA SUBJECTS WE PROCESS

In connection with the provision of our Services, we process the data of:

•   job candidates;

•  Users of the Website/Experis Website.


IV. PURPOSES AND LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA

We process your data:

•  for the purpose of responding to you, i.e. to answer your questions and obtain feedback – in this case, personal data is processed on the basis of the legitimate interest of the Joint Controllers, which consists in the need to use your personal data for the purpose of preparing answers to your questions (Article 6(1)(f) of the GDPR);

• for purposes related to the conclusion and performance of a contract for the provision of ManpowerGroup's online services, in accordance with the rules set out in the Terms and Conditions (Article 6(1)(b) of the GDPR), and as part of these processes we may take the following actions, among others:

1. identification and/or verification of identity;
2. sending updates and notifications regarding the services received and other related communications;

 •  for the purpose of possible (only if necessary) investigation and defence against claims – personal data is processed on the basis of the legitimate interest of the controller, consisting in the need to defend its rights (Article 6(1)(f) and Article 9(2)(f) of the GDPR);

• for the purpose of conducting statistical and analytical activities related to the functioning of ManpowerGroup websites – in this case, personal data is processed on the basis of the controller's legitimate interest consisting in the need to develop and evaluate the services provided (Article 6(1)(f) of the GDPR), and as part of these processes we may undertake, among other things, the following activities:

1. analysis of the use of ManpowerGroup websites,
2. analysis of our candidate database,
3. assessment of individual performance and skills, including assessment of job-related skills,
4. identifying skills shortages,
5. matching individuals and potential employment opportunities,
6. analysis of pipeline data (trends in recruitment practices),
7. determining the effectiveness of our engagement strategy,
8. determining the effectiveness of our products and services, and

developing and training artificial intelligence (AI) models, including machine learning

•  for the purpose of sending commercial information, including marketing communications, regarding products and services offered by companies from the ManpowerGroup Capital Group - on the basis of Article 6(1)(a) of the GDPR;

•  for the purposes of direct marketing by Joint Controllers, including the selection of services tailored to the needs of Users (including profiling) based on cookies and other similar technologies referred to in the Cookie Policy – in this case, data processing by Joint Controllers is based on the legitimate interest of Joint Controllers (Article 6(1)(f) of the GDPR) or consent given (Article 6(1)(a) of the GDPR);

- for purposes related to the conclusion and performance of an employment contract or other civil law contract in connection with recruitment, including for the purpose of verifying residence and employment documents and legalising employment (Article 6(1)(b) and Article 9(b) of the GDPR);

•   for the purpose of fulfilling any legal obligations of the employing entity, resulting, inter alia, from labour law provisions and the obligations of a temporary employment agency resulting from the provisions of the Act on the Employment of Temporary Employees, and for purposes related to the performance of such contracts – Article 6(1)(c) and Article 9(b) of the GDPR;

• to take action at the request of an authorised entity prior to the conclusion of a contract – in the case of seeking to commence cooperation and subsequently cooperation on the basis of a civil law contract (Article 6(1)(b) of the GDPR).

 • for the purposes of the legitimate interests pursued by the Joint Controllers, which may include, among others, ensuring compliance and accountability in accordance with the GDPR (Article 6(1)(f) of the GDPR), and in particular:

1. conducting audits of our processes and documentation;
2. protecting against fraud, identifying and seeking to prevent fraud, misleading practices and other illegal activities, claims and other liabilities;
3. enhancing the security of our networks and information systems;
4. complying with and enforcing applicable legal requirements, exercising or defending legal claims, relevant industry standards, contractual obligations and our policies;
   
   

•  to provide recruitment services, including informing about ongoing recruitment processes, verifying qualifications, experience, employment opportunities and recommending candidates to clients (Article 6(1)(a), (b) or (f) of the GDPR), as well as:

1. coaching, providing feedback, analyses, advice and guidance to support you in managing and developing your career;
2. tailoring and personalising the support we offer based on qualifications and other criteria;

•  to conduct the recruitment process in connection with the voluntary provision of special categories of data in accordance with Article 9(2)(a) of the GDPR.

 - to provide candidates with information about the starting salary or salary ranges for a given position, the applicable remuneration regulations/collective agreement provisions (if applicable), as well as the rules for promotion and salary progression criteria (Article 6( 1(c) of the GDPR, in connection with the provisions of Directive (EU) 2023/970 of the European Parliament and of the Council  and the provisions of the Labour Code Act of 26 June 1974),

 

We may also use this information for other purposes, for which you will receive a separate information clause or a supplement to this clause.

 

WADO's legitimate interest

Depending on the applicable regulations, WADO has the right to process personal data for specific legitimate interests, which may include some or all of the following:

1. improving, modifying, personalising or otherwise enhancing our services/communications for the benefit of our customers, candidates and associates, for example through the use of technical measures such as call transcription features;
2. identifying and preventing fraud;
3. enhancing the security of our networks and information systems;
4. increasing our understanding of how visitors and users use our websites and applications;
5. determining the effectiveness of promotional and advertising campaigns.

Whenever we process data for these purposes, we take care to protect your rights. You may object to such processing, and you may do so by contacting us as indicated below in the "How to contact us" section. Please note that if you exercise your right to object, this may affect our ability to provide and deliver services to you.

 

V. RIGHTS OF DATA SUBJECTS

You have the following rights:

 •  the right to withdraw your consent to the processing of your personal data;
the right to access your personal data;

•  the right to request the rectification of your personal data;

•  the right to request the deletion of your personal data;

•  the right to request restriction of the processing of your personal data;

• the right to object to the processing of your personal data;

• the right to request the transfer of your personal data;

The above rights can be exercised using the form available on the Request Service Portal website. For those who do not use the Internet, the Joint Controllers provide the option of submitting a request by post: ul. Prosta 68, 00-838, Warsaw, or by delivering the request in person to the registered office or any branch of the Joint Controllers.

Once you have submitted your request, we may contact you directly or through our secure Request Service Portal to verify your email address and then your identity before we disclose, modify or delete your data. We are only required to respond to verifiable and reasonable requests. If we cannot verify your identity, we may ask you for additional verification information. We will not use this information for anything other than verification. If the content of your request is unclear, we may also ask you for additional information regarding the content and scope of the request.

If we are unable to verify your identity or determine the content of your request with sufficient certainty to respond to your request, we will promptly notify you and explain why we cannot verify your identity or process your request.

Privacy requests submitted by a representative

You may appoint an authorised representative to exercise your rights on your behalf. If an authorised representative submits a request on your behalf, they must also provide a document signed by you authorising them to submit the request on your behalf. In addition, we may ask both you and your representative to follow the identity verification procedure described above.

Processing of data relating to minors

We respect the privacy of children. Our websites and services are generally not intended for or directed at children. If you are a parent or guardian, please contact us if you believe we may have collected information from your child, and we will investigate and take appropriate action.

 

In addition to the rights described above, you also have the right to lodge a complaint with the President of the Personal Data Protection Office.

 

 

VI. RECIPIENTS OF PERSONAL DATA

In order to ensure the proper provision of services, your personal data may be transferred to:

 •  our Clients – entities seeking job candidates and posting job offers on our website;

•  our Suppliers – entities providing us with infrastructure, IT, technical, maintenance, administrative, legal, tax, auditing and other services.

- affiliated entities;

• third parties from whom cookies or other technologies referred to in the Cookie Policy originate.

More detailed information in this regard is provided below.

We may disclose some personal data to suppliers who provide services on our behalf, in accordance with our instructions, in order to provide you with our Sites and services. These suppliers may include, among others, IT and cloud service providers. We strive to ensure that this data is limited to the level necessary to perform specific tasks. We do not authorise suppliers who process data on our behalf to use or disclose this information unless it is necessary to perform the services or comply with legal requirements. Personal data will not be sold, rented, distributed or shared with suppliers for their own commercial purposes, including for their direct marketing purposes.

We may also disclose your personal data in particular: (i) to our subsidiaries and affiliated entities; (ii) if you are a job candidate, with clients who may have job openings or an interest in hiring our candidates; and (iii) with others we work with, such as consultants providing career support services or employment providers who work with us on recruitment and hiring (iv) if you use talent management services, we may disclose the status or progress of your programme to the client – a potential employer – along with any relevant results of the recruitment process.

In addition, we may disclose personal data about you (i) if required by law or legal process; (ii) to law enforcement or other government officials pursuant to a lawful disclosure request; and (iii) when we believe disclosure is necessary or appropriate to prevent physical harm or financial loss, or in connection with an investigation of suspected or actual fraud or illegal activity. We also reserve the right to transfer the personal data we hold about you in the event of a sale or transfer of all or part of our business or assets (including in the event of a reorganisation, dissolution or liquidation).

Links to external tools and resources

We may provide links to external websites operated by organisations not affiliated with WADO. We do not disclose your personal data to the organisations operating such linked external websites and we do not review, endorse or accept responsibility for the privacy practices of those organisations. We encourage you to review the privacy policy of each website you visit. This Privacy Policy applies only to information collected by WADO.

VII. HOW LONG WILL WE STORE YOUR PERSONAL DATA?

We process your personal data for as long as is necessary to fulfil the purposes for which the data was collected.

In the case of data processing:

 •  based on the User's consent – personal data will be processed until the consent is withdrawn;

•   if you accept the Terms and Conditions and use the services described therein, until you delete your Candidate Account or send us a statement of withdrawal from the contract for the provision of electronic services;

•  in order to ensure compliance with the legal obligations imposed on controllers – personal data will be processed for the period required by law;

• for the purposes of pursuing other legitimate interests of controllers – data will be processed until your objection (request for data deletion) is taken into account or until the limitation period for claims expires.


Despite the cessation of the above-described purposes, your data may be stored for the period necessary to establish, pursue and defend claims, which constitutes a legitimate interest of WADO within the meaning of Article 6(1)(f) and Article 9(2)(f) of the GDPR.

In the case of personal data processed on the basis of legal provisions, controllers apply a retention period in accordance with applicable law.

 

 

 

VIII. DATA PROTECTION OFFICER

We take the protection of personal data very seriously, which is why we have appointed a Data Protection Officer in our Companies as part of our activities. The officer can be contacted by post at: ul. Prosta 68, 00-838, Warsaw, and via the form available on the Request Service Portal website.

 

 

IX. TRANSFER OF DATA TO THIRD COUNTRIES

As a rule, your personal data will not be transferred to countries outside the European Economic Area, which consists of the European Union member states, Iceland, Norway and Liechtenstein.
In some cases, in particular in connection with cooperation with IT solution providers or the need to transfer data to a potential employer, your personal data may be transferred to other third countries or international organisations. In such cases, the personal data safeguards referred to in Articles 46-49 of the GDPR will be applied, e.g. in the form of standard data protection clauses adopted by the European Commission.

Data Privacy Framework

ManpowerGroup (including ManpowerGroup Global Inc., Right Management LLC and ManpowerGroup Talent Solutions LLC) complies with the EU-US Data Privacy Framework (EU-US DPF), the UK Extension to the EU-US DPF, and the Swiss-US Data Privacy Framework (Swiss-US DPF) as set forth by the US Department of Commerce. ManpowerGroup has certified to the US Department of Commerce that it adheres to the EU-US Data Privacy Framework Principles (EU-US DPF Principles) with regard to the processing of personal data received from the European Union in reliance on the EU-US DPF and from the United Kingdom (and Gibraltar) under the UK Extension to the EU-US DPF. ManpowerGroup has certified to the US Department of Commerce that it adheres to the Swiss-US Data Privacy Framework Principles (Swiss-US DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-US DPF. If there is any conflict between the terms in this privacy policy and the EU-US DPF Principles and/or the Swiss-US DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit https://www.dataprivacyframework.gov/.

In the context of onward transfers, ManpowerGroup is accountable for the processing of personal data it receives under the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and Swiss-U.S. DPF and subsequently transfers to a third party acting as an agent on its behalf.  ManpowerGroup remains liable under the EU-U.S. DPF Principles, and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF Principles if ManpowerGroup’s agent processes personal information in a manner inconsistent with the EU-U.S. DPF Principles, and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF Principles, unless ManpowerGroup proves that it is not responsible for the event giving rise to damage.

The Federal Trade Commission has jurisdiction over ManpowerGroup’s compliance with the EU-US DPF, the UK Extension to the EU-US DPF, and the Swiss-US DPF. In certain situations, ManpowerGroup may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

In compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, ManpowerGroup commits to resolve DPF Principles-related complaints about our collection and use of your personal information. EU and UK and Swiss individuals with inquiries or complaints regarding our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF should first contact ManpowerGroup using the information provided in the How to Contact Us section of this notice.  

In compliance with the EU-US DPF, the UK Extension to the EU-US DPF, and the Swiss-US DPF, ManpowerGroup commits to refer unresolved complaints concerning our handling of personal data received in reliance on the EU-US DPF, the UK Extension to the EU-US DPF, and the Swiss-US DPF to TRUSTe, an alternative dispute resolution provider based in the United States. If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit https://feedback-form.truste.com/watchdog/request for more information or to file a complaint. These dispute resolution services are provided at no cost to you.

In compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF, ManpowerGroup commits to cooperate and comply with the advice of the panel established by the EU data protection authorities (DPAs), the UK Information Commissioner’s Office (ICO) and the Gibraltar Regulatory Authority (GRA), and the Swiss Federal Data Protection and Information Commissioner (FDPIC) with regard to unresolved complaints concerning our handling of human resources data received in reliance on the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF in the context of the employment relationship.

For complaints regarding EU-US DPF, the UK Extension to the EU-US DPF, and Swiss-US DPF compliance not resolved by any of the other DPF mechanisms, you have the possibility, under certain conditions, to invoke binding arbitration. Further information can be found on the official DPF website: https://www.dataprivacyframework.gov/framework-article/ANNEX-I-introduction

X. HOW WE USE ARTIFICIAL INTELLIGENCE

Some of the services we offer are supported by AI, which may include AI/ML. With the help of AI, we can match the right people with the best opportunities and help people find jobs more efficiently or prepare them for the job market more easily.

We conduct risk assessments of the AI solutions used by ManpowerGroup and apply human oversight to the maximum extent possible to prevent automated decisions that could have any legal or similarly significant effects on individuals.

We are committed to using transparent, trustworthy and secure artificial intelligence. In accordance with our artificial intelligence policy, we always conduct a thorough risk assessment before implementing any AI-based tools to protect the rights of individuals. We are committed to auditing and testing our AI systems to detect and prevent bias.

With artificial intelligence, we can connect people with relevant job opportunities, help people find employment more effectively, and increase our overall productivity. We use AI tools in our recruitment procedures to increase the efficiency and effectiveness of the process. AI tools help us with the initial selection of candidates by evaluating their information, for example, to assess candidates' experience or match skills based on predefined criteria (e.g., having a work permit or driving licence) that are relevant to the job requirements. Although artificial intelligence streamlines recruitment processes, the final decision to reject candidates always rests with the recruiter.

Candidate rights

If you wish to request human involvement or share your opinion, you have the right to do so. Instructions on how to exercise this right can be found in the section "RIGHTS OF DATA SUBJECTS".

 

XI. Essential content of the joint controllers' agreements

1. The joint controllers of your personal data are the following companies from the ManpowerGroup:
1. ManpowerGroup Sp. z o.o. with its registered office in Warsaw, address: ul. Prosta 68, 00-838 Warsaw, NIP: 5263493733, REGON: 016863993, KRS: 62137 ("Lead Joint Controller");
2. MP Transactions Sp. z o.o. with its registered office in Warsaw, address: ul. Prosta 68, 00-838 Warsaw, NIP: 7010204771, REGON: 142057961, KRS: 339387 ("Co-administrator 2");
3. MP Services Sp. z o.o. with its registered office in Warsaw, address: ul. Prosta 68, 00-838 Warsaw, NIP: 5262831360, REGON: 140023580, KRS: 228311 ("Co-administrator 3");
4. ManpowerGroup Solutions Sp. z o.o. with its registered office in Warsaw, address: ul. Prosta 68, 00-838 Warsaw, NIP: 7010272979, REGON: 142733681, KRS: 373518 ("Co-administrator 4");
5. MP Actions Sp. z o.o. with its registered office in Warsaw, address: ul. Prosta 68, 00-838 Warsaw, NIP: 5272474654 REGON: 14015951600000 KRS: 234796 ("Co-administrator 5");
6. MP Management Sp. z o.o. with its registered office in Łódź, address: ul. Kopcińskiego 79, 90-033 Łódź, NIP: 7010264572, REGON: 14263040300000, KRS: 0000368086 ("Co-administrator 6");

hereinafter collectively referred to as "WADO".

2. Pursuant to Article 26(2), second sentence, of the GDPR, the provision of this information constitutes disclosure of the essential content of the joint arrangements of WADO, whose identity is indicated in point 1 above, with regard to the joint control of the processing of personal data of the data subject for the purposes and on the legal grounds indicated in the information obligations of WADO and their Privacy Policies.
3. In accordance with the joint arrangements of WADO, we hereby inform you that:

• The Lead Joint Controller is responsible for fulfilling the information obligations towards data subjects, which means that it is responsible for meeting the deadlines and content of the information obligation;
• The Lead Joint Controller is responsible for responding to data subjects regarding their requests – which means that it is responsible for meeting deadlines and ensuring that the content of the response complies with the data subject's request to exercise their rights, as well as for the appropriate form of response, including informing the data subject about the actions taken to fulfil the request;
• if a data subject addresses their request to exercise their rights directly to one of the Joint Controllers 2-6, each of these Joint Controllers is responsible for immediately forwarding the data subject's request to the Lead Joint Controller;
• The Lead Joint Controller is responsible for exercising the rights of data subjects, i.e. exercising the right of access to personal data, rectification, erasure or restriction of processing, the right to object to the processing of their personal data and to transfer it – The Lead Joint Controller is responsible for the correct implementation of the request submitted by the data subject, which, following analysis of the request, was to be implemented and reflected in accordance with the law on personal data protection in the given area;
• The Lead Joint Controller is responsible for notifying the data subject of a personal data breach in cases where the breach may result in a high risk to the rights or freedoms of natural persons;
• Each WADO is responsible for processing personal data in accordance with the provisions of the GDPR.

4. WADO has established a contact point for data subjects and appointed a joint Data Protection Officer – the contact point and Data Protection Officer can be contacted by writing to ul. Prosta 68, 00-838 Warsaw or via the Data Subject Request Service Portal (available at https://www.manpowergroup.pl -> Data Protection Officer -> Data Subject Request Portal).
5. Please be advised that regardless of the arrangements indicated in point 3 above, data subjects may exercise their rights under the GDPR against each of the WADO, which means that a request to exercise rights addressed to each of the WADO is a request submitted in accordance with the GDPR.

 

XII. How we protect personal data

We maintain administrative, technical and physical safeguards to protect the personal data we collect from accidental, unlawful or unauthorised destruction, loss, alteration, access, disclosure or use. Such measures are designed to ensure an appropriate level of security, taking into account, on the one hand, the state of the art and, on the other hand, the sensitivity of personal data and the assessment of potential risks.

 

XIII. Privacy Policy Updates

We may modify this Privacy Policy from time to time to reflect changes in technology, privacy practices and legal updates, or to update the purposes or basis for processing. New versions of the document will include the date of the last update in the header.

 

XIV. How to contact us

If you have any questions or comments about this Privacy Policy or wish to exercise your rights, please submit your request via our Request Service .[KB1]

Alternatively, you can write to us at the following address:

ManpowerGroup Sp. z o.o.,

ul. Prosta 68, 00-838 Warsaw

 

INFORMATION CLAUSE

In accordance with Article 13(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of personal data of 27.4.2016 on the protection of natural persons with regard to the processing of their personal data and on the free movement of such data, and repealing Directive 95/46/EC, OJ L 2016/679 of the European Parliament and of the Council on the protection of personal data of 27.4.2016 on the protection of natural persons with regard to the processing of their personal data and on the free movement of such data, and repealing Directive 95/46/EC, OJ L 2016 of the European Parliament and of the Council. EU L 119 of 4.5.2016 (hereinafter: GDPR) I hereby inform that:
1. In the event that you join the current recruitment process, the Administrator of your personal data will be this Company from the ManpowerGroup Capital Group, (i.e. ManpowerGroup Sp. z o.o., MP Transactions Sp. z o.o., MP Services Sp. z o.o., ManpowerGroup Solutions Sp. z o.o., MP Actions Sp. z o.o. with its registered office at 68 Prosta Street in Warsaw, 00-838, or MP Management Sp. z o.o. with its registered office at 85/87 Sienkiewicza Street, 90-057 in Łódź, from 05.10.2023: at 79 Kopcińskiego Street, 90-033 in Łódź), which is recruiting for the position for which you have applied.
2. If you consent to the processing of personal data in future recruitment processes, the Joint Controllers of your personal data are the Companies that are part of the ManpowerGroup Capital Group (ManpowerGroup Sp. z o.o., MP Transactions Sp. z o.o., MP Services Sp. z o.o., ManpowerGroup Solutions Sp. z o.o., MP Actions Sp. z o.o with its registered office at 68 Prosta Street in Warsaw, 00-838, and MP Management Sp. z o.o. with its registered office at 85/87 Sienkiewicza Street, 90-057 in Łódź, from 05.10.2023: at 79 Kopcińskiego Street, 90-033 in Łódź), hereinafter referred to as: "WADO".
3. Contact with the Administrators and WADO is possible by e-mail at the following e-mail address: [email protected], by phone: 22 50 40 715 and by post: Prosta 68, 00-838, Warsaw
4. The Administrators and WADO have appointed a Data Protection Officer, who can be contacted: by post: Prosta 68, 00-838, Warsaw, as well as via the form available on the website of the Ticket Service Portal (available at https://www.manpowergroup.pl -> Data Protection Officer -> Report Handling Portal).
5. Your personal data contained in the application documents will be processed for the purposes related to conducting recruitment processes, in particular on the basis of:
a. Article 6(1)(c) of the GDPR, i.e. the legal obligation resulting from the provision of Article 22 (1) of the Labour Code – in the case of seeking employment on the basis of an employment contract.
b. Article 6(1)(a) and Article 9(2)(a) of the GDPR, i.e. consent to the processing of your personal data to a greater extent than it results from Article 22 (1) of the Labour Code and participation in future recruitment processes.
c. Article 6(1)(b) of the GDPR, i.e. taking action at the request of the entitled entity before concluding the agreement – in the case of seeking to commence cooperation on the basis of a civil law contract.
d. Article 6(1)(f) of the GDPR, i.e. the legitimate interest of the Administrator and WADO – primarily for the purpose of verifying your qualifications and possibly pursuing claims or defending against claims.
e. Article 6(1)(a), (f) of the GDPR and Article 9(2)(a) of the GDPR, i.e. the consent or legitimate interest of the Controller or WADO, in order to present your application to our clients who offer work or projects that may be of interest to you or who are interested in your profile.
f. Article 6(1)(f) of the GDPR, i.e. the legitimate interest of the Administrator and WADO – in order to direct marketing content by e-mail, in connection with the consent to send commercial information, including marketing content, to the provided e-mail address.
6. The Administrators and WADO may share your personal data with other recipients in connection with the need to comply with a legal or contractual obligation or to exercise a right under the law or to pursue legitimate interests. The recipients to whom the Controllers and WADO may share your personal data are: our service providers (e.g. providers of IT systems, hosting services, e-mail service providers and other entities through which WADO processes personal data), our clients – your potential employers (we share your data with our clients who offer work or projects that may be of interest to you or who are interested in your profile).
7. Your personal data will not be subject to automated decision-making. WADO will not profile your personal data.
8. As a rule, your personal data will not be transferred to countries outside the European Economic Area, which consists of the countries of the European Union and Iceland, Norway and Liechtenstein. Your personal data may be transferred to the United Kingdom of Great Britain and Northern Ireland, against which the European Commission issued an adequacy decision on 28 June 2021. In some cases, in particular in connection with cooperation with IT solution providers or the transfer of data to a potential employer, your personal data may be transferred to other third countries. In such a case, the personal data protections referred to in Articles 46-49 of the GDPR will be applied, e.g. in the form of standard data protection clauses adopted by the European Commission.
9. Your personal data will be processed as part of the ongoing recruitment process for a period of 1 month from the date of completion of the current recruitment process, and in the case of consent to the processing of data for the purposes of future recruitment – for a period of up to 3 years from the submission of the application or until you withdraw your consent to processing – whichever occurs first.
10. Please note that you can withdraw your consent(s) at any time. The withdrawal of consent does not affect the lawfulness of the processing carried out before its withdrawal. For evidentiary purposes, please withdraw your consents in writing to the address of the registered office or electronically via the form available on the website of the Request Handling Portal (available at https://www.manpowergroup.pl -> Data Protection Officer -> Report Handling Portal).
11. You have the right to: access the content of the data and request their rectification, deletion, restriction of processing, the right to transfer personal data and the right to object to the processing of data for reasons related to your particular situation. You also have the right to lodge a complaint with the supervisory authority (UODO, Stawki 2 Street, 00-193 Warsaw).
12. Providing personal data is necessary for the purposes of recruitment. The consequence of not providing this data is the inability to consider your candidacy in the current recruitment process and the inability to participate in future recruitment processes.

In accordance with Article 13(1) and (2) and Article 14(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of personal data of 27.4.2016 on the protection of natural persons with regard to the processing of their personal data and on the free movement of such data, and repealing Directive 95/46/EC, OJ L 2016/679 of the European Parliament and of the Council on the protection of personal data, and repealing Directive 95/46/EC, Journal of Laws of the Republic of Poland. EU L 119 of 4.5.2016 (hereinafter: GDPR) I hereby inform that:

 

1. The co-controllers of your personal data are the companies that are part of the ManpowerGroup Capital Group (ManpowerGroup Sp. z o.o., MP Transactions Sp. z o.o., ManpowerGroup Solutions Sp. z o.o., MP Actions Sp. z o.o., MP Services Sp. z o.o. with its registered office at: 68 Prosta Street in Warsaw 00-838, MP Management Sp. z o.o. with its registered office at 79 Kopcińskiego Street,  90-033 Łódź); hereinafter referred to as: WADO.
2. WADO has obtained your personal data directly from you or from our partner - a third party who has provided us with your data together with your consent to contact you, or we may have received it from our business partner who has obtained it from publicly available sources.
3. In particular, WADO may process the following categories of your personal data, depending on the scope of their disclosure by you or the entity from which WADO has received your data: your name and surname, contact details – phone number and e-mail address, position, employer data (the entity with which you cooperate or which you represent).
4. WADO can be contacted: by e-mail: [email protected], by phone: 22 50 40 715, by post: 68 Prosta Street, 00-838 Warsaw.
5. WADO has appointed a Personal Data Protection Officer, who can be contacted by: by post: Prosta 68, 00-838 Warsaw or via  the Data Subject Notification Portal (available at https://www.manpowergroup.pl -> Data Protection Officer -> Notification Handling Portal).
6. The processing of personal data referred to in point 3 is carried out for the purpose of targeting marketing content (information about ManpowerGroup's offers and services) and, subsequently, for the purpose of negotiating a contract.
7. Your personal data may be shared with third party recipients. In particular, these are entities with which contracts have been concluded for the provision of services, e.g. infrastructure, analytical, IT, auditing and consulting services to the extent necessary for the implementation of these agreements. The data may also be made available on the basis of legal provisions, in particular to public entities.
8. As a rule, your personal data will not be transferred to countries outside the European Economic Area, which consists of the countries of the European Union and Iceland, Norway and Liechtenstein. In connection with the implementation of cooperation with IT solution providers, your personal data may be transferred to the United Kingdom of Great Britain and Northern Ireland or to other third countries. In such a case, the personal data protections referred to in Articles 46-49 of the GDPR will be applied, e.g. in the form of standard data protection clauses adopted by the European Commission or a decision declaring an adequate level of personal data protection.
9. Your personal data will be processed until you withdraw your consent or object to the processing of data, and after that time for the period of limitation of claims, if this is in the legitimate interest of WADO within the meaning of Article 6(1)(f) of the GDPR.
10. You have the right to request from WADO access to your personal data, their rectification, deletion or restriction of processing, as well as the right to object to data processing, the right to data portability and the right to withdraw consent. The exercise of the above-mentioned rights is possible through the form available on the  website of the Data Subject Notification Portal (available at https://www.manpowergroup.pl -> Data Protection Officer -> Request Handling Portal), by post or by submitting a request in person at WADO's headquarters or any branch.
11. You have the right to lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office, if the processing of your personal data violates the provisions on personal data protection.
12. No automated decisions will be made against you (decisions without significant human involvement), including your personal data will not be subject to profiling.

 

 

 

Information obligation for contact persons and representatives 

 

Pursuant to Articles 13(1) and (2) and 14(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, OJ L 119 of 4.5.2016. (hereinafter: GDPR), I inform you that:

 

1. the joint controllers of your personal data are companies within the ManpowerGroup (ManpowerGroup Sp. z o.o., MP Transactions Sp. z o.o., ManpowerGroup Solutions Sp. z o.o., MP Actions Sp. z o.o., MP Services Sp. z o.o. with registered office at ul. Prosta 68 in Warsaw, 00-838, MP Management Sp. z o.o. with its registered office at ul. Kopcińskiego 79, in Łódź, 90-033); hereinafter: WADO.
2. WADO has obtained your personal data from an entity of which you are an employee, associate or representative or directly from you.
3. In particular, WADO may process the following categories of your personal data, depending on the extent to which they are provided by the entity of which you are an employee: your full name, contact details – telephone number and e-mail address, job title, details of your employer (the entity with which you work or which you represent).
4. You can contact WADO: by e-mail: [email protected], by telephone: +48 22 50 40 715, or by post: ul. Prosta 68, 00-838 Warsaw.
5. WADO has appointed a Data Protection Officer, who can be contacted: by post: ul. Prosta 68, 00-838 Warsaw or via the form available on the Service Portal for Personal Data. (available at https://www.manpowergroup.pl -> Data Protection Officer -> Request Support Portal).
6. The processing of personal data referred to in point 3 is carried out for the purpose of:

1. performance of a contract concluded with an entity of which you are an employee, collaborator or representative, including in particular for the purpose of negotiation and conclusion of a contract (the basis for the processing of your personal data is Article 6(1)(f) of the GDPR - the legitimate interest of the Controller - or Article 6(1)(b) of the GDPR, if you are a party to the agreement),
2. contact, maintaining cooperation, surveying satisfaction with cooperation, as well as conducting market research, improving the quality of services or adjusting services to market needs (the basis for the processing of your personal data is Article 6(1)(f) of the GDPR - the legitimate interest of the Administrator),
3. compliance with legal obligations, if such an obligation results from the provisions of law (the legal basis for processing is Article 6(1)(c) of the GDPR),
4. establishing, pursuing or defending claims related to the conducted activity (the legal basis for the processing is Article 6(1)(f) of the GDPR).

7. Your personal data may be shared with third-party recipients. In particular, such entities include those with whom service contracts have been concluded, e.g. infrastructure, analytical, IT, auditing and consulting services, to the extent that this is necessary for the performance of these contracts. Your personal data may also be made available by law, particularly to public entities.
8. As a general rule, your personal data will not be transferred to countries outside the European Economic Area, formed by the countries of the European Union and Iceland, Norway and Liechtenstein. In some cases, in particular, in connection with cooperation with IT solution providers, your personal data may be transferred to third countries or international organisations. In this case, the personal data safeguards referred to in Articles 46-49 of the GDPR will be applied, e.g. in the form of standard data protection clauses adopted by the European Commission or a decision establishing an adequate level of personal data protection.
9. Your personal data will be processed for the duration of the contract signed with the entity of which you are an employee, collaborator or representative, and also after the termination of the contract, as long as there is a legitimate interest of WADO within the meaning of Article 6(1)(f) of the GDPR.
10. You have the right to request WADO to access, rectify, erase or restrict the processing of your personal data, as well as the right to object to the processing. Your personal data will not be subject to profiling. The above rights can be exercised via the form available on the Service Portal for Personal Data (available at https://www.manpowergroup.pl -> Data Protection Officer -> Request Support Portal), by post or by submitting the request in person at the registered office or any branch of WADO.
11. You have the right to lodge a complaint to the supervisory authority – the President of the Personal Data Protection Office, if the processing of your personal data violates the provisions on the protection of personal data.

 

 

 

 

Data Privacy Framework

ManpowerGroup (including ManpowerGroup Global Inc., Right Management LLC and ManpowerGroup Talent Solutions LLC) complies with the EU-US Data Privacy Framework (EU-US DPF), the UK Extension to the EU-US DPF, and the Swiss-US Data Privacy Framework (Swiss-US DPF) as set forth by the US Department of Commerce. ManpowerGroup has certified to the US Department of Commerce that it adheres to the EU-US Data Privacy Framework Principles (EU-US DPF Principles) with regard to the processing of personal data received from the European Union in reliance on the EU-US DPF and from the United Kingdom (and Gibraltar) under the UK Extension to the EU-US DPF. ManpowerGroup has certified to the US Department of Commerce that it adheres to the Swiss-US Data Privacy Framework Principles (Swiss-US DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-US DPF. If there is any conflict between the terms in this privacy policy and the EU-US DPF Principles and/or the Swiss-US DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit https://www.dataprivacyframework.gov/.

In the context of onward transfers, ManpowerGroup is accountable for the processing of personal data it receives under the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and Swiss-U.S. DPF and subsequently transfers to a third party acting as an agent on its behalf. ManpowerGroup remains liable under the EU-U.S. DPF Principles, and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF Principles if ManpowerGroup’s agent processes personal information in a manner inconsistent with the EU-U.S. DPF Principles, and the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF Principles, unless ManpowerGroup proves that it is not responsible for the event giving rise to damage.

The Federal Trade Commission has jurisdiction over ManpowerGroup’s compliance with the EU-US DPF, the UK Extension to the EU-US DPF, and the Swiss-US DPF. In certain situations, ManpowerGroup may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

In compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF, ManpowerGroup commits to resolve DPF Principles-related complaints about our collection and use of your personal information. EU and UK and Swiss individuals with inquiries or complaints regarding our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF should first contact ManpowerGroup using the information provided in the How to Contact Us section of this notice.  

In compliance with the EU-US DPF, the UK Extension to the EU-US DPF, and the Swiss-US DPF, ManpowerGroup commits to refer unresolved complaints concerning our handling of personal data received in reliance on the EU-US DPF, the UK Extension to the EU-US DPF, and the Swiss-US DPF to TRUSTe, an alternative dispute resolution provider based in the United States. If you do not receive timely acknowledgment of your DPF Principles-related complaint from us, or if we have not addressed your DPF Principles-related complaint to your satisfaction, please visit https://feedback-form.truste.com/watchdog/request for more information or to file a complaint. These dispute resolution services are provided at no cost to you.

In compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF, ManpowerGroup commits to cooperate and comply with the advice of the panel established by the EU data protection authorities (DPAs), the UK Information Commissioner’s Office (ICO) and the Gibraltar Regulatory Authority (GRA), and the Swiss Federal Data Protection and Information Commissioner (FDPIC) with regard to unresolved complaints concerning our handling of human resources data received in reliance on the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF in the context of the employment relationship.

For complaints regarding EU-US DPF, the UK Extension to the EU-US DPF, and Swiss-US DPF compliance not resolved by any of the other DPF mechanisms, you have the possibility, under certain conditions, to invoke binding arbitration. Further information can be found on the official DPF website: https://www.dataprivacyframework.gov/framework-article/ANNEX-I-introduction

 

1. The joint controllers of your personal data are companies from the ManpowerGroup:

1. ManpowerGroup Sp. z o.o. with its registered office in Warsaw, address: ul. Prosta 68, 00-838 Warsaw, NIP: 5263493733, REGON: 016863993, KRS: 62137 ("Lead Joint Controller");
2. MP Transactions Sp. z o.o. with its registered office in Warsaw, address: ul. Prosta 68, 00-838 Warsaw, NIP: 7010204771, REGON: 142057961, KRS: 339387 ("Co-administrator 2");
3. MP Services Sp. z o.o. with its registered office in Warsaw, address: ul. Prosta 68, 00-838 Warsaw, NIP: 5262831360, REGON: 140023580, KRS: 228311 ("Co-administrator 3");
4. ManpowerGroup Solutions Sp. z o.o. with its registered office in Warsaw, address: ul. Prosta 68, 00-838 Warsaw, NIP: 7010272979, REGON: 142733681, KRS: 373518 ("Co-administrator 4");
5. MP Actions Sp. z o.o. with its registered office in Warsaw, address: ul. Prosta 68, 00-838 Warsaw, NIP: 5272474654 REGON: 14015951600000 KRS: 234796 ("Co-administrator 5");
6. MP Management Sp. z o.o. with its registered office in Łódź, address: ul. Kopcińskiego 79, 90-033 Łódź, NIP: 7010264572, REGON: 14263040300000, KRS: 0000368086 ("Co-administrator 6");

   hereinafter collectively referred to as "WADO".

   1. Pursuant to Article 26(2), second sentence, of the GDPR, the provision of this information constitutes disclosure of the essential content of the joint arrangements of WADO, whose identity is indicated in point 1 above, with regard to the joint control of the processing of personal data of the data subject for the purposes and on the legal grounds indicated in the information obligations of WADO and their Privacy Policies.
   2. In accordance with the joint arrangements of WADO, we hereby inform you that:

• The Lead Joint Controller is responsible for fulfilling the information obligations towards data subjects, which means that it is responsible for meeting the deadlines and content of the information obligation;
• The Lead Joint Controller is responsible for responding to data subjects regarding their requests – which means that it is responsible for meeting deadlines and ensuring that the content of the response complies with the data subject's request to exercise their rights, as well as for the appropriate form of response, including informing the data subject about the actions taken to fulfil the request;
• if a data subject addresses their request to exercise their rights directly to one of the Joint Controllers 2-6, each of these Joint Controllers is responsible for immediately forwarding the data subject's request to the Lead Joint Controller;
• The Lead Joint Controller is responsible for exercising the rights of data subjects, i.e. exercising the right of access to personal data, rectification, erasure or restriction of processing, the right to object to the processing of their personal data and to transfer it – The Lead Joint Controller is responsible for the correct implementation of the request submitted by the data subject, which, following analysis of the request, was to be implemented and reflected in accordance with the law on the protection of personal data in the given area;
• The Lead Joint Controller is responsible for notifying the data subject of a personal data breach where the breach is likely to result in a high risk to the rights and freedoms of natural persons;
• Each WADO is responsible for processing personal data in accordance with the provisions of the GDPR.
  1. The WADOs have established a contact point for data subjects and appointed a joint DPO – the contact point and DPO can be contacted by writing to ul. Prosta 68, 00-838 Warsaw or via the Data Subject Request Service Portal (available at https://www.manpowergroup.pl -> Data Protection Officer -> Data Subject Request Portal).
  2. Please be advised that, regardless of the arrangements indicated in point 3 above, data subjects may exercise their rights under the GDPR against each of the WADO, which means that a request to exercise rights addressed to each of the WADO is a request submitted in accordance with the GDPR.