Roche Diagnostics Polska sp. z o.o. is obliged to protect the personal data made available or entrusted to it. We process personal data in accordance with the laws in force in the Republic of Poland.
This information clause explains who we are, what personal data we process, for what purposes and how long we store the data, how you can access the data, how we protect your data, where the data can be transferred and what your rights are in this regard.
I. Who is the administrator of your personal data?
Roche Diagnostics Polska sp. z o.o. with its registered office in Warsaw (02-672), at ul. Domaniewska 28 is the Administrator of a personal data within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter referred to as the “GDPR), hereinafter referred to as “Roche Diagnostics” and, together with its affiliates, as the “Roche Group”.
In case you have any questions regarding the processing of your personal data, you can contact the Data Protection Officer by sending a message to: [email protected], call +48 22 481 55 55 or write to the address of Roche Diagnostics' headquarters (28 Domaniewska Street, 02-672 Warsaw).
II. What types of personal data do we process?
Roche Diagnostics may obtain information from you regarding your application in connection with recruitment. Such information under Article 22(1) § 1 of the Labor Code includes: name, surname, date of birth, contact information, education, professional qualifications, previous employment history. You may, on your own initiative, want to provide us with additional information in your resume, cover letter or similar document for which you are not legally required to provide it, in particular under the Labor Code. In such a situation, your personal data will be processed by Roche Diagnostics for the purpose of entering into an employment contract.
Therefore, if you want to provide us with documents containing additional information, we understand that by submitting the application you agree to have your personal data processed by Roche Diagnostics.
You are not obliged to provide us with additional information. If you do not want us to process more of your personal data than required under the law, do not include such information in the CV you send.
III. How is your personal data obtained?
In the course of our recruitment process we collect personal data of our candidates. Personal data is obtained in two ways: directly from candidates through the Workday platform or from third parties, in particular:
a. From the Roche Group resources;
b. From recruitment agencies, labor agencies, intermediaries and service providers;
c. From public data sources, such as Linkedin;
d. From marketing or event agencies, in so far as the data is used for conducting recruitment processes.
Roche Diagnostics also process personal data of an employee provided directly by him/her or by the third parties indicated above.
IV. What is the purpose of our processing of your data?
Your information is always treated as confidential and used solely for the purpose of assessing the application submitted by you, providing you with information on the recruitment procedures, processing the application to carry out the recruitment process and taking steps at your request prior to entering into a contract (on the basis of Article 22(1) of the Labor Code and Article 6(1)(b) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as: General Data Protection Regulation)), including on the basis of your consent for future recruitment processes.
V. What are the consequences of non-provision of your data?
Your provision of data is voluntary, yet necessary to participate in the recruitment process, to meet further legal requirements and/or to enter into a contract with us. Failure to provide us with the required information will render participation in the recruitment process and/or sending information related to the future recruitment process impossible.
VI. How long do we store your personal data?
Roche Diagnostics stores your personal data for as long as this is required under applicable laws or for as long as the processing of personal data is necessary for the purposes set forth in this Information Clause.
Roche Diagnostics keeps the data provided by you via the recruitment service for the duration of the recruitment process solely for the purpose of carrying out the process and in order to comply with the data recording requirements imposed by applicable laws. If you want us to keep your documents in our job applicant database for a longer period (including for future recruitment processes), your data will be processed until you withdraw your consent, but for no longer than 3 years.
VII. With whom will your personal data be transferred (data recipients)?
Roche Diagnostics transfers personal data available to third parties in line with applicable laws. Your personal data is processed solely for the purposes referred to herein or for closely related purposes.
Recipients of data may be entities that process data on behalf of Roche Diagnostics, in the performance of services related to the recruitment of employees or the use of IT systems for recruitment purposes - with such entities processing personal data on the basis of a data processing agreement and only in accordance with our instructions.
Once you have given the relevant consent, personal data may be used for future recruitment processes and also be transferred to affiliated entities within the Global Roche network.
Roche Diagnostics can share candidate’s personal data with:
a. Other entities in the Roche Group, including entities established in countries outside the European Economic Area.
b. Entities located in third countries, outside the territory of the European Economic Area.
It is possible that the law of a country to which data is transferred provides for a level of data protection which differs from the GDPR regulations, however, this will be a country for which the European Commission has issued an adequacy decision or an entity bound by an agreement ensuring the same level of protection as the one prevailing at Roche (Roche Intercompany Data Transfer Agreement). Roche Diagnostics will ensure that the transfer of personal data to a third country is carried out in accordance with the requirements of the Personal Data Protection Regulation.
You can at any time request details about the entities to which your personal data has been made available and the scope of information about you which has been made available, by contacting the Data Protection officer.
Entities located in third countries will ensure the security of personal data at a level not lower than the level of safeguards applied by Roche Diagnostics.
VIII. What are your rights?
You have the right to request access to your personal data held by Roche Diagnostics, request rectification and erasure of the data, request limitation of its processing, as well as the right to data portability and the right to object to its processing. You have the right to obtain a copy of data transferred to third countries. In order to exercise the rights, please contact the Personal Data Protection Officer electronically, by sending a message to:
If data is processed on the basis of your consent, you may withdraw your consent at any time. If you withdraw the consent, this will not affect the lawfulness of processing based on consent before its withdrawal.
If the personal data processing violates the privacy and information security regulations, you also have the right to lodge a complaint with a supervisory authority, that is the President of the Personal Data Protection Office.
These rights may be limited if the fulfillment of your request would disclose data about another person or if you have asked us to remove the information which is required by law or where retaining the information is necessary on the grounds of legitimate interests of the data controller.
IX. Security of your personal data
Roche Diagnostics uses technical, physical and administrative security measures to prevent the risk of loss, misuse, disclosure or modification of information provided by you, as well as the risk of unauthorized access to such information; additionally, Roche Diagnostics requires that Workday use technical, physical and administrative security measures which ensure a similar level of security in order to prevent the risk of loss, misuse, disclosure or modification of information provided by the user, as well as the risk of unauthorized access to such information.
X. How can you contact us?
In case of any issues, problems or complaints related to the processing of your personal data, please contact us at:
XI.Consent in recruitment services
The job applicant, using a specific recruitment service to take part in the recruitment conducted by Roche Diagnostics, agrees to the processing of his/her personal data by performing an explicit confirming action (e.g. by sending his/her CV and/or by completing the form with his/her personal data). The provision of data in this way via the recruitment service is tantamount to consent to the collection, processing, use, storage and transfer of the user’s personal data by Roche Diagnostics in a manner specified in the Notice.