FIRST POINT PARTNERS PRIVACY POLICY
‍Thank you for your interest in working with First Point Partners on your recruitment! Please find below information on how we process your personal data. Providing personal data is voluntary; however, refusal to provide it will prevent us from considering your application.

‍WHO IS THE CONTROLLER OF YOUR DATA?
‍Your data are processed by First Point Partners spółka z ograniczoną odpowiedzialnością, a company incorporated in Poland, registered at Aleja Wyzwolenia 10/55, 00-570 Warsaw and registered under KRS no. 0001078071. You may contact us via email at: info@firstpoint-partners.com

‍WHY DO WE PROCESS YOUR DATA?
‍We process your data for the purpose of conducting a specific recruitment in which you participate and for future recruitment, based on your consent. Your data are stored in our database so that we can present your candidacy to employers that conduct recruitment suitable for your profile. To the extent your data are processed based on your voluntary consent (this is the case until we present your candidacy to the employer and enter negotiations for remuneration), you can withdraw it at any time without affecting the lawfulness of our processing of your data prior to its withdrawal. Additionally, we process your data for our legitimate interest, which is calculating and demanding our remuneration from our clients that hire us for recruitment and, as a result, hire you in the recruitment we handle. This is so because in many cases our remuneration is calculated based on the final offer you get from the employer and accept. Therefore, we also process your data for purposes related to our legal obligations in terms of taxes and accounting. In case we decide to engage in a merger, or our company or part of it is acquired by an external party, we may process your data for the purposes of such transaction, in which case lawful and effective closure of the transaction will be our legitimate interest.In case of a possible dispute, we may also process your data in order to establish, pursue or defend against claims, which is our legitimate interest. The types of data we process about you are: data that you include in your CV and LinkedIn or other professional social media profile (in which case we get your data from LinkedIn or such media), conclusions from the psychometric and other tests that we conduct with you (we get your data from the test), other data that you share with us during talks, and our conclusions from the interviews, as well as your voice (which is processed solely during the interview by an application that prepares an automated transcript of the interview). In case you are hired in one of the recruitment processes that we handled, we also process details of the job offers you got, including the information on the final remuneration you negotiated. These data are shared with us by your new employer.

‍FOR HOW LONG WILL WE PROCESS YOUR DATA?
‍We will process your data in our database until you withdraw your consent or object to it. In case we process your data for the purposes of calculating our remuneration and for tax purposes, we will process them as long as required by law, which is currently no less than 5 years from the date when we are obliged to pay the tax resulting from the recruitment you participate in. In the event of a dispute, we will process your data until the dispute has become final.

‍WHO SUPPORTS US IN PROCESSING YOUR DATA?We will pass on your data to potential employers who are our clients. You will be informed in advance to which employer we plan to forward your data. These clients may in some cases be located outside the European Union, in locations that do not provide an adequate level of data protection compared with the EU - your data will be presented, however, based on article 49(1)(b) of the GDPR, so as to proceed with pre-contractual actions for your possible employment. You may choose for us not to share data in this way. We also use IT tools that are supplied by companies located outside the EU, mainly in the United States - supplied by Microsoft, Workforce Cloud Tech, Inc., Perplexity and Anthropic. In any case, we do our best so that the transfer is secured either by the adequacy of the Data Privacy Framework (https://www.dataprivacyframework.gov/), which is the case with Microsoft and Perplexity, or by other tools such as Standard Contractual Clauses of the EU Commission, which is the case with Workforce Cloud Inc.; you can find the contractual provisions here: https://recruitcrm.io/legal/data-processing-agreement/ and Anthropic, whose contractual provisions are available here: https://www.anthropic.com/legal/data-processing-addendum. In addition, your data may be available to entities that provide IT services to us, as well as legal, financial or tax advisers, and relevant public or judicial authorities. The testing tool providers we use are Heroify sp. z o.o. (a Polish company) and TestGorilla B.V. (a Dutch company), who are recipients of your data in case you take a test on their platform and process your data on our behalf. If we decide to sell our business, your information may be transferred to a potential buyer.

‍WHAT ARE YOUR RIGHTS?
‍You have the right to demand access to your data, their rectification, erasure of your data, restriction of their processing, as well as the right to data portability. To the extent that we process your data based on our legitimate interest as described above, you also have the right to object to the processing of your data. If you wish to exercise your rights, please email or call us - contact details can be found above.You also have the right to lodge a complaint about how we process your data to the personal data supervisory authority. In Poland, such authority is the President of the Office for Personal Data Protection (https://uodo.gov.pl/).We will not subject your data to automated decision-making or profiling. However, please note that we use automatic processing of your data such as local tools transcribing the interviews, as well as AI tools such as Claude and Perplexity (where your data are not used for training of the models based on the agreements we have with them).