Legal
Recruitment Privacy Notice
This notice explains how RITE NRG processes your personal data when you apply for a role with us, or when we receive your application from another source.
Last updated: 30 August 2026
1. Controller
The controller of your application data is:
- RITE NRG sp. z o.o.
- ul. gen. Władysława Sikorskiego 3/2, 53-659 Wrocław, Poland
- KRS 0000710267 · NIP 7642687723 · REGON 369015211
- Email: hello@ritenrg.com
This notice applies where you apply for employment or another role with RITE NRG and RITE NRG determines the purposes and means of recruitment. If RITE NRG recruits on behalf of a client or sends a profile to a separate potential employer, we will identify that organization and its role before the relevant disclosure.
2. Data and Sources
We may process:
- Your name, date of birth and contact details selected by you.
- Education, professional qualifications and employment history where needed for the role.
- Information in your CV, application, portfolio, interview notes, task or assessment.
- Availability, work-authorization and remuneration information where relevant and lawful.
- Correspondence and information needed to organize and document the process.
- Additional information you voluntarily provide where its processing is lawful.
Data normally comes from you. It may also come from a recruitment agency, referrer, professional networking profile, publicly available professional source, former employer or another source you authorize or that the law permits. If we obtain data from another source, we provide the information required by GDPR Article 14, including the source or source category, within the applicable period.
Please do not provide information that is not relevant to the role. Special-category data voluntarily initiated by you are processed only where an applicable GDPR Article 9 condition and Polish Labour Code rule is satisfied. We do not request criminal-conviction data unless a specific law authorizes or requires it.
3. Purposes, Legal Bases and Retention
| Purpose | Legal basis | Retention |
|---|---|---|
| Receive and assess your application, communicate with you, conduct interviews or assessments and select a person for the current process | GDPR Art. 6(1)(c) together with Polish Labour Code Art. 22¹ for data the employer may request; Art. 6(1)(b) for steps at your request before a possible employment contract, where applicable | During the stated recruitment. If you are unsuccessful, we delete the application without undue delay after the process closes, unless a separate future-recruitment consent applies or a specific, documented need requires limited evidence to be restricted for a legal claim. |
| Process additional ordinary data you voluntarily provide beyond the data RITE NRG may request | GDPR Art. 6(1)(a) and Polish Labour Code Art. 22¹a, where valid consent is the appropriate basis | For the current recruitment, or until earlier withdrawal, subject to processing lawfully completed before withdrawal and any specific legal-claim need. |
| Consider your application for future RITE NRG roles | GDPR Art. 6(1)(a): separate, optional consent | Up to 12 months from consent or until earlier withdrawal. At the end, we delete or ask for a fresh choice. |
| Organize the process, secure systems, prevent abuse and establish, exercise or defend legal claims | GDPR Art. 6(1)(f): our legitimate interests in a fair, secure and accountable recruitment process and legal claims; Art. 6(1)(c) where a legal duty applies | Operational records during the process. Only the minimum material specifically required for a claim is restricted until the applicable limitation period or proceedings end. |
Refusing optional data or future-recruitment consent does not disadvantage your application for the current role. You may withdraw consent at any time by emailing hello@ritenrg.com. Withdrawal does not affect processing carried out before withdrawal.
4. Whether Data Are Required
The information identified as required for a role is needed to assess your application and take the requested pre-contract steps. Without it, we may be unable to include you in the process. Other information and future-recruitment consent are optional.
5. Recipients
Access is limited to authorized RITE NRG recruiters, hiring managers and decision-makers who need the data. Depending on the process, recipients may include:
- Recruitment-platform, applicant-tracking, email, cloud, hosting and collaboration providers acting for RITE NRG.
- Recruitment agencies, interview or assessment providers.
- Professional advisers, insurers, courts or public authorities where necessary or required by law.
- A specifically identified RITE NRG client or other potential employer only where RITE NRG has explained the recipient’s role and established a lawful disclosure basis before sharing your profile.
Processors act on documented instructions and under data-protection obligations. A separate potential employer that decides how to use your application is an independent controller and must provide its own privacy information.
6. International Transfers
If a provider or authorized recipient processes or permits access to application data outside the EEA, we use a GDPR Chapter V mechanism such as an adequacy decision, the European Commission’s Standard Contractual Clauses with supplementary measures where required, or another lawful mechanism. You may request information about the safeguard at hello@ritenrg.com.
7. Automated Decisions
RITE NRG does not reject or select candidates through a decision based solely on automated processing that produces legal or similarly significant effects. Technology may support administration or assessment, but an authorized person remains responsible for the recruitment decision.
If RITE NRG introduces automated scoring or another qualifying automated decision, we will assess it and provide the legally required information before it is used.
8. Your Rights
Subject to GDPR conditions, you may request access, correction, deletion, restriction and data portability; object to processing based on legitimate interests; and withdraw consent. Send requests to hello@ritenrg.com. We may request information necessary to verify identity and normally respond within one month.
You may complain to:
President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warszawa, Poland, uodo.gov.pl.
9. Security and Changes
We use technical and organizational measures appropriate to recruitment-data risks. We may update this notice when the process, technology or law changes. The current version and effective date will appear here. A materially new purpose will be explained before it begins.