3. Purpose, Principles, and Legal Basis for Processing Personal Data

We care about protecting the interests of individuals whose data we process, ensuring that:

• The data is processed in compliance with applicable regulations, in a fair and transparent manner for the individuals concerned; We collect data only for clearly defined, legitimate purposes and do not use it in a way that is inconsistent with the original purpose;
• The scope of the processed data is adequate and limited to the minimum necessary for the purposes of processing;
• The data remains accurate and up to date, with any incorrect information promptly corrected or deleted;
• We retain the data only for as long as necessary to fulfill the processing purposes, ensuring the ability to identify the individuals concerned;
• We apply appropriate security measures to protect the data from unauthorized access, unlawful processing, loss, or destruction.

Data may be processed for the following purposes:

• The conclusion, performance, or termination of a contract to which the data subject is a party, or to take action at the request of the data subject prior to entering into a contract – based on Article 6(1)(b) of the GDPR;
• Identifying authorization to represent a party – based on Article 6(1)(b) and (c) of the GDPR;
• Processing necessary to fulfill legal obligations incumbent on the Administrator, particularly those arising from labor law, as well as other legal acts – based on Article 6(1)(c) of the GDPR;
• Purposes arising from the legitimate interests pursued by the Administrator or a third party, including, but not limited to, marketing activities, customer satisfaction surveys, quality of service assessment, statistical analysis, creating reports and analyses, pursuing claims or protecting against claims that the Administrator may raise or that may be raised against the Administrator, as well as for archival purposes, security, handling complaints or requests, and ensuring compliance with the accountability principle referred to in Article 5(2) of the GDPR (legal basis: Article 6(1)(c) and (f) of the GDPR);
• Conducting a recruitment process, in the case of submission of application documents (CV, cover letter). The processing includes both recruitment for a specific position and for future recruitment needs – based on Article 6(1)(a) and (b) of the GDPR; 
• Marketing and newsletters, including sending commercial information and offers based on the consent given by the user – based on Article 6(1)(a) of the GDPR;
• For one or more specific purposes for which the data subject has given consent to the processing of their personal data. This consent may be withdrawn at any time.