Information about processing personal data for job applicants

Fulfilling the obligations according to the art. 13 sec. 1 and 2 or art. 14 sec. 1 and 2 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter be referred to as “GDPR” the data controller informs that:

  1. PwC Advisory spółka z ograniczoną odpowiedzialnością sp.k. or another PwC entity which runs a recruitment process - list of entities, with its registered seat in Warsaw (00-633), Polna 11 Street, („PwC”, “we” or “employer”) will be the controller of your personal data submitted in your application for a job.
  2. PwC processes your personal data for the following purposes and on the following legal bases:
A legal basis A purpose of the processing
  • art. 6 sec. 1 let. b) of the GDPR – taking steps at the request of the data subject prior to entering into a contract
  • art. 6 sec. 1 let. c) of the GDPR – legal obligation art. 221 § 1 of the Labor Code and the Ordinance of the Minister of Family, Labour and Social Policy regarding keeping documentation related to employment (applies only for people who apply for a position related to an employment contract )
  • art. 6 sec. 1 let. of the GDPR – consent applies if candidate points out another data than in Labor Code (e.g. photo in resume)
  • art. 9 sec. 2 let. a) of the GDPR – consent applies if special categories of personal data (sensitive data) are contained in application
  • art. 10 of the GDPR - processing is authorised by Union or Member State law applies if a job position requires collecting personal data relating to criminal convictions and offences or related security measures


Performing a recruitment process for the job offered
  • art. 6 sec. 1 let. a) of the GDPR - consent
  1. Participating in further recruitment processes conducted by PwC; 
  2. Sending notifications about job offers in PwC and job related events organized or with the participation of PwC such as career fair.


  • art. 6 sec. 1 let. f) of the GDPR – legitimate interest pursued by PwC

Exercising legal claims.


3. Your personal data will not be disclosed to third parties except the following recipients:

  • other PwC member firms. For details of our member firm locations, please visit the website. We may share personal data with other PwC member firms where necessary for administrative purposes;
  • service providers that aren’t members of the PwC network (“third party service providers”) to process on a PwC’s behalf. Third party service providers may include providers of IT services, including identity management, website hosting and management, data analysis, data back-up, security and storage services in so far as it refers to recruitment process;
  • governmental or regulatory authorities, courts and law enforcement authorities or agencies as required by and/or in accordance with applicable law or regulation.

4. Your personal data may be transferred to countries outside the European Economic Area (EEA) – third countries, based on:

  • art. 45 sec. 1 of the GDPR - European Commission’s adequacy decision (applies for countries, which were subject of decision);
  • art. 46 sec. 2 let. c) of the GDPR - standard data protection clauses adopted by the European Commission.

5. Your personal data will be retained for a term of the recruitment process and 3 months after that. If you provide us consent for further recruitment processes your personal data will be retained until you withdraw the consent.

6. In accordance with processing your personal data you have the following rights: - right of access, to rectification (updating), to erasure, to restriction of processing, to data portability, to object and to withdraw a consent; You can exercise these rights by using the form available here; - to lodge a complaint with a supervisory authority (Prezes Urzędu Ochrony Danych Osobowych).

7. The provision of personal data is mandatory in the field of personal data specified in labour law. For the rest of the categories of personal data, its provision is voluntary.

8. In some recruitment processes PwC uses recruitment agencies services or searches for candidates in LinkedIn and GoldenLine, at that cases:

  • recruitment agency or LinkedIn and GoldenLine are sources of candidate’s personal data;
  • categories of personal data concerned: name, surname, date of birth, contact data provided by a candidate and other categories of personal data which are contained in applications provided voluntary by a candidate or made public in portals specified above.