GDPR notice (for the User's employees)

This notice explains how the personal data of employees — entered into the Service by the employer (the DoPusk User) — is processed.

It is your employer — the entity that employs you and enters your data into the Service. DoPusk (the Operator) acts as a processor on the employer's behalf.

Identification and contact data, PESEL/identity document, employment data, data needed for HR settlements, family members (for insurance filings) — to the extent required by labour and insurance law.

Performance of the employment relationship and the employer's obligations (Art. 6(1)(b) and (c) GDPR; Art. 9(2)(b) — special-category data to the extent required by labour law).

For the duration of employment and the statutory retention periods for employee records (10 years, unless the law provides otherwise).

Access, rectification, erasure, restriction, objection, portability, and a complaint to the President of the UODO. You exercise them with your employer (the controller).

Data is not transferred outside the EEA; there is no automated decision-making or profiling.