Privacy policy

1. Data controller

The controller of personal data provided through the back2work.pl website is:

The controller has not appointed a data protection officer. In all matters concerning the processing of personal data, please contact the address above.

2. What data we collect

2.1. Contact form

The form on the website is intended for companies looking for workers. The data provided in it is:

• company name,
• expected number of workers,
• email address or phone number, depending on the chosen form of contact.

Filling in the form is voluntary, but providing an email address or phone number is necessary for us to reply.

2.2. Direct contact

We process data provided in an email or during a phone call to the extent necessary to handle the matter the contact concerns.

2.3. Technical data

The server on which the website runs records standard technical data of the connection, including the IP address, browser type and time of the request. This data serves to ensure the security and proper operation of the website.

3. Purposes and legal bases

4. How long we keep data

• Inquiries that did not lead to cooperation: up to 24 months from the last contact, after which we delete them from mailboxes.
• Inquiries that led to a contract: for the duration of the contract and, after it ends, for the limitation period of claims.
• Accounting records: 5 years from the end of the year in which the tax obligation arose.
• Technical data from server logs: no longer than 12 months.

5. Who we share data with

Data is not sold or made available to third parties for marketing purposes. We do, however, use service providers who process data on our instructions:

Data may be disclosed to public authorities where such an obligation arises from legal provisions.

6. Transfers outside the European Economic Area

Some of the providers listed in section 5 are based in the United States. Data is transferred on the basis of the European Commission decision on the EU-U.S. Data Privacy Framework and, otherwise, on the basis of standard contractual clauses approved by the European Commission. A copy of the safeguards applied can be obtained by contacting the controller.

7. Your rights

The data subject has the right to:

• access the data and receive a copy of it,
• rectify incorrect or incomplete data,
• erase the data,
• restrict processing,
• transfer data processed on the basis of a contract or consent (data portability),
• object to processing based on a legitimate interest,
• withdraw consent at any time, without affecting the lawfulness of processing carried out before its withdrawal.

We accept requests at p.jakubiszyn@back2work.pl. We reply without undue delay and within one month at the latest.

You also have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), ul. Stawki 2, 00-193 Warszawa.

8. Where we get data from

The data comes primarily from the person who contacts us: from the form, an email or a phone call.

If we are the first to make contact, we use business data made public by the company itself, that is, from its website, from public registers such as the National Court Register (KRS) and the Central Register and Information on Economic Activity (CEIDG), and from industry company databases. In that case we process only business data, that is, name, position and business email address or phone number. The basis is our legitimate interest in establishing business contact. In the first message we state the source of the data and the possibility of objecting. We act on an objection immediately and permanently.

9. No automated decisions

We do not make decisions about persons contacting us that are based solely on automated processing, including profiling, and that would produce legal effects or similarly significantly affect those persons. Every inquiry is reviewed by a human.

10. Cookies

The website uses Google Tag Manager, which runs Google Analytics 4 (visit statistics) and Google Ads conversion measurement (advertising effectiveness). On the first visit, a consent selection window is displayed. Until consent is given, these tools do not store analytics or advertising cookies in the browser. They then operate in a limited mode (Google Consent Mode): signals without cookies may be sent to Google, and an ad click identifier, which makes it possible to determine campaign effectiveness, may be passed in the page address.

You can change or withdraw your consent at any time by clicking the "Cookie settings" link in the footer of every page. Withdrawing consent does not affect the lawfulness of processing carried out before its withdrawal.

The legal basis for using analytics and advertising cookies is consent (Article 6(1)(a) GDPR in conjunction with the provisions of the Electronic Communications Law (Prawo komunikacji elektronicznej)). Cookies necessary for the website to function, including saving the decision made in the consent window, are used without consent.

Regardless of the above, every browser can be set to block cookies or to notify you when they are stored.

11. Security

The connection to the website is encrypted with the TLS protocol. Only authorised persons have access to mailboxes, and the accounts are protected by two-factor authentication. Data processing agreements have been concluded with the service providers listed in section 5.

12. Changes to the policy

We update the policy when the way the website works or the scope of the data processed changes. The date of the last update is given at the beginning of the document. Earlier versions are available on request.