Data Controller
The controller of your personal data is Apeople Poland Sp. z o.o., with its registered office in Stara Iwiczna, ul. Nowa 6, 05-500 Stara Iwiczna, entered into the National Court Register under number KRS 0000708130, NIP 1231380569, REGON 368941306 (hereinafter: the “Controller” or “Apeople Poland”).
Contact details regarding personal data protection:
- postal address: ul. Nowa 6, 05-500 Stara Iwiczna, Poland
- e-mail: info@apeople.pl
- phone: +48 730 750 672
Purposes and legal bases of processing
Your personal data may be processed for the following purposes and on the following legal bases:
- Recruitment – conducting current recruitment processes, including assessing qualifications and contacting you in connection with recruitment, based on your consent (Art. 6(1)(a) GDPR).
- Future recruitment processes – if you provide separate consent, your data may be stored and used in future recruitment processes (Art. 6(1)(a) GDPR).
- Conclusion and performance of contracts – when data concerns employment, civil law contracts, payroll or HR administration, or cooperation (Art. 6(1)(b) GDPR).
- Compliance with legal obligations – arising from, among others, labour law, occupational health and safety (OHS), tax and social security regulations, as well as record-keeping obligations (Art. 6(1)(c) GDPR).
- Direct marketing – sending you information about job offers and employment opportunities, based on your marketing consent (Art. 6(1)(a) GDPR).
- Legitimate interests of the Controller – e.g. the establishment, exercise or defence of legal claims, statistics, IT security, improving recruitment and marketing processes, and profiling candidates to better match job offers (Art. 6(1)(f) GDPR).
Categories of data
Depending on the situation, we may process the following data:
- contact details (name, surname, e-mail address, phone number),
- professional and educational data (CV, work experience, education, skills),
- identification and address data in case of employment (e.g. PESEL number, residential address),
- data required by law (e.g. tax, social security, OHS information).
Data recipients
Your personal data may be disclosed to:
- potential employers as part of ongoing recruitment processes,
- IT service providers (including the provider of the Traffit recruitment system),
- online analytics and marketing tool providers (e.g. Google, Meta),
- entities providing accounting, HR, legal and advisory services.
Cookies, Google Analytics and Meta Pixel
Our website uses cookies and similar technologies.
- Technical cookies – necessary for the proper functioning of the website.
- Analytical and marketing cookies – used only with your consent (Art. 6(1)(a) GDPR).
In particular, we use:
- Google Analytics – an analytical tool that collects anonymous data about website usage to improve its functionality,
- Meta (Facebook) Pixel – a marketing tool that allows us to target personalized advertisements to users visiting our website.
Consent to cookies is given via our cookie banner displayed on your first visit. You can change your cookie settings at any time in your browser or via the banner.
Transfer of data outside the EEA
The use of Google and Meta services may involve transferring data to third countries (e.g. the USA). In such cases, appropriate legal safeguards are applied, such as standard contractual clauses approved by the European Commission.
Data retention periods
- recruitment data – until the end of the current recruitment process,
- data for future recruitment – up to 24 months from collection,
- marketing data – until consent is withdrawn,
- data arising from employment, tax or OHS obligations – for the period required by law (e.g. employment records up to 50 years),
- data processed on the basis of legitimate interests – until claims are time-barred or an effective objection is raised.
Your rights
You have the right to:
- access your data and obtain a copy,
- rectify your data,
- erase your data (“right to be forgotten”),
- restrict processing,
- transfer your data to another controller,
- object to processing where the legal basis is the Controller’s legitimate interest,
- withdraw consent at any time (without affecting the lawfulness of processing before withdrawal),
- lodge a complaint with the President of the Personal Data Protection Office (UODO).
Voluntary nature of data provision
Providing your personal data is voluntary, but failure to do so may prevent you from participating in recruitment, concluding a contract, fulfilling HR/payroll obligations, or receiving job offers.
Data security
We apply appropriate technical and organisational measures to protect your data against loss, unauthorised access, or misuse. We use IT safeguards (firewalls, encryption, system monitoring), internal procedures, and cooperate only with partners ensuring an adequate level of security.