Data controller
The controller of your personal data is Primework Group Sp. z o.o., ul. Fabryczna 18, 05-077 Warsaw, Poland. Data protection contact: biuro@primework.pl, +48 501 501 216, or by post to the registered address.
Within our group we cooperate with Primework Group MB (Lithuania) and Primework Global S.R.L. (Romania). Where a recruitment project requires it, data may be shared with them strictly to the extent needed to deliver the project.
What data we collect
| Category | Scope |
|---|---|
| Form data | Full name, e-mail, phone number, message and details given in the multi-step form (company, industry, number and type of workers, location, planned start). |
| Business contact data | Details of people representing an employer, provided by e-mail or phone. |
| Candidate data | Data supplied in an application or CV, as needed to take part in a recruitment process. |
| Technical data | IP address, device and browser type, referrer, the page the enquiry was sent from, and data from cookies and analytics tools. |
Providing data is voluntary but necessary to answer an enquiry or take part in recruitment. Please do not send special-category data (e.g. health or religion) unless a given process requires it.
Purposes and legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Answering enquiries and preparing quotes | Art. 6(1)(b) pre-contractual steps and 6(1)(f) legitimate interest in handling correspondence |
| Performing recruitment, intermediation, temporary work, outsourcing or legalisation contracts | Art. 6(1)(b) |
| Running a candidate's recruitment process and presenting them to employers | Art. 6(1)(b) and 6(1)(a) consent for voluntarily supplied data |
| Employment agency, tax and accounting obligations | Art. 6(1)(c) |
| Marketing of our own services, analytics and website development | Art. 6(1)(f); consent for analytics and marketing cookies |
| Establishing, pursuing or defending claims | Art. 6(1)(f) |
Recipients
Data may be entrusted or disclosed only to parties we need to run our business:
- hosting, cloud and database providers storing form submissions;
- our CRM provider, which receives employer enquiries so that none is missed;
- e-mail, telephony and messenger providers used to contact you;
- employers – for candidates, to the extent needed to present an application;
- affiliated Primework companies, law firms, accountants and advisers where necessary;
- public authorities where disclosure is required by law (e.g. voivodeship offices, labour inspectorate, social security, tax offices).
We sign data processing agreements with every processor. Transfers outside the EEA (e.g. analytics providers) rely on standard contractual clauses or another Chapter V GDPR mechanism.
Retention periods
- Enquiries without follow-up cooperation – up to 24 months from the last contact.
- Contract-related data – for the term of the contract and then until claims become time-barred (as a rule up to 6 years).
- Accounting records – 5 years from the end of the tax year.
- Candidate data – for the duration of the process, or up to 24 months where consent for future recruitment was given, or until it is withdrawn.
- Cookie and analytics data – as stated in the Cookie policy.
Your rights
You have the right to access your data and receive a copy, to rectification, erasure, restriction of processing, data portability, to object to processing based on legitimate interest (including direct marketing) and to withdraw consent at any time without affecting prior lawful processing.
To exercise these rights write to biuro@primework.pl. We respond without undue delay, at the latest within one month. You may also lodge a complaint with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, Poland.
Security
The website runs over encrypted HTTPS; form data is transmitted over an encrypted channel and stored in a database with restricted access. Only authorised Primework team members can see submissions, after logging into the admin panel.
We apply organisational and technical measures proportionate to risk: access control, authentication, backups and data minimisation. We do not carry out automated decision-making producing legal effects.
Questions about this document?
Write to us – we reply within 48 hours.