1. Data Controller
The controller of personal data is STARPOL II Sp. z o.o., Radomska 39A, 27-200 Starachowice, Poland.
- Tax ID (NIP): 6641967532
- Company Register (KRS): 0000156975
- REGON: 292811960
- E-mail: biuro@starpol.pl
- Phone: +48 41 273 81 20
The Controller has not appointed a Data Protection Officer.
2. Scope of Data and Sources
We process data voluntarily provided through:
- contact form (e.g. name, surname, email, phone number, message content),
- recruitment form / CV submission (contact details and information contained in recruitment documents).
Additionally, the server may collect basic technical data (e.g. IP address, timestamp, URL) in server logs.
3. Purposes and Legal Basis
- Contact and handling inquiries — Article 6(1)(f) GDPR (legitimate interest: communication) or Article 6(1)(b) GDPR (steps prior to entering into a contract at the request of the data subject).
- Recruitment (current process) — Article 6(1)(b) and (c) GDPR (steps prior to contract and legal obligations under labor law); data exceeding required scope — Article 6(1)(a) GDPR (candidate’s consent).
- Recruitment (future processes) — Article 6(1)(a) GDPR (consent) — only if the relevant checkbox is voluntarily selected.
- Analytics (Google Analytics 4) — Article 6(1)(a) GDPR (consent via Complianz consent banner).
- Security and anti-spam (Google reCAPTCHA, logs) — Article 6(1)(f) GDPR.
- Compliance with legal obligations — Article 6(1)(c) GDPR.
5. Data Recipients (Processors)
- Hosting: AWHost (website and data hosting),
- Google Analytics 4: Google Ireland Limited,
- Google reCAPTCHA: Google.
Form submissions (WPForms) are stored on our hosting server and sent by email to mailboxes within the @starpol.pl domain.
6. Transfers Outside the EEA
Using Google services may involve transferring data to third countries (e.g. the United States). In such cases appropriate safeguards are applied, including standard contractual clauses. Details are available in Google’s documentation.
7. Data Retention Periods
- Contact form inquiries: up to 12 months from the last correspondence,
- Recruitment (current process): up to 6 months after completion of recruitment (or longer if required by law),
- Recruitment (future processes with consent): up to 12 months (consent can be withdrawn at any time),
- Server logs / security: up to 90 days,
- Data processed based on consent: until consent is withdrawn or the specified period expires.
8. Data Subject Rights
You have the right to: access your data, rectify it, erase it, restrict processing, object (where the legal basis is legitimate interest), data portability (where the basis is a contract or consent), withdraw consent at any time (without affecting the lawfulness of processing before withdrawal), and lodge a complaint with the supervisory authority: President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland.
9. Automated Decision-Making and Profiling
We do not make automated decisions producing legal effects concerning users and we do not perform profiling requiring consent. Basic statistics (GA4) are activated only after consent via the consent banner.
10. Security
We apply, among others: HTTPS/SSL encryption, access control, software updates, backups, event logs, and anti-spam mechanisms (reCAPTCHA).
11. Children’s Data
The service is not directed to children; we do not knowingly collect data of persons under 16 years of age.
12. Privacy Contact
For matters concerning personal data, contact us at:
biuro@starpol.pl
or by post: STARPOL II Sp. z o.o., Radomska 39A, 27-200 Starachowice, Poland.