1. Data Controller
The controller of personal data is STARPOL II Sp. z o.o., ul. Radomska 39A, 27-200 Starachowice, Poland.
- Tax ID (NIP): 6641967532
- National Court Register (KRS): 0000156975
- REGON: 292811960
- E-mail: biuro@starpol.pl
- Phone: +48 41 273 81 20
The Controller has not appointed a Data Protection Officer (DPO).
2. Scope of data and sources
We process personal data provided voluntarily via:
- contact forms (e.g. name, surname, e-mail address, phone number, message content),
- recruitment forms / CV submissions (contact details and information included in recruitment documents).
In addition, the server may collect basic technical data (e.g. IP address, timestamp, URL) in server logs.
3. Purposes and legal bases
- Contact and handling inquiries — Article 6(1)(f) GDPR (legitimate interest: communication) or Article 6(1)(b) GDPR (pre-contractual actions at the request of the data subject).
- Recruitment (current) — Article 6(1)(b) and (c) GDPR (pre-contractual actions and obligations under labour law); data exceeding statutory requirements — Article 6(1)(a) GDPR (candidate’s consent).
- Recruitment (future processes) — Article 6(1)(a) GDPR (consent) — only after voluntary selection of the relevant checkbox.
- Analytics (Google Analytics 4) — Article 6(1)(a) GDPR (consent via the Complianz consent banner).
- Security and anti-spam (Google reCAPTCHA, logs) — Article 6(1)(f) GDPR.
- Compliance with legal obligations — Article 6(1)(c) GDPR.
5. Data recipients (processors)
- Hosting: AWHost (website and data hosting),
- Google Analytics 4: Google Ireland Limited,
- Google reCAPTCHA: Google.
Form submissions (WPForms) are stored on our hosting and sent by e-mail to mailboxes in the @starpol.pl domain.
6. Transfers of data outside the EEA
The use of Google services may involve transfers of data to third countries (e.g. the United States). In such cases, appropriate safeguards are applied, including standard contractual clauses. Details are available in Google’s documentation.
7. Data retention periods
- Contact form inquiries: up to 12 months from the last correspondence,
- Recruitment (current): up to 6 months after completion of the recruitment process (or longer if required by law),
- Recruitment (future processes with consent): up to 12 months (you may withdraw consent at any time),
- Server logs / security data: up to 90 days,
- Data processed on the basis of consent: until consent is withdrawn or the specified period expires.
8. Rights of data subjects
You have the right to access your data, rectify it, erase it, restrict its processing, object to processing (where based on legitimate interest), data portability (where based on consent or contract), withdraw consent at any time (without affecting the lawfulness of processing prior to withdrawal), and lodge a complaint with the supervisory authority: President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland.
9. Automated decision-making and profiling
We do not make automated decisions producing legal effects concerning users and do not conduct profiling requiring consent. Basic statistics (GA4) are enabled only after consent is granted via the consent banner.
10. Security
We apply, among others, HTTPS/SSL encryption, access control, software updates, backups, event logs, and anti-spam mechanisms (reCAPTCHA).
11. Children’s data
The website is not directed at children and we do not knowingly collect data of persons under 16 years of age.
12. Privacy contact
For matters related to personal data, please contact us at: biuro@starpol.pl or by post: STARPOL II Sp. z o.o., ul. Radomska 39A, 27-200 Starachowice, Poland.