I. General Provisions
This Privacy Policy sets out the rules for processing and protecting the personal data of users of the website nexastaff.pl (hereinafter: the “Website”).
The data controller is Nexa Staff, with its registered office at [address], Tax ID: [NIP], REGON: [REGON], e-mail: kontakt@nexastaff.pl (hereinafter: the “Administrator”).
Personal data is processed in accordance with applicable law, in particular Regulation (EU) 2016/679 of the European Parliament and Council of 27 April 2016 (“GDPR”) and the Polish Personal Data Protection Act of 10 May 2018.
II. Purposes of Processing Personal Data
The Administrator processes personal data solely for the following purposes:
handling candidate applications, including receiving CVs and contact details,
carrying out recruitment processes on behalf of employers cooperating with Nexa Staff,
contacting users via forms available on the Website,
responding to inquiries and managing correspondence,
conducting analytical and statistical activities related to the use of the Website.
III. Scope of Processed Data
When using the Website, the Administrator may process the following personal data:
first and last name,
e-mail address,
phone number,
information contained in CVs and other application documents (e.g., work experience, education),
data voluntarily provided by the user in contact form messages.
IV. Legal Basis for Processing
User consent (Art. 6(1)(a) GDPR) – when applying for a job and submitting data via the form.
Necessity for contract performance or steps prior to contract conclusion (Art. 6(1)(b) GDPR) – when participating in a recruitment process.
Legitimate interest of the Administrator (Art. 6(1)(f) GDPR) – including conducting statistics, protecting against claims, and ensuring the security of the Website.
V. Data Retention Period
Personal data is processed for the period necessary to complete the recruitment process for which the user has given consent.
If the user consents to participate in future recruitment processes, the data is retained until the consent is withdrawn.
After the above periods expire, data is deleted or anonymized, unless further retention is required by law.
VI. Data Sharing
Candidate data may only be shared with employers cooperating with Nexa Staff as part of recruitment processes.
Data may also be shared with entities providing technical or organizational services to the Administrator (e.g., hosting, IT support).
Data is not transferred outside the European Economic Area (EEA), unless the user explicitly consents to data transfer to an employer located outside the EEA.
VII. User Rights
Users have the right to:
access their data and receive a copy,
correct their data,
request deletion of their data (“right to be forgotten”),
restrict data processing,
data portability,
object to data processing,
withdraw consent at any time, without affecting the lawfulness of processing prior to withdrawal.
To exercise these rights, contact the Administrator at kontakt@nexastaff.pl.
Users also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO) if they believe their data is processed unlawfully.
VIII. Cookies
The Website uses cookies to ensure its proper functioning and to conduct visitor statistics.
Users can set conditions for storing or accessing cookies via their web browser settings.
Restricting the use of cookies may affect some Website functionalities.
IX. Final Provisions
The Administrator reserves the right to update this Privacy Policy, provided that users’ rights are not infringed.
The current version of the Privacy Policy is always available on the Website.