Privacy Policy

The GDPR, i.e. the General Data Protection Regulation (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016), establishes rules for the protection of personal data of European Union citizens. Its purpose is to strengthen and harmonise privacy protection laws across the EU.

This Privacy Policy is intended to inform you about what personal data we collect, for what purposes we process it, how we use it, and who we are as the data controller. It also includes information about your rights in relation to the processing of your personal data by us. This Policy does not apply to the processing of employee and contractor data.

WHO IS THE DATA CONTROLLER

We hereby inform you that the controller of your personal data is:

BERRY HR SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ
ul. Oleska 121, 45-231 Opole, Poland
registered with the District Court in Opole under KRS no.: 0001161015
Tax ID (NIP): 7543377149, REGON: 541144190

(hereinafter referred to as the “Data Controller”).

You can contact us regarding personal data protection at: iod@berryhr.pl
or by post at: BERRY HR Sp. z o.o., ul. Oleska 121, 45-231 Opole, Poland, marked “GDPR”.

DATA PROTECTION OFFICER

The Controller has appointed a Data Protection Officer:

Damian Stachyra
e-mail: iod@berryhr.pl
tel.: +48 660 571 333

WHAT ARE THE PURPOSES AND LEGAL BASES FOR PROCESSING PERSONAL DATA?

In order to provide services within the scope of our business activity, the Data Controller processes your personal data for various purposes, always in accordance with applicable law.

Below are the purposes of processing and their legal bases:

A. Pre-contractual actions at your request

We process the following data:
name and surname, company name, PESEL number, company registered office, correspondence address, e-mail address, phone number, NIP, REGON, KRS, website address, data contained in public registers, bank account number, employee data (name, surname, contact details, position).
Legal basis: Art. 6(1)(b) GDPR and Art. 6(1)(f) GDPR (legitimate interest for representatives of a contracting party).

B. Conclusion and performance of a contract

Same categories of data as above, plus any other data included in documentation you provide.
Legal basis: Art. 6(1)(b) GDPR.

C. Legal obligations (e.g. accounting, tax)

Same categories of data as above.
Legal basis: Art. 6(1)(c) GDPR.

D. Storage of unanswered offers/inquiries

Data such as name, company name, e-mail, phone number or other data provided.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest).

E. Presenting your candidacy to an employer

Data: name, CV, contact details, recruitment documents.
Legal basis: Art. 6(1)(a) GDPR (consent).

F. Presenting your candidacy to future employers

Same as above.
Legal basis: Art. 6(1)(a) GDPR.

G. Website administration (server logs)

Data such as IP address, server date/time, browser and operating system information.
Legal basis: Art. 6(1)(f) GDPR.

H. Direct marketing

Data such as name, company name, e-mail, phone number, address, public register data or other provided data.
Legal basis: Art. 6(1)(a) GDPR (consent) and Art. 6(1)(f) GDPR (legitimate interest).

WITHDRAWAL OF CONSENT

If processing is based on your consent, you may withdraw it at any time by:
a) sending a letter to the Controller’s address, or
b) sending an e-mail to info@berryhr.pl marked “GDPR”.

Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

PROVISION OF PERSONAL DATA

Providing personal data is voluntary. However, in some cases it is necessary in order to receive our services (e.g. providing an e-mail address to receive an offer).

AUTOMATED DECISION-MAKING AND PROFILING

For marketing purposes, we may use profiling (e.g. Facebook Ads, Google Ads). This does not produce legal effects or similarly significant effects for you.

RECIPIENTS OF PERSONAL DATA

Your data may be shared with:

• our employees and contractors,
• marketing service providers,
• IT and telecommunications service providers,
• banks and payment institutions,
• postal and courier operators,
• research agencies,
• legal, tax, audit, HR and consulting service providers,
• entities seeking employees.

Data may also be shared with public authorities where required by law (e.g. ZUS, tax authorities).

TRANSFERS OUTSIDE THE EEA

Your data may be transferred outside the European Economic Area in connection with the use of cloud service providers.

DATA RETENTION PERIOD

We retain personal data only as long as necessary to achieve the purposes:

• up to 5 years after contract completion (including tax obligations),
• 1 year for offers without contract,
• up to 1 year for consent-based and marketing processing,
• up to 1 year for recruitment databases for future employers.

Retention periods are counted from the end of the year in which processing began.

YOUR RIGHTS

You have the right to:

• access your data,
• rectify data,
• erase data (“right to be forgotten”),
• restrict processing,
• data portability,
• object to processing,
• withdraw consent.

You may exercise your rights by contacting us by post or e-mail at info@berryhr.pl (“GDPR”).

You also have the right to lodge a complaint with the supervisory authority:

President of the Personal Data Protection Office (UODO)
ul. Stawki 2, 00-193 Warsaw, Poland

FINAL PROVISIONS

In matters not regulated by this Policy, applicable data protection laws shall apply, including:

• GDPR (EU) 2016/679,
• Act on Provision of Electronic Services (2002),
• Polish Personal Data Protection Act (2018),
• Telecommunications Law (2004).

You will be informed of any changes to this Privacy Policy by e-mail or via our website: www.berryhr.pl.

This Privacy Policy is effective as of 13 March 2025.