Privacy Policy

This Privacy Policy describes the rules governing the processing of personal data of users of the website available at:
https://www.complexprojekt.pl.

We are committed to protecting users’ privacy and the security of the personal data they provide. We process personal data in accordance with the GDPR, namely Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016.

Personal Data Controller

The controller of your personal data is:

Company name
COMPLEX PROJEKT Sp. z o.o. Engineering Design and Consulting Office

Address
ul. Ligocka 103/8, 40-568 Katowice, Poland

National Court Register number (KRS)
0000192626

Tax Identification Number (NIP)
634-013-28-96

National Business Registry Number (REGON)
008433129

Email
[sekretariat@complexprojekt.pl](mailto:sekretariat@complexprojekt.pl)

Telephone
+48 32 259 72 01

What Personal Data We Process

Depending on how you use the website, we may process the following data:

data provided through the contact form: full name, email address, telephone number and the content of the enquiry;
data provided in email correspondence or during telephone conversations;
data provided through the application form: full name, email address, telephone number, CV, information contained in the CV and the content of any questions or comments;
technical data relating to your use of the website, such as your IP address, device information, browser information, operating system, date and time of the visit, pages visited and data stored in cookies.

Purposes and Legal Bases for Processing Personal Data

Your personal data may be processed for the following purposes:

Handling Contact Form Enquiries and Correspondence

We process personal data provided through the contact form or in an email in order to respond to your enquiry, conduct correspondence and handle your request.

The legal basis for processing is Article 6(1)(f) of the GDPR, namely the Controller’s legitimate interest in communicating with persons who contact the company. Where such contact leads to the conclusion or performance of a contract, the legal basis may also be Article 6(1)(b) of the GDPR.

Recruitment Process

We process job applicants’ personal data in order to conduct the recruitment process.

With regard to personal data required under employment law, the legal basis for processing is Article 6(1)(c) of the GDPR, namely compliance with a legal obligation to which the Controller is subject.

Where an applicant provides additional personal data in their CV or application documents that goes beyond the scope required by law, the legal basis for processing such data is the applicant’s consent pursuant to Article 6(1)(a) of the GDPR. The submission of application documents containing such additional data is regarded as an affirmative action confirming consent to its use in the relevant recruitment process.

Where an applicant gives separate consent to participate in future recruitment processes, their personal data may also be processed for the purpose of conducting future recruitment processes for the period specified in that consent.

Establishment, Exercise or Defence of Legal Claims

Personal data may be processed for the purpose of establishing, exercising or defending potential legal claims.

The legal basis for processing is Article 6(1)(f) of the GDPR, namely the Controller’s legitimate interest in protecting the company’s rights and interests.

Ensuring the Security and Proper Operation of the Website

Technical data, including server logs, may be processed in order to ensure website security, diagnose errors, prevent misuse and ensure the proper operation of the website.

The legal basis for processing is Article 6(1)(f) of the GDPR, namely the Controller’s legitimate interest in administering the website and ensuring its security.

Personal Data Retention Period

We retain personal data for the period necessary to fulfil the purpose for which it was collected.

Personal data obtained through the contact form and correspondence is retained for the period necessary to handle the enquiry and subsequently for the period required to protect against potential legal claims.
Job applicants’ personal data is processed for the duration of the current recruitment process.
Where an applicant gives consent to participate in future recruitment processes, their personal data may be retained for up to 12 months from the date the application was submitted or until consent is withdrawn, whichever occurs first.
Personal data processed on the basis of consent is retained until the consent is withdrawn, unless another legal basis exists for its continued processing.
Technical data and server logs are retained for the period necessary to ensure the security and proper operation of the website and no longer than is necessary for those purposes.

Recipients of Personal Data

Your personal data may be disclosed to entities that support the Controller in conducting its business activities and operating the website, including in particular:

hosting and server service providers;
email service providers;
entities responsible for maintaining the website and IT systems;
providers of accounting, legal or advisory services, where necessary;
providers of analytics or security tools, where such tools are used;
authorised public authorities, where the obligation to disclose personal data arises from applicable law.

Personal data is not sold or disclosed to third parties for purposes unrelated to the processing purposes described above.

Transfer of Personal Data Outside the European Economic Area

As a general rule, we process personal data within the European Economic Area.

Where the Controller uses tools provided by suppliers that may process personal data outside the European Economic Area, such as Google, Microsoft, Meta or other IT service providers, the transfer of personal data takes place with the use of appropriate safeguards required under the GDPR, including in particular Standard Contractual Clauses or other mechanisms provided for by law.

Your Rights

In connection with the processing of your personal data, you have the following rights:

the right of access to your personal data;
the right to obtain a copy of your personal data;
the right to rectify your personal data;
the right to erasure of your personal data;
the right to restrict the processing of your personal data;
the right to data portability;
the right to object to the processing of your personal data;
the right to withdraw your consent at any time, where your personal data is processed on the basis of consent.

The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.

To exercise your rights, you may contact the Controller at: [sekretariat@complexprojekt.pl](mailto:sekretariat@complexprojekt.pl).

You also have the right to lodge a complaint with the President of the Personal Data Protection Office if you believe that the processing of your personal data infringes the provisions of the GDPR.

Voluntary Provision of Personal Data

Providing personal data through the contact form is voluntary but necessary for us to respond to your enquiry.

Providing personal data through the application form is voluntary but necessary in order to participate in the recruitment process.

Where personal data is processed on the basis of consent, providing the data is voluntary and consent may be withdrawn at any time.

Automated Decision-Making and Profiling

Users’ personal data is not used for automated decision-making, including profiling, that would produce legal effects concerning the user or similarly significantly affect them.

Cookies

The website may use cookies that are necessary for its proper operation.

Cookies are small files stored on the user’s device that allow the website to be displayed correctly, help ensure its security and enable the use of its essential functions.

The website does not use cookies for analytics or marketing purposes.

Users may independently change their cookie settings in their web browser. However, restricting the use of cookies may affect the operation of certain website functions.

Changes to the Privacy Policy

This Privacy Policy may be updated, in particular in the event of changes in applicable law, technological developments or changes in the way personal data is processed.

The current version of the Privacy Policy is always available on the website:
https://www.complexprojekt.pl/.