I. General Provisions

1. The controller of personal data collected via the website operating at https://www.pxinfreastruktura.pl (hereinafter referred to as the "Website") is: Polimex Infrastruktura Sp. z o.o. +48 888 367 420 al. Jana Pawła II 12, 00-124 Warsaw, KRS 000059557 (hereinafter referred to as the "Controller" or "Polimex Infrastruktura").

2. Personal data are processed in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR).

3. The Privacy Policy defines the rules for the processing of personal data collected from users of the Website, including via contact forms and in connection with the use of cookies.

II. Types and Purposes of Personal Data Processing

The Administrator processes personal data for the following purposes and on the following legal bases:
Purpose of processing Type of data processed Legal basis for processing (GDPR)
Response to an inquiry sent via the contact form or email. First name, last name, email address, telephone number, message content. Article 6 paragraph 1 letter f (the Controller's legitimate interest in communicating with customers).

Conducting the recruitment process ("CAREER" section) Data included in the CV (in accordance with the Labor Code, including first name, last name, date of birth, contact details, education, qualifications, previous employment history). Art. 6 sec. 1 letter c (legal obligation under the Labor Code) and Art. 6 sec. 1 letter a (consent to the processing of data beyond the Labor Code or for future recruitment).

Analysis and statistics (studying how the Website is used)

Data on activity on the Website, IP address, browser type, time of visit, subpages visited.

Art. 6 sec. 1 letter f (legitimate interest of the Administrator, which is to improve the Website and the services offered

III. Data Recipients

Personal data may be transferred to the following categories of recipients:

1. Hosting service providers (e.g. Wix.com, which is the platform provider of the Service).

2. Analytics providers (e.g. Google Analytics).

3. Entities supporting recruitment processes (e.g. external job portals or recruitment systems, if used).

4. Entities authorized to receive data under legal provisions (e.g. courts or law enforcement authorities).

IV. Data Subject Rights (GDPR Rights)

Every data subject has the right to:

1. Access to your data (receiving information about the data being processed and a copy thereof).

2. Rectification of data (correction of incorrect data or supplementation of incomplete data).

3. Deletion of data ("right to be forgotten"), if permitted by the GDPR (e.g. the data is no longer necessary for the purposes for which it was collected).

4. Processing restrictions (suspension of data operations).

5. Data transfer (receiving data in a structured format).

6. Object to data processing based on the legitimate interest of the Controller (Article 6, paragraph 1, letter f of the GDPR).

7. Withdraw consent at any time if processing is based on consent (without affecting the lawfulness of processing based on consent before its withdrawal).

8. Filing a complaint with the President of the Personal Data Protection Office (PUODO).

To exercise your rights, please contact the Data Controller (see point I).