Privacy Policy

1. General Provisions

This Privacy Policy defines the rules for processing and protecting personal data provided by Users in connection with the use of the website https://www.magnar.com.pl (hereinafter: "Service") operated by Magnar AP Sp. z o.o. with its registered office in Warszawa at ul. Skierniewicka 14 lok. 48, postal code 01-230.

The Policy has been developed based on the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and the Act on the Provision of Electronic Services.

2. Data Controller

The controller of Users' personal data is Magnar AP Sp. z o.o., ul. Skierniewicka 14 lok. 48, 01-230 Warszawa. Contact the Controller: biuro@magnar.com.pl, tel. +48 505 258 570.

3. Purpose and Legal Basis for Processing

Personal data is processed for the following purposes:

• responding to inquiries submitted via contact form or email address – legal basis: Art. 6(1)(b) GDPR (steps prior to entering into a contract) and (f) (legitimate interest of the Controller);
• carrying out the recruitment process for job candidates – legal basis: Art. 6(1)(a) GDPR (candidate's consent) and Art. 22¹ of the Labour Code;
• performance of contracts with clients and business partners – legal basis: Art. 6(1)(b) and (c) GDPR;
• marketing of our own products and services – legal basis: Art. 6(1)(a) GDPR (consent);
• fulfillment of legal obligations (including accounting and tax obligations) – legal basis: Art. 6(1)(c) GDPR;
• establishment, exercise or defense of legal claims – legal basis: Art. 6(1)(f) GDPR.

4. Scope of Processed Data

The Controller processes data voluntarily provided by the User in the contact form (first name, last name, email address, telephone, company name, message content), data of job candidates (CV, contact details, professional experience), and technical data related to the use of the website (IP address, cookie identifiers).

5. Data Retention Period

Personal data is stored for the period necessary to achieve the purpose for which it was collected, and after its completion for the period required by law (e.g., accounting and tax regulations) or until the expiration of limitation periods for potential claims. We store job candidates' data for a maximum of 24 months from the last contact, unless the User consents to longer storage.

6. Data Recipients

Data recipients may include: IT and hosting service providers, email marketing service providers, accounting firms, law firms, entities providing postal and courier services, clients of the Controller (in the case of recruitment processes), recruitment partners in workers' countries of origin, public authorities authorized under law.

7. Transfer of Data outside the EEA

Data of candidates recruited in Ukraine, Vietnam and other countries may be transferred to the Controller's recruitment partners in those countries on the basis of standard contractual clauses or other appropriate safeguards provided for by GDPR.

8. Rights of the Data Subject

The User has the right to:

• access the content of their data and obtain a copy thereof,
• rectify, erase or restrict the processing of data,
• data portability,
• object to processing,
• withdraw consent at any time (if processing is based on consent),
• lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warszawa).

9. Cookies

The Service uses cookies to ensure proper operation, traffic analysis and – with the User's consent – for marketing purposes. We divide cookies into:

• Necessary – required for the basic operation of the website and form handling; do not require consent.
• Analytical – allow measurement of traffic and User behavior (e.g., Google Analytics); require consent.
• Marketing – used to conduct advertising campaigns and remarketing (e.g., Meta Pixel, Google Ads); require consent.

The User may at any time change cookie settings in their browser and withdraw consents granted in the cookie banner displayed in the Service.

10. Data Security

The Controller applies technical and organizational measures to ensure the protection of processed personal data, in particular protection against disclosure to unauthorized persons, loss, destruction or damage. The server hosting the Service uses SSL encryption protocol.

11. Changes to the Privacy Policy

The Controller reserves the right to make changes to this Privacy Policy. The current version of the Policy is available at https://www.magnar.com.pl/polityka-prywatnosci.

12. Contact

For matters related to the processing of personal data, please contact us by email: biuro@magnar.com.pl.