Privacy policy

1. Who is the controller of your data

The controller of the personal data collected through the wec24.pl website is WEC Sp. z o.o., with its registered office in Kraków, ul. Jasnogórska 151, 31-358 Kraków, Tax ID (NIP) 945-22-32-133. In matters concerning personal data, you can contact us by email: [email protected].

2. What data we process and why

• Contact form: full name, email address, phone number, company name and the content of the message. We process them in order to respond to your enquiry and to conduct further correspondence (Art. 6(1)(f) GDPR, legitimate interest).
• Recruitment form: the data contained in your application, CV and portfolio. We process them in order to carry out the recruitment process, on the basis of your consent and the provisions of employment law (Art. 6(1)(a) and (b) GDPR, Art. 22¹ of the Polish Labour Code).
• Ebook downloads and release notifications: email address and information about the marketing consent given. We process them in order to deliver the materials you requested and, if you give your consent, also to inform you about new reports and the agency's activities (Art. 6(1)(a) GDPR). You can withdraw your consent at any time by writing to the address indicated above.
• Server logs: IP address, date and time of the request, browser information. We process them in order to ensure the security and proper functioning of the website (Art. 6(1)(f) GDPR).

3. How long we keep data

We keep data from the contact form for the duration of the correspondence and thereafter for the period necessary to demonstrate its course. We keep recruitment data until the recruitment process is completed and, with your additional consent, also for the purposes of future recruitment processes, for no longer than 12 months. We process data related to marketing consent until that consent is withdrawn.

4. Who we may share data with

We use the services of entities that provide us with technical support:

• Hetzner Online GmbH (Germany): website hosting. Data submitted through our forms (contact, recruitment including attachments, ebook sign-ups) is also stored on our server in the European Union.
• Cloudflare, Inc. (USA): domain services, content delivery network and attack protection. Traffic to the website passes through Cloudflare's infrastructure, which processes your IP address and technical request data in doing so.
• Google Ireland Limited: email for the wec24.pl domain (Google Workspace), i.e. correspondence sent to our addresses.

All of these entities process data under data processing agreements and solely on our behalf. Some of them may process data outside the European Economic Area. This takes place on the basis of a European Commission adequacy decision (EU-US Data Privacy Framework) or standard contractual clauses. We do not sell personal data.

5. Your rights

You have the right to: access your data, rectify it, erase it, restrict its processing, data portability, object to processing, and withdraw your consent at any time (without affecting the lawfulness of processing carried out before its withdrawal). You also have the right to lodge a complaint with the President of the Polish Personal Data Protection Office (UODO).

6. Cookies and third-party services

The website uses essential cookies that ensure its proper functioning. Embedded third-party content (the YouTube player on the podcast page, Google Fonts) may result in your IP address being sent to their providers and in their own cookies being stored in accordance with the policies of those services. For visit statistics we use Umami, a self-hosted tool that does not use cookies, does not track users across websites, and stores aggregated, anonymised visit data exclusively on our server.

7. Changes to this policy

This policy may be updated, e.g. when the scope of the website's services changes. The current version is always available at this address, together with the date of the last update.