文件

隐私政策

本文件仅以波兰语提供 — 波兰语版本为具有法律约束力的版本。

1. Data controller

FlexWelder Hub Sp. z o.o., registered office at ul. Bojkowska 35A, 44-100 Gliwice, Poland (Tax ID: PL9662195817, Court Register: 0001120028) acts as the personal data controller. Contact: office@flexwelder.com.

2. Scope of processed data

The processed data includes:

identification data (first name, last name, national ID, date of birth, citizenship),
contact details (e-mail, phone number, residential address),
data from identity documents,
professional data (CV, employment history, welding qualifications),
technical data (IP address, cookies, device information).

Processing purposes and legal bases

service provision (Art. 6(1)(b) GDPR),
identity verification (Art. 6(1)(b) and (c) GDPR),
handling enquiries (Art. 6(1)(a) and (b) GDPR),
marketing (Art. 6(1)(a) GDPR — only with consent),
defence against claims (Art. 6(1)(f) GDPR),
legal obligations (Art. 6(1)(c) GDPR),
system security (Art. 6(1)(f) GDPR).

Special category data is processed solely on the basis of explicit consent (Art. 9(2)(a) GDPR).

3. Recipients of personal data

Access to data is granted only to authorised entities, including:

data processors (under Art. 28 GDPR agreements),
IT providers (hosting, e-mail, cloud computing),
legal, accounting and advisory service providers,
payment operators and couriers,
public authorities (under applicable law),
employers (only based on user action),
education and certification partners.

International data transfer takes place with safeguards compliant with Art. 44 et seq. of the GDPR (Commission decisions, standard contractual clauses).

4. Rights of the data subject

Every person has the right to:

access their data,
rectification of inaccurate data,
erasure ("right to be forgotten"),
restriction of processing,
data portability,
objection to processing,
withdrawal of consent at any time,
complaint to the President of the Personal Data Protection Office (UODO, ul. Stawki 2, 00-193 Warsaw, Poland).

Contact: office@flexwelder.com (response within a maximum of 1 month).

5. Data retention period

Data type	Retention period
Registration / CV data	during the contract term + 6 years
Accounting data	5 years from the end of the financial year
Marketing data	until consent is withdrawn
Technical data (logs, IP)	up to 12 months from the last login
Certification data	in line with industry requirements (5–10 years)

After the period expires, data is deleted or anonymised, unless legal provisions require further storage.

6. Security measures

Technical safeguards

SSL/TLS encryption (HTTPS),
complex passwords with periodic rotation,
multi-factor authentication (MFA),
automatic session timeout,
encrypted backups,
monitoring of logins and operations,
restricted database access.

Organisational measures

internal data protection policy,
register of authorised persons,
data processing agreements (DPA),
employee training,
individual access permissions.

Data breaches

documented in the breach register,
reported to UODO within 72 hours,
information provided to the data subject (if high risk).

7. Automated decision-making and profiling

The controller does not make decisions based solely on automated processing (Art. 22 GDPR).

Future applications (require explicit consent)

automatic matching of CVs to job offers,
assessment of qualification fit,
activity analysis for personalisation purposes.

The user will have the right to information about the algorithm, to challenge decisions and to human intervention.

8. Cookies and tracking technologies

Type	Purpose	Duration	Consent
Essential	site operation, login, session	up to 12 months	not required
Functional	remembering preferences	up to 6 months	required
Analytical	Google Analytics, Hotjar	up to 12 months	required
Marketing	Meta Pixel, Google Ads	until removed / withdrawn	required

The user can change cookie settings in the browser or in the cookie banner on the site.

Contact: office@flexwelder.com