Privacy Policy

Warsaw / June 2026

1. Data Controller

The controller of your personal data is:

We Design UX – Katarzyna Laska

ul. Piłsudskiego 218, 36-065 Dynów, Poland

NIP: 9442274437 | REGON: 520594178

Email: kontakt@zatrudnij-agenta.pl

Website: zatrudnij-agenta.pl

As the data controller, we are responsible for the purposes and means of processing your personal data.

2. What Data We Collect and Where From

Contact form on the website — we collect:

first and last name
email address
company name
phone number (if provided)
message (if provided)

Meeting booking via Calendly: first name, last name, email address, selected time slot. Data is processed by Calendly in accordance with their privacy policy.

Contact via WhatsApp: message content and account identification data. Data is processed by Meta Platforms Ireland Limited in accordance with their privacy policy.

Cookies and analytics tools: Google Analytics 4 – collects anonymous website traffic data. Google Search Console – data on site impressions in Google search results. These tools operate in accordance with Google's privacy policy.

3. Purposes and Legal Bases for Processing

Responding to a contact form inquiry
Art. 6(1)(f) GDPR — legitimate interests of the controller.
Scheduling a meeting via Calendly
Art. 6(1)(f) GDPR — legitimate interests of the controller in handling prospective clients.
Commercial contact / quoting
Art. 6(1)(b) GDPR — taking steps at the request of the data subject prior to entering into a contract.
Contract performance (if signed)
Art. 6(1)(b) GDPR — necessity for the performance of a contract with the controller.
Website traffic analysis (GA4)
Art. 6(1)(f) GDPR — legitimate interests of the controller (analysis of site quality and accessibility).

4. Data Retention Period

Contact form data — up to 2 years from last contact, unless the matter was resolved earlier.
Contract and accounting documents — 5 tax years as required by applicable law.
Analytics data (GA4) — in accordance with Google Analytics data retention policy (default 14 months).
WhatsApp correspondence — until the matter it relates to is resolved.

5. Data Recipients

We may share your data with the following categories of recipients:

Calendly, Inc. — for meeting scheduling.
Twilio LLC (SendGrid) — for sending email messages.
Meta Platforms Ireland Limited — for WhatsApp messenger services.
Streamlabs Holdings Inc. — for analytics services.

Some of the above entities (Google, Meta) may process data outside the European Economic Area (EEA), applying GDPR-compliant data transfer mechanisms, e.g. standard contractual clauses.

We do not sell your personal data to any third parties.

6. Your Rights

You have the following rights regarding the processing of your data:

Right of access — you may ask what data we hold about you.
Right to rectification — you may request correction of inaccurate or completion of incomplete data.
Right to erasure — you may request deletion of data where there is no legal basis to process it (right to be forgotten).
Right to restriction of processing — you may request restriction of processing in certain circumstances.
Right to object — you may object to processing based on legitimate interests.
Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
Right to data portability — you may receive your data in a structured, machine-readable format.

To exercise any of the above rights, send an email to: kontakt@zatrudnij-agenta.pl. We respond without undue delay, within 30 days at the latest.

7. Right to Lodge a Complaint

If you believe we are processing your data unlawfully, you have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO):

Personal Data Protection Office (UODO)

ul. Stawki 2, 00-193 Warszawa, Poland

uodo.gov.pl

8. Cookies

What are cookies:

Cookies are small text files stored on your device when you browse the Internet. They help us recognise your browser and remember preferences.

Types of cookies on the site:

Necessary — required for the website to function correctly.
Analytical — allow us to analyse website traffic (Google Analytics 4). We only monitor aggregate performance metrics.
Metrics only — we collect only aggregate website traffic data, without identifying individual users.

You can manage cookies in your browser settings or withdraw consent at any time.

9. Data Security

We apply appropriate technical and organisational measures to protect your data against unauthorised access, loss or destruction. The website operates exclusively over HTTPS.

Restricted data access — only to authorised persons.
Regular security reviews of the infrastructure.
Monitoring of suspicious activities.

10. Changes to the Privacy Policy

We may update this Policy in the event of changes in law, changes in the scope of services, or changes in the tools we use. We will notify users of material changes on the website. We encourage you to review this document regularly.

11. Contact

For matters relating to the protection of personal data, please contact us: