Privacy policy and GDPR information

1. Data controller

The controller is QUICK-Personalservice Adrian Badoń, ul. Warszawska 40 lok. 2A, 40-008 Katowice, Poland, Polish tax ID (NIP) 9691679044, REGON 544987960. Privacy contact: office@quick-personalservice.eu.

2. QUICK's service model

QUICK provides recruitment and employment-placement services. QUICK does not employ candidates, pay their wages or supply its own workers to clients. For placement into work abroad, the candidate is referred directly to the identified foreign employer and enters into the employment or other relevant work relationship with that employer. If the direct employer is a foreign employment agency, QUICK remains solely the recruitment and placement intermediary.

3. Purposes and legal bases

• Current recruitment and placement: receiving the application, contacting the candidate, assessing fit, running the process and presenting the candidate to the direct employer – Article 6(1)(b) GDPR for steps taken at the candidate's request before entering into a service/contractual relationship and Article 6(1)(f) GDPR for efficient process management, communication and documentation.
• Optional additional data in a CV: where a candidate uploads an optional CV containing additional ordinary personal data, that additional data is processed on the basis of voluntary consent under Article 6(1)(a) GDPR. The form can be submitted without a CV.
• Future recruitment: keeping the profile and contacting the candidate about suitable future opportunities only after separate voluntary consent – Article 6(1)(a) GDPR.
• Employer enquiries and business contacts: Article 6(1)(b) GDPR; for a contact person acting on behalf of an organisation, Article 6(1)(f) GDPR for business communications.
• Contact and callback requests: Article 6(1)(f) GDPR and, where the enquiry directly concerns entering into a contract, also Article 6(1)(b) GDPR.
• Reviews: publication after moderation on the basis of consent – Article 6(1)(a) GDPR.
• Security, abuse prevention and legal claims: Article 6(1)(f) GDPR; legal obligations are handled under Article 6(1)(c) GDPR where applicable.

Fields marked as required are necessary to handle the relevant submission. Other fields are voluntary. Do not send national identification numbers, identity-document numbers, health data or other special-category data through the website or in a CV.

4. Future recruitment – 6 months

If a candidate gives separate optional consent, QUICK may keep the profile and contact the candidate about suitable future recruitment opportunities for no more than 6 months from the date of submission. Consent may be withdrawn at any time with effect for the future.

5. Recipients

Data may be shared with hosting, email, IT-maintenance and security providers acting as processors for QUICK. In a specific recruitment process, candidate data may be provided to the identified entity that is conducting the actual hiring process and is intended to become the candidate's direct employer. Disclosure is limited to the data needed for that process.

6. Cross-border employment placement

Where a candidate is actually referred to work abroad, QUICK follows the applicable duties under the Polish Act of 20 March 2025 on the labour market and employment services, in particular Articles 321, 324 and 338. Referral is made directly to the identified foreign employer. The required written agreements, information and, where required, written translations are provided before the actual referral. The online form starts the contact process and does not replace statutory referral documentation.

7. Transfers outside the EEA

If a specific process requires a transfer to a country outside the European Economic Area, QUICK uses a mechanism permitted by Chapter V GDPR, such as an adequacy decision of the European Commission or appropriate safeguards under Article 46 GDPR.

8. Retention periods

• data for a current recruitment process – for the duration of the process and, after closure, only for a short operational period or as long as necessary for documentation, legal obligations or defence of claims;
• profile for future recruitment – no more than 6 months from submission on the basis of consent;
• employer enquiries and correspondence – normally up to 12 months after the matter is closed, unless longer retention is required by law or for legal claims;
• pending or hidden reviews – up to 90 days; published reviews until consent is withdrawn, the review is removed or the publication purpose ends;
• basic technical statistics and security events – up to 90 days;
• administrative change log – up to 12 months;
• documents concerning referral to work abroad – for the period required by Article 338(7) of the Polish labour-market act, i.e. for the duration of the agreement and 5 years afterwards;
• automatic backups – up to 7 consecutive daily copies, used only for technical disaster recovery.

9. Cookies and statistics

The public website does not use advertising or third-party analytics cookies and does not store marketing identifiers. Only basic first-party server-side statistics are kept. Full IP addresses are not retained in those statistics. After login, the administration area uses only a technically necessary secured session cookie.

10. Automated decision-making

QUICK does not make decisions based solely on automated processing that produce legal effects or similarly significantly affect users, and does not carry out profiling with such effects.

11. Your rights

Subject to the conditions in the GDPR, you may exercise the rights of access (Article 15), rectification (Article 16), erasure (Article 17), restriction (Article 18), data portability (Article 20), objection to processing based on Article 6(1)(f) GDPR (Article 21), and withdrawal of consent at any time where consent is the legal basis. Contact office@quick-personalservice.eu.

Under Article 77 GDPR, you also have the right to lodge a complaint with a supervisory authority. For a controller established in Poland, the relevant authority is in particular the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych). Current contact details are available on the authority's official website: uodo.gov.pl.

12. Data obtained from other sources

If QUICK receives personal data from another lawful source, such as a public professional profile or an entity authorised to provide the data, QUICK fulfils the information duties under Article 14 GDPR within the time limits required by that provision, including Article 14(3) GDPR.

13. Security

QUICK uses risk-appropriate technical and organisational measures, including HTTPS, access controls, protection of private directories, CV file-type and size validation, random upload names, form tokens, rate limits, anti-spam controls and security logs.

14. Legal framework and document version

This notice reflects Regulation (EU) 2016/679 (GDPR), the Polish Personal Data Protection Act of 10 May 2018, the Polish Act of 18 July 2002 on the provision of electronic services (consolidated text: Journal of Laws 2024, item 1513) and the Polish Act of 20 March 2025 on the labour market and employment services (Journal of Laws 2025, item 620, as amended). Legal status reviewed as at 30 August 2026. Version: 2026-08-30-v5.