Polityka Prywatności

Ostatnia aktualizacja: 13 maja 2026

1. Wprowadzenie

Niniejsza Polityka Prywatności określa zasady przetwarzania danych osobowych użytkowników strony internetowej dostępnej pod adresem airizen.eu (dalej: „Strona Internetowa”) oraz kandydatów ubiegających się o pracę oferowaną przez AIRIZEN.

Niniejszy dokument został sporządzony zgodnie z Rozporządzeniem Parlamentu Europejskiego i Rady (UE) 2016/679 z dnia 27 kwietnia 2016 r. w sprawie ochrony osób fizycznych w związku z przetwarzaniem danych osobowych i w sprawie swobodnego przepływu takich danych (dalej: „RODO”) oraz polską Ustawą o ochronie danych osobowych z dnia 10 maja 2018 r.

Korzystając ze Strony Internetowej i przesyłając swoje dane za pośrednictwem dostępnych formularzy, akceptujesz zasady opisane w niniejszej Polityce.

2. Administrator danych

Administratorem Twoich danych osobowych jest:

AIRIZEN Ireneusz Bińczak ul. Jana Henryka Dąbrowskiego 77A, 60-529 Poznań, Polska (Budynek Nobel Tower Poznań)

Kontakt:

• E-mail: info@airizen.eu
• Telefon: +48 530 895 546

We wszelkich sprawach dotyczących przetwarzania danych osobowych możesz skontaktować się z Administratorem, korzystając z danych kontaktowych podanych powyżej.

3. Zakres i cele przetwarzania danych

Przetwarzamy Twoje dane osobowe w następujących celach i zakresach:

3.1. Kontakt biznesowy i obsługa zapytań

Cel: Odpowiadanie na zapytania ofertowe, prowadzenie korespondencji handlowej, przygotowywanie ofert współpracy, negocjacje umów oraz realizacja zamówień.

Zakres danych:

• imię i nazwisko,
• nazwa firmy,
• adres e-mail,
• numer telefonu,
• treść wiadomości,
• inne dane dobrowolnie podane w korespondencji.

Podstawa prawna:

• art. 6 ust. 1 lit. b RODO – działania zmierzające do zawarcia umowy lub wykonanie umowy,
• art. 6 ust. 1 lit. f RODO – uzasadniony interes Administratora, tj. prowadzenie korespondencji biznesowej i obsługa zapytań.

Okres przechowywania: Do czasu zakończenia korespondencji lub wykonania umowy, a następnie przez okres wymagany przez obowiązujące przepisy prawa (w tym przepisy podatkowe i rachunkowe – zazwyczaj 5 lat) lub do upływu okresu przedawnienia potencjalnych roszczeń (do 6 lat zgodnie z Kodeksem cywilnym).

3.2. Rekrutacja – kandydaci ubiegający się o pracę

Cel: Prowadzenie procesów rekrutacyjnych na stanowiska oferowane przez AIRIZEN, w tym weryfikacja kwalifikacji zawodowych, kontakt z kandydatem oraz podejmowanie decyzji w sprawie potencjalnego zatrudnienia lub zawarcia umowy o współpracę.

Zakres danych:

• imię i nazwisko,
• adres e-mail i numer telefonu,
• przesłane CV oraz załączone certyfikaty, dyplomy i kwalifikacje (np. certyfikaty ASME, AWS, IWI, IWE, NDE/NDT),
• doświadczenie zawodowe, wykształcenie, kwalifikacje,
• inne dane dobrowolnie podane przez kandydata w aplikacji.

Podstawa prawna:

• art. 6 ust. 1 lit. b RODO oraz art. 22(1) § 1 Kodeksu pracy – dane niezbędne do podjęcia działań przed zawarciem umowy o pracę,
• art. 6 ust. 1 lit. a RODO – zgoda kandydata na przetwarzanie danych wykraczających poza zakres określony w Kodeksie pracy (np. zdjęcie w CV, dodatkowe informacje),
• art. 6(1)(f) GDPR - legitimate interest of the Controller consisting in defence against potential claims related to the recruitment process.

Retention period:

• data of candidates who were not selected is retained for a period of up to 3 years from the conclusion of the recruitment process - in accordance with the judgment of the Polish Supreme Administrative Court of 20 February 2024 (file ref. III OSK 2700/22), which allows such a period due to the limitation period for claims related to recruitment,
• if a candidate provides separate consent to participate in future recruitment processes, their data will be retained for the period indicated in the consent, but no longer than 24 months from the date the consent is given,
• in case of employment or entering into a cooperation agreement - data is retained in accordance with applicable labour and tax law.

Important: Providing data within the scope specified in art. 22(1) § 1 of the Polish Labour Code (first name, surname, date of birth, contact details, education, qualifications, employment history) is required by law. Providing other data is voluntary, and submitting such data is treated as consent to its processing in the recruitment process.

3.3. Handling the contact form on the Website

Purpose: Enabling contact via the form and providing a response to the submitted inquiry.

Scope of data: Data provided in the form (first name, e-mail, phone, company name, message content).

Legal basis: art. 6(1)(f) GDPR - legitimate interest of the Controller.

Retention period: Until the correspondence is concluded and the matter is resolved, no longer than 12 months from the last contact, unless further retention is necessary for contract performance or fulfilment of legal obligations.

3.4. Compliance with legal obligations

Purpose: Fulfilment of obligations arising from applicable law, including tax, accounting, and personal data protection regulations.

Legal basis: art. 6(1)(c) GDPR - legal obligation to which the Controller is subject.

4. Special categories of data (sensitive data)

As a general rule, the Controller does not collect or process special categories of data within the meaning of art. 9 GDPR (e.g. data concerning health, racial or ethnic origin, political opinions, religious beliefs, sexual orientation).

We kindly ask you not to include such data in your applications, CVs, or correspondence. If a candidate voluntarily includes such information in the submitted documents, the Controller will either delete it without delay or - if justified - process it solely on the basis of the candidate's explicit consent (art. 9(2)(a) GDPR).

5. Recipients of the data

Your personal data may be transferred to the following categories of recipients:

• IT and hosting service providers - the Webflow platform provider (website hosting), Airtable Inc. based in the USA (platform handling the application form for candidates),
• Postal and e-mail service providers - e-mail service provider,
• Accounting office - to the extent necessary for fulfilling accounting and tax obligations,
• Law firms and advisors - within the scope of legal services for the Controller's business activity,
• AIRIZEN clients - exclusively in the case of candidates whose application is considered in the context of a specific project at a client's site, and only after prior notification of the candidate,
• Authorised public authorities - where the obligation to transfer data arises from applicable law.

All entities processing data on behalf of the Controller do so on the basis of data processing agreements (art. 28 GDPR) and are obliged to maintain confidentiality.

6. Transfer of data outside the European Economic Area (EEA)

Some of the Controller's service providers are based outside the European Economic Area, in particular:

• Airtable Inc. (United States) - the platform handling application forms for candidates. Airtable processes data on the basis of the Standard Contractual Clauses (SCCs) approved by the European Commission and in accordance with its own Data Processing Addendum (DPA). Airtable holds ISO 27001, ISO 27701, and SOC 2 Type II certifications and applies data encryption both in transit and at rest.

In every case of data transfer outside the EEA, the Controller ensures appropriate safeguards in accordance with art. 46 GDPR. You may obtain a copy of the applicable safeguards by contacting the Controller.

7. Your rights

In connection with the processing of your personal data, you have the following rights:

• Right of access to your data (art. 15 GDPR) - to obtain information about the processing and a copy of the data,
• Right to rectification of data (art. 16 GDPR) - to correct inaccurate or supplement incomplete data,
• Right to erasure of data (art. 17 GDPR) - the so-called "right to be forgotten", provided that there are no legal grounds for further processing,
• Right to restriction of processing (art. 18 GDPR),
• Right to data portability (art. 20 GDPR) - in respect of data processed on the basis of consent or a contract by automated means,
• Right to object to processing (art. 21 GDPR) - where the processing is carried out on the basis of the Controller's legitimate interest,
• Right to withdraw consent at any time - where processing is based on consent (art. 7(3) GDPR). Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.

To exercise the above rights, please contact the Controller at the e-mail address info@airizen.eu or in writing to the registered address. We will respond without undue delay, no later than within one month of receiving the request.

Right to lodge a complaint

You have the right to lodge a complaint with the supervisory authority, which is:

President of the Polish Personal Data Protection Office (UODO)ul. Stawki 2, 00-193 Warsaw, Polandwww.uodo.gov.pl

If you are based in another EU/EEA Member State, you may also lodge a complaint with the supervisory authority of your habitual residence, place of work, or place of the alleged infringement.

8. Voluntariness of providing data

Providing personal data is voluntary; however, in some cases it is necessary for:

• responding to a contact inquiry (without contact details, we will not be able to reply),
• conducting the recruitment process (without the data required by the Polish Labour Code, we will not be able to consider the application),
• entering into and performing a contract.

9. Automated decision-making and profiling

Your personal data is not subject to automated decision-making, including profiling, within the meaning of art. 22 GDPR. All recruitment and business decisions are made by natural persons.

10. Cookies and tracking technologies

The airizen.eu website may use cookies and similar technologies.

10.1. What are cookies?

Cookies are small text files stored on the user's device while using websites. They allow, among other things, the user's device to be recognised and the website to be displayed correctly.

10.2. Types of cookies used

The Website uses the following types of cookies:

• Necessary cookies - enable the proper functioning of the Website (e.g. session handling, security). Do not require user consent.
• Analytical cookies (if enabled) - used to analyse traffic on the Website and improve its operation. Require user consent.
• Functional cookies (if enabled) - enable the user's preferences to be remembered.

10.3. Managing cookies

You may change the cookie settings in your web browser at any time, or through the consent management panel on the Website (if available). Disabling cookies may affect the functionality of the Website.

Detailed information on managing cookies in popular browsers can be found on their official technical support pages.

11. Data security

The Controller applies appropriate technical and organisational measures to ensure the security of your personal data, in particular:

• encrypted connection to the Website (HTTPS/SSL protocol),
• restriction of access to data exclusively to authorised persons,
• regular security updates,
• cooperation with providers that meet high data protection standards (including ISO 27001, SOC 2 certifications).

Despite the application of security measures, no IT system is fully resistant to threats. In the event of a personal data breach, the Controller will take action in accordance with art. 33-34 GDPR, including notifying the supervisory authority and - where required - the persons whose data has been affected.

12. Changes to the Privacy Policy

The Controller reserves the right to make changes to this Privacy Policy. The current version of the document is always available at airizen.eu. We will inform you of significant changes via the website or - where required - by e-mail.

13. Contact

Should you have any questions or doubts regarding this Privacy Policy or the processing of your personal data, please contact us:

AIRIZEN Ireneusz Bińczak ul. Jana Henryka Dąbrowskiego 77A, 60-529 Poznań, Poland, E-mail: info@airizen.eu, Phone: +48 530 895 546