Privacy Policy for the website www.job247.pl

Updated: 22.09.2026

This is an informational translation. The Polish version of this Policy is the binding one — in case of any discrepancy, the Polish text prevails.

Open PDF

1. Definitions.

1.1. Service Provider or WE or Controller – JOB 24/7 spółka z ograniczoną odpowiedzialnością with its registered office in Poznań (61-819), ul. Stanisława Taczaka 24/206, entered in the register of entrepreneurs of the National Court Register kept by the District Court Poznań – Nowe Miasto in Poznań, 8th Commercial Division, under KRS number: 0000795639, holding NIP: 7811998510. Our contact details: e-mail: contact@job247.pl telephone: +48 660 472 500 (charged as a standard call – according to the tariff of your telephone service provider) postal correspondence address: ul. Stanisława Taczaka 24/206, 61-819 Poznań.

1.2. Website – the system of web pages made available by us at the internet address www.job247.pl, constituting a collection of static and dynamic documents containing graphic files, scripts and other elements of the collection connected by mutual relations.

1.3. User, Service Recipient or You – a natural person with full capacity to perform legal acts, and in the cases provided for by generally applicable law also a natural person with limited capacity to perform legal acts, who uses the Website and our Services provided by electronic means – both those requiring the creation of an Account and those not requiring it – or who uses the Website in any other lawful manner. A User is anyone who enters the Website, regardless of which Services they use. In other words – entering the Website means that you are its User. A User is an end user or subscriber within the meaning of the Act of 12 July 2024 – Electronic Communications Law.

1.4. Terms of Service – our Terms of Service for the provision of services by electronic means within the job247.pl website for job seekers, and the Terms of Service for the provision of services by electronic means within the job247.pl website for entities looking for job candidates.

1.5. GDPR – the General Data Protection Regulation.

1.6. Services – the services we offer within the Website, described in the Terms of Service. These are electronic services, i.e. services provided by electronic means, that is without the simultaneous presence of the parties (at a distance), through the transmission of data at the individual request of the Service Recipient, sent and received by means of devices for electronic processing, including digital compression, and storage of data, which is entirely transmitted, received or broadcast by means of a telecommunications network within the meaning of the Act of 12 July 2024 – Electronic Communications Law.

1.7. Account – a Service offered by Us within the Website consisting in the possibility for you to create your Account on our Website (a dedicated space). A detailed description of the service can be found in the Terms of Service.

1.8. Technical account – an account created by Us. It is temporary in nature and we create it for you if you use the option of registering an Account by e-mail address. We create the technical account for the period from the moment the Account creation procedure starts until you confirm the creation of the Account on the Website (by clicking the activation link). The technical account exists until you confirm the creation of the Account, and you have 14 days from the moment it was created to do so. After that time the technical account is deleted by us, regardless of whether you confirmed the creation of the Account on the Website or not.

1.9. Entities publishing job offers / Entities looking for job candidates – employers or recruitment agencies that publish job offers on our Website or use our other services dedicated to such entities.

1.10. Job offer – a job advertisement published on the Website.

1.11. Recommended job offers – a Service related to the Account Service for job seekers. The condition for using the Service is having an Account. Having an Account involves receiving job offers individually matched to you, which you will see after logging into your Account. The Website's algorithms learn your expectations and present you with job offers similar to your earlier searches or application history. Thanks to this you do not have to search on your own, because you see the recommended offers immediately after logging into your Account. You will also find recommendations with job offers matched to your behaviour on the Website in the e-mails we send you.

1.12. Recommended job candidates – a Service related to the Account Service for Entities looking for job candidates. The condition for using the Service is having an Account. Having an Account involves receiving individually matched information about job seekers who meet the criteria you defined in the job offer. You will see the recommended candidates after logging into your Account. The Website's algorithms learn your expectations and present you with candidates similar to your searches. Thanks to this you do not have to search on your own, because you see the recommendations immediately after logging into your Account. You will also find recommendations in the e-mails we send you.

1.13. Profiling for the purpose of recommending job offers – matching job offers consists in creating, in an automated manner, your professional profile based on the personal data you provided in the Questionnaire or contained in the documents you saved in your Account, and which we collected on the basis of your activity on the Website (including information on which offers you applied for). The profile created in this way allows us to predict which job offers may interest you.

1.14. Profiling for the purpose of recommending job candidates – matching job candidates consists in creating, in an automated manner, your company profile based on the data you provided in the Company Information or contained in the documents you saved in your Account, and which we collected on the basis of your activity on the Website (including information on which offers you applied for). The profile created in this way allows us to predict which candidates may interest you.

1.15. Application / applying – notifying your interest in a given job offer, or accepting an invitation from Entities publishing job advertisements.

1.16. Privacy Policy – this document containing information on the processing and protection of personal data of Website Users.

1.17. Agreement / Service agreement – the agreement on the provision of Services concluded between Us (the Service Provider) and You (the User) through the Website, in accordance with the provisions of the Terms of Service.

1.18. Chat – an electronic Service available within the Account Service enabling communication between a User expressing interest in a job offer and the entity publishing the advertisement.

1.19. Newsletter – an electronic distribution Service provided by Us by e-mail, which allows the persons using it to automatically receive from Us recurring content of subsequent editions of the Newsletter containing information about products and services, including news and events concerning Us and the www.job247.pl Website operated by us.

1.20. Cookies – a collective term for cookie files and other similar technologies functioning within the Website, which allow us to analyse your activity on our Website.

2. Who is responsible for your personal data?

The controller of the personal data of Website Users is JOB 24/7 spółka z ograniczoną odpowiedzialnością with its registered office in Poznań (61-819), ul. Stanisława Taczaka 24/206, e-mail: contact@job247.pl, entered in the register of entrepreneurs of the National Court Register kept by the District Court Poznań – Nowe Miasto in Poznań, 8th Commercial Division, under KRS number: 0000795639, holding NIP: 7811998510 and share capital of

PLN 5,000. ENTITIES PUBLISHING JOB OFFERS ON THE WEBSITE AS CONTROLLERS OF YOUR DATA At the same time, where you have created an Account for job seekers and use the Service of:

a) sharing the Questionnaire placed in the Account with Entities looking for job candidates on the Website;

b) sending applications directly to a selected Entity publishing an offer;

c) communicating with the Entity publishing an offer by means of the chat service;

d) expressing interest in a given offer by clicking the REPLY option placed next to the offer, the Controller of your data will be the Entity looking for job candidates on the Website. This means that We will then act as its processor – on its behalf and on its instructions – in order to deliver your Questionnaire/application to that Entity. Therefore the Controller of your data will be the Entity looking for job candidates on the Website:

a) with whom you shared the Questionnaire placed in the Account;

b) to whom you sent an application;

c) with whom you communicated by means of the chat service;

d) in whose offer you expressed interest by clicking the REPLY option placed next to the offer. It has a legal obligation to inform you about the way it processes your data.

3. How do we collect your data?

Some data is collected when you provide it to us. This may be, for example, data provided to us in correspondence addressed to us, when creating an Account, filling in the Questionnaire or the Company Information, filling in forms on the Website or using the functionalities of the Account. Other data is collected automatically by our IT systems when you visit the Website or use its functionalities. This is data about which job offers you search for or which job candidates you are looking for, which offers you apply to or to which candidates you send recruitment invitations, and which options in the Account you use.

We may also collect your data when you visit our social media accounts – we then process information from your profile on the given social media portal, posts, comments and chat messages. Your data is also collected by the cookie files used on our website. You can read about this in a separate document, i.e. our Cookies Policy. Our website can be used without providing personal data. Each time a website page is called up, the server automatically saves only the so-called server logs, such as

the name of the requested file, your IP address, the date and time of the call, the amount of data transferred and the requesting internet service provider (the so-called access data), and documents the page call. At the same time, we provide you with a panel for managing cookies on the website and ask you to express your preferences regarding cookies. Further data collection while you browse our website takes place in accordance with the cookie preferences you have chosen. More about the cookies used can be found in the Cookies Policy. When our website is loaded, only necessary cookies are installed on your device.

Necessary cookies contribute to the usability of the website by enabling basic functions such as navigation on the page and access to secure areas of the website. The website cannot function properly without these cookies. At the same time, we use other cookies on the website. These files are installed on your device provided that you give your consent within the cookie banner displayed after the page is loaded. You can always recall this banner by clicking the floating cookie icon. You can read more about this in the Cookies Policy.

4. Your rights related to the processing of personal data.

You may address all requests concerning the exercise of your rights to the data Controller, i.e.: JOB 24/7 spółka z ograniczoną odpowiedzialnością with its registered office in Poznań (61-819), ul. Stanisława Taczaka 24/206, e-mail: contact@job247.pl. Every data subject is entitled to submit a request for the exercise of the rights referred to in Articles 15–22 GDPR, i.e.: A. the right of access to data, B. the right to rectification of data, C. the right to erasure of data ("the right to be forgotten"), D. the right to restriction of processing, E. the right to data portability, F. the right to object to the processing of personal data:

a) against processing for direct marketing purposes – you may at any time object to the processing of your personal data for the purposes of such marketing, including profiling, to the extent that the processing is related to such direct marketing, without having to justify such objection;

b) the right to object to other processing purposes – you may at any time object – on grounds relating to your particular situation – to the processing of personal data carried out on the basis of our legitimate interest, including profiling; an objection in this respect should contain a justification; G. the right not to be subject to a decision (including profiling) which is based solely on automated processing and produces legal effects concerning you or similarly significantly affects you – you may object to such processing at any time. H.

the right to withdraw consent (where processing is based on consent) – available at any time. Withdrawal of the consent given will not affect the lawfulness of the processing we carried out on the basis of the consent before its withdrawal. I. the right to lodge a complaint with the supervisory authority dealing with the protection of personal data both in Poland (with the President of the Personal Data Protection Office) and in the EU member state of your habitual residence, place of work or the alleged infringement. Requests may be submitted:

a) by post to the address: JOB 24/7 spółka z ograniczoną odpowiedzialnością, ul. Stanisława Taczaka 24/206, 61-819 Poznań

b) electronically to the e-mail address: contact@job247.pl

c) in person at our registered office, i.e. at ul. Stanisława Taczaka 24/206, 61-819 Poznań. 1. We consider the requests of data subjects with due diligence, taking into account the provisions of law as well as the rights and freedoms of other data subjects. 2. When submitting your request you should provide data that allows your unambiguous identification. 3. We do not refuse to take action at the request of a data subject who wishes to exercise their rights, unless we are unable to unambiguously identify the data subject. 4.

We provide information on the action taken in connection with the request without undue delay – and in any case within one month of receiving the request. If necessary, we may extend this deadline by a further two months due to the complex nature of the request or the number of requests. Within one month of receiving the request we will inform you of such an extension, stating the reasons for the delay. 5. If we receive a request electronically, we will also reply electronically, where possible, unless the request indicates otherwise. 6.

If we do not take action in connection with your request, we will inform you without delay – at the latest within one month of receiving the request – of the reasons for not taking action and of the possibility of lodging a complaint with the supervisory authority and using legal remedies. 7. Communication and actions taken in connection with the exercise of your rights are as a rule free of charge. However, if the requests prove to be manifestly unfounded or excessive, in particular because of their repetitive character, we may:

a) charge a reasonable fee, taking into account the administrative costs of providing the information, conducting the communication or taking the required action; or

b) refuse to act on the request. 8. If we are unable to unambiguously identify you or if we have reasonable doubts as to your identity, we may ask for additional information necessary to confirm your identity. If within 30 days of receiving the request for such information you do not provide the additional information and your unambiguous identification is impossible, the request will be rejected. You will be informed of the deadline for providing the additional data and of the consequences of not providing it. 9. We inform every recipient to whom we have disclosed your personal data about its rectification, completion, erasure or restriction of processing, unless this proves impossible or would require a disproportionate effort.

5. What happens to your data when:

A. you use our website www.job247.pl:

We process data collected by the cookies used on our Website. As a rule, "cookie" files do not constitute personal data. However, certain information stored in "cookie" files (e.g. regarding preferences), especially in combination with other information about the user of the websites, may be treated as personal data. More in our Cookies Policy. Each time a website page is called up, the server automatically saves only the so-called server log, such as the name of the requested file, your IP address, the date and time of the call, the amount of data transferred and the requesting internet service provider (the so-called access data), and documents the page call.

At the same time, we provide you with a panel for managing cookies on the website and ask you to express your preferences regarding cookies. Further data collection while you browse our website takes place in accordance with the cookie preferences you have chosen. More about the cookies used can be found in the Cookies Policy. When our website is loaded, only necessary cookies are installed on your device. Necessary cookies contribute to the usability of the website by enabling basic functions such as navigation on the page and access to secure areas of the website.

The website cannot function properly without these cookies. At the same time, we use other cookies on the website. These files are installed on your device provided that you give your consent within the cookie banner displayed after the page is loaded. You can always recall this banner by clicking the floating cookie icon. You can read more about this in the Cookies Policy. On what basis do we process your personal data and for what purposes do we do so?

We process the data of persons using the Website (including the IP address or other identifiers and information collected via cookies or other similar technologies), to the extent necessary to provide access to the website and its basic functionalities: ▪ for the purpose of providing services by electronic means in the scope of making the content of the Website and its basic functionalities available to Users – the legal basis for the processing is then the necessity of the processing for the performance of a contract; ▪ for the purpose of ensuring the security and functioning of the website – on the basis of our legitimate interest consisting in ensuring the availability and security of the website; ▪ for other purposes solely after you have given consent by managing cookies using the cookie panel.

More about the cookies used and the purposes of processing can be found in the Cookies Policy. The User's activity on the Website, including their personal data, is recorded in system logs (a special computer program used to store a chronological record containing information about events and actions concerning the IT system used by us to provide services). The information collected in the logs is processed in connection with the provision of the service and the legal basis for the processing is the necessity for the performance of a contract. We also process this data in order to ensure the security and correct functioning of IT systems, e.g.

in connection with testing changes in IT systems, detecting irregularities or protecting against abuse and attacks – on the basis of our legitimate interest consisting in ensuring the availability and security of the website. For other purposes – on the basis of your consent expressed through the configuration of cookies using the cookie panel. With whom do we share your data – the recipients of the data? We share your data with: ▪ providers of third-party cookies – more on this in the Cookies Policy.

▪ subcontractors, i.e. entities we use in the processing of data, with whom we have concluded a personal data processing entrustment agreement, including: the hosting service provider, the providers of the IT solutions used, entities providing IT support services to us, entities that support us in running the website and maintaining its functionality. Do we transfer your data to a third country and on what basis? We inform you that we do not transfer your data to a third country. For how long do we process your personal data?

▪ always for the period necessary to achieve the purposes of the processing, whereby: if the legal basis for the processing is our legitimate interest – no longer than until an effective objection is raised; if the legal basis for the processing is consent – no longer than until it is withdrawn. ▪ in the case of data collected by cookies – depending on the given cookie file – more in the Cookies Policy. Does the processing involve automated decision-making, including profiling? We apply profiling solely within the scope of providing the Recommended job offers Service, which may be used within the Account, on the terms set out in the Terms of Service.

You can read more about profiling in connection with this Service below, in the chapter under letter I. You have the right: to access the data, to request its rectification, to erasure of the data, to restriction of processing, to data portability. You have the right to object at any time to the processing of your data, including profiling, if we process your data on the basis of our legitimate interest. If you have raised an objection and it is justified, we will cease processing your data for those purposes. You have the right to withdraw the consent given at any time (without affecting the lawfulness of the processing we carried out on the basis of consent before its withdrawal).

You have the right to lodge a complaint with the supervisory authority. The supervisory authority in relation to us is the President of the Personal Data Protection Office. A complaint may also be lodged in the member state of your habitual residence, your place of work or the place of the alleged infringement. You will find more about how to exercise your rights here. Is providing the data mandatory or voluntary? When our Website is loaded for browsing, we collect only the data necessary to display it (necessary cookies) – without collecting it, displaying the page (providing the service) will be impossible. More in the Cookies Policy.

Analytics and marketing tools. If you choose “Accept all” in the cookie banner, we use the tools described below on the Website. If you choose only necessary cookies, these tools do not store their cookies on your device.

▪ Google Tag Manager and Google Analytics 4 – provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, D04 E5W5, Ireland. These tools collect information about how you use the Website: pages visited, job offers viewed, clicks on the “Apply” button, applications sent, registration and sign-in, the source of your visit, device and browser type, and approximate location derived from your IP address. We use Google Consent Mode v2: until you give consent, Google only receives signals without cookies and without device identifiers, used for aggregated statistical estimates. We keep data in Google Analytics for no longer than 14 months. Information on data processing by Google: https://policies.google.com/privacy?hl=en

▪ Meta Pixel – provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. The pixel is loaded only after you give consent. It sends Meta information about your visits to the Website and actions taken (viewing a job offer, sending an application, registration, purchase of services by an employer), together with cookie identifiers, your IP address and browser information. We also use automatic advanced matching: data you enter in forms on the Website (email address, phone number, first and last name, gender, date of birth, city, postal code, country and Account ID) is converted in your browser with a one-way hash function and sent to Meta to link events to Facebook and Instagram accounts. For the collection and transfer of this data to Meta we are a joint controller with Meta Platforms Ireland Limited (https://www.facebook.com/legal/controller_addendum); further processing by Meta follows the rules at https://www.facebook.com/privacy/policy/. Meta cookies are stored in your browser for up to 90 days.

For what purposes and on what legal basis? We process data from these tools to measure the number and sources of visits to the Website and the effectiveness of job offers, and to measure the effectiveness of and target advertising of our services on Meta and Google – on the basis of your consent (Article 6(1)(a) GDPR in conjunction with Article 399 of the Polish Electronic Communications Law of 12 July 2024). You may withdraw your consent at any time by deleting the Website's cookies in your browser – the cookie banner will then appear again and you can make a new choice. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal. Providing data is voluntary – not giving consent does not limit your use of the Website.

Is data transferred to third countries? Google and Meta may transfer data to countries outside the European Economic Area, including the USA, on the basis of the European Commission's decision on the EU-US Data Privacy Framework or standard contractual clauses approved by the European Commission.

Job offer statistics kept by us. Independently of the tools above, we count how many people viewed a job offer, clicked “Apply”, signed in or registered and sent an application, as well as the source of the visit and the device type. For this we use a random session identifier that does not allow us to identify you; it is saved in the browser's session storage (sessionStorage) only if you have accepted all cookies, and without consent it is kept only in the memory of the open tab. Employers receive this data only as aggregated statistics of their own job offers. The legal basis is our legitimate interest (Article 6(1)(f) GDPR) in keeping statistics of the Service and reporting the effectiveness of job ads to employers; you may object by contacting us. We keep this data for 24 months from the event, after which it is deleted automatically.

B. you click the social media plugins placed on our Website

So-called social media plugins are used on our Website, such as: Facebook, Instagram and TikTok. After entering the Website, your data is not automatically transmitted to the above social networks. Data will be transmitted to social networks only when you actively activate the relevant social network button. In such a case the browser will initiate a connection with the servers of the given social network. By clicking the relevant button (e.g. the ICON of the given social network) you agree that the browser generates a link to the servers of the given social network and transfers data about you to the relevant social network operator and vice versa.

We have no influence on the nature and scope of the data collected by the social networks. The social network provider stores the data collected about you as a user profile and uses it for advertising purposes, market research and/or designing an audience-oriented website. Such an assessment takes place in particular (also for users who are not logged in) in order to prepare advertising and in order to inform other users of the social network about your activities on our Website. You have the right to object to the creation of your profiles, whereby in order to exercise this right you must contact the provider of the relevant plugin.

Thanks to the plugins we offer the possibility of interacting with social networks and other users, which allows us to improve our offer and make it more interesting. The data is transmitted regardless of whether you have an account with the plugin provider and whether you are logged in there. If you are logged in with the given plugin provider, the collected data will be assigned directly to your existing account. After clicking the activated button and (for example) linking the page, the plugin provider stores this information in your account and makes it publicly available to your friends.

We recommend logging out regularly after using a social network, in particular before activating the button, because in this way you can avoid your profile being assigned by the plugin provider. Every social media channel has its own policy on how personal data is processed and protected. If you have any doubts or questions regarding the use of personal data by the above portals, read their privacy policies carefully before using them.

We have placed on the website the icons of the following social media, which redirect to our accounts in those media: ▪ Facebook and Instagram – the provider is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, DO4 X2K5 Ireland. Information about data processing can be found at: https://www.facebook.com/privacy/policy/?locale=pl_PL or https://help.instagram.com/196883487377501/?helpref=hc_fnav&locale=pl_PL; ▪ TikTok – the providers are TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland and TikTok Information Technologies UK Limited, 6th Floor, One London Wall, London, EC2Y 5EB, United Kingdom.

Information about data processing: https://www.tiktok.com/legal/page/eea/privacy-policy/pl These providers process your data for their own purposes, unknown to us – as controllers separate from us. The processing may result in the transfer of your personal data to a third country on the terms indicated in the privacy policies of those providers. To obtain more information about the purpose and scope of data collection and its processing by the plugin provider, you should read the data protection declarations of the providers presented below.

The providers below will give the user further information about the user's rights in this respect and will set the settings options in order to protect their privacy. ● Facebook – https://www.facebook.com/privacy/policy/?locale=pl_PL ● Instagram – https://help.instagram.com/196883487377501/?helpref=hc_fnav&locale=pl_PL; ● TikTok – https://www.tiktok.com/legal/page/eea/privacy-policy/pl

C. you use our social media accounts:

1. We have accounts on the social media portals Facebook, Instagram, LinkedIn, YouTube and we are their administrator. 2. Your data, as a person using our social media accounts, is processed when: ▪ you have subscribed to this content by means of the mechanism made available by the social media provider – this may take place, for example, by clicking the "Like", "Follow", "Share" or "Subscribe" icon, etc.; ▪ you have taken any reaction on that social media service – this may take place, for example, by clicking the "like", "comment", "share", "save post", "repost" icon, etc.

▪ you have sent us a private message via the "send message" function or another function enabling such an action. 2. Depending on the interaction you take within social media, we may process your first name and surname, nickname, image, information available in the public profile and other information provided in messages or comments. 3. At the same time, your data is administered by the providers of these portals. These providers process your data for their own purposes, unknown to us – as controllers separate from us.

The processing may result in the transfer of your personal data to a third country on the terms indicated in the privacy policies of those providers. 4. To obtain more information about the purpose and scope of data collection and its processing by the plugin provider, you should read the data protection declarations of the providers presented below. The providers below will give the user further information about the user's rights in this respect and will set the settings options in order to protect their privacy. ▪ Facebook and Instagram – the provider is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, DO4 X2K5 Ireland.

Information about data processing can be found at: https://www.facebook.com/privacy/policy/?locale=pl_PL or https://help.instagram.com/196883487377501/?helpref=hc_fnav&locale=pl_PL; ▪ TikTok – the providers are TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland and TikTok Information Technologies UK Limited, 6th Floor, One London Wall, London, EC2Y 5EB, United Kingdom. Information about data processing: https://www.tiktok.com/legal/page/eea/privacy-policy/pl ▪ YouTube ▪ LinkedIn 5.

As the founders of the Facebook and Instagram account, we jointly administer personal data together with Meta Platforms Ireland Limited, Merrion Road, Dublin 4, DO4 X2K5 Ireland, i.e. the provider of these portals.

As the administrator of our account on the Facebook and Instagram social media services, we have access to aggregate page statistics (the number of fanpage/profile followers, the age and gender of users together with the percentage breakdown among followers, the names of cities and countries from which users follow us with a percentage breakdown, the reach of the fanpage/profile and of individual posts, the number of likes and reactions, the number of comments and shares, the number of link clicks, as well as aggregate and anonymised reports concerning campaigns run using the self-service advertising system). We process this data jointly with Meta Platforms Ireland Limited.

Details concerning the rules of joint data processing in the scope of statistics with Meta Platforms Ireland Limited are available at: https://pl-pl.facebook.com/legal/terms/page_controller_addendum (where that document refers to the User – this means us, i.e. the entities forming part of Mrówki Group with its registered office in Poznań). In connection with joint controllership, you are entitled to exercise your rights against each of the Joint Controllers by writing to the address CONTACT POINT Mrówki Group, ul.

Taczaka 24/PARTER 01, 61-819 Poznań, Poland, e-mail: biuro@mrowki-ua.com, or to Meta Platforms Ireland Limited, Merrion Road, Dublin 4, DO4 X2K5 Ireland, contact form: ▪ for Facebook you will find it: in your account – go to "Help and Support" in the account settings and then select "Report a Problem" or "Contact"; ▪ for Instagram you will find it: https://help.instagram.com/. The remaining rules for the processing of personal data set out by the provider of the Facebook and Instagram services can be found in the Privacy Policy of the service at https://www.facebook.com/privacy/policy/?locale=pl_PL or https://help.instagram.com/196883487377501/?helpref=hc_fnav&locale=pl_PL.

For what purposes do we process your personal data?

We process your data as a user of our social media accounts for the purpose of: ▪ running and managing these accounts, on the terms and rules set out by the providers of these media, and using them to inform about our activity, to promote various events that we organise and our brand and services, to build and maintain the community connected with us, to communicate through the available functionalities of the service (comments, chat, messages), to ensure order and safety of discussions on these profiles, including the removal of comments infringing the law, good practice or the terms of the given social media service; ▪ marketing and promotion of our services; ▪ analysing the activity of the users of our profiles, including in order to collect data on the number of likes, comments and shares of our profile or the content placed on it – on the basis of our legitimate interest consisting in undertaking activities aimed at informing about our business and promoting it, and communication using the tools available within the service.

▪ running competitions on our profiles. What is the legal basis for the processing carried out? We process your personal data on our profiles on the basis of our legitimate interest (Article 6(1)(f) GDPR), consisting among others in: ▪ ensuring order and safety on our profiles by moderating entries and comments of the users of our profiles; ▪ building positive relations with the users of our profiles, in particular by conducting correspondence with them and organising competitions; ▪ marketing of our products and services; ▪ analysing the activity of the users of our profiles in order to best match the content placed there to their needs.

In the case of competitions, if you are the winner of a given competition, we will also process your personal data in order to fulfil the tax obligations incumbent on us related to settling the prize (Article 6(1)(c) GDPR). With whom do we share your data – the recipients of the data?

We share your data with: ▪ subcontractors, i.e. entities we use in the processing of data, with whom we have concluded a personal data processing entrustment agreement, including: the providers of the IT solutions used, entities providing IT support or marketing services to us, entities that support us in running the accounts and maintaining their functionality; ▪ the providers of these services on the terms set out by them in their privacy policies:

• Facebook – https://www.facebook.com/privacy/policy/?locale=pl_PL

• Instagram – https://help.instagram.com/196883487377501/?helpref=hc_fnav&locale=pl_PL

• TikTok – https://www.tiktok.com/legal/page/eea/privacy-policy/pl Do we transfer your data to a third country and on what basis? We inform you that we do not transfer your data to a third country. However, the providers of the Facebook, Instagram and YouTube services may carry out such transfers. More information:

• Facebook – https://www.facebook.com/privacy/policy/?locale=pl_PL

• Instagram – https://help.instagram.com/196883487377501/?helpref=hc_fnav&locale=pl_PL

• TikTok – https://www.tiktok.com/legal/page/eea/privacy-policy/pl For how long do we process your personal data? Personal data will be processed for the period connected with the achievement of the purposes of processing indicated above, i.e.: ▪ information within the comments posted will be available in the service until it is deleted by its author; ▪ statistical data concerning persons visiting the social media accounts will be processed for as long as this data is available in the services.

▪ in the case of marketing of our products and services – until you object to the use of your data for this purpose, but no longer than for the period during which you follow us; ▪ in the case of activity analysis – until you object to the use of your data for this purpose and we recognise that your objection is justified, but no longer than for the period during which you follow us; ▪ in the case of the need to ensure order on our profiles – until you object to the use of your data for this purpose and we recognise that your objection is justified, but no longer than for the period during which you follow us; ▪ in the case of competitions – for the duration of the competition and subsequently on the terms set out in its rules.

Personal data collected by the providers of social media services is subject to retention on the terms set out in their regulations:

• Facebook – https://www.facebook.com/privacy/policy/?locale=pl_PL

• Instagram – https://help.instagram.com/196883487377501/?helpref=hc_fnav&locale=pl_PL

• TikTok – https://www.tiktok.com/legal/page/eea/privacy-policy/pl Does the processing involve automated decision-making, including profiling? We currently do not apply to your data automated decision-making, including profiling, which produces legal effects concerning you or similarly significantly affects you. However, the providers of the Facebook, Instagram and TikTok services may carry out such processing. More information:

• Facebook – https://www.facebook.com/privacy/policy/?locale=pl_PL

• Instagram – https://help.instagram.com/196883487377501/?helpref=hc_fnav&locale=pl_PL

• TikTok – https://www.tiktok.com/legal/page/eea/privacy-policy/pl What rights do you have? You have the right to access the data, to request its rectification, to erasure of the data, to restriction of processing, to data portability. You have the right to object at any time to the processing of your data, including profiling, if we process your data on the basis of our legitimate interest. If you have objected to the processing of your data for marketing purposes, we will cease processing it for that purpose. The same applies to an objection to the processing of your data for purposes other than marketing, if the objection proves justified.

You have the right to withdraw the consent given at any time (without affecting the lawfulness of the processing we carried out on the basis of consent before its withdrawal). You have the right to lodge a complaint with the supervisory authority. The supervisory authority in relation to us is the President of the Personal Data Protection Office. A complaint may also be lodged in the member state of your habitual residence, your place of work or the place of the alleged infringement. You will find more about how to exercise your rights here. The rights vested in you in connection with the use of social media services against their providers are described in their privacy policies:

• Facebook – https://www.facebook.com/privacy/policy/?locale=pl_PL

• Instagram – https://help.instagram.com/196883487377501/?helpref=hc_fnav&locale=pl_PL

• TikTok – https://www.tiktok.com/legal/page/eea/privacy-policy/pl Is providing the data mandatory or voluntary? Providing the data is entirely voluntary, and failure to provide it results in the impossibility of using these accounts and the content placed on them. Due to the specific nature of the functioning of the social media services mentioned above, information about the actions taken by users on these pages is public. We obtain personal data from the administrators of the social media services from your public profile and from entries on the pages of these social media services.

D. you contact us by e-mail or telephone

We process the data you make available to us – usually your contact details such as: e-mail, telephone and the content of the enquiry. On what basis do we process your data and for what purposes do we do so? Your data is processed: ▪ in order to reply to the enquiry addressed to us. We process the data on the basis of our legitimate interest consisting in conducting correspondence addressed to us in connection with our business. You will find more about how to exercise your rights here. With whom do we share your data – the recipients of the data?

We share your data with: ▪ subcontractors, i.e. entities we use in the processing of data, with whom we have concluded a personal data processing entrustment agreement, including: the hosting service provider, the providers of the IT solutions used, entities providing IT support services to us, the provider of the business application suite, including e-mail. Do we transfer your data outside the European Economic Area and on what basis? We inform you that we do not transfer your data outside the European Economic Area. For how long do we process your personal data?

▪ always for the period necessary to achieve the purposes of processing, but no longer than until an effective objection is raised; ▪ data obtained in order to provide a reply is processed for the period necessary to provide the reply/clarify the matter, or until you raise an effective objection to the processing of the data or we establish that the data has become out of date. You have the right: to access the data, to request its rectification, to erasure of the data, to restriction of processing, to data portability. You have the right to object at any time to the processing of your data, including profiling, if we process your data on the basis of our legitimate interest.

If you have raised an objection and it is justified, we will cease processing your data for those purposes. You have the right to lodge a complaint with the supervisory authority. The supervisory authority in relation to us is the President of the Personal Data Protection Office. A complaint may also be lodged in the member state of your habitual residence, your place of work or the place of the alleged infringement. You will find more about how to exercise your rights here. Does the processing involve automated decision-making, including profiling? We apply profiling solely within the scope of providing the Recommendation Service, which may be used within the Account, on the terms set out in the Terms of Service.

You can read more about profiling in connection with this Service below, in the chapter under letter I. Is providing the data mandatory or voluntary? To the extent that the data is processed in order to establish contact or to answer questions, providing the data is voluntary. The consequence of not providing the data will be the impossibility of establishing contact / providing a reply.

E. You subscribe to the Newsletter.

We process your e-mail address provided during the subscription. On what basis do we process your data and for what purposes do we do so? Your data is processed in order to inform you about products and services, including news and events concerning JOB 24/7 sp. z o.o. and the www.job247.pl website operated by it, by sending the Newsletter, on the basis of your consent expressed by submitting the subscription form. With whom do we share your data – the recipients of the data?

We share your data with subcontractors – i.e. entities we use in the processing of data, with whom we have concluded a personal data processing entrustment agreement, e.g.: the hosting service provider, the provider of office software, including e-mail; entities providing IT support services and administrative services to us, and entities supplying the software for sending the newsletter. Do we transfer your data outside the European Economic Area and on what basis? We inform you that we do not transfer your data outside the European Economic Area. For how long do we process your personal data? We process the data until you unsubscribe from the Newsletter.

You may unsubscribe at any time by clicking the "Unsubscribe" link at the bottom of each Newsletter sent, or in writing to our address: ul. Stanisława Taczaka 24/206, 61-819 Poznań, or by e-mail to: contact@job247.pl. Does the processing involve automated decision-making, including profiling? We apply profiling solely within the scope of providing the Recommendation Service, which may be used within the Account, on the terms set out in the Terms of Service. You can read more about profiling in connection with this Service below, in the chapter under letter I.

You have the right to access the content of your data and to receive a copy of it, the right to its rectification, erasure, restriction of processing and data portability. You have the right to withdraw the consent given at any time (without affecting the lawfulness of the processing we carried out on the basis of consent before its withdrawal). You have the right to lodge a complaint with the supervisory authority. The supervisory authority in relation to us is the President of the Personal Data Protection Office. A complaint may also be lodged in the member state of your habitual residence, your place of work or the place of the alleged infringement. You will find more about how to exercise your rights here. Is providing the data mandatory or voluntary?

Providing the data is voluntary. Failure to provide it will make it impossible to subscribe to the Newsletter.

F. You want to receive information about content currently published on the website

www.job247.pl We process your e-mail address provided during the subscription. On what basis do we process your data and for what purposes do we do so? Your data is processed in order to inform you, at the e-mail address indicated, about content published on the job247.pl website, on the basis of your consent expressed by ticking the checkbox concerning the wish to receive such information. With whom do we share your data – the recipients of the data?

We share your data with subcontractors – i.e. entities we use in the processing of data, with whom we have concluded a personal data processing entrustment agreement, e.g.: the hosting service provider, the provider of office software, including e-mail; entities providing IT support services and administrative services to us. Do we transfer your data outside the European Economic Area and on what basis? We inform you that we do not transfer your data outside the European Economic Area. For how long do we process your personal data? We process the data until you resign from receiving the information.

You may resign at any time by clicking the "Unsubscribe" link at the bottom of each information e-mail sent, or in writing to our address: ul. Stanisława Taczaka 24/206, 61-819 Poznań, or by e-mail to: contact@job247.pl. Does the processing involve automated decision-making, including profiling? We apply profiling solely within the scope of providing the Recommendation Service, which may be used within the Account, on the terms set out in the Terms of Service. You can read more about profiling in connection with this Service below, in the chapter under letter I.

Providing the data is voluntary. Failure to provide it will make it impossible to subscribe to receiving the information.

G. You conclude a Service agreement with us

Remember that where you have created an Account for a job seeker and use the Service of:

a) sharing the Questionnaire placed in the Account with Entities publishing job offers on the Website;

b) sending applications directly to a selected Entity publishing an offer;

c) communicating with the Entity publishing an offer by means of the chat service;

d) expressing interest in a given offer by clicking the REPLY option placed next to the offer, the Controller of your data will be the Entity looking for job candidates on the Website. This means that We will then act as its processor – on its behalf and on its instructions – in order to deliver your Questionnaire/application to the selected Entity publishing the job offer. Therefore the Controller of your data will be the Entity looking for job candidates on the Website:

a) with whom you shared the Questionnaire placed in the Account;

b) to whom you sent an application;

c) with whom you communicated by means of the chat service;

d) in whose offer you expressed interest by clicking the REPLY option placed next to the offer. When you conclude a Service agreement with us, we process the data you provided to us when concluding the Agreement. If you conclude the Agreement with us as a job seeker, this will most often be your e-mail address, first name, surname, employment preferences and professional competences and skills, sometimes your photograph (if you place it in the Account), and other personal data that you place in the Account.

If you conclude the Agreement with us as a person looking for job candidates, this will most often be your first name and surname, business contact details, other data characterising the way you use the Services, including the scope of your permissions to the Account, the data of the company on whose behalf you conclude the Agreement, your photograph or logo (if you place it in the Account), and other personal data that you place in the Account. On what basis do we process your data and for what purposes do we do so?

Your data is processed in order to conclude and perform the Agreement – on the basis of the concluded Agreement, in order to perform it, in accordance with the Terms of Service, and in order to ensure the correct configuration of the Website and its IT security – on the basis of our legitimate interest consisting in ensuring the availability and security of the Service and the Website. If you conclude with us an Agreement for the provision of the Account Service as an Entity publishing offers on the Website, we also process your data in order to correctly identify that Entity – in connection with the necessity to conclude and perform the Agreement.

The data of Users using the Account Service is also processed for the purpose of their authentication – on the basis of the concluded Agreement, in order to perform it, in accordance with the Terms of Service. With whom do we share your data – the recipients of the data? We share your data with subcontractors – i.e. entities we use in the processing of data, with whom we have concluded a personal data processing entrustment agreement, e.g.: the hosting service provider, the provider of office software, including e-mail; entities providing IT support services and administrative services to us.

We may share personal data with controllers separate from us, such as advocates, legal advisers and auditors, who support us in the business we conduct. Your data may also be shared with Users of the Website if this is required by the performance of the Service agreement concluded between us, e.g. sharing the Questionnaire or the Company Information, sending an application, communicating by means of the chat service, expressing interest in a given offer by clicking the REPLY option placed next to the offer. Do we transfer your data outside the European Economic Area and on what basis?

We inform you that we do not transfer your data outside the European Economic Area. For how long do we process your personal data? Data obtained in connection with the conclusion and performance of the Agreement is processed until the performance of the Agreement is completed in accordance with the Terms of Service. Does the processing involve automated decision-making, including profiling? We apply profiling solely within the scope of providing the Recommendation Service, which may be used within the Account, on the terms set out in the Terms of Service. You can read more about profiling in connection with this Service below, in the chapter under letter I. Is providing the data mandatory or voluntary? Providing the data is voluntary.

Failure to provide it will make it impossible to conclude and perform the Agreement. You have the right to access the content of your data and to receive a copy of it, the right to its rectification, erasure, restriction of processing and data portability. You have the right to object at any time to the processing of your data, including profiling, if we process your data on the basis of our legitimate interest. If you have raised an objection and it is justified, we will cease processing your data for those purposes. You have the right to lodge a complaint with the supervisory authority. The supervisory authority in relation to us is the President of the Personal Data Protection Office.

A complaint may also be lodged in the member state of your habitual residence, your place of work or the place of the alleged infringement. You will find more about how to exercise your rights here.

H. You register an Account using an account you have on another service (currently you can

use an account on Telegram, Facebook or Google for this purpose). If you use the option of registering an Account using an account held on another service (currently Telegram, Facebook, Google), your Data will be transmitted to those social networks at the moment when you actively activate the relevant social network button during registration. In such a case the browser will initiate a connection with the servers of the given social network. By clicking the relevant button (e.g.

the ICON of the given social network) you agree that the browser generates a link to the servers of the given social network and transfers data about you to the relevant social network operator and vice versa. We have no influence on the nature and scope of the data collected by the social networks. The social network provider stores the data collected about you as a user profile and uses it for advertising purposes, market research and/or designing an audience-oriented website.

Such an assessment takes place in particular (also for users who are not logged in) in order to prepare advertising and in order to inform other users of the social network about your activities on our Website. You have the right to object to the creation of your profiles, whereby in order to exercise this right you must contact the provider of the relevant plugin. Thanks to the plugins we offer the possibility of interacting with social networks and other users, which allows us to improve our offer and make it more interesting. The data is transmitted regardless of whether you have an account with the plugin provider and whether you are logged in there.

If you are logged in with the given plugin provider, the collected data will be assigned directly to your existing account. After clicking the activated button and (for example) linking the page, the plugin provider stores this information in your account and makes it publicly available to your friends. We recommend logging out regularly after using a social network, in particular before activating the button, because in this way you can avoid your profile being assigned by the plugin provider. Every social media channel has its own policy on how personal data is processed and protected.

If you have any doubts or questions regarding the use of personal data by the above portals, read their privacy policies carefully before using them. We have made it possible to register an Account using your other account held on Telegram or Facebook or Google: ▪ Facebook – the provider is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, DO4 X2K5 Ireland. Information about data processing can be found at: https://www.facebook.com/privacy/policy/?locale=pl_PL ▪ Telegram – the provider is Telegram Messenger Inc. Information about data processing can be found at: https://telegram.org/privacy.

Information about data processing: https://telegram.org/ ▪ Google – the provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, D04 E5W5, Ireland. Information about data processing can be found at: https://policies.google.com/privacy?hl=pl These providers process your data for their own purposes, unknown to us – as controllers separate from us. The processing may result in the transfer of your personal data to a third country on the terms indicated in the privacy policies of those providers.

To obtain more information about the purpose and scope of data collection and its processing by the plugin provider, you should read the data protection declarations of the providers presented below. The providers below will give the user further information about the user's rights in this respect and will set the settings options in order to protect their privacy. ● Facebook – https://www.facebook.com/privacy/policy/?locale=pl_PL ● Telegram – https://telegram.org/ ● Google – https://policies.google.com/privacy?hl=pl

I. Profiling in the scope of providing the job offer recommendation Service – for

job seekers, and the recommendation of candidates for recruitment – for those looking for job candidates. As part of using the Recommended job offers Service – for job seekers, and Recommended job candidates – for those looking for job candidates, we may apply automated decision-making mechanisms, including profiling, aimed at presenting personalised offers to Service Recipients. In the case of job seekers, these will be personalised job offers. In the case of entities looking for job candidates, this will be information about job seekers who match their requirements and needs.

The legal basis for the processing is the concluded Agreement, and the processing is carried out in order to perform it, in accordance with the Terms of Service. Profiling for the purpose of recommending job offers to job seekers consists in matching job offers, which takes place by creating, in an automated manner, your professional profile based on the personal data you provided in the Questionnaire or contained in the documents you saved in your Account, and which we collected on the basis of your activity on the Website (including information on which offers you applied for). The Website's algorithms learn your expectations and present you with job offers similar to your earlier searches or application history, e.g.

in terms of the location of the work, its type, place of performance, form of employment and remuneration. Thanks to this you do not have to search on your own, because you see the offers that interest you immediately after logging into your Account. The profile created in this way allows us to predict which job offers may interest you. The condition for using the Service is having the appropriate Account privacy settings, i.e. acceptance, within the Account settings, of profiling for the purposes of matching job offers to your professional profile. Disabling profiling means that we will not be able to recommend job offers to you.

You will also find recommendations with job offers matched to your behaviour on the Website in the e-mails we send you, provided that within the Account settings you accept the wish to receive recommended job offers by e-mail. If you no longer wish to receive information about recommended job offers from us, you may withdraw from this service at any time. In the footer of every e-mail sent by Us with such information you will find a link which will easily and quickly disable the receipt of e-mails. You may also withdraw by changing the Privacy settings of your Account.

In addition, if you consent to sharing the Questionnaire with Entities publishing offers on the Website, after the consent has been given your Questionnaire may be passed directly to those Entities which are looking for candidates with qualifications and experience similar to yours. Such matching takes place on the basis of the information you placed in the Questionnaire. In the Account settings you may also indicate Entities which are to be excluded from the sharing of your Questionnaire.

Profiling for the purpose of recommending job candidates to entities looking for job candidates consists in creating, in an automated manner, your company profile based on the data you provided in the Company Information or contained in the documents you saved in your Account, and which we collected on the basis of your activity on the Website (including information on which candidates you were looking for). The Website's algorithms learn your expectations and present you with job candidates similar to your earlier searches, e.g. in terms of the location of the work, its type, place of performance, form of employment and remuneration.

Thanks to this you do not have to search on your own, because you see the applications that interest you immediately after logging into your Account. The profile created in this way allows us to predict which applications may interest you. The condition for using the Service is having the appropriate Account privacy settings, i.e. acceptance, within the Account settings, of profiling for the purposes of matching candidates to job offers. Disabling profiling means that we will not be able to recommend job candidates to you.

You will also find recommendations with candidates matched to your behaviour on the Website in the e-mails we send you, provided that within the Account settings you accept the wish to receive recommended job offers by e-mail. If you no longer wish to receive information about recommended job offers from us, you may withdraw from this service at any time. In the footer of every e-mail sent by Us with such information you will find a link which will easily and quickly disable the receipt of e-mails. You may also withdraw by changing the Privacy settings of your Account.

Remember that the process of automatically matching candidates does not in any way affect the scope of offers available to you on the Website. Profiling only affects our recommendation of particular offers – on the basis of the profile created. This means that a list of offers most similar to your expectations is created, which is presented within your Account and in the e-mail messages addressed to you. You have the right to request human intervention in the process of making decisions which may have legal effects for you or similarly significantly affect you.

You may contact us in order to express your own position and obtain assistance in connection with decisions taken as a result of automated processing, as well as to express your preferences, which will be taken into account in the further process. You may ask for a review of the decision taken as a result of profiling. At the same time, within the Account settings you have the possibility to withdraw from the Services within which automated decision-making, including profiling, takes place. Withdrawal from a given Service will be tantamount to us ceasing automated decision-making, including profiling – within the scope of the Service from which you withdrew. With whom do we share your data – the recipients of the data?

We share your data with subcontractors – i.e. entities we use in the processing of data, with whom we have concluded a personal data processing entrustment agreement, e.g.: the hosting service provider, the provider of office software, including e-mail; entities providing IT support services and administrative services to us. We may share personal data with controllers separate from us, such as advocates, legal advisers and auditors, who support us in the business we conduct. Do we transfer your data outside the European Economic Area and on what basis?

We inform you that we do not transfer your data outside the European Economic Area. For how long do we process your personal data? Data obtained in connection with the conclusion and performance of the Agreement is processed until the performance of the Agreement is completed. Is providing the data mandatory or voluntary? Providing the data is voluntary. Failure to provide it will make it impossible to conclude and perform the Agreement in the scope of making recommendations. You have the right to access the content of your data and to receive a copy of it, the right to its rectification, erasure, restriction of processing and data portability.

You have the right to object at any time to the processing of your data, including profiling, if we process your data on the basis of our legitimate interest. If you have raised an objection and it is justified, we will cease processing your data for those purposes. You have the right to lodge a complaint with the supervisory authority. The supervisory authority in relation to us is the President of the Personal Data Protection Office. A complaint may also be lodged in the member state of your habitual residence, your place of work or the place of the alleged infringement. You will find more about how to exercise your rights here.

J. When we create a Technical account for you

A technical account is an account created by Us. It is temporary in nature and we create it for you if you use the option of registering an Account by e-mail address. We create the technical account for the period from the moment the Account creation procedure starts until you confirm the creation of the Account on the Website (by clicking the activation link). The technical account exists until you confirm the creation of the Account, and you have 14 days from the moment it was created to do so. After that time the technical account is deleted by us, regardless of whether you confirmed the creation of the Account on the Website or not.

We inform you that we do not transfer your data outside the European Economic Area. For how long do we process your personal data? The technical account exists until you confirm the creation of the Account, and you have 14 days from the moment it was created to do so. After that time the technical account is deleted by us, regardless of whether you confirmed the creation of the Account on the Website or not. Does the processing involve automated decision-making, including profiling? We apply profiling solely within the scope of providing the Recommendation Service, which may be used within the Account, on the terms set out in the Terms of Service.

You can read more about profiling in connection with this Service below, in the chapter under letter I. Is providing the data mandatory or voluntary? Providing the data is voluntary. Failure to provide it will make it impossible to conclude and perform the Agreement. You have the right to access the content of your data and to receive a copy of it, the right to its rectification, erasure, restriction of processing and data portability. You have the right to object at any time to the processing of your data, including profiling, if we process your data on the basis of our legitimate interest. If you have raised an objection and it is justified, we will cease processing your data for those purposes.

K. You are a representative, proxy or contact person of an entity with which

we cooperate. In that case we process the following categories of your personal data: first name, surname, business contact details, position/function, and other business personal data indicated at the stage of concluding and performing the Agreement. We obtain your data from you or from the entity of which you are a representative, proxy or contact person. We process your data for the following purposes and on the following legal bases:

a) in order to cooperate with the entity you represent, including to conclude and perform the Agreement concluded with it, and in order to authenticate Users on the Website and enable them to use our Services in accordance with the level of access rights they hold – on the basis of our legitimate interest consisting in ensuring the legal security of the business conducted, including ensuring the possibility of concluding and performing the provisions of the Agreement, maintaining contact related to the performance and execution of the Agreement, and the correct identification of persons authorised to represent and incur obligations on behalf of the entity you represent, as well as ensuring the security of and access control to the Website in accordance with the rights held; Your data is shared with the following categories of entities:

a) entities and persons to whom the disclosure of data results from the content of the aforementioned Agreement, i.e. the purpose of the cooperation or the agreement cannot be achieved without disclosing the data to those recipients;

b) subcontractors – i.e. entities whose assistance we use in the processing of your data, with whom we have concluded a personal data processing entrustment agreement, e.g. the hosting service provider, entities providing IT support services to us, other subcontractors involved in the performance of the aforementioned Agreement;

c) other entities which support the business we conduct with their services and which, by virtue of the services provided to us, remain controllers separate from us, e.g. advocates, legal advisers, auditors. We do not transfer your data to a third country. Your data will be processed for the period necessary to achieve the purposes of processing indicated above, i.e.: data obtained in connection with the cooperation or the conclusion and performance of the Agreement is processed until the performance of the Agreement is completed. We apply profiling solely within the scope of providing the Recommendation Service, which may be used within the Account, on the terms set out in the Terms of Service.

You can read more about profiling in connection with this Service below, in the chapter under letter I. You have the right to access the content of the data processed and to receive a copy of it, the right to rectification (correction) of the data, the right to erasure of the data, the right to restriction of processing of the data, and the right to data portability. You have the right to object at any time to the processing of your data, including profiling, if we process your data on the basis of our legitimate interest. If you have raised an objection and it is justified, we will cease processing your data for those purposes. You have the right to lodge a complaint with the supervisory authority.

The supervisory authority in relation to us is the President of the Personal Data Protection Office. A complaint may also be lodged in the member state of your habitual residence, your place of work or the place of the alleged infringement. You will find more about how to exercise your rights here. To the extent that the data is processed in order to conclude the aforementioned Agreement and perform it, providing the data is a condition for concluding the Agreement and performing it. Providing the data is voluntary, however the consequence of not providing it will be the impossibility of concluding or performing the Agreement.

L. You lodge a complaint, make a report or submit a request

We process the data you make available to us – usually your contact details such as: e-mail, telephone and the content of the message. On what basis do we process your data and for what purposes do we do so? Your data is processed: ▪ in order to consider your message and provide a reply, and to address the matter in connection with which you are contacting us. We process the data on the basis of our legitimate interest consisting in conducting correspondence addressed to us in connection with our business. You will find more about how to exercise your rights here. With whom do we share your data – the recipients of the data?

We share your data with: ▪ subcontractors, i.e. entities we use in the processing of data, with whom we have concluded a personal data processing entrustment agreement, including: the hosting service provider, the providers of the IT solutions used, entities providing IT support services to us, the provider of the business application suite, including e-mail. Do we transfer your data outside the European Economic Area and on what basis? We inform you that we do not transfer your data outside the European Economic Area. For how long do we process your personal data?

M. You submit a Report of an infringement of the Content Rules.

We process the data you make available to us – usually your contact details such as: e-mail, telephone and the content of the message. If you use our reporting form, this is the data resulting from that form. On what basis do we process your data and for what purposes do we do so? Your data is processed: ▪ in order to examine the infringement report submitted, in accordance with the Content Rules – in connection with the legal obligation incumbent on us to have and implement a procedure for receiving and considering reports of infringements of the Content Rules. With whom do we share your data – the recipients of the data?

We share your data with subcontractors – i.e. entities we use in the processing of data, with whom we have concluded a personal data processing entrustment agreement, e.g.: the hosting service provider, the provider of office software, including e-mail; entities providing IT support services and administrative services to us. We may share personal data with controllers separate from us, such as advocates, legal advisers and auditors, who support us in the business we conduct. Do we transfer your data outside the European Economic Area and on what basis?

We inform you that we do not transfer your data outside the European Economic Area. For how long do we process your personal data? ▪ always for the period necessary to achieve the purposes of processing, but no longer than until the conclusion of the proceedings initiated by the report. You have the right: to access the data, to request its rectification, to erasure of the data, to restriction of processing, to data portability. You have the right to lodge a complaint with the supervisory authority. The supervisory authority in relation to us is the President of the Personal Data Protection Office. A complaint may also be lodged in the member state of your habitual residence, your place of work or the place of the alleged infringement.

You will find more about how to exercise your rights here. Does the processing involve automated decision-making, including profiling? We apply profiling solely within the scope of providing the Recommendation Service, which may be used within the Account, on the terms set out in the Terms of Service. You can read more about profiling in connection with this Service below, in the chapter under letter I. Is providing the data mandatory or voluntary? To the extent that the data is processed in order to establish contact, examine the report or provide a reply, providing the data is voluntary.

The consequence of not providing the data will be the impossibility of establishing contact / considering the report / providing a reply.

N. You submit a complaint.

We process the data you make available to us – usually your contact details such as: e-mail, telephone and the content of the complaint. On what basis do we process your data and for what purposes do we do so? Your data is processed in order to consider, handle and settle the complaint submitted, on the basis of the provisions of law concerning the warranty for defects of goods and consumer rights. With whom do we share your data – the recipients of the data?

We share your data with subcontractors – i.e. entities we use in the processing of data, with whom we have concluded a personal data processing entrustment agreement, e.g.: the hosting service provider, the provider of office software, including e-mail; entities providing IT support services and administrative services to us. We may share personal data with controllers separate from us, such as advocates, legal advisers and auditors, who support us in the business we conduct. Do we transfer your data outside the European Economic Area and on what basis?

We inform you that we do not transfer your data outside the European Economic Area. For how long do we process your personal data? ▪ always for the period necessary to achieve the purposes of processing, but no longer than until the conclusion of the proceedings initiated by the complaint. You have the right: to access the data, to request its rectification, to erasure of the data, to restriction of processing, to data portability. You have the right to lodge a complaint with the supervisory authority. The supervisory authority in relation to us is the President of the Personal Data Protection Office. A complaint may also be lodged in the member state of your habitual residence, your place of work or the place of the alleged infringement.

You will find more about how to exercise your rights here. Does the processing involve automated decision-making, including profiling? We apply profiling solely within the scope of providing the Recommendation Service, which may be used within the Account, on the terms set out in the Terms of Service. You can read more about profiling in connection with this Service below, in the chapter under letter I. Is providing the data mandatory or voluntary? To the extent that the data is processed in order to submit a complaint, providing the data is voluntary. The consequence of not providing the data will be the impossibility of submitting a complaint.

O. There is a need to establish or pursue possible claims or to defend against

claims. In some cases we may change the purpose of processing your data, of which we will inform you. A change in the purpose of processing your data may occur when a need arises to establish or pursue possible claims or to defend against claims. This concerns both court and out-of-court proceedings. On what basis do we process your data and for what purposes do we do so? We process your data for the purpose of establishing or pursuing claims or defending against them on the basis of our legitimate interest consisting in the legal protection of the business conducted. With whom do we share your data – the recipients of the data?

We share your data with subcontractors – i.e. entities we use in the processing of data, with whom we have concluded a personal data processing entrustment agreement, e.g.: the hosting service provider, the provider of office software, including e-mail; entities providing IT support services and administrative services to us. We may share personal data with controllers separate from us, such as advocates, legal advisers and auditors, who support us in the business we conduct. Do we transfer your data outside the European Economic Area and on what basis?

We inform you that we do not transfer your data outside the European Economic Area. For how long do we process your personal data? ▪ always for the period necessary to achieve the purposes of processing, but no longer than until the establishment or pursuit of claims or the defence against them has been concluded. You have the right: to access the data, to request its rectification, to erasure of the data, to restriction of processing, to data portability. You have the right to object at any time to the processing of your data, including profiling, if we process your data on the basis of our legitimate interest.

You can read more about profiling in connection with this Service below, in the chapter under letter I. Is providing the data mandatory or voluntary? To the extent that the data is processed in order to establish or pursue claims or to defend against them, providing the data is voluntary. The consequence of not providing the data will be that we do not receive this data from you.

6. Security of personal data.

We continuously carry out risk analysis in order to ensure that personal data is processed by us in a secure manner – ensuring above all that only authorised persons have access to the data and only to the extent necessary for the tasks they perform. We make sure that all operations on personal data are recorded and carried out only by authorised employees and associates. We take all necessary measures to ensure that our subcontractors and other cooperating entities also guarantee the application of appropriate security measures in every case in which they process personal data on our instructions.

We send SMS notifications exclusively from the number +48 784 971 516. You will receive a message only if you yourself provide your phone number in your account and confirm it with a code – you may delete the number at any time in the notification settings, and sending will stop. In our SMS messages we never ask for your password, a BLIK code or payment card details, and we do not send payment links; a message making such a request – even if it comes from a similar number – does not come from us.

In SMS, e-mail and Telegram messages we use our own shortened links of the form job247.pl/s/code. When you follow such a link we record the date and time of the click, the type of device (for example Android, iPhone) and a shortened network address — only the first three parts of the IP address, without the last one, which indicates an approximate region but not a particular device. We do this to learn which notifications and job adverts are useful and which merely take up your time. We shorten links to our own pages only. After a year the details of individual clicks are replaced by monthly totals.

7. Changes to the Privacy Policy.

We reserve the right to make changes to this Policy, which may result from the need to adapt to changes in legal regulations or applicable privacy standards, or from the extension of our offer. In connection with the above, we will inform about any significant changes to this Policy by means of an appropriate announcement on our websites. The announcement will be presented in a visible manner and will inform about the content of the changes introduced and their consequences for your data.

In each case, the date of introduction of the changes will be set so that the announcement about them appears at a time allowing you to read the content of the announcement and to consider the nature and impact of the changes on the processing of your data. This date will take into account the need to create an appropriate time frame in which you will be able to exercise the rights vested in you under the GDPR (e.g. withdrawal of consent or objection to processing). Where the changes are significant, we may send you a notification to the e-mail address you provided.