PAYTRUST GROUP PRIVACY POLICY

§1. General Information
  1. The data controller is:
    PayTrust Group Sp. z o.o.
    • Address: ul. Złota 75A, 00-819 Warsaw, Poland
    • Tax ID: 5273161673
    • REGON: 54154109100000
    • National Court Register: 0001169370
    • Email: contact@paytrustgroup.com
    • Phone: +48 533 959 270.
  2. This Privacy Policy outlines the principles of processing and protecting personal data provided by users of the website paytrustgroup.com, B2B clients, and candidates using recruitment services.
§2. Legal Basis for Data Processing
  1. Personal data is processed in accordance with the Regulation of the European Parliament and of the Council (EU) 2016/679 (GDPR).
  2. Data is processed on the basis of:
    • art. 6 para. 1 lit. a GDPR – consent of the data subject (e.g., sending a CV via the form),
    • art. 6 para. 1 lit. b GDPR – performance of a contract or taking actions before its conclusion,
    • art. 6 para. 1 lit. c GDPR – fulfillment of a legal obligation imposed on the Controller,
    • art. 6 para. 1 lit. f GDPR – legitimate interest of the Controller (e.g., B2B direct marketing).
§3. Scope of Processed Data
  1. In the case of candidates, we process personal data voluntarily provided in forms, such as: first name, last name, email address, phone number, work experience, CV, and other data necessary in the recruitment process.
  2. In the case of B2B clients, we process data necessary for contact and service delivery: company name, first and last name of the representative, email address, phone number, Tax ID, and billing information.
  3. Data may be supplemented with information obtained from public sources (e.g., LinkedIn, National Court Register) solely for the purpose of business contact.
§4. Purposes of Data Processing
  1. We process personal data for the purposes of:
    • delivering recruitment and employment agency services,
    • contacting candidates and business partners,
    • handling applications via forms on the website,
    • fulfilling legal obligations (e.g., financial documentation),
    • marketing activities within the scope of legitimate interest.
§5. Data Retention
  1. Candidate data is retained for no longer than 12 months from the end of the recruitment process, unless the candidate gives consent for longer processing.
  2. B2B client data is retained for the duration of the collaboration and as required by accounting and tax regulations (minimum of 5 years).
  3. After the aforementioned periods, data is deleted or anonymized.
§6. Sharing Data
  1. Personal data may be shared with:
    • employers and foreign partners for the purpose of conducting the recruitment process,
    • entities providing IT, hosting, and accounting services on behalf of the Controller,
    • public authorities, when required by law.
  2. Data is not sold or shared with entities not related to the service.
§7. Rights of Data Subjects
Every person whose data is processed has the right to:
  • access their data,
  • rectification, deletion or restriction of processing,
  • object to processing,
  • data portability,
  • withdraw consent at any time (if processing is based on consent),
  • file a complaint with the President of the Personal Data Protection Office.
§8. Data Security
  1. PayTrust Group uses technical and organizational measures to protect data against unauthorized access, loss, or theft (including encryption, firewalls, backup systems).
  2. Access to data is granted only to authorized individuals who have been trained in data protection.
§9. Cookies
  1. The website paytrustgroup.com may use cookies to improve service quality and analyze traffic.
  2. The user can disable cookies in their browser settings.
§10. Final Provisions
  1. The Privacy Policy may be updated – we will inform about changes on the website.
  2. In matters not regulated, the provisions of Polish law and GDPR shall apply.