Privacy Policy

§1 General Provisions

  1. This Privacy Policy sets out the rules for processing personal data of users of the website gorilla-hr.com, hereinafter referred to as the „Service”, operated by Soft Gorillas Sp. z o.o., with its registered office in Rzeszów, at ul. Jana i Jędrzeja Śniadeckich 20D/7, 35-006 Rzeszów, Poland, entered in the register of entrepreneurs under the number KRS: 0000890717, NIP: 8133856997, REGON: 388472110, hereinafter referred to as the „Administrator”.
  2. The personal data of users are processed in accordance with legal regulations, including Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, hereinafter referred to as „GDPR”.
  3. The Administrator can be contacted regarding data protection issues via email: yourteam@gorilla-hr.com or phone: +48 512 563 052.

§2 Scope and Purpose of Data Processing

  1. Data collected from candidates:
    • Name and surname
    • Email address
    • Phone number
    • CV and other application documents
    • Information about qualifications and work experience
  2. Purpose of data processing:
    • Conducting recruitment on behalf of the Administrator’s clients
    • Enabling candidates to participate in contract outsourcing processes
    • Sending information about job offers and projects to candidates
    • Contacting candidates to arrange details of cooperation
    • Managing the candidate’s profile by the Administrator
  3. Data collected from clients:
    • Company name
    • Email address
    • Phone number
    • Contact details of the person responsible for recruitment
    • Details regarding the demand for employees or outsourcing services
  4. Purpose of client data processing:
    • Execution of orders related to recruitment and outsourcing
    • Contact regarding the ordered services
    • Sending profiles of candidates meeting the client’s requirements

§3 Legal Basis for Data Processing

  1. Personal data of candidates are processed based on the candidate’s consent (Art. 6(1)(a) GDPR) and for the purpose of contract performance (Art. 6(1)(b) GDPR).
  2. Personal data of clients are processed for the purpose of contract performance (Art. 6(1)(b) GDPR) and to fulfill legal obligations incumbent on the Administrator (Art. 6(1)(c) GDPR).
  3. The Administrator may also process personal data for the purpose of pursuing legitimate interests (Art. 6(1)(f) GDPR), such as protection against claims, conducting analyses and statistics, direct marketing of own services.

§4 Transfer of Personal Data

  1. Personal data of candidates may be transferred to the Administrator’s clients for the purpose of executing recruitment and outsourcing processes, in accordance with the objectives set out in §2.
  2. The Administrator may entrust the processing of personal data to third parties to the extent necessary for the provision of services by the Service, such as IT service providers, hosting, and software supporting the Service’s operations.
  3. Personal data may be transferred to state authorities based on legal provisions.
  4. The Administrator does not transfer personal data to third countries or international organizations unless necessary for contract performance, and the data subject has been informed of this.

§5 Data Retention Period

  1. Personal data of candidates are stored for the period necessary to achieve the purposes for which they were collected, but no longer than 2 years from the date of their acquisition, unless the candidate consents to further processing.
  2. Personal data of clients are stored for the duration of the contract and after its termination for the period required by law or necessary to pursue claims.

§6 User Rights

  1. Every user has the right to:
    • Access their personal data
    • Rectify personal data
    • Delete personal data („right to be forgotten”)
    • Restrict the processing of personal data
    • Data portability
    • Object to the processing of personal data
    • Withdraw consent to the processing of personal data at any time, without affecting the lawfulness of processing based on consent before its withdrawal
  2. Candidates may submit requests to delete their personal data via email: job@gorilla-hr.com. The Administrator is obliged to delete the data within 14 days of receiving the request.
  3. To exercise the above rights, the user can contact the Administrator via email: yourteam@gorilla-hr.com.

§7 Data Security

  1. The Administrator applies appropriate technical and organizational measures to protect personal data against accidental or unlawful destruction, loss, modification, unauthorized disclosure, or access.
  2. Access to personal data is granted only to persons authorized by the Administrator, who are obliged to maintain confidentiality.

§8 Cookies

  1. The Service uses cookies to ensure proper operation and to analyze statistics related to the use of the Service.
  2. The user can change their browser settings regarding cookies at any time. Limiting the use of cookies may affect the functionality of the Service.
  3. Detailed information regarding the cookies used is available in the Cookies Policy on the Service.

§9 Changes to the Privacy Policy

  1. The Administrator reserves the right to change this Privacy Policy. Changes come into force within 14 days of their publication on the Service.
  2. Users who do not accept changes to the Privacy Policy have the right to stop using the Service.

§10 Final Provisions

  1. In matters not regulated by this Privacy Policy, the provisions of Polish law shall apply.
  2. Any disputes arising from the use of the Service will be resolved by the court having jurisdiction over the Administrator’s registered office.