Who we are
Our website address is: www.pracomania.com or https://pracomania.com
PRIVACY POLICY
Pracomania.com
Al. Ludwika Solskiego 10 lok. 3
43-300 Bielsko-Biala, Poland
Created in accordance with the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR), as well as the Act of 10 May 2018 on personal data protection (Journal of Laws of 2018, item 1000).
Effective at Pracomania.com from 06.20.2025.
Pracomania.com., the owner of the Pracomania.com internet site, , primarily used for publishing job advertisements, makes every effort to protect the privacy of users of its services. These services are mainly dedicated to Employers and individual Users/Candidates seeking employment.
To ensure lawful, fair, and transparent processing of Users’ personal data during the use of the administrator’s services, this document, called the Privacy Policy, has been adopted.
This document provides information about what data is collected from Users, how it is used, how we will communicate with Users of our services, how Users can modify their personal data, and how Users’ personal data is secured and protected.
The Privacy Policy aims to clearly outline, among other things, how Pracomania.com. handles processed personal data and indicate the rights available to Users.
PERSONAL DATA CONTROLLER
Pracomania.com is the controller of personal data processed in connection with the use of its Services.
For more detailed information or questions regarding the processing of personal data and Users’ rights, you may contact the data controller via:
a) Contact form;
b) By mail to the controller’s registered office:
Pracomania.com
Ludwika Solskiego street, House 10, app. 3
43-300 Bielsko-Biala, Poland
c) By email: mail@pracomania.com
SCOPE OF PROCESSED PERSONAL DATA, PURPOSES OF PROCESSING, AND LEGAL BASIS
The controller provides various services to Users of the Services and processes personal data for the purposes described in this document, to varying extents and based on different legal grounds as specified in Regulation (EU) 2016/679 of 27 April 2016 (GDPR).
1. “Your Account” – Account Creation and User Identity Verification
- Purpose: Processing personal data provided by you in the registration form for Pracomania.com Services and information authenticating the User during registration or login to the Services.
- Type of Data: Identification data (name, surname), contact details (email, phone number, details of the represented company when creating an Employer account, password set by you during registration).
- Legal Basis: Necessity to perform a contract for the provision of the Account service or other services based on contracts concluded remotely between the User and the Controller (Art. 6(1)(b) GDPR) and legitimate interests pursued by the Controller (Art. 6(1)(f) GDPR).
- Data Retention Period: Data is processed for the entire period you maintain an account in our Services and use our services. After deleting your Account from our Services, data is retained for 3 years to secure, pursue, and defend claims related to the use of our Services.
2. “Contact”
- Purpose: Processing personal data provided by you in the contact form or messages sent to the Controller.
- Type of Data: Identification data (name, surname), contact details (email, phone number, details of the represented company when creating an Employer account, password set by you during registration).
- Legal Basis: Necessity to take steps prior to entering into a contract or to perform a contract concluded remotely between the User and the Controller (Art. 6(1)(b) GDPR) or necessity to pursue the legitimate interests of the Controller, i.e., fulfilling Users’ rights (Art. 6(1)(f) GDPR).
- Data Retention Period: Data is processed for the entire period you maintain an account in our Services and use our services. After deleting your Account from our Services, data is retained for 3 years to secure, pursue, and defend claims related to the use of our Services.
3. “Order Form”
- Purpose: Processing personal data provided by you in the order form for JOBS.PL Services and information authenticating the User during registration or login to the Services.
- Type of Data: Identification data (name, surname), contact details (email, phone number, details of the represented company when creating an Employer account, password set by you during registration).
- Legal Basis: Necessity to perform a contract for the provision of the Account service or other services based on contracts concluded remotely between the User and the Controller (Art. 6(1)(b) GDPR) and legitimate interests pursued by the Controller (Art. 6(1)(f) GDPR).
- Data Retention Period: Data is processed for the entire period you maintain an account in our Services and use our services. After deleting your Account from our Services, data is retained for 3 years to secure, pursue, and defend claims related to the use of our Services.
4. “Newsletter” – Including Account Creation and User Authentication in the Services
- Purpose: Processing personal data provided by you in the Newsletter for Pracomania.com Services and information authenticating the User during registration or login to the Services.
- Type of Data: Identification data (name, surname), contact details (email, phone number, details of the represented company when creating an Employer account, password set by you during registration, publication history).
- Legal Basis: Necessity to perform a contract for the provision of the Account service or other services based on contracts concluded remotely between the User and the Controller (Art. 6(1)(b) GDPR) and legitimate interests pursued by the Controller (Art. 6(1)(f) GDPR).
- Data Retention Period: Data is processed for the entire period you maintain an account in our Services and use our services. After deleting your Account from our Services, data is retained for 3 years to secure, pursue, and defend claims related to the use of our Services.
5. Provision of Services and Functionalities After Account Creation
- Purpose: Processing personal data to enable Users (Employers and Candidates) to manage their profiles, post job advertisements, apply for job offers, and update CVs.
- Type of Data: For Employers and Candidates with accounts in the Service: identification data (name, surname), contact details (email, phone number, details of the represented company when creating an Employer account, login, password set by you during registration, history of job postings and applications).
- Legal Basis: Necessity to perform a contract for the provision of the Account service or other services based on contracts concluded remotely between the User and the Controller (Art. 6(1)(b) GDPR) and legitimate interests pursued by the Controller (Art. 6(1)(f) GDPR).
- Data Retention Period: Data is processed for the entire period you maintain an account in our Services and use our services. After deleting your Account from our Services, data is retained for 3 years to secure, pursue, and defend claims related to the use of our Services.
6. Sharing Data with Employers for Recruitment Purposes
- Purpose: Processing personal data to forward candidate applications and recommendations to Employers.
- Type of Data: Identification data (name, surname), contact details (email, residential address, phone number), information included in the CV, professional experience summary, dates, employer name, courses, training, school and university names, start and end dates, education level, field and specialization, type of education, position title, place and periods of employment, job responsibilities, references, cover letter.
- Legal Basis: Necessity to perform a contract concluded remotely between the User and the Controller (Art. 6(1)(b) GDPR) and User consent (Art. 6(1)(a) GDPR).
- Data Retention Period: Data is processed for 6 months after the end of the recruitment process and no longer than 2 years from the receipt of your application.
7. Job Offer Publication
- Purpose: Processing data to make job offers available to registered Service Users.
- Type of Data: Identification data (company name, contact person’s name and surname, email address, phone number, login, password set by you during registration).
- Legal Basis: Necessity to perform a contract for the provision of the Account service or other services based on contracts concluded remotely between the User and the Controller (Art. 6(1)(b) GDPR) and legitimate interests pursued by the Controller (Art. 6(1)(f) GDPR).
- Data Retention Period: Data is processed for the entire period you maintain an account in our Services and use our services. After deleting your Account from our Services, data is retained for 3 years to secure, pursue, and defend claims related to the use of our Services.
8. CV Builder
- Purpose: Processing personal data to create a professional CV at your request.
- Type of Data: Identification data (name, surname, email address, phone number), professional experience summary, dates, employer name, courses, training, school and university names, start and end dates, education level, field and specialization, type of education, position title, place and periods of employment, job responsibilities, references.
- Legal Basis: Legitimate interests pursued by the Controller, i.e., providing the CV creation service (Art. 6(1)(f) GDPR).
- Data Retention Period: Data is processed for the entire period you maintain an account in our Services and use our services. After deleting your Account from our Services, data is retained for 3 years to secure, pursue, and defend claims related to the use of our Services.
9. Direct Marketing of the Controller’s Products and Services
- Purpose: Processing personal data provided by you in the registration form for Pracomania.com Services with specified offer preferences.
- Type of Data: Contact details (email, phone).
- Legal Basis: Consent (Art. 6(1)(a) GDPR) and necessity to pursue the legitimate interests of the Controller, i.e., direct marketing of its products and services (Art. 6(1)(f) GDPR).
- Data Retention Period: Data is processed for the entire period you maintain an account in our Services and use our services. After deleting your Account from our Services, data is retained for 3 years to secure, pursue, and defend claims related to the use of our Services.
10. User Data Analysis
- Purpose: Statistical analysis of Service usage (e.g., number of applications, popularity of offers), service development, and tailoring marketing content.
- Type of Data: Analytical data (IP address, browser data, location data), data on User activity in the Service.
- Legal Basis: Necessity to pursue the legitimate interests of the Controller, i.e., direct marketing of its products and services (Art. 6(1)(f) GDPR).
- Data Retention Period: Data is processed for the entire period you maintain an account in our Services and use our services. After deleting your Account from our Services, data is retained for 3 years to secure, pursue, and defend claims related to the use of our Services.
11. Contracts and Settlements for Contract Fulfillment with Clients
- Purpose: Processing your personal data to issue invoices or accounting documents, conclude, perform, and settle contracts, fulfill our tax and accounting obligations related to proper contract execution, debt collection, and establishing, pursuing, or defending against claims arising from non-performance or improper performance of contracts.
- Type of Data: Personal data (as an Employer/Client/representative) provided during order placement/contract conclusion, registration form, including NIP, REGON, name, surname, correspondence address, email address, phone number, position, and workplace.
- Legal Basis: Necessity to perform a contract (Art. 6(1)(b) GDPR), legitimate interests pursued by the Controller, i.e., establishing and maintaining business relationships with Clients (Art. 6(1)(f) GDPR), legal obligations incumbent on JOBS.PL (Art. 6(1)(c) GDPR), and tax regulations (e.g., Act of 29 August 1997 and Act of 29 September 1994 on accounting). For sole proprietorships, Art. 6(1)(b) GDPR applies.
- Data Retention Period: For purposes related to contract conclusion and execution, including debt collection and claim pursuit, personal data is processed for the duration of the contract and for 3 years from the date of contract expiration or termination. In specific cases, data may be processed longer if required by law and tax regulations, for 5 years from the end of the calendar year in which the tax payment deadline for Pracomania.com expired.
12. Claim Pursuit Related to Contract Execution
- Purpose: Processing personal data provided in the registration form for Pracomania.com, evidence of consents for data processing for evidentiary purposes, securing claims, and complying with legal regulations by the Service, e.g., related to data archiving and retention.
- Type of Data: Identification data (name, surname), contact details (email, phone number, details of the represented company when creating an account, password set by you during registration, documentation related to applications, e.g., application archiving, evidence of consents for data processing).
- Legal Basis: Necessity to perform a contract for the provision of the Account service or other services based on contracts concluded remotely between the User and the Controller (Art. 6(1)(b) GDPR) and legitimate interests pursued by the Controller (Art. 6(1)(f) GDPR).
- Data Retention Period: Data is processed for the entire period you maintain an account in our Services and use our services. After deleting your Account from our Services, data is retained for 3 years to secure, pursue, and defend claims related to the use of our Services.
13. Evidential Purpose Related to Contract Execution
- Purpose: Processing personal data to handle potential complaints and protect against claims from service recipients, including consumers.
- Type of Data: Personal data provided in the registration form, identification data (name, surname), address, contact details (email, phone number, details of the represented company when creating an Employer account, password set by you during registration).
- Legal Basis: Necessity to pursue the legitimate interests of the Controller, i.e., retaining data related to contract execution (Art. 6(1)(f) GDPR).
- Data Retention Period: For purposes related to contract conclusion and execution, including debt collection and claim pursuit, personal data is processed for the duration of the contract and for 3 years from the date of contract expiration or termination. In specific cases, data may be processed longer if required by law and tax regulations, for 5 years from the end of the calendar year in which the tax payment deadline for Pracomania.com expired.
14. Handling Complaints, Requests, and Service Analysis
- Purpose: Processing personal data to handle potential complaints and claims, protect against claims from service recipients, including consumers, and data provided by the User in the registration form or other correspondence.
- Type of Data: Personal data provided in the registration form, identification data (name, surname), resources, contact details (email, phone number, details of the represented company when creating an Employer account, password set by you during registration).
- Legal Basis: Necessity to pursue the legitimate interests of the Controller, i.e., fulfilling Users’ rights (Art. 6(1)(f) GDPR).
- Data Retention Period: For purposes related to contract conclusion and execution, including debt collection and claim pursuit, personal data is processed for the duration of the contract and for 3 years from the date of contract expiration or termination. In specific cases, data may be processed longer if required by law and tax regulations, for 5 years from the end of the calendar year in which the tax payment deadline for Pracomania.com expired.
15. Services Not Requiring Account Creation
- Our Services: Processing your personal data to provide services that do not require account creation, such as job offer subscriptions, job offer search engine, CV templates, documents, and guides.
- Type of Data: Personal data related to your activity in the Services, i.e., data on viewed job and education offers, session data, your device, operating system, browser, location, and unique ID. When using the chatbot in the Messenger app, we process data shared in your Facebook profile (e.g., profile picture) and any data provided in messages sent via the Messenger app.
- Legal Basis: Necessity to perform a contract for the provision of electronic services (Art. 6(1)(b) GDPR).
16. Services and Functionalities Requiring Account Creation
- Our Services and Functionalities: Processing your personal data to provide services requiring account creation and account functionalities, such as applying with a Candidate Profile, recommended job offers, application status notifications, filling the Profile with User data, messages, saved job offers, application history, profile sharing, saved searches, applying for job offers, CV builder.
- Type of Data: Personal data provided in the registration form, forms facilitating Candidate Profile completion, application forms, and data related to your activity in the Services, i.e., data on searched and viewed job offers, applied job offers, logins, Profile or CV updates, as well as your IP address, session data, device, operating system, browser, location, and unique ID.
- Note: Providing certain data is a condition for using specific services and account functionalities. Apart from optional data, mandatory data must be provided; otherwise, certain services and functionalities of the Service will not be available.
SHARING PERSONAL DATA – CATEGORIES OF RECIPIENTS
1. Employers
Personal data is shared with Employers using the Services. Employers independently determine the purposes and methods of processing this data and are not subject to Pracomania.com.’s instructions in this regard. Data sharing is based on User consent.
2. Service Providers
Personal data is transferred to service providers performing services necessary for operating the Services. These providers are subject to our instructions regarding the purposes and methods of processing this data. Our providers are based in Poland and the European Economic Area (EEA).
3. Public Authorities
Personal data will also be transferred to authorized public authorities, particularly courts, prosecutors, police, the President of the Personal Data Protection Office (formerly: General Inspector for Personal Data Protection), the President of the Office of Competition and Consumer Protection, and others, upon their request for such data.
4. Cookies
If information contained in cookies is transferred to third parties, the methods of processing data in cookies are described in the Cookie Policy.
PERSONAL DATA RETENTION PERIOD
The basic retention period for personal data corresponds to the period of maintaining an Account in the Service for the purposes of providing the Account service and related functionalities and other services, and for 3 years after account closure. For potential claim pursuit, evidential purposes, and handling complaints and requests, personal data is retained in a limited scope for the period corresponding to the possibility of using these measures, but no longer than 5 years. After this period, the data is deleted from the Controller’s database. The Controller will cease processing data used for marketing purposes if the User objects to the processing of their data for these purposes or if such processing is no longer necessary for the Controller.
USER RIGHTS REGARDING PERSONAL DATA PROCESSING
I. Consent
According to Art. 4(11) GDPR, consent is a voluntary, specific, informed, and unambiguous indication of the data subject’s wishes, by which they, through a statement or clear affirmative action, consent to the processing of their personal data.
II. Right to Withdraw Consent
The User has the right to withdraw any consent given at the time of registration to the Service or during the use of specific services and functionalities offered in the Service. Withdrawal of consent takes effect from the moment of withdrawal. Withdrawal of consent does not affect the lawfulness of processing carried out by the Controller before its withdrawal.
III. Right to Object to Data Use
The User has the right to object at any time to the use of their personal data if the Controller processes the data based on legitimate interests, e.g., for marketing products or services. A justified objection will result in the deletion of personal data unless the Controller processes the data simultaneously for other purposes and on other justified legal bases (Legal basis: Art. 21 GDPR).
IV. Right to Erasure (‘Right to Be Forgotten’)
The User has the right to request the deletion of all or some personal data. Requesting the deletion of personal data provided during registration to the Services is equivalent to requesting the deletion of the Account in the Service(s). The User has the right to request the deletion of personal data if:
- They withdrew consent to the extent that the personal data was processed based on their consent;
- The personal data is no longer necessary for the purposes for which it was collected or processed;
- They objected to the use of their data for marketing purposes;
- The personal data is processed unlawfully.
Requesting the deletion of personal data in connection with an objection or withdrawal of consent means the Controller may retain personal data only to the strictly necessary extent for establishing, pursuing, or defending claims (Art. 126(1) of the Code of Civil Procedure).
(Legal basis: Art. 17 GDPR).
V. Right to Restrict Data Processing
The User has the right to request the restriction of personal data processing. Upon such a request, the Controller will suspend further data processing until the User’s request is considered. The right to request the restriction of data use applies in the following situations:
- Contesting the accuracy of personal data – restriction applies for the time necessary to verify data accuracy, but no longer than 7 days;
- Unlawful data processing, and instead of deletion, the User requests restriction of data use;
- The purposes of processing no longer apply, except for establishing, pursuing, or defending claims;
- An objection to data use has been raised – restriction applies for the time necessary to consider whether the User’s specific situation requiring protection of their interests, rights, and freedoms outweighs the Controller’s interests.
(Legal basis: Art. 18 GDPR).
VI. Right of Access to Data
The User has the right to obtain confirmation from the Controller that their personal data is being processed, including the right to:
- Access their personal data;
- Obtain information about the purposes of processing, categories of processed personal data, recipients or categories of recipients of this data, the planned data retention period or criteria for determining this period, rights under GDPR, the right to lodge a complaint with a supervisory authority, the source of the data, automated decision-making, including profiling, and safeguards applied in connection with the transfer of this data outside the European Union;
- Obtain a copy of their personal data.
(Legal basis: Art. 15 GDPR).
VII. Right to Rectify Data
The User has the right to rectify (if inaccurate) and complete (if incomplete) the personal data provided by them.
(Legal basis: Art. 16 GDPR).
VIII. Right to Data Portability
The User has the right to receive their personal data and send it to another controller of their choice. The personal data will be provided to the User in a structured, commonly used, machine-readable format. The User has the right to request that the personal data be transferred directly by the Controller to another controller, where technically feasible.
(Legal basis: Art. 20 GDPR).
IX. Handling User Requests
The Controller makes every effort to fulfill Users’ rights in the shortest possible time. However, due to the often complex nature or volume of submitted requests, the Controller responds promptly, but no later than one month from the date of recording the User’s request. If a response cannot be provided within this period, the Controller will inform the User and specify a new response deadline.
If the User believes that their right to personal data protection or other GDPR rights have been violated, they have the right to lodge a complaint with the President of the Personal Data Protection Office.
TECHNICAL MATTERS
The Controller strives to ensure the highest level of security for its Users and to provide a fully professional service facilitating professional work. Our Services use, among other things, encrypted data transmission (SSL).
Any questions, concerns, or complaints regarding the Privacy Policy, the Terms of Service for electronic services within the Services, or the use of the Services should be directed to: mail@pracomania.com
