Privacy Policy

Last Updated: May 17, 2025

1. Introduction and Who We Are

This Privacy Policy describes how “SUKCES” sp. z o.o., with its registered office in Warsaw, Poland ("SUKCES," "we," "us," or "our"), collects, uses, shares, and protects your personal data. We are committed to protecting your privacy and processing your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and applicable Polish data protection laws.

This policy applies to personal data we collect through our website [Insert Your Website Address if applicable, otherwise state "our website"], when you use our services (including recruitment, employee leasing, and business support), and in other interactions with us.

For information on how we use cookies, please refer to our separate Cookie Policy.

Data Controller:

„SUKCES” Limited liability company located at the address ul. Marcina Kasprzaka 29A, lok. 917, 01-234 Warsaw, company’s register (national court register) nr 0000196658, NIP: 6692363608, REGON: 331425631

2. Data Protection Officer (DPO):

Mobile: +48 667 677 237

e-mail: iodo@workforsukces.com

We have appointed a Data Protection Officer (Inspektor Ochrony Danych) who is responsible for overseeing questions in relation to this Privacy Policy and our data protection practices. If you have any questions, concerns, or requests regarding your personal data, please contact our DPO:

Email: iodo@workforsukces.com Postal Address: ul. Marcina Kasprzaka 29A, lok. 917, 01-234 Warsaw

3. What Personal Data We Collect

We may collect and process various types of personal data depending on your interaction with us, including but not limited to:

  • Contact Data: Name, surname, email address, phone number, postal address, communication preferences.

  • Data from Forms (Website Inquiries): Information you provide when filling out forms on our website, such as your contact details and the content of your message/inquiry.

  • Recruitment Data (for Candidates): CV/resume, cover letter, employment history, education, qualifications, skills, references, interview notes, salary expectations, information from public professional profiles (e.g., LinkedIn), and any other information you choose to provide us in connection with job applications or our recruitment services.

  • Employee Leasing Data (for Leased Employees): In addition to recruitment data, this may include data necessary for employment and payroll, such as bank account details, tax identification number (NIP, PESEL), social security information, work permits, attendance records, performance information, and other data required by labor law.

  • Client and Supplier Data: Contact details of individuals working for our clients and suppliers, billing information, contract details, and communication records.

  • Technical Data (if applicable, beyond essential cookies covered in Cookie Policy): This might include IP addresses logged for security purposes, system logs. (Be specific here based on actual practices).

4. How We Collect Your Personal Data

We collect personal data in the following ways:

  • Directly from You: When you fill out forms on our website, apply for a job, communicate with us (via email, phone, or in person), enter into a contract with us, or use our services.

  • From Third Parties (primarily for Recruitment):

    • With your consent, from referees you provide.

    • From publicly available sources (e.g., professional networking sites like LinkedIn) for the purpose of identifying potential candidates for roles we are recruiting for.

    • From client companies who engage us for recruitment or employee leasing services.

  • Automatically: Some limited technical data may be collected automatically when you interact with our website (refer to our Cookie Policy for details on cookies; this section addresses other potential automatic collections if any).

5. Legal Basis and Purposes for Processing Your Personal Data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances and for the following purposes:

  • Consent (Article 6(1)(a) GDPR):

    • Processing Data from Forms: When you voluntarily submit a form on our website, you consent to us processing the provided data solely to establish contact with you and respond to your inquiry.

    • Recruitment Activities: When you apply for a specific role or submit your CV for general consideration, or when we ask for your consent for specific processing activities (e.g., retaining your CV for future opportunities beyond a specific application).

    • Marketing Communications: If we engage in direct marketing, we will do so based on your explicit consent.

  • Contractual Necessity (Article 6(1)(b) GDPR):

    • To perform a contract we are about to enter into or have entered into with you (e.g., providing our business support services, recruitment services, or for employment contracts in employee leasing).

    • To manage our relationship with you as a client, supplier, candidate, or leased employee.

  • Legal Obligation (Article 6(1)(c) GDPR):

    • To comply with our legal and regulatory obligations (e.g., labor law, tax law, social security obligations, accounting requirements).

  • Legitimate Interests (Article 6(1)(f) GDPR):

    • Recruitment Activities: Sourcing potential candidates from publicly available professional sources for specific roles we are trying to fill for our clients. We will always inform you at the first point of contact about the source of your data and your rights.

    • Managing our business operations, including internal administration, IT security, and service improvement (where this does not override your interests or fundamental rights and freedoms).

    • Responding to general inquiries where consent is not the primary basis but fulfilling the request is in our legitimate interest and yours.

    • Protecting our legal rights and interests.

We will only use your personal data for the purposes for which we collected it, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose.

6. Data Sharing and Disclosure (Recipients of Personal Data)

We may share your personal data with the following categories of recipients, where necessary and legally permitted:

  • Internally: With authorized personnel within “SUKCES” sp. z o.o. who need access to the data to perform their duties.

  • Client Companies: If you are a candidate for a role or a leased employee, we will share your relevant personal data with the client company for whom we are providing recruitment or employee leasing services. We will inform you before sharing your data with a specific client.

  • Service Providers (Data Processors): We may engage third-party service providers to perform functions on our behalf, such as IT hosting and maintenance, payroll processing, accounting services, legal services. These providers are contractually bound to protect your data and process it only in accordance with our instructions.

  • Public Authorities: If required by law, court order, or other legal process, we may disclose your personal data to public authorities (e.g., tax authorities, social security institutions, law enforcement).

  • Professional Advisors: Our lawyers, bankers, auditors, and insurers, where necessary in the course of the professional services that they render to us.

We do not sell your personal data to third parties.

7. International Data Transfers

“SUKCES” sp. z o.o. primarily processes and stores personal data within the European Economic Area (EEA). If we need to transfer your personal data outside the EEA (e.g., if a client or service provider is located outside the EEA), we will ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

  • The country has been deemed to provide an adequate level of protection for personal data by the European Commission.

  • We use specific contracts approved by the European Commission which give personal data the same protection it has in Europe (Standard Contractual Clauses - SCCs).

  • For transfers to the USA, where applicable, if the recipient is part of a framework recognized by the European Commission as providing adequate protection.

You can request further information about the safeguards we use for international transfers.

8. Data Retention

We will retain your personal data only for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process it, whether we can achieve those purposes through other means, and the applicable legal requirements.

  • Data from Forms: Retained for the period necessary to handle your inquiry and for any necessary follow-up, or until you request its deletion or withdraw consent if applicable.

  • Recruitment Data: If you apply for a specific role and are unsuccessful, we may ask for your consent to retain your data for a specified period for future suitable vacancies. If you do not consent, or after this period, your data will be deleted or anonymized unless there is a legal reason to keep it. Data for successful candidates who become employees will be retained as part of their employment record.

  • Employee Leasing Data: Retained for the duration of the employment relationship and thereafter for the period required by labor, tax, and social security laws.

Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymized.

9. Your Data Protection Rights

Under GDPR, you have the following rights regarding your personal data:

  • Right of Access: To request access to your personal data and information about how we process it.

  • Right to Rectification: To request correction of inaccurate or incomplete personal data.

  • Right to Erasure ("Right to be Forgotten"): To request deletion of your personal data under certain conditions (e.g., if it's no longer necessary for the purposes for which it was collected, or if you withdraw consent).

  • Right to Restriction of Processing: To request that we restrict the processing of your personal data under certain conditions.

  • Right to Data Portability: To request to receive your personal data in a structured, commonly used, and machine-readable format, and to have it transmitted to another controller where technically feasible, if the processing is based on consent or a contract and is carried out by automated means.

  • Right to Object: To object to the processing of your personal data where we are relying on legitimate interests as our legal basis, under certain conditions. You also have the absolute right to object to processing for direct marketing purposes.

  • Right to Withdraw Consent: If we are processing your personal data based on your consent, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.

  • Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work, or place of the alleged infringement. The supervisory authority in Poland is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych - UODO).

    • Address: Urząd Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, Poland (from July ‘25 new address ul. Moniuszki 1A, 00-014 Warszawa)

    • Website: www.uodo.gov.pl

10. How to Exercise Your Rights

To exercise any of your rights, or if you have any questions or concerns about our use of your personal data, please contact our Data Protection Officer:

Email: iodo@workforsukces.com

Postal Address: office@workforsukces.com

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We will try to respond to all legitimate requests within one month.

11. Security of Your Data

We have implemented appropriate technical and organizational security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed. These measures include [Be general but truthful, e.g., data encryption where appropriate, access controls, staff training on data protection, secure IT infrastructure].

We limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know. They will only process your personal data on our instructions and are subject to a duty of confidentiality.

We have procedures in place to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service offerings. We will post any changes on this page and update the "Last Updated" date at the top of this policy. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

13. Contact Us

If you have any questions about this Privacy Policy or our data protection practices, please contact us or our Data Protection Officer:

„SUKCES” Limited liability company

located at the address ul. Marcina Kasprzaka 29A, lok. 917, 01-234 Warsaw,

company register nr 0000196658, NIP: 6692363608, REGON: 331425631

Email: office@workforsukces.com

Mobile: +48 730 241 504

Data Protection Officer:

Email: iodo@workforsukces.com

Mobile: +48 667 677 237

“Cookie” Policy

Last Updated: [May 17, 2025]

1. Introduction

This Cookie Policy explains how “Sukces” sp. z o.o./workforsukces.com ("we," "us," or "our") uses cookies and similar technologies to recognize you when you visit our website - workforsukces.com. It explains what these technologies are and why we use them, as well as your rights to control our use of them.

Insofar as cookies collect personal data, this policy should be read in conjunction with our Privacy Policy, which explains how we process personal data.

2. What are Cookies?

Cookies are small data files that are placed on your computer or mobile device when you visit a website. Cookies are widely used by website owners in order to make their websites work, or to work more efficiently, as well as to provide reporting information.

Cookies set by the website owner (in this case, “Sukces” sp. z o.o./workforsukces.com) are called "first-party cookies." Cookies set by parties other than the website owner are called "third-party cookies." Third-party cookies enable third-party features or functionality to be provided on or through the website (e.g., advertising, interactive content, and analytics). The parties that set these third-party cookies can recognize your computer both when it visits the website in question and also when it visits certain other websites.

3. Why Do We Use Cookies?

We use first-party and/or third-party cookies for several reasons. Some cookies are required for technical reasons in order for our website to operate, and we refer to these as "essential" or "strictly necessary" cookies. Other cookies enable us to track and target the interests of our users to enhance the experience on our online properties. Third parties serve cookies through our website for analytics, and other purposes. This is described in more detail below.

4. What Types of Cookies Do We Use and How Do We Use Them?

The specific types of first and third-party cookies served through our website and the purposes they perform are described below (please note that the specific cookies served may vary depending on the specific online properties you visit):

  • Essential Website Cookies: These cookies are strictly necessary to provide you with services available through our website and to use some of its features, such as access to secure areas. Because these cookies are strictly necessary to deliver the website to you, you cannot refuse them without impacting how our website functions. You can block or delete them by changing your browser settings, as described below under the heading "How can I control cookies?"

  • Performance and Functionality Cookies: These cookies are used to enhance the performance and functionality of our website but are non-essential to their use. However, without these cookies, certain functionality (like remembering your preferences) may become unavailable.

  • Analytics and Customization Cookies: These cookies collect information that is used either in aggregate form to help us understand how our website is being used or how effective our marketing campaigns are, or to help us customize our website for you.

5. How Can I Control Cookies?

You have the right to decide whether to accept or reject cookies.

6. What About Other Tracking Technologies, Like Web Beacons?

Cookies are not the only way to recognize or track visitors to a website. We may use other, similar technologies from time to time, like web beacons (sometimes called "tracking pixels" or "clear gifs"). These are tiny graphics files that contain a unique identifier that enables us to recognize when someone has visited our website or opened an email including them. This allows us, for example, to monitor the traffic patterns of users from one page within a website to another, to deliver or communicate with cookies, to understand whether you have come to the website from an online advertisement displayed on a third-party website, to improve site performance, and to measure the success of email marketing campaigns. In many instances, these technologies are reliant on cookies to function properly, and so declining cookies will impair their functioning.

7. Updates to This Cookie Policy

We may update this Cookie Policy from time to time in order to reflect, for example, changes to the cookies we use or for other operational, legal, or regulatory reasons. Please therefore re-visit this Cookie Policy regularly to stay informed about our use of cookies and related technologies.

The date at the top of this Cookie Policy indicates when it was last updated.

8. Where Can I Get Further Information?

If you have any questions about our use of cookies or other technologies, please email us at:

Data Protection Officer Email: iodo@workforsukces.com

Mobile: +48 667 677 237

For general inquiries, you can also contact us at:

„SUKCES” Limited liability company

located at the address ul. Marcina Kasprzaka 29A, lok. 917, 01-234 Warsaw,

company’s register (national court register) nr 0000196658, NIP: 6692363608, REGON: 331425631

Email: office@workforsukces.com

Mobile: +48 730 241 504