Privacy policy

This page explains what personal data the STARKO employment agency website collects, why we need it, who we share it with and what rights you have. The policy meets the requirements of the EU General Data Protection Regulation (GDPR, known in Poland as RODO).

1. Who is responsible for your data

The data controller is STARKO Sp. z o.o., ul. Filipinki 6, 02-204 Warszawa, KRS 0000655240, NIP 5342536686.

For any questions about your data, write to rodo@starko.pl, call +48 22 266 22 35 or send a letter to our office address.

We have not appointed a Data Protection Officer (DPO), as the law does not require us to. Please use the contact details above for any questions.

2. What data we collect

When you send a request through the website:

• employers: first name and surname, company name, phone number, email address (if provided), how many people you need, your message;
• workers: first name, phone number, the work you are interested in, citizenship and where you are now (if provided), and consent to future recruitment (if you tick it).

Together with the request, we receive the address of the page it was sent from and where you came to the website from (for example, a Google ad). This helps us see which advertising works.

When you call us, email us or write to our Telegram bot, we see your phone number, email address or username and what you wrote to us. Data in Telegram is also processed by Telegram itself under its own rules.

When you simply browse the website, the server records technical data: IP address, browser type, time and address of the request. This data is needed for the security and operation of the website.

3. Why and on what legal basis

• To respond to a request and prepare an offer for an employer – Article 6(1)(b) GDPR (steps taken at your request before entering into a contract) and Article 6(1)(f) GDPR (our legitimate interest: communicating with company representatives).
• To find you a job and carry out recruitment, including putting you forward to a client company – Article 6(1)(b) GDPR and, where the law requires it (for example, to legalise the employment of foreigners), Article 6(1)(c) GDPR (legal obligation).
• To offer you other jobs later – Article 6(1)(a) GDPR, that is, only if you ticked the consent box in the form.
• To protect the website and forms from spam and attacks – Article 6(1)(f) GDPR (our legitimate interest).
• To count visits and measure advertising (Google Analytics, Google Ads) – Article 6(1)(a) GDPR, that is, only with your consent in the cookie banner.
• To show where our office is (Google map on the Contact page) – Article 6(1)(f) GDPR (our legitimate interest).
• To protect our rights in the event of a dispute – Article 6(1)(f) GDPR.

4. How long we keep data

• an employer’s request that did not lead to cooperation – 12 months from the last contact;
• candidate data – until the end of the recruitment process or, if you agreed to future recruitment, 12 months from your request or until you withdraw your consent;
• data related to a contract – as long as the law requires (for example, tax and employment records);
• technical server logs – up to 30 days;
• Google Analytics data – 14 months;
• markers in your browser showing which ad brought you to the website – until the end of your visit or, with your consent to advertising cookies, 90 days.

5. Who we share data with

We do not sell your data. We share it only with those who help us run our business, and when the law requires it:

• DigitalOcean – the hosting provider whose server runs the website;
• IT service providers: email, the CRM in which we manage requests, automation systems;
• Cloudflare – checking that a form is filled in by a person, not a bot;
• Google – analytics and advertising (only with your consent) and the map on the Contact page;
• client companies – a candidate’s data, when we put them forward for a job with that company;
• accountants, lawyers and public authorities, such as the voivodeship office or the district labour office (powiatowy urząd pracy), when the law requires it.

All our providers process data only on our instructions and under a contract with us.

6. Transfers outside the EU

DigitalOcean, Google and Cloudflare are US companies, so data may be transferred to the United States. Such transfers are based on the European Commission’s adequacy decision on the EU-US Data Privacy Framework or on standard contractual clauses approved by the Commission.

7. Your rights

You have the right to:

• find out what data we process about you and obtain a copy of it;
• have inaccurate data corrected;
• request erasure of your data;
• restrict processing;
• receive your data in a convenient format and transfer it to another controller;
• object to processing based on our legitimate interest;
• withdraw your consent at any time. This does not affect the lawfulness of processing carried out before the withdrawal.

To exercise your rights, write to rodo@starko.pl. If you believe we are in breach of the GDPR, you can lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl).

8. Do you have to provide your data?

No, it is voluntary. However, without your name and phone number we cannot respond to your request.

We do not make decisions about you by automated means, that is, by software alone without human involvement.

9. Cookies and similar technologies

Necessary. The website stores in your browser what you chose in the cookie banner and, until the end of your visit, which ad brought you here, so that this can be sent along with your request. If you have closed the hint about another language version of the site, your browser remembers not to show it again. Cloudflare checks technical browser data to filter out spam in forms. Without these, the website would not work properly, so we do not ask for consent here.

Analytics and advertising. Google Analytics and Google Ads cookies are set only when you click “Accept” in the cookie banner. Likewise, the website remembers for 90 days which ad brought you here only if you consent to advertising cookies. So that Google counts a request only once, after you send it your browser remembers until the end of your visit that it was sent (without any of your data). You can change your choice at any time using the “Cookie settings” link in the website footer.

Map. The Contact page has an embedded Google map. When it loads, Google receives your IP address and may set its own cookies under its own rules.

10. Changes to this policy

When something important changes, we update this page. The date of the last change is shown at the top.