Codari Privacy Policy

Data Controller

The controller of your personal data is Codari Sp. z o.o., headquartered in Łódź at Al. Kościuszki 80/82, unit 301, 90-437 Łódź. You can contact us via email at kontakt@codari.pl or by phone at +48 453 278 805.

What Data Do We Collect?

We may process the following types of personal data if you choose to provide them when using our website or services:

• Name and surname,
• Email address,
• Phone number,
• IP address and technical data about your device (e.g., browser, operating system),
• Website activity data (e.g., cookies).

Data Collected Through Contact Forms

What data do we collect?

When you fill in the contact form on our website, we may collect the following data:

• Name and surname,
• Email address,
• Phone number,
• Message content,
• Other data you choose to share with us.

For what purpose do we process this data?

Data submitted via contact forms is processed in order to:

• Respond to your inquiry,
• Present our service offer,
• Facilitate further communication related to your inquiry.

Legal basis for data processing

The data processing is based on:

• Article 6(1)(b) of GDPR – to take action at your request before concluding a contract,
• Article 6(1)(f) of GDPR – under our legitimate interest, which is handling inquiries and communicating with potential clients.

Is providing the data mandatory?

Providing the data is voluntary, but without the fields marked as required in the form we will not be able to respond to your inquiry.

How long do we store data?

Data submitted via the form is stored for as long as necessary to handle your inquiry and, if there is no further cooperation, for no longer than 12 months after the correspondence ends, unless longer storage is necessary to establish, exercise or defend legal claims.

Your rights

You have the right to access, rectify, erase, restrict the processing of, and port the data submitted through the form. To do so, please contact us at kontakt@codari.pl.

Right to object

You have the right to object at any time, on grounds relating to your particular situation, to the processing of your data based on our legitimate interest (Article 6(1)(f) of GDPR; Article 21 of GDPR). You can submit your objection to kontakt@codari.pl.

Candidate Data — Recruitment Process

What data do we collect?

When you apply for a position at Codari, we may process the following personal data:

• Name and surname,
• Email address,
• Phone number (if provided),
• Data contained in your CV and cover letter (education, professional experience, skills, certificates),
• LinkedIn profile (if provided),
• Other data the candidate chooses to include in the application.

For what purpose do we process this data?

Candidate data is processed in order to:

• Carry out the recruitment process for the position indicated in the job advertisement,
• Assess the candidate's qualifications and fit for the position,
• Contact the candidate about the course of the recruitment,
• Conduct future recruitment processes — only with the candidate's separate consent.

Legal basis for data processing

The data processing is based on:

• Article 6(1)(a) of GDPR — the candidate's consent, given by submitting the application,
• Article 6(1)(b) of GDPR — taking steps at the request of the data subject before concluding a contract,
• Article 6(1)(c) of GDPR — compliance with the controller's legal obligations under Article 22¹ of the Polish Labour Code (for data required by law),
• Article 6(1)(f) of GDPR — the controller's legitimate interest in establishing, exercising or defending claims related to the recruitment (storing data after it ends),
• Article 6(1)(a) of GDPR — where separate consent is given to process data for future recruitment.

How long do we store data?

• Candidate data is stored for the duration of the recruitment process and for up to 3 months after it ends (for any possible claims).
• If consent to future recruitment is given — data is stored for 12 months from the date the application was submitted.
• After these periods, the data is permanently deleted.

Your rights

As a candidate, you have the right to:

• Access your personal data,
• Rectify your data,
• Erasure of your data (“the right to be forgotten”),
• Restriction of processing,
• Data portability,
• Object to processing based on legitimate interest (Article 21 of GDPR),
• Withdraw consent at any time — without affecting the lawfulness of processing carried out before the withdrawal.

To exercise these rights, contact us at: praca@codari.pl.

Voluntary provision of data

Providing personal data is voluntary but necessary to take part in the recruitment process. Failure to provide the data required by law (Article 22¹ of the Polish Labour Code) prevents participation in the recruitment.

Server Logs

Each time you visit the website, the server automatically records technical data in its logs: IP address, date and time of the request, the address of the visited page and browser information. We process this data to keep the website secure and working properly, based on our legitimate interest (Article 6(1)(f) of GDPR).

Transfer of Data Outside the European Economic Area (EEA)

Contact form data, candidate data and server logs do not leave the European Economic Area — our hosting, CRM and email providers process them on servers in the EEA. Google services are the exception: when you play the YouTube video or consent to analytics cookies, Google may transfer data to Google LLC in the USA. Such transfers rely on the European Commission's adequacy decision for the EU-US Data Privacy Framework, under which Google LLC is certified, and on standard contractual clauses.

Withdrawal of Consent

If the processing of your data is based on consent, you have the right to withdraw it at any time. To do so, contact us via email at kontakt@codari.pl. The withdrawal of consent does not affect the lawfulness of the processing carried out before it was withdrawn.

Right to Lodge a Complaint

If you believe that the processing of your data violates GDPR regulations, you have the right to submit a complaint to the supervisory authority. In Poland, this responsibility lies with the President of the Personal Data Protection Office (PUODO), ul. Stawki 2, 00-193 Warsaw. More information can be found on the PUODO website.

Data Retention Details

• Accounting data – stored for 5 years from the end of the calendar year in which the tax payment deadline passed, in compliance with Polish tax regulations.
• Data related to forms – stored for no longer than 12 months after the correspondence ends, unless other justified circumstances extend this period (e.g., legal proceedings).

Children’s Policy

Our website and services are not intended for children under the age of 16. We do not knowingly collect data from minors without the consent of their legal guardians. If you are under 16, please contact a parent or guardian before providing your data.

Our Purpose for Processing Data

Your personal data may be processed for the following purposes:

• Service provision – enabling contact, responding to inquiries, concluding agreements, or providing quotations.
• Website traffic analysis – only after you consent to analytics cookies.
• Website security – protection against abuse and attacks (server logs).
• Legal compliance – processing data as required by applicable laws (e.g., issuing invoices).

Legal Basis for Processing

Data processing is based on:

• Article 6(1)(a) of GDPR – your consent (e.g., analytics cookies, future recruitment),
• Article 6(1)(b) of GDPR – the performance of a contract or actions at your request,
• Article 6(1)(c) of GDPR – legal obligations (e.g., document retention),
• Article 6(1)(f) of GDPR – our legitimate interests (e.g., handling inquiries, website security).

Who Do We Share Data With?

Your personal data may be shared with:

• Hetzner Online GmbH (Germany) – hosting of the website and the servers that handle the contact form,
• Zoho – the CRM system where we record inquiries from the form (data stored in an EU data centre),
• seohost.pl – email provider (kontakt@codari.pl, praca@codari.pl),
• Google Ireland Limited – when you play the YouTube video embedded on the website and, with your consent, Google analytics tools,
• Government authorities as required by law.

Entities processing data on our behalf do so under data processing agreements and ensure an adequate level of data protection.

Cookies

The website uses cookies and similar technologies that are necessary for it to work properly — these do not require your consent.

We use analytics cookies (e.g., Google Tag Manager, Google Analytics) only after you give consent in the cookie banner. You can change or withdraw your consent at any time.

The YouTube video on the website loads only after you start it, in privacy-enhanced mode (youtube-nocookie.com). You can also delete and block cookies in your browser settings.

How Do We Protect Your Data?

We take every measure to keep your data secure. This includes implementing technical and organizational safeguards, such as encrypted connections and access controls.

Changes to the Privacy Policy

This Privacy Policy may be updated in response to changes in legal regulations or our processes. Any changes will be communicated on our website. The date of the last update is provided below.

Last update of the Privacy Policy: 22.09.2026.

Contact

If you have any questions or concerns regarding your personal data, please contact us:

• Email: kontakt@codari.pl
• Phone: +48 453 278 805

We care about your privacy and thank you for placing your trust in us!