The data controller responsible for your personal data is:
HireHub sp. z o.o. is a licensed employment agency registered under Polish law (PKD 78.10), authorised to recruit and deploy workers across the European Union.
When you contact us as a potential or existing employer client, we may collect:
When you register as a candidate seeking work in the EU, we may collect:
When you visit www.hirehubtalent.eu, we may collect technical data including IP address, browser type, pages visited, and time spent on site through standard server logs and analytics tools.
| Purpose | Legal Basis (GDPR Art. 6) |
|---|---|
| Processing employer enquiries and preparing proposals | Art. 6(1)(b) — Performance of a contract |
| Candidate registration, matching, and placement | Art. 6(1)(b) — Performance of a contract / Art. 6(1)(a) — Consent |
| Compliance with Polish Labour Code and EU directives | Art. 6(1)(c) — Legal obligation |
| Sending service updates and relevant communications | Art. 6(1)(f) — Legitimate interests |
| Website analytics and performance monitoring | Art. 6(1)(f) — Legitimate interests |
| Marketing communications (where opted in) | Art. 6(1)(a) — Consent |
We do not sell your personal data. We may share your data only in the following limited circumstances:
All third-party processors are required to maintain appropriate technical and organisational security measures and are bound by data processing agreements in accordance with GDPR Article 28.
HireHub operates within the EU/EEA (Poland) and the United Kingdom. Where data is transferred outside the EEA — for example to third-country origin countries for candidate sourcing purposes — we ensure appropriate safeguards are in place, including:
| Data Type | Retention Period | Reason |
|---|---|---|
| Employer enquiry data | 3 years from last contact | Legitimate business interest / potential re-engagement |
| Candidate profiles (active) | Duration of placement + 2 years | Contract performance and legal compliance |
| Candidate profiles (unplaced) | 12 months from registration | Consent-based; renewed annually |
| Payroll & ZUS records | 5 years | Polish Labour Code requirement |
| Posted Worker documentation | 5 years | PWD enforcement requirements |
| Website contact form submissions | 2 years | Legitimate interest |
After the applicable retention period, data is securely deleted or anonymised.
Our website uses minimal technical cookies necessary for the site to function. We do not currently use advertising or tracking cookies. Analytics data collected via server logs is processed in aggregate and anonymised form.
You can control cookie settings through your browser preferences. Disabling cookies will not affect your ability to use the website.
Under the General Data Protection Regulation (EU) 2016/679, you have the following rights:
You also have the right to lodge a complaint with the Polish Data Protection Authority (UODO): uodo.gov.pl
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction, including:
In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the UODO within 72 hours and affected individuals without undue delay, as required by GDPR Article 33–34.
Our services are directed exclusively at adults (18 years and older). We do not knowingly collect personal data from individuals under the age of 18. If you believe we have inadvertently collected data from a minor, please contact us immediately at info@hirehubtalent.eu and we will delete it promptly.
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make material changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this Policy periodically.
Continued use of our services after any changes constitutes your acceptance of the updated Policy.
For any questions, requests, or concerns regarding this Privacy Policy or how we handle your data, please contact us:
If you are not satisfied with our response, you have the right to complain to the Polish supervisory authority:
Our team responds to all GDPR requests within 30 days.