Privacy policy
1. Data controller
The controller of your personal data is A&W Partners Sp. z o. o., ul. Olsztyńska 1A/140, 80-395 Gdańsk, KRS 0000910236, NIP 5842806479. For any matters concerning personal data, write to us at biuro@awpartners.pl.
2. What data we process
The data you provide in the application form: full name, phone number, email address, the town where you want to work, the chosen cooperation option, the car you want to rent (if you choose one), the language version of the site you send the application from (which we treat as your preferred contact language) and the content of your message (if you add one). Together with the application, we also store the date and time it was sent, the information that you accepted the privacy policy and its language version.
The application is saved in the form database in Google Firebase (Cloud Firestore), on servers in Warsaw, Poland (region europe-central2). We receive an email notification with the details of each application — it is delivered to our mailbox by the email delivery service Resend, which we use in the European Union region (Ireland).
3. Purpose and legal basis
We process the data to contact you in response to your application and to present the terms of cooperation before concluding a contract (Art. 6(1)(b) GDPR).
We may also process the data on the basis of our legitimate interest: handling correspondence and establishing, pursuing or defending claims (Art. 6(1)(f) GDPR).
4. How long we keep the data
Until our talks about cooperation end, and no longer than 12 months after the last contact. If we conclude a contract, the data will be processed as described in that contract.
An application saved in the form database is deleted automatically no later than 12 months after it was sent. When we launch our internal recruitment system (CRM), applications may be moved there — under the same rules and with the same retention periods.
5. Protecting the form against abuse
Before the form is sent, your browser solves a short computational task that makes it harder for bots to send applications in bulk. No cookies or third-party services are used for this.
To protect the form and our mailbox against spam, we briefly store application counters and markers of computational tasks that have already been used — without any data from the form and without your IP address. These records are deleted automatically, usually within 48 hours. A random application ID generated by your browser lets us recognise the same application being sent again; we store it together with the application. The legal basis is our legitimate interest in keeping the form secure and protecting it against abuse (Art. 6(1)(f) GDPR).
6. Recipients of the data
The data may only be shared with providers of IT, hosting, database and email services, under data processing agreements — including Google (the Firebase service: website hosting and the form database; the database runs on servers in Warsaw), Resend (delivery of the email notification about your application) and OVH (the provider of our mailbox, which receives the notification). If a provider processes data outside the European Economic Area, this is based on standard contractual clauses or a European Commission adequacy decision.
7. Your rights
You have the right to access, rectify and erase your data, to restrict processing, to data portability and to object. You may also lodge a complaint with the President of the Personal Data Protection Office (UODO) in Poland.
Providing your data is voluntary, but without your full name, phone number, email address and town we cannot accept your application.
8. Cookies and browser storage
This site does not use analytics or marketing cookies. We only store your last chosen language in your browser’s storage, so that on your next visit we can suggest the site in that language.