Job offers

How we process your data 

Privacy Policy 

How we process your personal data

The following companies are joint controllers of your personal data for recruitment purposes:

  • Daftcode Sp. z o.o. with its registered office in Warsaw (00-844) at Pl. Europejski 1
  • Level 40 Sp. z o.o. with its registered office in Warsaw (00-844) at Pl. Europejski 1
  • Straal Sp. z o.o. with its registered office in Warsaw (00-844) at Pl. Europejski 1
    collectively referred to as “Group Companies“

Jointly as ‘Group Companies’.

Personal data will be processed by the Group Companies on the basis of:

  1. Your consent, for the purpose of considering your recruitment application and for conducting current and future recruitment processes;
  2. Legitimate interests of the Group Companies, i.e.:
    • interest in pursuing potential claims and defending our rights (for the purpose of exercising our legal rights);
    • our interest in securing information in the event that such need arises based on provisions of law (for evidentiary purposes);
    • our interest in keeping you informed about new job offers, events organized by the Group Companies and other ongoing activities (for the purpose of keeping an ongoing relationship with you), provided that you expressed the will to take part in future recruitment and to receive such communication.

Providing personal data specified in the form and included in the CV is voluntary, but necessary for the consideration of your application for the recruitment process. Failure to provide it will make it impossible for us to evaluate your application and, consequently, we will not be able to invite you to participate in the recruitment.

Responsibility of the joint controllers
Very often, Group Companies simultaneously look for people with very similar qualifications for similar positions. Therefore, the recruitment process is highly centralized, and the Group Companies act as joint controllers of your personal data. As a result, through mutual agreements, the Group Companies have defined the relevant scopes of their responsibility regarding the fulfillment of data administrator obligations arising from applicable data protection laws. In particular, the Group Companies have established that Daftcode Sp. z o.o. is responsible for:

  • collecting consents on behalf of the joint controllers for the processing of personal data for the purposes of current and future recruitment;
  • fulfilling the information obligation on behalf of all joint controllers;
  • providing a legal basis for the transfer of data outside the EEA, should the Group Companies decide to entrust the processing of data contained in the HR database to an entity in a third country.

Your rights

You have the right to object to the processing based on our legitimate interest – you can exercise your right by contacting us at career@daftcode.pl. If you do so, we will stop processing your data for the purposes listed above, unless we are able to prove that legally justified bases exist, which override your rights and interests, or that your data is necessary for the purpose of establishing, defense and exercise of legal claims, or when we have an obligation to keep your data based on binding provisions of law. 

We process your data for the duration of recruitment process. We may process your data for a longer period, established based on the following criteria:
whether we are planning to recruit for similar positions in the future, which you might find of interest;

if you consented to processing of your data for future recruitment;

whether processing of your personal data is necessary for defense of potential future claims.


Your data will be deleted if you withdraw your consent, object to the processing based on legitimate interest of if we establish that your data is outdated or no longer necessary for the purpose of collection (e.g. if you stop expressing your will to take part in future recruitment).

Group Companies do not share your data with other entities, although in certain circumstances Group Companies may be required to provide your data to the relevant authorities (specifically the police or the prosecutor’s office), if such a request is addressed to us, provided that there is a legal basis for sharing such data (e.g., a court order). Ypur personal data may also be shared with an affiliated company in the event that Daftcode sp. z o.o. conducts recruitment process for company other than the above-listed Group Companies.

We entrust the processing of your personal data to entities, which provide us with hosting services and recruitment management software (e.g. HR database). In the event that we entrust the processing of your personal data to entities outside the European Economic Area, we make sure that appropriate safeguards are in place. In particular we ensure that the entity is self-certified within the Privacy Shield programme (in case of transfers to the USA) or conclude a data transfer agreement based on Standard Contractual Clauses adopted by the European Commission. 

Moreover, you have the right to:
access your data and obtain a copy thereof;

rectification (correction), erasure and restriction of processing;

object to the processing of your data;

data portability;

file a complaint with data protection authority.