PRIVACY POLICY
Version: 1.0 (2025-12-06)
Service URL: https://highfive.golczyk.com
1) Controller and contact
MKTOUT Piotr Golczyk (sole proprietorship), ul. Jana Brzechwy 6a, 31-478 Kraków, Poland.
Preferred contact: LinkedIn – Piotr Golczyk.
Privacy contact point: https://www.linkedin.com/in/piotrgolczyk/.
DPO: not appointed (we will update if it changes).
2) Data and sources
- LinkedIn SSO (login): first name, last name, email, profile URL, photo, basic professional data — we create a snapshot in the service.
- From you: job post content, account settings.
- Technical: logs, session identifiers, necessary cookies.
- When you apply: we pass your profile URL to the indicated employer — they process it as a separate controller.
3) Purposes and legal bases
- Service provision and contract performance (Art. 6(1)(b) GDPR): running the platform, login, displaying your content.
- Legal obligations (Art. 6(1)(c) GDPR): accounting, consumer protection, responding to requests.
- Legitimate interest (Art. 6(1)(f) GDPR): analytics, ensuring security, preventing abuse, internal reporting.
- Consent (Art. 6(1)(a) GDPR) — where required, e.g. marketing communications or optional cookies.
4) Storage period
- Account data — for the duration of the account; after deletion we keep minimal logs for up to 30 days.
- Job posts/applications — as long as they are active plus up to 90 days for archiving and dispute handling.
- Accounting/obligations — for periods required by law (e.g. 5 years).
- Consent records — until withdrawal plus limitations period for claims.
5) Recipients
We use providers supporting the service (hosting, analytics, email, automation).
Key partners may include: AWS (hosting), Google Workspace, LinkedIn (SSO), analytics/automation tools — always under agreements and safeguards.
6) International transfers
Data may be processed outside the EEA if providers are based there (e.g. AWS, LinkedIn, Google).
We rely on mechanisms such as Standard Contractual Clauses and additional safeguards.
Cookie consents: we save the timestamp and scope.
7) Your rights
Response time: up to 30 days.
Supervisory authority: President of the Personal Data Protection Office.
- Access, rectification, deletion, restriction, portability, objection, withdrawal of consent (where applicable).
- You can exercise rights via https://www.linkedin.com/in/piotrgolczyk/.
- You have the right to lodge a complaint with the President of the Personal Data Protection Office (Poland) or the authority competent for your residence.
8) Your obligations
By providing URLs/content you confirm they are accurate and that you have the right to use them. Impersonating another profile is forbidden and may result in investigation/removal.
9) Cookies
We use necessary cookies.
Other categories are enabled only after your consent (banner with choices).
10) Age
The service is for users 16+.
11) Languages and law
The service may be available in multiple languages, but processing follows Polish law and the GDPR.
12) Changes
We publish privacy policy updates in the service and note the date. A version archive will be available after rollout.