Privacy and Cookies Policy for PMP Group Companies


PMPoland S.A. (The PMP Group) respects and observes the privacy right of the Users of its website, The Privacy Policy contains all information relevant to website Users on how data about website Users is collected, processed and used and how the Company cares for the protection of personal data of the website Users by applying appropriate technological solutions.

All personal data is collected and stored at in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) and the Act of 18 July 2002 on the provision of services by electronic means.

Using the website is not obligatory and the Users’ provision of personal data is voluntary.

In order to use the Newsletter and Contact Form services it is necessary for the User to provide an e-mail address (e-mail).

In order to facilitate the recruitment service operation: The Career tab requires the provision of other additional personal data (full name, e-mail address, telephone number), the provision of which is necessary to be able to send an application via the website.

In order to use the services available on the website, the User agrees to the processing of personal data, which means that the legal basis for the processing of the Users’ data is Article 6(1)(a) of the GDPR. The exception to this rule are situations where prior consent cannot be given due to the circumstances and the processing of data is permitted by law. Personal data of the website Users is also processed on the basis of Article 6(1)(f) of the GDPR, to the extent necessary for the purposes resulting from legitimate interests pursued by the Controller or by a third party.

The information provided is protected against access by third parties and is used by PMPoland S.A. exclusively for contacts with the Users, necessary in the performance of a given service.

The scope of collected data

The following personal data of the website Users shall be processed:

  1. E-mail address, if the User directly provides this data when expressing their wish to receive the Newsletter or when filling in the Contact Form.
  2. Full name, e-mail address, telephone number when submitting an application through the website.
  3. The personal data contained in the CV document sent by the applicant using the website is also processed.

Additionally, the website collects information contained in system logs (e.g. IP address). IP addresses are used to collect general statistical information about website visitors using Google Analytics.

The website Administrator data

The Controllers of personal data of the website Users are the PMP Group Companies. Within the PMP Group, PMPoland S.A. is the Chief Controller of personal data of the website Users, which means that it is responsible for the content of the website and the security of the processed personal data. Details of the Chief Controller of the Users’ personal data:

PMPoland S.A.

ul. Fabryczna 1, 58-560 Jelenia Góra

phone: 075 755 10 61

Information on Personal Data Protection Officer

Any comments and doubts related to the processing of personal data of the website Users can be reported to the following e-mail address:

Purpose of personal data processing

The Users’ personal data is collected, stored and used by PMPoland S.A. with the consent of the data subjects, in accordance with the law and in a manner guaranteeing its safety. Personal data is used for the purpose of proper provision of services to the Users and the performance of services (Newsletter - sending information about the company to the interested website Users, Contact Form - handling the inquiries of the website Users, Recruitment - Application Form for job candidates).

The company uses marketing methods at

  1. Google Analytics - a tool for web analytics and anonymised tracking of the Users’ behaviour provided by Google Ireland Limited (“Google”).
  2. Hotjar - a tool (analytical and reporting) for website optimisation and monitoring of the website Users’ behaviour (Hotjar LTD, Malta).

The recipients of Users’ personal data

The recipients of Users’ personal data are authorised employees and associates of PMPoland S.A., who use the data to achieve the purpose of the website operation.

The recipients of data of website Users who subscribe to the Newsletter service are also FreshMail Sp. z o.o. (Aleja 29 Listopada, Kraków).

The creator of the website is (ul. Osiedle Robotnicze 10/4, Jelenia Góra).

The domain is located on the company servers (ul. Zbożowa 4, Szczecin). The domain is owned by PMP Group Sp. z o.o.

The website has links to other websites (Social media). There are plug-ins located on the website which allow to access social media portals: Facebook, Linkedln, YouTube.

Personal data storage and protection

A set of collected personal data is treated as a database with a high security level, stored on servers properly secured against both remote (IT) and physical access.

PMPoland S.A. has implemented appropriate technical and organisational measures to ensure a level of security corresponding to the risk of infringing the rights and freedoms of the Users. In addition, all persons processing the Users’ personal data have the appropriate authorisations issued by the Controller of personal data in accordance with Article 29 of the GDPR. The databases are protected against access by third parties.

The following protective measures are used for the website:

  1. SSL (Secure Socket Layer) certificate for transmission protection.
  2. Regular creation of copies of the data provided through the website (stored on the company’s internal drive).
  3. Ensuring regular website software updates.

Personal data shall be stored for the period necessary to achieve the purposes of processing.

The Users’ personal data concerning the Newsletter service shall be stored until withdrawal of consent or unsubscribing from the service. The User can unsubscribe from the Newsletter mailing list at any time by clicking on the unsubscribe link.

The Users’ personal data related to the Contact Form is stored until the inquiry is responded to or consent is withdrawn.

The Users’ personal data related to the Application Form (Career tab) is stored for no longer than 3 months from the moment of completing the recruitment process for the given position or until the withdrawal of consent. In case of giving consent for processing of personal data in further recruitment processes, the User’s personal data is processed for a period not longer than 6 months.

User rights

The website Users shall have the following rights:

  1. The right to access data

The User has the right to gain access to their personal data.

  1. The right to rectify

The User has the right to demand that their personal data be corrected and/or completed without delay if it is incorrect or incomplete.

  1. The right to limit processing

The User has the right to demand that the processing of their personal data be restricted if they contest the accuracy of the personal data, if the processing is carried out in an unlawful manner and the company no longer needs the data, but the User does not wish the data to be deleted, and requires it in order to establish, exercise or defend their rights under the law, or if they have objected to its processing.

  1. The right to erase data

The User has the right to request the erasure of their personal data, unless the retention of the data is necessary to ensure freedom of expression, freedom of access to information, the fulfilment of a legal obligation, for reasons of public interest, for the purpose of filing or defending against claims or for the exercise of rights under the law.

  1. The right to transfer data

The User has the right to obtain a copy of the personal data provided, which will be sent to the User or to a third party in a structured, standard, machine-readable format. If the User requests that their data be sent to another data controller, this will be done as far as technically possible.

  1. The right to object

If the User’s personal data is processed for the purpose of legitimate interest under Article 6(1)(f) of the GDPR, the User has the right to object to the processing at any time, in accordance with Article 21 of the GDPR.

  1. The right to withdraw consent

The User has the right to withdraw their consent to the collection of data at any time, with effect for the future. This shall not affect the data collected so far.

  1. The right to submit a complaint to the supervisory body

The User has the right to lodge a complaint with the supervisory body competent in matters of personal data protection if the processing of their personal data violates data protection regulations or if the User’s rights to personal data protection have been violated.

Transferring personal data outside the EU

Personal data of the website Users may be transferred to a third country (e.g. the United States, China, Russia) in connection with:

  • The activities carried out on social networking websites and the use of plug-ins and other tools originating from these websites (e.g. Facebook)
  • The use of tools for web analytics and anonymised tracking of the Users’ behaviour (e.g. Google Analytics)

- If a website User sends an e-mail to a PMP Group Company, which is located in China or the USA - the e-mail shall go directly to this branch.


The personal data of the website Users is not subject to profiling.

Use of cookies

Cookies are IT data, mainly text files, stored in Users’ end devices such as computers, phones and other, sent by websites. They contain, in particular, the name of the website, the duration of their storage on the end device, and a unique number. They are used to recognise the User’s device and to properly display the website, which is adjusted to the User’s individual preferences, as well as to use other website settings selected by the User. These files allow the User’s choices regarding the language, browser, and the settings of the selected elements of the website to be saved, as well as the User’s location information.

Cookies are also used for statistical purposes. They help to understand how the User uses the websites and thus improve their structure and content, without the need to personally identify the User. They allow to evaluate the performance of websites.

The website contains session cookies - temporary files which remain on the User’s device until logging out of the website or switching off the software (web browser) and permanent cookies - files which remain on the User’s device for the time specified in the parameters of cookie files or until they are manually deleted by the User.

The website uses cookies placed on the website directly by the website Administrator and cookies of external websites placed by entities other than the Administrator: Facebook, Linkedln, YouTube. By using the website, the User agrees to also use cookies taken from external websites.

The website mainly has cookies which are harmless to the User, i.e. technical - necessary for the proper functioning of the website and necessary to enable the functionalities of the website, however, their operation is in no way connected with tracking the User. There are also analytical cookies, which are used to track Users, but which do not include information allowing (without other data) to identify a particular User.

The website administrator uses cookies which are necessary for the proper functioning of the website, as well as those used to adjust the website to the User’s preferences.

Personal data in cookies

The information stored in cookies, especially in combination with other information about the User may be treated as personal data. Personal data collected by means of cookies is processed only for the purpose of performing certain functions for the User. They are encrypted in a manner preventing unauthorised access.

By entering the website and accepting the cookie policy, the website Users also agree to the Controller’s access to the cookies used on the website.

This consent is given by the User when configuring the web browser or website. The User can return to these settings at any time and determine the conditions of storage or access to this information by the Controller.

By default, the software used for browsing websites allows cookies to be placed on the end device. These settings can be changed in such a manner as to block the automatic use of cookies in the settings of the browser or to report each time they are sent to the User’s device.

Restrictions on the use of cookies can affect some of the functionalities available on the website. Not agreeing to the use of cookies may result in the website operating to a limited extent.

The User has the right to object, granted under the GDPR. To do so, it is necessary to log out of all devices and delete cookies from them. The update process can take up to 48 hours.