Privacy Policy

From this document you will find out how and on what basis we process your personal data when you contact us or use one of our services.

Among other things, you will learn:

  • why we may process your data;
  • for what purpose do we process your data
  • whether you are obliged to provide us with your data;
  • how long we store them;
  • whether there are other recipients of your personal data;
  • whether we process your data outside the European Economic Area; and
  • whether we process your data in an automated manner, including whether we profile the data.

The first part of the Privacy Policy contains information that we are obliged to provide to everyone, regardless of the purpose of the processing.

The second part contains information for people who communicate with us by sending us an email or calling us, or make an appointment with us through Calendly — our appointment scheduling center, available on our website.

The third part contains information for people who are interested in offering our website through our marketing activities, also based on the use of social media.

Part I. General information

Contact details of the data controller

The administrator of your personal data is HR Hints limited liability company with its registered office in Krakow (30-347), ul. Wadowicka 7, entered in the register of entrepreneurs of the National Court Register maintained by the District Court for Krakow - Śródmimieście in Kraków, XI Commercial Division of the National Court Register, KRS number: 0000965276, NIP number: 679331 238201.

You can contact us in several ways in all matters related to our services, as well as the processing of your personal data:

Email: hello@hrhints.io

Phone number: +48 601 935 02

Where do we obtain your personal data?

The personal data we collect through our website comes directly from you. This happens when:

  • The user is browsing our site.
  • You send us questions, request a quote or make an appointment through Calendly.
  • You visit our accounts on social networks - Facebook, LinkedIn, YouTube, Spotify and contact us through these sites.
What rights do you have in relation to the processing of your personal data?

Below we outline your rights related to data protection and data processing by us. The rights of the user in certain circumstances depend on the purpose and basis of the processing of his data.

Right of access to data

You have the right to obtain information about your personal data that we hold about you. By submitting a request for access to your data, you will receive information about the processing of your personal data, including in particular about the purposes and legal bases of the processing, the scope of the data stored, the entities to whom the personal data are disclosed and the planned date of deletion.

Right to rectification


You have the right to have your personal data corrected and/or supplemented without delay. It is our responsibility to ensure that our communication with each other is based on data that is true, complete and up to date.

Right to restriction of processing

You have the right to request that we restrict the processing of your personal data if you dispute the accuracy of the data stored about you, if the processing takes place without a legal basis or if you have objected to the processing of your data.

Right to erasure

You have the right to request the deletion of your personal data stored by us if the storage of the data is not necessary to ensure freedom of expression, freedom of access to information, to comply with a legal obligation, for reasons of public interest, to lodge or defend against claims or to assert rights under law.

Right to information

If you have notified us of your right to rectification, erasure or restriction of processing, we will notify all recipients of your personal data of how to rectify, delete or impose restrictions on the processing of that data, unless this is impossible or requires disproportionate effort.

Right to data portability

You have the right to obtain a copy of the data you provide to us, which will be transmitted to you or to a third party in a structured, standard machine-readable format. If the user requests that this data be transmitted to another administrator, this will be done as far as technically possible. This right only applies if we process your data on the basis of your consent or in connection with the performance of a contract.

Right to object

If your personal data is processed on the basis of our legitimate interest, you have the right to object to further processing at any time. We will consider your request in accordance with the regulations.

Right to withdraw consent

If your data is processed on the basis of consent, you have the right to withdraw it at any time with effect for the future. This will not affect the lawfulness of the data processed so far.

Right to lodge a complaint with a supervisory authority

If the processing of your personal data violates the provisions on the protection of personal data or if your rights to the protection of personal data have been violated in any other way, you can lodge a complaint with the supervisory authority. The competent supervisory authority in Poland is the President of the Office for Personal Data Protection in Warsaw (ul. Stawki 2). Before exercising your right to lodge a complaint, we encourage you to contact us in advance so that we can clarify any doubts you may have.

Consideration of the application

If you submit a request to us to exercise your right, we will respond to your request within one month of receiving it. If it is necessary to extend this period, we will inform you of the reasons for such an extension.

The reply to the request will be sent to the e-mail address from which the request was sent or, in the case of requests submitted by letter, by post to the address provided, unless the user indicates in the letter that he wishes to be contacted by e-mail (in this case, an e-mail address must be provided).

Links to other sites

Where we provide links to third party websites, this Privacy Policy does not apply and does not describe how such entities process your personal data. We encourage you to review the respective privacy policies of these entities published on their websites.

Visits to our website
Google Analytics

On our website we use the tools of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, Google Analytics, which allow us to collect statistical information about the use of our website, such as IP address, device type, browser type. We do this in order to know, among other things, the number of users accessing our site. This information is only processed in a way that does not allow direct identification of the user. Please note, however, that Google may process your data on a server in the United States. In such cases, Google may process your personal data outside the European Economic Area, but this is done on the basis of so-called standard contractual clauses, i.e. the terms of the contract concluded between us and Google, which guarantee an adequate level of security for the processing of your personal data.

Those interested in the details related to the processing of data in the framework of Google Analytics are encouraged to read the explanations prepared by Google here.

Cookie files

Like almost all websites, we also use cookies.

Cookies, which are used to ensure the functionality, security and accessibility of the website, are necessary for the website to function properly. These cookies inform us that you have accepted our Privacy Policy and Cookie Policy. We use these cookies on the basis of our legitimate interest.

Cookies used for statistical purposes (Google Analytics) are optional and we use them only on the basis of your consent.

More information about how we use cookies and how to change your cookie preferences can be found on our Cookie Policy page.

Facebook Pixel

We use marketing tools provided by Facebook Ireland Limited. As part of these tools, we direct you to Facebook ads.

In order to send you personalized advertising in relation to your behavior on our website, we have implemented a Facebook Pixel function within our website, which automatically collects information about your use of our website in terms of the pages you view.

The information collected as part of the Facebook Pixel is anonymous, i.e. it does not allow us to identify you. We only know what actions you have taken on our website. However, we would like to inform you that Facebook may combine this information with other information collected about you as part of your use of Facebook and use it for its own purposes, including marketing purposes. Such actions of Facebook are no longer dependent on us, and information about them can be found directly in Privacy Policy Facebook.

Changes to Privacy Policy

The Privacy Policy is subject to periodic review and update as reasonably necessary. You can read about the changes so far below.

July 2022
Privacy Policy Publication Date.

Part II. Data processing via communication channels

Below are the personal data processing rules applicable if you send us an email with a question or request for a quote, make an appointment through Calendly or otherwise contact us using the data available on our website.

For what purpose do we process your data?

We process your personal data in order to answer your questions, present you with a cooperation offer, take further steps to conclude a contract or establish cooperation.

On what legal basis do we process your data?

The legal basis for the processing of your personal data is:

  • Your consent given by sending us a specific inquiry
  • Your consent expressed by making an appointment with us through Calendly; the actions necessary to conclude the contract for the presentation of the offer and the communication aimed at concluding the contract.
How long will we process your data?

We will process your data until you withdraw your consent, and in the scope of activities aimed at concluding a contract - for the duration of the contract, the limitation period for claims, the period resulting from the provisions of the law determining the duration of storage of accounting documents.

Who is the recipient of your personal data?

The recipients of your personal data, i.e. third parties that may be involved in the processing of your data, will be our trusted subcontractors — IT service providers for data hosting and business mail services and Calendly LLC, 88 N Avondale Rd, #603, Avondale Estates, GA, 30002, USA, which administers Calendly.

Nature of data sharing

The provision of data is voluntary.

Other relevant information

User data will not be subject to automated processing or profiling. Calendly may process your personal data outside the European Economic Area, but this is done on the basis of so-called standard contractual clauses, i.e. the provisions of the contract concluded between us and Calendly, which guarantee an adequate level of security of the processing of your personal data.

What rights do the user have?

Your rights are set out in Part I of this Privacy Policy.

Part III. Data processing in the context of marketing activities HR Hints

Below we outline the personal data processing rules that apply when you use and communicate with us through our profiles on the social networks Facebook, Spotify, YouTube and LinkedIn (called “fanpages”). On our fanpages we regularly publish and share content, offers and recommendations of our services.

For what purpose do we process user data?

We process your data only in connection with the maintenance of our social media profiles, including to inform you about our activities and to promote various types of events and services, as well as to communicate with you through the functionalities available on social media.

Please note that social network administrators record your activity using cookies and other similar technologies whenever you interact with our fanpages and other pages on Facebook, Spotify, YouTube and LinkedIn. Fanpage administrators have access to general statistics about your (as a fan page visitor) interests and demographic data (such as age, gender, region). As part of the use of social networks, the scope and purposes of data processing on social networks have been determined by the administrators of these services.

On what legal basis do we process your data?

The legal basis for the processing of your personal data is:

  • our legitimate interest (Art. 6 (1) (f) GDPR) to promote our own brand and to build and maintain a brand community
  • Your consent to the creation of data for the purposes of Facebook page statistics (Art. 6 para. 1 lit. a GDPR).
  • Your consent to the creation of data for the purposes of website statistics on Spotify (Art. 6 (1) lit. a GDPR).
  • Your consent to the creation of data for the purposes of YouTube statistics (Art. 6 (1) lit. a GDPR).
  • User consent to the creation of data for the purposes of website statistics on LinkedIn (Art. 6 (1) lit. a GDPR).
How long will we process your data?

We will process your personal data for as long as necessary to achieve the purposes described in this Privacy Policy, in particular to comply with our contractual and statutory obligations, unless you withdraw your consent to the processing of your data beforehand.

Facebook, Spotify, YouTube and LinkedIn process your data when you use our fan pages for your own purposes not covered by this Privacy Policy. We have no influence on the operation of these websites related to the aforementioned data processing. In this regard, please read the privacy policy of the respective social networks:

Who is the recipient of your personal data?

The recipients of your personal data, i.e. third parties that may be involved in the processing of your data, will be our trusted subcontractors - IT service providers for data hosting and business mail services, Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland, 4 Grand Canal Square, Dublin 2, Ireland, which administers the Facebook social network; Spotify AB, Regeringsgatan 19, 111 53 Stockholm, Sweden, which administers the social network Spotify; Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, which administers the social network YouTube and LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland, which administers the social network LinkedIn.

Nature of the data transmitted

Your personal information, including your IP address, other identifiers and other information, is collected through cookies or other similar technologies when you remain connected to our fanpages.

As part of the use of our fanpages, the scope and purposes of data processing in social networks are decided by the administrators of these services.

In this regard, please read the privacy policy of individual social networks:

What rights do the user have?

Your rights are set out in Part I of this Privacy Policy.