Data protection information

1. Controller and contact

Panel Montage Sp. z o.o., ul. Polna 22, 72-350 Niechorze, Poland; Tax ID (NIP) 8571942107, Statistical ID (REGON) 541537497, National Court Register (KRS) 0001168990.

Send personal data enquiries to [email protected] or in writing to the company address. You do not need to create an account or use a form.

2. Contact and business enquiries

We process data to reply to your message, define the installation scope, check availability and prepare a quotation. This includes information entered in the form, correspondence and documentation you choose to attach.

Where you enquire about a contract to which you will personally be a party, the legal basis for pre-contractual steps is Article 6(1)(b) GDPR. Where you represent an organisation, the basis is Article 6(1)(f) GDPR: the legitimate interest in conducting correspondence and agreeing cooperation terms. This latter basis also applies to answering general questions.

Providing data is voluntary. Without contact details or a description of the matter, we cannot respond or reliably assess the enquiry. A technically required field does not imply a statutory obligation to complete it.

3. Current recruitment and crew cooperation

An application is used to assess experience, qualifications and availability and to make contact about a specific opportunity. A CV and crew profile are optional. When describing a crew, provide its size and skills rather than a list of other installers’ personal details.

For recruitment under an employment contract, data required by law is processed under Article 6(1)(c) GDPR in conjunction with Article 22¹ of the Polish Labour Code. Voluntary additional data may be processed on the basis of consent within the limits of employment law. Participation in recruitment should not depend on consent to processing unnecessary information. UODO guidance on applicant data.

For a business owner applying for cooperation, the basis for pre-contractual steps is Article 6(1)(b) GDPR; for a company representative, Article 6(1)(f) GDPR and the interest in assessing opportunities for cooperation.

Do not send special category data, identity documents or criminal conviction data. An application is not a promise of employment or an assignment and does not subscribe you to a newsletter.

4. Future recruitment database

If you give separate, voluntary consent for future recruitment, your application, contact details and attached CV will remain in the candidate database for 24 months from submission, unless you withdraw consent earlier. You may withdraw consent at any time by writing to [email protected]. Withholding it does not affect assessment of your current application. Withdrawal does not affect the lawfulness of earlier processing.

The purpose is to contact you again about suitable work or cooperation opportunities. The basis is Article 6(1)(a) GDPR. After the period expires, the application should no longer remain in the future recruitment database on the basis of this consent. Any separate basis for retaining particular data requires separate justification and information.

5. Other retention periods and recipients

We retain applications for a current recruitment process for 12 months after it closes. Separate consent may allow further retention in the future recruitment database for a maximum of 24 months from submission. We retain enquiries and quotations that do not result in an order for 12 months after discussions close. These periods do not apply to records of concluded contracts or data retained on a separate, documented basis.

After recruitment closes, access to the application serves to document the process and establish, exercise or defend legal claims, based on the controller’s legitimate interests (Article 6(1)(f) GDPR). This does not mean contacting you about new recruitment without separate consent. Withdrawing consent immediately excludes your application from the future recruitment database; the data may still be subject to a separate basis relating to the current or completed recruitment process.

After the applicable period expires, data and attachments are removed from the active system during periodic retention checks. Database backups may retain an earlier state for up to 30 days. They are not used for day-to-day work; during recovery, we reapply the deletion register before making data available. Messages you send directly to our email address and documents downloaded by authorised people must be covered by the same retention policy wherever they are stored.

Recipients are authorised people at Panel Montage and the providers needed to operate the service: Cloudflare (hosting, protection, database and files) and Resend (notifications containing only the submission number and a link to the private dashboard). Files are checked for security threats. Locating the database and files in the EU does not exclude transfers associated with providers’ global operations. Information on recipients, transfer safeguards and data copies is provided in the privacy policy.

6. Your rights

• Access and rectification: information about processing, a copy of data and correction of inaccurate data.
• Erasure or restriction: in the circumstances specified in the GDPR; the right to erasure is not unconditional.
• Objection: to processing based on legitimate interests, on grounds relating to your situation. An objection to direct marketing does not require justification.
• Portability: of data you provided that is processed automatically on the basis of consent or a contract, within the limits of Article 20 GDPR.
• Withdrawal of consent: at any time, without affecting the lawfulness of earlier processing.

These rights arise from the GDPR, particularly Articles 7 and 15–22.

7. Requests and complaints

Write to [email protected], describing the matter and the action requested. Do not initially attach an identity document scan. Where there are reasonable doubts about identity, the controller may request necessary additional information.

Information on action taken should be provided without undue delay, and within one month at the latest. The GDPR permits an extension of two further months due to the complexity or number of requests; the extension and its reasons must be communicated within the first month.

You may lodge a complaint with the President of the Polish Personal Data Protection Office if you believe processing infringes the GDPR. Current procedures and channels: UODO — submit a matter.

8. Automation

The calculator performs calculations from the entered parameters. It does not decide whether to accept an order, employ someone or determine contract terms. This website version does not use profiling or automated decisions producing legal or similarly significant effects for the user.