Privacy Policy

You are on the website https://www.warsawnanny.pl/ (hereinafter: the Website).

Because you are visiting my Website, I process your personal data.
I also process your data when you access my business-related social media profiles, particularly my Facebook fan page and Instagram:

● Facebook fan page: https://www.facebook.com/warsawnanny/?locale=pl_PL
● Instagram: https://www.instagram.com/warsawnanny/

This document describes how I process your personal data within the Website and my social media profiles/groups.
I take care to ensure your personal data is safe with me. I operate in compliance with the GDPR (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC) and other applicable regulations.

WHO IS THE ADMINISTRATOR OF YOUR PERSONAL DATA?

The administrator of your personal data is Marta Busz, conducting business under the name Marta Busz, address: ul. Lasek Brzozowy 3 lok. 12, 02-792 Warsaw, NIP 6991949434, REGON 367878072.
You can contact me via email: kontakt@warsawnanny.pl

WHY AND ON WHAT BASIS DO I PROCESS YOUR PERSONAL DATA?

Website

When you use the Website, you provide personal data such as information about the device you are using, your country of origin, the web browser you use, or your IP address.
I use this data to ensure the proper display of content on the Website, maintain security, fix potential technical issues, monitor and analyze traffic, and conduct marketing activities (Article 6(1)(f) GDPR).
The data will be processed while you are on the Website and for as long as cookies remain stored on your device.

Email Contact

When you contact me via email or the contact form, you provide your email address. Providing this data is voluntary but necessary to establish contact. You may also include other personal data in your message.
I use this data to establish and maintain communication based on your consent (Article 6(1)(a) GDPR). Data will be processed for the duration of our communication. After contact ends, the data will be archived and stored to defend against possible claims, especially to demonstrate that you provided consent.

Social Media Activity

I may process your personal data within my social media profiles and my Facebook group. This includes data such as your name, surname, image, comments, or messages sent via chat.
I use this data to manage my social media profiles, communicate with you, and send marketing content (Article 6(1)(f) GDPR). Data will be processed as long as I run the fan page/account/group.
Remember that each social media platform (e.g., Meta Platforms Ireland Limited for Facebook) establishes its own terms of use and data processing policies. Be sure to review them.

Additionally, under Article 6(1)(f) GDPR, I may process your personal data for the following purposes:
a) Establishing, asserting, or defending against claims
b) Archival and evidentiary purposes
c) Customer satisfaction research
d) Contacting you for offers and direct marketing

HOW LONG DO I PROCESS YOUR PERSONAL DATA?

I process your data for as long as necessary to achieve a specific purpose and:
a) For the period required by the statute of limitations under the Civil Procedure Code (3 or 6 years)
b) For the period required by tax law regarding personal data related to tax obligations
c) Until an effective objection is submitted (for data processed based on the legitimate interest of the administrator or for marketing purposes)
d) Until consent is withdrawn or the processing purpose is achieved (for data processed based on consent)
e) Until the data becomes outdated or no longer useful (for data processed mainly for analytical, statistical, cookie-related, and website administration purposes).

After this period, the data will be irreversibly deleted or destroyed.

WHO DO I SHARE YOUR PERSONAL DATA WITH?

I may share your personal data with trusted partners such as software providers, payment service providers, accounting firms, hosting providers, marketing service providers, and analytics service providers.
All entities to whom I entrust personal data processing guarantee appropriate security measures as required by law.

The Website contains links to my social media profiles (e.g., Facebook). Simply visiting the Website does not trigger data processing by these platforms; this occurs only if you click on the links. Be sure to review the privacy policies and terms of these platforms.

I use services such as Google and Facebook, which means your personal data may be transferred to the United States (USA) because it is stored on American servers. Google and Facebook apply GDPR-compliant mechanisms (e.g., certifications) or standard contractual clauses approved by the European Commission.
For detailed information, check the privacy policies of each provider:
● Google Privacy Policy
● Facebook Privacy Policy

WHAT ARE YOUR RIGHTS?

Since I process your personal data, you have specific rights under the GDPR. Some rights apply only in certain situations.

In general, you can:
● Request information on what personal data I process about you (right of access)
● Request correction of your data if it is outdated, incomplete, or incorrect
● Request deletion of your data if you believe it should no longer be stored (in some cases, I may refuse deletion)
● Request restriction of processing (in situations described in Article 18 GDPR)
● Request data transfer to another administrator (if you have entered into a contract with me or provided separate consent)
● Withdraw your consent to processing at any time
● Object to the processing of data based on my legitimate interest
● File a complaint with the President of the Personal Data Protection Office if you believe the processing violates GDPR regulations.

WILL YOUR PERSONAL DATA BE PROFILED?

To create your profile for marketing purposes and direct advertising (e.g., Facebook ads tailored to your preferences), I may process your personal data automatically, including profiling.
This will not result in any legal consequences for you or significantly affect your situation.
The legal basis for such data processing is Article 6(1)(f) GDPR, which allows processing for the legitimate interests of the administrator— in this case, conducting marketing activities tailored to the audience’s preferences.
I will process your data for profiling until you effectively object or the processing purpose is achieved.

COOKIES

Upon your first visit to the Website, you see a notification about cookies. Accepting and closing the notification means you consent to cookies as outlined in this privacy policy.
You can withdraw your consent at any time by deleting cookies and adjusting your browser settings. However, disabling cookies may cause issues with using the Website and many other sites.

Cookies are small files stored on your device. They allow for proper Website functionality, usage tracking, and remembering your visits. Cookies do not modify your device or installed software.

Cookies can be classified as:
● Session cookies – active while you are on the Website and deleted afterward.
● Persistent cookies – stored even after closing the Website or browser.
● First-party cookies – essential for the Website’s operation.
● Third-party cookies – from external platforms like Facebook.

Since the Website displays content from social media (e.g., Facebook), third-party cookies may be used. Additionally, I use Google Analytics to collect anonymous visit statistics.

For more information on cookies, visit:
http://www.allaboutcookies.org
http://wszystkoociasteczkach.pl

Client’s Personal Data

INFORMATION ON PERSONAL DATA PROCESSING

I take care to ensure that your personal data is secure. I act in accordance with the GDPR (Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC) and other applicable regulations.

Who is the controller of your personal data?

The controller of your personal data is Marta Busz, conducting business under the name Marta Busz, address: ul. Lasek Brzozowy 3 lok. 12, 02-792 Warsaw, NIP 6991949434, REGON 367878072.
You can contact me via email at kontakt@warsawnanny.pl.

On what basis and for what purpose do I process your personal data?

I process your personal data:

a) For taking actions before the conclusion of the contract, and then for concluding and performing the contract, based on Article 6(1)(b) GDPR.

b) For accounting purposes, including keeping accounting records and fulfilling tax obligations, based on Article 6(1)(c) GDPR.

c) For purposes resulting from the legitimate interests of the controller, including statistical, archival, quality, and satisfaction surveys, direct marketing, based on Article 6(1)(f) GDPR.

d) For potential claims and defense against claims, based on Article 6(1)(f) GDPR.

How long do I process your personal data?

The period of personal data storage depends on the legal basis for its processing:

a) If the data is processed to fulfill legal obligations, including tax law obligations, it will be processed for the period necessary to fulfill these obligations and for the period required by law.

b) If the data is processed to execute the contract, it will be processed until all factual and legal actions necessary for the performance of the contract are completed or to secure potential claims.

c) If the data is processed based on the legitimate interest of the controller, it will be processed until the legitimate interests underlying the processing cease or until you object to such processing.

Who do I share your personal data with?

I may share your personal data with my trusted collaborators, such as accounting offices, legal service providers, marketing agencies, statistical analysts, and archival service providers.

What are your rights?

You have the right to:

Request information on what personal data I process about you (right of access).
Request correction of your data if it becomes outdated, incomplete, or incorrect.
Request deletion of your data if you believe it should no longer be stored (in certain cases, I may refuse to delete it).
Request restriction of processing in situations described in Article 18 of the GDPR.
Request the transfer of your data to another data controller.
Object to the processing of your data if processed based on my legitimate interest.
Lodge a complaint with the President of the Personal Data Protection Office if you believe that the processing of personal data violates GDPR regulations.

What else is important to know?

Providing personal data is voluntary but necessary to conclude a contract.

Candidate’s Personal Data

INFORMATION ON PERSONAL DATA PROCESSING

Who is the controller of your personal data?

On what basis, for what purpose, and for how long do I process your personal data?

I process your personal data primarily for recruitment purposes and to present you with job opportunities with our clients. I do this based on the consent you have given (Article 6(1)(a) GDPR).

If you are participating in recruitment for a specific position, I will process your data until the recruitment process is completed or your consent is withdrawn.
Additionally, I may process your data for future recruitment purposes for similar positions, provided you have given separate consent, for up to 2 years from the date the data was provided or until your consent is withdrawn.
If you participate in a recruitment process where no specific position has been defined, I will process your data for 2 years from the date the data was provided or until your consent is withdrawn.

I also process your personal data:

a) For reference checks from your previous employers – if you give consent, based on Article 6(1)(a) GDPR, until the recruitment process is completed or your consent is withdrawn.

b) To fulfill legal obligations under generally applicable laws, such as statistical or reporting obligations and inspections by authorized authorities, based on Article 6(1)(c) GDPR, for as long as necessary to comply with these obligations.

c) When I have a legitimate interest, such as in case of legal claims related to recruitment, based on Article 6(1)(f) GDPR, until the interest underlying such processing ceases or you object to such processing.

Who do I share your personal data with?

I may entrust or share your personal data with my clients (the individuals or organizations for whom I conduct recruitment). I may also share your data with my trusted associates, such as an accounting office, legal service providers, marketing agencies, statistical analysts, and archival service providers.

What are your rights?

Since most of your data is processed based on consent, you may withdraw your consent at any time.

Additionally, you have the right to:

Request information about what personal data I process about you (right of access).
Request correction of your data if it becomes outdated, incomplete, or incorrect.
Request deletion of your data if you believe it should no longer be stored (in certain cases, I may refuse to delete it).
Request restriction of processing in situations described in Article 18 of the GDPR.
Request the transfer of your data to another data controller.
Object to the processing of data that I process based on my legitimate interest.

Lodge a complaint with the President of the Personal Data Protection Office if you believe that data processing violates GDPR regulations.

Employer’s personal data

INFORMATION ON PERSONAL DATA PROCESSING

I ensure that your personal data is secure. I operate in this regard in compliance with the GDPR (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC) and other applicable regulations.

Who is the data controller?

Where do I obtain your personal data from?

Your personal data, such as your name, surname, email address, and phone number, was obtained from a job candidate who identified you as a previous employer and consented to contact for reference purposes. Additionally, during a conversation or exchange of correspondence, you may voluntarily provide me with other personal data.

On what basis and for what purpose do I process your personal data?

I process your personal data for the following purposes:
a) Conducting the recruitment process for the job candidate who provided your data, based on Article 6(1)(f) of the GDPR.
b) Potentially pursuing claims and defending against claims, based on Article 6(1)(f) of the GDPR.

How long do I process personal data?

Personal data will be stored for the duration of the recruitment process. After this period, personal data may be retained until the statute of limitations for potential claims expires.

To whom do I transfer personal data?

I may transfer your personal data to my trusted associates, particularly those providing technical and organizational services, legal services, and consulting services.

What are your rights?

You have the right to:

Request information about which of your personal data I process (right of access).
Request rectification of your data if it becomes outdated, incomplete, or otherwise incorrect.
Request the deletion of your data if you believe it should no longer be stored by me (in certain cases, I may refuse to delete the data).
Request restriction of processing (in cases described in Article 18 of the GDPR).
Request the transfer of your data to another controller.
Object to the processing of data that I process based on my legitimate interest.

Lodge a complaint with the President of the Personal Data Protection Office if you believe that the processing of your personal data violates the GDPR.