Privacy Policy

Job applications

SELFPATCH.AI sp. z o.o., Kowalska 5/203, 20-018 Lublin, Poland, is the controller of your application data. Applications are sent directly by email.

• What we use: Your name, email address, relevant qualifications and work history, your answers, recruitment correspondence and interview notes. Please omit photos, identity documents, health or family details and unrelated personal information. If an application still includes health data or other special categories of data, we do not use it. We delete that message and ask you to send your application again without it. Providing information is voluntary, but we need enough relevant experience and contact information to assess your application and reply.
• Why and on what basis: We assess your application and discuss the role with you. For a B2B contract with you as an individual or sole trader, necessary processing is based on steps at your request before a contract (Article 6(1)(b) GDPR). If you represent a company, we rely on our legitimate interest in selecting a contractor and communicating with its representative (Article 6(1)(f)). For employment recruitment, the data required under Article 22¹ of the Polish Labour Code is processed under Article 6(1)(c) GDPR. Additional ordinary personal data you voluntarily choose to include may be processed on your consent (Article 6(1)(a)); it is not required to apply.
• Who receives it: The founders and interviewers involved in the hiring decision, and the email service providers that deliver and store our correspondence. We do not use applications for marketing or keep them in a pool for future vacancies. Hiring decisions are made by people, without automated scoring or profiling.
• How long we keep it: When we decide not to continue with your application, we tell you and delete it, with any interview notes, within 30 days. We decide on open applications within three months of receiving them. You can withdraw your application earlier by email. If you join us, information needed for your contract moves to our contractor or employee records, with separate retention requirements. If a dispute arises, we may retain only the relevant records for as long as needed to resolve it, based on our legitimate interest in establishing or defending legal claims (Article 6(1)(f) GDPR). Deleted messages may remain in restricted provider backups until those backups expire.
• Email provider and international transfers: We use Google for company email. Google and its subprocessors may process email data outside the European Economic Area, including in the United States. Google’s data processing terms provide for applicable adequacy decisions and Standard Contractual Clauses to protect these transfers. Those terms also describe provider deletion times. You can read them below or contact us for a copy of the applicable safeguards.
• Your rights: You can request access, correction, erasure, restriction of processing and, where applicable, data portability. You may object to processing based on legitimate interests. Where processing relies on consent, you may withdraw that consent at any time without affecting earlier lawful processing or the assessment of the necessary application data. We normally respond to rights requests within one month. You may complain to the President of the Personal Data Protection Office (PUODO) in Poland or your local supervisory authority.

Google email data processing terms

For questions about your application or your data, write to careers@selfpatch.ai.

You have not made a choice yet.