Privacy Policy

This Privacy Policy applies to the website https://lp5.uspi-work.pl/ (the "Website") and describes how the personal data of users are protected in accordance with EU Regulation 2016/679 (GDPR / RODO) and Polish law.

The Data Controller is Antonina Dolzhykova, conducting business under the trade name "USPI WORK & Documents", registered at ul. Krzysztofa Gotowskiego 6, 85-030 Bydgoszcz, Poland (NIP: 9671385813, REGON: 525245198).

The Controller declares that the content of the Website does not infringe third-party rights and complies with applicable law.

The Controller processes personal data solely for the purposes and to the extent necessary to use the USPI Work & Documents Website and to deliver the services ordered.

Standard data scope includes: name, surname, address, date of birth, identification numbers (PESEL, NIP), phone number, email address.

Additional data may be processed depending on the service requested:

• residence card (Karta Pobytu) application;

• PESEL number registration;

• work permit and work visa support;

• family reunification documents;

• Polish citizenship procedure;

• school / kindergarten enrolment documents;

• job placement support and employer matching;

• translation of documents.

Minors' data: Users ordering services on behalf of minors must declare that they are duly authorised to act as the legal representative of the minor concerned.

Main purpose: providing services related to work, residence, and business activity in Poland, including document verification and preparation of application drafts.

Legal basis: the legal basis and purpose for processing personal data is generally the performance of a contract concluded with the User (Art. 6(1)(b) GDPR).

Legitimate interests of the Controller may include:

• client satisfaction research and service improvement;

• direct marketing and commercial communications (with the User's consent);

• personalised advertising using cookies (with the User's consent);

• payment processing;

• compliance with statutory obligations and protection of the Controller's legitimate rights in case of claims.

Retention period: data are processed for the period necessary to achieve the stated purposes and for the period and to the extent required by law.

Information may be shared with government bodies and verified partners — separately depending on the type of Service — including:

• tax authorities;

• sworn translators;

• payment service providers (ING Bank Śląski S.A.);

• hosting providers;

• the document-transfer platform Bitrix24 (https://www.bitrix24.pl/), acting under a data processing agreement; GDPR compliance information: https://www.bitrix24.pl/gdpr/.

Transfers outside the EEA: data are generally not transferred outside the European Economic Area (EEA), except where necessary, with adequate safeguards under EU Standard Contractual Clauses or within the Data Privacy Framework.

Automated decision-making: we do not process your data automatically, including by profiling.

The User has the right:

• to access personal data, including obtaining a copy;

• to request rectification of inaccurate information;

• to request erasure ("right to be forgotten");

• to request restriction of processing;

• to data portability;

• to object to processing, including profiling;

• to withdraw consent to processing at any time (without affecting the lawfulness of prior processing).

How to submit requests: requests should be sent in writing or by email to info@uspi-work.com. Response time is one month from receipt. Requests are handled free of charge, except for those manifestly unfounded or excessive.

Right to lodge a complaint: the User has the right to lodge a complaint with the President of the Polish Data Protection Office (Prezes UODO) — https://uodo.gov.pl/.

Direct access to personal data is granted only to authorised employees or contractors of the Controller acting under appropriate authorisations.

Third-party access: data may be transferred to entities authorised to receive them under applicable law, in particular competent judicial authorities.

Security measures: the Controller applies technical and organisational measures ensuring the protection of processed data in accordance with the threats and categories of data protected (transmission encryption, access restriction, action logging).

Data submitted through Website forms are transferred via https://www.bitrix24.pl/ — the processor is bound by appropriate confidentiality clauses regarding personal data.

The Website uses cookies — small text files placed in the User's browser.

First-party cookies are used for:

• configuration and personalisation of the Website;

• user authentication and session management;

• content optimisation;

• geolocation recognition;

• analytics and audience research;

• security and stability.

Third-party cookies are used for:

• playback of multimedia content (vimeo.com, youtube.com);

• anonymous analytics (Google Analytics, Google Tag Manager);

• targeted advertising.

Cookie management: the User can manage cookies via browser settings (Chrome, Firefox, Safari, Opera, Edge). Disabling cookies may limit Website functionality.

The Controller is not responsible for information about third-party services or goods published on the Website.

The Controller reserves the right to make changes to the Website, refuse use, or change the functions and properties of subpages.

The Controller reserves the right to amend this Privacy Policy. The current version is published on the Website. Continued use of the Website after amendments constitutes acceptance of them.

Versions of this document are available in Polish, English, Indonesian, Filipino, Bengali, Hindi and Nepali. In case of discrepancies, the Polish version prevails.