Who is the controller of your personal data?
The controller of your personal data is Appchance Group sp. z o.o., based at ul. Słowackiego 45/2, Poznań, Poland.
You may contact us regarding the processing of your personal data:
- via the contact form: https://appchance.com/kontakt
- by email: contact@appchance.com
Contractors (including potential ones)
For what purpose, for how long, and on what legal basis do we process your personal data?
| Purpose of Processing | Legal Basis | Retention Period | Legitimate Interest (if applicable) |
| Taking steps prior to concluding a contract, conclusion and execution of a contract | Art. 6 ust. 1 lit. b) RODO | Up to 3 months after offer evaluation or for the duration of actions necessary to conclude a contract + contract duration | |
| Keeping accounting and tax documentation | Art. 6 ust. 1 lit. c) RODO | 5 full years counted from the end of the calendar year | |
| Pursuit and defense of claims | Art. 6 ust. 1 lit. f) RODO | 6 years from the end of cooperation | Protection of the company’s interests |
| Satisfaction of claims | Art. 6 ust. 1 lit. f) RODO | Duration of activities related to claim enforcement and until they are satisfied | Protection of the company’s interests |
| Marketing | Art. 6 ust. 1 lit. f) RODO | Until a valid objection is raised | Promotion of own products and services |
Access to your data?
Your data may be accessed by service providers we cooperate with, e.g., IT, accounting, postal, courier, and legal services.
Do we transfer your data to third countries?
A third country is a country where the GDPR is not binding law. Since we use the services of entities that are based in or process data in the USA, your data may be transferred to the USA.
We have concluded agreements with these entities that define the rules for the outsourcing of personal data processing, based on so-called Standard Contractual Clauses. This means that, in accordance with European Commission Decision No. 2021/914 of 4 June 2021, your personal data may be processed by these entities in the USA.
Are you required to provide us with your personal data?
You are not obliged to provide your personal data; however, if you do not provide it, we will not be able to conclude or perform a contract with you.
Representatives of contractors
For what purpose, for how long, and on what legal basis do we process your personal data?
| Purpose of Processing | Legal Basis | Retention Period | Legitimate Interest (if applicable) |
| Coordination of contract conclusion and execution | Art. 6 ust. 1 lit. b) RODO | Until a valid objection is raised | Striving to conclude the contract and ensure its effective execution |
| Keeping accounting and tax documentation | Art. 6 ust. 1 lit. c) RODO | 5 full years counted from the end of the calendar year | |
| Pursuit and defense of claims | Art. 6 ust. 1 lit. f) RODO | 6 years from the end of cooperation | Protection of the company’s interests |
| Satisfaction of claims | Art. 6 ust. 1 lit. f) RODO | Duration of activities related to claim enforcement and until they are satisfied | Protection of the company’s interests |
Who can access your personal data?
Access to your personal data may be granted to service providers used in our operations, such as: IT services (hosting, application access, etc.), accounting services, postal and courier services, and legal services.
Do we transfer your data to third countries?
A third country is one where the GDPR does not apply. Since we use services of entities that are based in or process data in the USA, your data may be transferred to the USA.
We have signed agreements with these entities that define the rules for processing personal data based on so-called Standard Contractual Clauses. This means that, in accordance with the European Commission Decision No. 2021/914 of 4 June 2021, your personal data may be processed by these entities in the USA.
Are you required to provide your personal data?
You are not obliged to provide your personal data; however, if you do not provide it, we may not be able to conclude or perform a contract with the entity you represent.
What personal data do we process and where do we get it from?
As a representative of our contractor (potential or current client or supplier), your data:
- may have been provided to us by that contractor,
- may have been obtained from publicly available sources (e.g. a website),
- may have been received directly from you.
In such cases, we process your name, job title, phone number, or email address.
Job Candidates
For what purpose, for how long, and on what legal basis do we process your personal data?
| Purpose of Processing | Legal Basis | Retention Period |
| Selection of a job candidate | Art. 6 ust. 1 lit. b) i c) RODO in connection with art. 221 par. 1 of the Labor Code | Up to 3 months after the end of recruitment |
| Selection of a job candidate | Art. 6 ust. 1 lit. a) RODO | Up to 3 months after the end of recruitment |
Can you withdraw your consent to data processing?
If we process your personal data on the basis of your consent, you have the right to withdraw that consent at any time. This does not affect the lawfulness of processing based on consent before its withdrawal.
Who can access your personal data?
Access to your personal data may be granted to service providers used in our operations, such as: IT services (hosting, application access, etc.), recruitment services, postal and courier services, and legal services.
Are you required to provide us with your personal data?
You are not required to provide your personal data; however, if you do not, we will not be able to consider your application in the recruitment process.
Correspondents
For what purpose, for how long, and on what legal basis do we process your personal data?
| Purpose of Processing | Legal Basis | Retention Period | Legitimate Interest (if applicable) |
| Correspondence management | Art. 6 ust. 1 lit. f) RODO | 6 years counted from the end of the calendar year in which the correspondence was sent or received | Conducting correspondence |
| Pursuit and defense of claims | Art. 6 ust. 1 lit. f) RODO | Time necessary for the statute of limitations for potential claims, as defined by the Civil Code, i.e., 6 years from the end of the calendar year in which the claim arose | Protection of the company’s interests |
| Satisfaction of claims | Art. 6 ust. 1 lit. f) RODO | Duration of proceedings related to claim enforcement and the time until satisfaction | Protection of the company’s interests |
Who can access your personal data?
Access to your personal data may be granted to service providers used in our operations, such as: IT services (hosting, application access, etc.), postal and courier services, and legal services.
Are you required to provide us with your personal data?
You are not required to provide your personal data; however, if you do not, we will not be able to respond to your message.
Website Users
For what purpose, for how long, and on what legal basis do we process your personal data?
| Purpose of Processing | Legal Basis | Retention Period | Legitimate Interest (if applicable) |
| Operating the website and ensuring its proper functionality | Art. 6 ust. 1 lit. f) RODO | 2 years counted from the last visit to the website | Operating the website and ensuring its proper functionality |
| Pursuit and defense of claims | Art. 6 ust. 1 lit. f) RODO | Time necessary for the statute of limitations for potential claims, as defined by the Civil Code, i.e., 6 years from the end of the calendar year in which the claim arose | Protection of the company’s interests |
| Satisfaction of claims | Art. 6 ust. 1 lit. f) RODO | Duration of proceedings related to claim enforcement and the time until satisfaction | Protection of the company’s interests |
| Marketing* | Art. 6 ust. 1 lit. f) RODO | Until a valid objection is raised | Promotion of own products and services |
| Analysis and statistics* | Art. 6 ust. 1 lit. f) RODO | 2 years counted from the last visit to the website | Creating, reviewing, and analyzing statistics to optimize the website’s functionality |
* – In the marked cases, we use anonymous data. However, such data may be combined by service providers (used jointly by you and us, e.g., Meta/Facebook, Google/Alphabet) with other data about you based on your online activity. Therefore, for these providers, this may constitute personal data. You can read more about this in the cookie policy.
Who can access your personal data?
Access to your personal data may be granted to service providers used in our operations, such as: IT services (hosting, application access, etc.), and legal services.
Are you required to provide your personal data?
You are not obliged to provide your personal data; however, if you do not, connecting to the website and viewing its content may be difficult or impossible.
What rights do you have in relation to the processing of your personal data?
Since we process your personal data, you have the right to:
- request access to your personal data,
- request rectification of your personal data,
- request erasure of your personal data,
- request restriction of processing of your personal data,
- notify recipients of changes in the processing of your personal data,
- request the transfer of your personal data to another controller,
- object to the processing of your personal data,
- lodge a complaint with the President of the Personal Data Protection Office (or another supervisory authority in your country).
These rights are not absolute and will not always apply. For example, we may not delete your personal data if we are legally required to process it.
If you need a more detailed explanation of your rights and how to exercise them, see