Last update: 13.01.2026

Privacy policy – the principles of personal data processing at j‑labs spółka z ograniczoną odpowiedzialnością

Personal data controller

This Privacy Policy sets out the rules concerning the storage and access to personal data referred to in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, hereinafter referred to as the GDPR.

This document presents the principles of personal data protection and processing applied by j‑labs sp. z o.o.

The Personal Data Controller is j‑labs sp. z o.o., with its registered office at ul. Zabłocie 43a, 30-701 Kraków, Poland (hereinafter referred to as “j-labs”).

j-labs may be contacted in writing at: j‑labs sp. z o.o., ul. Zabłocie 43a, 30-701 Kraków, Poland, electronically at: j‑labs@j-labs.pl, or by phone at: +48 12 268-16-90.

At j‑labs, a Data Protection Officer has been appointed, who may be contacted in all matters related to the processing of personal data and the exercise of rights related to data processing via e-mail at: GDPR@j-labs.pl or in writing to the address of j‑labs with the note: “Personal Data”.

Purpose of personal data collection

Recruitment process

The following personal data are processed:

1. first name(s) and last name,
2. date of birth,
3. contact details provided,
4. education and qualifications,
5. employment history,

for the purpose of conducting the recruitment process based on applicable legal provisions (Article 6(1)(c) GDPR). Providing such data within the scope required by law is voluntary but necessary for this purpose. Other data included in the submitted application are processed on the basis of voluntary consent (Article 6(1)(a) GDPR), expressed by submitting the recruitment application; providing such data does not affect the possibility of participating in the recruitment process.

In the recruitment process, personal data are obtained directly from you based on the submitted form or application, as well as from recruitment agencies cooperating with j‑labs and under the Referral Program, the Rules of which are available at: https://polecdojlabs.pl/

j-labs events

Personal data provided during registration for events organized by j‑labs are processed for purposes related to participation in the event, including ticket reservation (Article 6(1)(b) GDPR), for marketing purposes, and for archival (evidentiary) purposes, as well as for the establishment, assertion, or defense of claims and ensuring the safety of persons and property based on the legitimate interest of j‑labs (Article 6(1)(f) GDPR).
Providing personal data in the registration form is voluntary but necessary to participate in events organized by j‑labs.

j-labs newsletter

From time to time, we send industry-related information related to events for which you registered in our system or to which you subscribed via the newsletter. Personal data are processed to inform you about job offers and events organized by j‑labs, based on your voluntary consent (Article 6(1)(a) GDPR). Providing personal data is voluntary but necessary to receive our newsletters.

Social Media Management

Personal data provided on social media platforms are processed for the purpose of communication and promotion within j‑labs fan pages and channels on Facebook, YouTube, and LinkedIn, in particular to respond to reactions, comments, and private messages, for statistical and advertising purposes using advertising tools available on those platforms, and to present job offers and terms of cooperation.

This processing is based on the legitimate interest of j‑labs (Article 6(1)(f) GDPR), which includes ensuring continuity of business communication, marketing of proprietary products, maintaining brand image, and recruiting employees or contractors. Providing data is voluntary; however, failure to provide data may limit the ability to use certain functionalities of the profile.

j-labs also processes personal data of users belonging to groups created and administered by j‑labs on LinkedIn, including closed groups. Processing includes identification data available in user profiles (e.g. name, surname, profile name), content published in the group (posts, comments), reactions, and group membership information. These data are processed for communication, community building, organization of events and meetings, and group moderation, based on the legitimate interest of j‑labs (Article 6(1)(f) GDPR).

Cooperation with clients and suppliers

Personal data are processed for the purpose of establishing cooperation, as well as for contact and marketing purposes during cooperation, in particular to prepare offers, conclude and perform contracts (Article 6(1)(b) GDPR), fulfill legal obligations of the Controller (e.g. tax or accounting obligations – Article 6(1)(c) GDPR), for archival (evidentiary) purposes, to establish, assert, or defend claims, ensure safety of persons and property, and for marketing of j‑labs’ own products or services based on legitimate interest (Article 6(1)(f) GDPR).

Personal data such as first name, last name, business e-mail address, business phone number, and job position are obtained from your employer or the entity you represent under a cooperation agreement. Data may also be obtained directly from you via inquiries, forms, or other sources if separate consent has been granted (e.g. referral programs).

Providing personal data is necessary to prepare an offer and conclude and perform the contract; without such data, it is not possible to conclude or properly perform the contract.

Duration of personal data processing

Recruitment process

Personal data submitted in the application are processed for the purpose of conducting the recruitment process for the position indicated in the job advertisement for a period of 6 months, and after the completion of the recruitment process are stored for a period of 3 years, with effect until the end of the calendar year in which that period expires.

Where consent to participate in future recruitment processes has been granted, personal data will be processed until such consent is withdrawn.

j-labs events

Personal data provided during registration will be processed for the period necessary to achieve the purposes for which they were collected, in accordance with the criteria set out in applicable legal provisions, including securing potential claims, for a period of 6 years.

Where personal data of a participant are processed for marketing purposes on the basis of granted consent, such data will be processed until the consent is withdrawn.

j-labs newsletter

Personal data provided during registration for the newsletter will be processed on the basis of granted consent until the user unsubscribes from receiving newsletters.

Consent may be withdrawn at any time by clicking the unsubscribe link included in any of our emails or by sending a message to us using the contact details indicated above.

Social Media Management

Comments, photos, and other materials published by users will be available until they are removed by the author or by the Administrator, in particular where the Administrator determines that they violate communication standards, or where an objection is raised, a request for data erasure is submitted, or the fan page is deleted by the Administrator.

Personal data related to membership in groups operated by j‑labs on social media platforms are processed for the duration of membership in a given group, and after its termination—until the data are removed by the platform or an effective request for data erasure is submitted.

Cooperation with clients and suppliers

Personal data will be processed by j‑labs for the duration of the cooperation, and after its termination—for the period required by tax and accounting regulations and until the expiry of limitation periods for claims provided for in generally applicable law.

Personal data processed for the purposes of marketing j‑labs’ own products or services on the basis of legitimate interest, including the operation and development of j‑labs’ business activity, will be processed until an objection to such processing is raised.

Sharing of personal data

Personal data submitted in the recruitment process may be transferred to providers of job advertisement publication services, providers of recruitment management systems, providers of IT systems used in recruitment processes, and entities managing IT projects (in particular Clients) in connection with which the recruitment process is conducted. In addition, personal data may be disclosed to entities authorized under applicable law, postal operators and couriers, legal, tax and accounting advisors, as well as entities cooperating with j‑labs, including in particular clients and contractors.

In other processes, personal data may be entrusted for processing, on the basis of agreements concluded pursuant to Article 28 GDPR, to service providers performing services for j‑labs (e.g. accounting services, IT services, hosting services, e-mail marketing services, electronic signature services). The above-mentioned recipients are obliged to keep such data confidential, even after the termination of the legal relationship binding them with j‑labs.

When using IT service providers whose servers are located outside the territory of the EU/EEA, personal data may be transferred to third countries or international organizations. The service provider guarantees that the data are transferred to a third country in respect of which an adequate level of data protection has been confirmed by a decision of the European Commission, or that the provider participates in the EU–US Privacy Framework, or that the transfer is based on standard contractual clauses approved by the European Commission.

Recipients of personal data processed in connection with the operation of social media services are the administrators of those platforms, in accordance with the rules imposed by them:

• LinkedIn: https://linkedin.com/legal/privacy-policy
• Facebook tj. Meta Platforms Ireland Limited: https://www.facebook.com/about/privacy
• Youtube: https://www.youtube.com/intl/ALL_pl/howyoutubeworks/user-settings/privacy/

Profiling and Automated Processing

Personal data are not processed in an automated manner and are not subject to profiling.

Rights of data subjects

In connection with the processing of personal data by j‑labs, you are entitled to:

1. the right of access to your personal data and to obtain information, inter alia, on the categories of personal data, the purposes of their processing, as well as to obtain a copy thereof;
2. the right to rectification of inaccurate personal data and to the completion of incomplete data, as well as the right to be forgotten, i.e. the right to request the erasure of personal data processed without a valid legal basis or unlawfully (e.g. where the data are no longer necessary for the purposes for which they were collected);
3. the right to object to the processing of personal data and the right to request restriction of processing. In such cases, after consideration of the request, j‑labs will cease processing the personal data unless it demonstrates the existence of compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or grounds for the establishment, exercise or defence of legal claims;
4. the right to data portability in respect of personal data processed by automated means, which means the right to request that personal data be transmitted by j‑labs directly to another controller, where technically feasible;
5. the right to withdraw consent to the processing of personal data at any time, without affecting the lawfulness of processing carried out on the basis of consent prior to its withdrawal (where processing is based on Article 6(1)(a) or Article 9(2)(a) GDPR);
6. the right to lodge a complaint with the President of the Personal Data Protection Office, where the data subject considers that the processing of personal data infringes the provisions of the GDPR.

Fulfillment of Requests

Upon receipt of a request arising from the rights referred to above, we will take action to fulfil it without undue delay or inform you if it is not possible to comply with the request.

However, if due to the complex nature of the request or the number of requests received we are unable to fulfil this obligation immediately, we will keep you informed of the time required to complete its execution.

Procedure for Exercising Rights

In order to exercise the rights referred to above, the data subject is required to submit a request. Requests are registered for archival (evidentiary) purposes and for the purposes of the possible establishment, exercise or defence of claims, based on the legitimate interest of j‑labs (legal basis: Article 6(1)(f) GDPR), and are stored for a period of three years from the date of submission, with effect until the end of the calendar year in which that period expires. Requests submitted orally will be confirmed by means of an official note, which is recorded in the Register of Requests.

Automatically Collected Data

During visits to the website, the system used by the operator automatically collects the following data: the user’s IP address, information about the type of browser used, the source of the visit, geolocation data, and in the case of users who access the website via a search engine information about the search keywords used that led to the display of the website link in search results. These data are collected solely for statistical purposes and are anonymous.

Cookies and Website Tools

j-labs uses cookies to monitor users’ navigation. Cookies also allow users to retain their navigation parameters within the Service. Cookies are also used by the Google Analytics statistics system implemented in the website’s source code. Detailed purposes for which Google Analytics uses cookies are described in a separate document available at:
http://www.google.com/intl/pl/policies/privacy/.

The user may block the collection of information by this method at any time by disabling cookie support in the browser settings. The website operator does not guarantee the correct functioning of the Service if cookie support is disabled in the browser.

In order to conduct effective advertising campaigns, j‑labs uses analytical tools such as Facebook Pixel and LinkedIn Insights, which help measure advertising effectiveness based on the analysis of actions taken by Users on the website.

In order to ensure security and protection against spam and unwanted activities on our website, based on our legitimate interest (Article 6(1)(f) GDPR), we use the Google reCAPTCHA service. The reCAPTCHA service analyzes user behavior based on various data, such as the IP address, browser information (type, version, language), time spent on the website, mouse movements, clicks, and actions taken on our website (method of interaction with reCAPTCHA elements), cookies, and data from the user’s device, such as the operating system and hardware configuration, as well as Google account data (if the user is logged in).

The collected data are processed by Google in order to verify whether the data entered on our website originates from a real person and not from an automated program (bot). In accordance with the reCAPTCHA Terms of Service, information collected during the use of the reCAPTCHA service is used to improve the service and to enhance overall security. The data will not be used by Google to personalize advertisements displayed to the user.

More information about the service is available at:
https://developers.google.com/recaptcha

The service is subject to Google’s Privacy Policy and Terms of Service.

The use of reCAPTCHA involves the transfer of data to Google, which may result in the transfer of data to the United States. Google provides appropriate safeguards for the protection of personal data in accordance with applicable legal standards, in particular on the basis of standard contractual clauses.

The processing of such data is carried out in accordance with Google’s Privacy Policy, available at: https://policies.google.com/privacy.

Data Security

j-labs makes every effort to ensure effective protection of the personal data being processed. Personal data transmitted from the website to the j‑labs server are secured by an encrypted SSL connection.

Liability

j-labs undertakes to apply the principles described in this document, guaranteeing the confidentiality of users of the Service.

Situations may occur in which the scope of collected data or the method of their protection is slightly changed, while maintaining the privacy of users.

This document may not constitute grounds for any claims asserted against j‑labs sp. z o.o., unless such claims arise from provisions of law in force in the territory of the Republic of Poland.

Changes to the Privacy Policy

j-labs reserves the right to amend this Privacy Policy. Any changes will be published on j‑labs.pl.