Privacy Policy

1. Controller

The data controller for personal data processed via workpl.space is workpl.space, a consulting practice operating under Polish law. Contact: workplinfo@gmail.com · +44 7451 259520.

2. Personal Data We Process

• Identification data — full name, citizenship, date of birth, passport details (where required for case assessment).
• Contact data — email address, telephone number, country of residence.
• Case data — employment history, education, family composition, current immigration status.
• Transaction data — payment confirmations (we do not store full card details; these are processed by Stripe / PayPal).
• Technical data — IP address, browser type, and basic usage analytics collected via our website.

3. Legal Bases for Processing (Art. 6 GDPR)

• Performance of a contract (Art. 6(1)(b)) — for service delivery to clients.
• Legitimate interest (Art. 6(1)(f)) — for responding to inquiries, fraud prevention, and service improvement.
• Consent (Art. 6(1)(a)) — for marketing communications, withdrawable at any time.
• Legal obligation (Art. 6(1)(c)) — for retention of accounting records under Polish law.

4. Recipients of Personal Data

Personal data may be disclosed to: (a) sworn translators (tłumacze przysięgli) where translation is required; (b) coordinated Polish legal counsel under a separate engagement; (c) competent Polish or EU authorities when filing applications on the client's behalf; (d) IT and payment service providers (web hosting, email, Stripe, PayPal). We do not sell or rent personal data to third parties.

5. International Data Transfers

Where data is transferred outside the European Economic Area (e.g., for payment processing), such transfers are made on the basis of European Commission adequacy decisions or Standard Contractual Clauses (SCCs) as approved under Art. 46 GDPR.

6. Retention Periods

Inquiry data is retained for up to 12 months from last contact. Client case data is retained for the duration of the engagement plus 5 years for accounting and audit purposes. Marketing-consent data is retained until consent is withdrawn.

7. Your Rights (Art. 15–22 GDPR)

You have the right to: access your data, rectify inaccurate data, request erasure, restrict processing, object to processing, request data portability, and withdraw consent at any time without affecting the lawfulness of prior processing. You also have the right to lodge a complaint with the Polish supervisory authority (Prezes Urzędu Ochrony Danych Osobowych, UODO).

Requests can be sent to workplinfo@gmail.com and are processed within one month.

8. Cookies

We use only essential cookies necessary for the functioning of the website and anonymized analytics. We do not use third-party advertising cookies.

9. Security

We apply organizational and technical measures including TLS encryption in transit, access controls on case files, and confidentiality undertakings with all consultants and external partners.

10. Updates

This Privacy Policy may be updated. The current version is always published at workpl.space/privacy.