Privacy policy
1. Data controller
The operator of inspekcja-pracy.pl and the controller of personal data processed in connection with its use is ANSCARS Spółka z ograniczoną odpowiedzialnością z siedzibą w Krakowie, ul. Opolska 12, 31-323 Kraków, wpisana do rejestru przedsiębiorców Krajowego Rejestru Sądowego pod numerem KRS 0000871102, NIP 9452239997, REGON 387580032.
In all matters concerning personal data, you can contact the controller at kontakt@inspekcja-pracy.pl.
This policy sets out the rules for processing data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).
2. Purposes, legal bases and retention periods
| Purpose of processing | Data | Legal basis | Retention period |
|---|---|---|---|
| Providing the website, ensuring security and diagnosing errors | IP address, date and time of the request, page address, browser and system type | Article 6(1)(f) GDPR (legitimate interest of the controller) | for the period set by the hosting provider for server logs, after which they are deleted automatically |
| Replying to an email and handling an error report | email address, name (if you provide it), content of the message | Article 6(1)(f) GDPR (legitimate interest of the controller) | until the matter is closed, and then for no longer than 12 months |
| Establishing, pursuing or defending legal claims | data from the categories above, where needed | Article 6(1)(f) GDPR | until the limitation periods for claims expire |
| Receiving a question to the editors or an issue report via a form | content of the report, category, address of the page it concerns, optional email address, daily hash of the IP address for anti-spam limits | Article 6(1)(f) GDPR (legitimate interest of the controller: running the website and choosing topics) | reports: up to 12 months; IP address hash: 2 days |
| Visit statistics (Google Analytics 4), only after you give consent | address of the visited page without parameters, page title, referrer address without parameters, approximate location derived from the IP address, device and browser type, random browser identifier in a cookie, technical events (e.g. downloading a document, using a calculator) | Article 6(1)(a) GDPR (consent) and Article 173 of the Polish Telecommunications Law (Prawo telekomunikacyjne) as regards cookies | data in Google Analytics: 2 months from the event (the shortest period available in the service); _ga cookies: up to 2 years or until consent is withdrawn |
The legitimate interest of the controller is running a secure website, replying to messages and protecting against claims.
3. Letter generators and tools
The letter generators, the questionnaire and the calculators run only in the user's browser. The data you enter, including the content of a complaint, employer details and amounts, is not sent to the controller and is not stored on the server or in the browser's storage. The PDF or DOCX file is created on the user's device. The controller has no access to this data and does not process it.
The locality search downloads from the server a file listing localities for the first letters of the name. The full text of the query is not sent to the server.
3a. Forms: question to the editors and issue report
The "Ask the editors" and "Report an issue" forms send the text you enter to our server and to the editorial mailbox. We store the text, the category, the address of the page the report concerns and your email address if you provide it. We do not require a name or phone number. We do not publish reports; editorial content is based on anonymised problems. To prevent abuse we store a hash of the IP address with a daily salt, which cannot be reversed, and delete it after 2 days. The forms are not for filing complaints with the PIP, and we do not pass their content to any authority or employer.
4. Recipients of data
Data may be shared only with entities that provide services to the controller:
- the hosting and email service provider (Webd.pl), which stores the website files, server logs and email messages,
- Google Ireland Limited as the provider of Google Analytics 4, only in respect of visit statistics and only after your consent (section 6),
- entities authorised by law, if they request it in the prescribed manner.
The controller does not sell data and does not share it for marketing purposes.
5. Transfers outside the EEA
The controller does not transfer personal data outside the European Economic Area, with one exception: statistical data collected by Google Analytics 4 after your consent may be processed by Google on servers in the United States. The transfer is based on the European Commission's implementing decision of 10 July 2023 on the EU-US Data Privacy Framework, to which Google LLC belongs.
6. Cookies and similar technologies
The website does not use advertising or session recording tools. The website's fonts and scripts are loaded from its own server, without external providers. The only cookie stored without consent is the technical cookie of the server protection system (see below). We also store your decision about statistics in your browser (the "ip-zgoda" entry in local storage, without an identifier).
Visit statistics (Google Analytics 4). After you give consent in the banner, the website loads the Google Analytics 4 script (provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland), which stores the `_ga` and `_ga_...` cookies with a random browser identifier (valid for up to 2 years) and sends to Google: the addresses of visited pages without query parameters, page titles, the referrer address without parameters, an approximate location derived from the IP address, the device and browser type, and technical events (e.g. downloading a document from a generator, a calculator result, clicking an inspectorate's phone number). The content of forms, letters from the generators, search queries, personal names, email addresses, phone numbers and employer details are not sent to statistics. We do not enable advertising features, Google signals or user-provided data; enhanced measurement (form interactions, site search) is disabled. Data in Google Analytics is retained for 2 months. Google may process data on servers outside the European Economic Area on the basis of the European Commission's decision on the EU-US Data Privacy Framework, which Google LLC has joined. More: Google Privacy Policy.
Consent and its withdrawal. Without consent, or after it is declined, the Google Analytics script is not loaded, no measurement requests are sent and no analytics cookies are stored. You can withdraw your consent at any time via the "Statistics settings" link in the footer of every page: measurement stops and the `_ga` cookies are deleted from your browser. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal. Measurement does not run in the preview version of the website.
The server protection system run by the hosting provider may, in the event of suspicious traffic, display a verification page and store a technical cookie that is used solely to protect against attacks.
7. Rights of data subjects
Every person whose data we process has the right to:
- access their data and receive a copy (Article 15 GDPR),
- rectification of data (Article 16 GDPR),
- erasure of data (Article 17 GDPR),
- restriction of processing (Article 18 GDPR),
- object to processing based on legitimate interest (Article 21 GDPR).
To exercise these rights, write to kontakt@inspekcja-pracy.pl. We reply without undue delay and no later than one month after receiving the request.
You also have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl).
8. Voluntary provision of data and profiling
Using the website does not require providing personal data. Providing data in an email is voluntary, but we cannot reply without an email address.
The controller does not make decisions based solely on automated processing, including profiling (Article 22 GDPR).
9. Links to other websites
The website contains links to external pages, including pip.gov.pl, gov.pl and the register of legal acts. The "Get directions" button opens Google Maps only after it is clicked. Once you move to another website, the privacy policy of its controller applies.
10. Changes to this policy
The controller may change this privacy policy if the law, the way the website works or the services used change. The current version is always available on this page.