Privacy policy
This is a translation. The Polish version of the document is legally binding: Polityka prywatności
Who we are and how we process your personal data
Alimat Group, including its subsidiaries (hereinafter collectively: “Alimat Group”, “we”, “us”, “our”), is a recruitment company that recruits workers. Protecting users’ personal data is very important to us. This Privacy Policy explains the categories of personal data we collect, the purposes for which we use them and how we process data when you visit our website, apply for a job with us, when we introduce ourselves to you, when we provide recruitment and employment services to you, when we maintain a relationship with you after providing a service to you, or when you provide a service to us. The information below is addressed to people in one of the following categories:
• candidates to whom we provide employment services or who apply to us for a vacancy and contact us via our website, job portals, social media or other sources;
• clients and their contacts with whom we maintain business relationships and whom we support in filling vacancies;
• potential candidates, as well as potential clients and their contacts, whom we contact in order to present our products and services;
• service providers and their contacts who provide various services to us;
• users of our websites and applications
(collectively referred to as the “User” or “Users”).
Controller
The controller of your data is the Alimat Group company that contacts you and processes your data under its own responsibility when you visit the website, when that entity provides recruitment and employment services to you, maintains a relationship with you after finding you a job, employs you in a vacancy, or when you provide services to that entity.
Details of data processing
Below is an overview of the types of personal data we process, for what purposes, on what legal basis and where we collect the data.
If you do not provide us with your personal data even though we need to collect it to process your request or perform a contract with you, or because we are legally obliged to do so, we may have to reject your request or may be unable to fulfil our contractual obligations to you.
Communication via Messenger and Instagram Direct
When you write to us via Messenger (the “Alimat Group PL” page) or Instagram Direct (@alimat_group), we receive from Meta Platforms the content of your messages, any photos you send, the chat ID and the first name and surname from your profile. Initial questions are answered by an automated AI-based recruitment assistant; after that, one of our recruiters takes over the conversation. The assistant does not make hiring decisions. We process this data solely for recruitment purposes and to answer your questions (Art. 6(1)(b) and (f) GDPR). We use the following providers: hosting (Railway, USA), language models (OpenAI, OpenRouter, USA), and an internal messenger for recruiters (Telegram). Transfers to the USA are based on standard contractual clauses. Deleting your data: send an email to kontakt@alimatgroup.com with the name of the profile you wrote to us from. We will delete the conversation history and candidate data within 30 days and confirm this by email.Users of our website and applications
| Purpose | Data categories | Legal basis | Collection of your data | Recipients of your data |
| When you visit our website or application, we process your data for the following purposes: loading the website/application, ensuring smooth connection set-up, ensuring and optimising the performance of our website and its user-friendliness, and ensuring and assessing system security and stability. In this context we also use various cookies and other technologies. More information can be found in our Cookie Policy. | In this context we process the following data: the IP address of the requesting device with internet access, date and time of access, name and URL of the file retrieved, the website/application from which access was made (referrer URL), the browser used and, where applicable, the operating system of the computer with internet access, and the name of the access provider. | The processing is based on the following legal grounds: Art. 6(1)(b) GDPR – conclusion, performance or termination of a contract with you; Art. 6(1)(f) GDPR – our legitimate interest in the security, stability and usability of our website; Art. 6(1)(a) GDPR – your consent. | We collect the data directly from you. | In the context of this processing, the following internal and external service providers may have access to your data: IT service providers, a data analytics tool provider, a marketing service provider. |
| We process your data in order to show you personalised advertising on the website based on your browsing behaviour. For this purpose we use various cookies and other technologies. More information can be found in our Cookie Policy. | In this context we process the following data: the IP address of the requesting device with internet access, date and time of access, name and URL of the file retrieved, the website/application from which access was made (referrer URL), the browser used and, where applicable, the operating system of the computer with internet access, and the name of the access provider. | The processing is based on the following legal ground: Art. 6(1)(a) GDPR – your consent | We collect the data directly from you. | In the context of this processing, the following internal or external service providers may have access to your data: IT service providers, analytics tool providers, marketing companies. |
Candidates
| Purpose | Data categories | Legal basis / legitimate interest | Collection of your data | Categories of recipients |
| We process your data in order to provide you with employment and job placement services or to conduct an application process with you with a view to establishing an employment relationship. In this context we may use your data to communicate with you, answer your questions, analyse your CV and find a suitable position for you, create a candidate profile, advise you on pay, organise interviews, carry out skills tests with you and forward your application documents to the employer you have chosen. | In this context we may process the following data: first name and surname, name and address, telephone number, email address, information contained in your CV, information about your education, references, work experience, employment certificates, salary expectations, career aspirations, results of security checks, nationality, residence and work permits, photographs, language skills, results of integrated assessment tests. In some cases, special categories of data such as: disability, health information, occupational medical examinations, criminal convictions and offences. | The processing is based on the following legal grounds: Art. 6(1)(b) GDPR – conclusion, performance or termination of a contract with you; Art. 6(1)(c) GDPR – compliance with legal obligations under labour and social security law; Art. 6(1)(f) GDPR – our legitimate interest in efficient work organisation processes and the sharing of work and services within Alimat Group, as well as our legitimate interest in maintaining client relationships. We process special categories of data only on the basis of your consent under Art. 6(1)(a) GDPR and to the extent we are obliged to do so under labour and social security law and for reasons of equal opportunities. In such cases your data is processed on the basis of Art. 9(2)(b), (g) and (h) GDPR. | We collect the data directly from you. We may also collect your data from third parties such as: referees, e.g. previous employers or former clients, to confirm references and qualifications; educational institutions; publicly available professional networks such as LinkedIn, StepStone or Xing, to supplement the information we already have about you so that we have a better chance of finding suitable positions for you; clients to whom we have sent your CV and who have contacted you about your job application. We will only contact those referees whom you have named to us during the application process and while using our services. | In order to provide our employment services, we may share your personal data with potential employers offering positions you are interested in. In the context of the processing described here, both internal and external service providers may also have access to your data. These include processors and our data controllers in the following areas: IT support, hosting, IT services, IT solutions improving service quality, data analysis, recruitment support, sales, administration and management of global, regional or managerial positions or key account development within Page Group, forwarding and logistics companies, telecommunications providers, professional network providers, providers of psychometric assessments or skills tests. Our contractors are contractually obliged by us to maintain confidentiality and to comply with data protection standards and regulations. |
| We process your data when you register with us and share your application data with us and, ultimately, with potential employers. If you register with several Alimat Group companies, we will combine the candidate data you provide into a single data record and a single candidate account. A single record helps avoid duplicates and ensures that personal data is accurate. For this reason the relevant Alimat Group companies will share your personal data as independent controllers. | In this context we may process the following data: first name and surname, name and address, telephone number, email address, information contained in your CV, information about your education, references, work experience, employment certificates, salary expectations, career aspirations. In some cases, special categories of data such as: disability, health information, criminal convictions and offences. | The processing is based on the following legal grounds: Art. 6(1)(b) GDPR – conclusion, performance or termination of a contract with you in order to provide the candidate registration service; Art. 6(1)(f) GDPR – our legitimate interest in efficient work organisation processes and the sharing of work and services within Alimat Group, as well as our legitimate interest in maintaining client relationships. In this case we process special categories of data only on the basis of your consent under Art. 6(1)(a) and Art. 9(2)(a) GDPR. | We collect the data directly from you. | If you apply for a specific position, we will pass your data to the potential employer you have chosen. In the context of the processing described here, the internal and external service providers described above may also have access to your data. |
| We process your data in order to send you promotional information, newsletters and other electronic promotional information, to keep you informed about job opportunities, industry reports and insights, events and other content. | In this context we may process the following data: first name and surname, name, email address, telephone number, marketing information and job preferences. | The processing is based on the following legal grounds: Art. 6(1)(a) GDPR – your consent; Art. 6(1)(f) GDPR – our legitimate interest in direct marketing and sending advertising content. | We collect the data directly from you. | In the context of the processing described here, the internal and external service providers described above may also have access to your data: marketing, sales, IT solutions, IT support, postal and courier services, telecommunications, data analysis. |
| We process your data in order to send you satisfaction surveys to find out whether you are satisfied with our services, so that we can improve our existing services and develop new ones. | In this context we may process the following data: first name and surname, name, email address, previous placements and services provided, information given in the satisfaction questionnaire. | The processing is based on the following legal grounds: Art. 6(1)(a) GDPR – your consent; Art. 6(1)(f) GDPR – our legitimate interest in direct marketing and sending advertising content, as well as in improving and developing our services. | We collect the data directly from you. | In the context of the processing described here, the internal and external service providers described above may also have access to your data: marketing, sales, IT solutions, IT support, postal and courier services, telecommunications, data analysis, survey service providers, service providers carrying out testing and development, and providers of research, mailing or other direct marketing services. |
| In some cases it may be necessary to verify the information you have provided about your employment history or to check whether you have the qualifications and reliability required for a particular position. In such cases we carry out a so-called background check. For this purpose we consult referees and educational institutions. We also carry out internet research using search engines and publicly available online databases. In addition, we review national and international press. Only in very limited cases, and only to the extent we are legally obliged to do so, do we compare your basic data with sanctions lists and other public lists and registers, including terrorist and embargo lists and PEP lists (politically exposed persons). | In this context we may process the following data: first name and surname, name and address, telephone number, email address, information contained in your CV, information about your education, references, work experience, employment certificates, results of security checks, nationality, residence and work permits, photographs, language skills, results of integrated assessment tests, criminal convictions and offences (e.g. employment fraud, economic crime, organised crime), breaches of competition or antitrust law, breaches of other legal requirements or regulations, insolvency, existing conflicts of interest. | The processing is based on the following legal grounds: Art. 6(1)(a) GDPR – your consent; Art. 6(1)(c) GDPR – our legal obligation to carry out background checks; Art. 6(1)(b) GDPR – conclusion, performance or termination of a contract with you; Art. 6(1)(f) GDPR – our legitimate interest in carrying out background checks to verify information about you, our legitimate interest in carrying out background checks to fulfil our clients’ legal obligations, and our clients’ legitimate interest in carrying out background checks to ensure the required suitability and reliability for special positions and to verify information about you. | We collect the data directly from you. We may also collect your data from third parties such as: referees, such as previous employers or former clients, to check your details; educational establishments, to check your educational qualifications; publicly available professional networks such as LinkedIn, Xing or StepStone; sanctions lists and other public lists and registers, including terrorist and embargo lists and PEP lists; public sources, telephone directories, press articles and generally accessible databases. We will only contact those referees whom you have named to us during the selection process and while using our services. | In the context of the processing described here, the internal and external service providers described above may also have access to your data: IT security, IT solutions, hosting, telecommunications, service providers carrying out professional reference checks, service providers carrying out qualification checks, service providers carrying out criminal record checks (where required), service providers verifying information you have provided against external sources, and providers of psychometric assessments or skills tests. Our contractors are contractually obliged by us to maintain confidentiality and to comply with data protection standards and regulations. |
| Conducting talent trend surveys In order to continually improve and update our services, we will selectively invite people to take part in talent trend surveys. | In this context we may process the following data: first name and surname, name, previous placements and services provided, email address, information contained in the survey questionnaire. | The processing is based on the following legal grounds: Art. 6(1)(a) GDPR – your consent; Art. 6(1)(f) GDPR – our legitimate interest in identifying current talent trends and further developing our services and offers. | We collect the data directly from you. | In the context of the processing described here, the internal and external service providers described above may also have access to your data: marketing, market research, market analysis, sales, IT solutions, IT support, postal and courier services, telecommunications, data analysis. |
Potential candidates and clients
| Purpose | Data categories | Legal basis / legitimate interest | Data collection | Categories of recipients |
| We process your personal data in order to present our services and to contact you and respond to your enquiries. We process the personal data you give us when you contact us and make an enquiry. We may also process data about you obtained from publicly available sources and from professional and social networks such as LinkedIn, Xing, StepStone, companies or other job portals in order to contact you if we believe you may be interested in our employment services. We may also learn about a candidate through a recommendation from another candidate or client and contact them. If you act as a contact person on behalf of a company, we will process your business contact details. | In this context we may process the following data: first name and surname, name and address, position in the company, telephone number, email address, professional contact details, the name of the company you work for, information contained in your CV, professional profile or company profile, information about your education, references, work experience, employment certificates, salary expectations, career aspirations, open job ads, nationality, photographs, language skills, status on professional networks, e.g. openness to job offers. | Art. 6(1)(a) GDPR – your consent; Art. 6(1)(b) GDPR – conclusion, performance or termination of a contract with you; Art. 6(1)(f) GDPR – our legitimate interest in direct marketing and in distributing our recruitment and job placement services, as well as our legitimate interest in acquiring new business contacts, clients and potential candidates. | We collect the data directly from you. We may also collect your data from third parties such as: publicly available professional networks, websites, press articles, job ads, professional networks such as LinkedIn, StepStone, Freelance.de, Xing, etc., your professional or company profiles published in public databases, other candidates or clients. | In the context of the processing described here, the internal and external service providers described above may also have access to your data: marketing, sales, IT solutions, IT support, postal and courier services, telecommunications, data analysis. |
Clients (B2B) and our contacts
| Purpose | Data categories | Legal basis / legitimate interest | Data collection | Categories of recipients |
| We process your data in order to provide you with our recruitment services. In this context we process the data of you and your business contacts in order to communicate with you and find suitable candidates for vacancies. | In this context we may process the following data: company name, first name and surname, name and address, contact details of business contacts, telephone number, your feedback on candidates, contract and accounting data, information about vacancies and requirement profiles. | Art. 6(1)(b) GDPR – conclusion, performance or termination of a contract with you; Art. 6(1)(f) GDPR – our legitimate interest in efficient work organisation processes and the sharing of work and services within Alimat Group. | We collect the data directly from you. We may also collect your data from third parties such as: publicly available professional networks, websites, press articles, job ads, professional networks such as LinkedIn, StepStone, Freelance.de, Xing, etc., your professional or company profiles published in public databases, other clients and candidates. | In the context of the processing described here, the internal and external service providers described above may also have access to your data: marketing, sales, IT solutions, IT support, postal and courier services, telecommunications, data analysis, accounting, administration, banking, management of global, regional or senior management positions, or key account development requiring cooperation between different companies across the group. |
| We process your data in order to send you satisfaction surveys to find out whether you are satisfied with our services, so that we can improve our existing services and develop new ones. | In this context we may process the following data: company name, first name and surname, name and address, business contact details, telephone number, previous placements and services provided. | The processing is based on the following legal grounds: Art. 6(1)(a) GDPR – your consent; Art. 6(1)(f) GDPR – our legitimate interest in direct marketing and sending advertising content and in further developing our services and offers. | We collect the data directly from you. | In the context of the processing described here, the internal and external service providers described above may also have access to your data: marketing, market analysis, sales, IT solutions, IT support, postal and courier services, telecommunications, data analysis. |
| We process your data in order to send you promotional information, newsletters and other electronic promotional information, to keep you informed about job opportunities, industry reports and insights, events and other content. | In this context we may process the following data: first name and surname, name, email address, telephone number, marketing information and job preferences. | The processing is based on the following legal grounds: Art. 6(1)(a) GDPR – your consent; Art. 6(1)(f) GDPR – our legitimate interest in direct marketing and sending advertising content. | We collect the data directly from you. | In the context of the processing described here, the internal and external service providers described above may also have access to your data: marketing, newsletter delivery, sales, IT solutions, IT support, postal and courier services, telecommunications, data analysis. |
Service providers and our business contacts at our service providers
| Purpose | Data categories | Legal basis / legitimate interest | Data collection | Recipients of your data |
| We process your personal data in order to conclude a service contract with you, receive services from you and communicate with you in the context of our business relationship. We also process your data for accounting purposes. | In this context we may process the following data: company name, first name and surname, name and address, contact details of contact persons, telephone number, overview of services provided, contract and accounting data. | The processing is based on the following legal grounds: Art. 6(1)(b) GDPR – conclusion, performance or termination of a contract with you; Art. 6(1)(f) GDPR – our legitimate interest in efficient work organisation processes and the sharing of work and services within Alimat Group. | We collect the data directly from you. | In the context of the processing described here, the internal and external service providers described above may also have access to your data: marketing, sales, IT solutions, IT support, postal and courier services, telecommunications, data analysis, accounting, administration, banking. |
| We process your personal data in order to assess your suitability as our supplier. To ensure legal compliance, in very limited cases and only to the extent we are legally obliged to do so, we compare your basic data with sanctions lists and other public lists and registers, including terrorist and embargo lists and PEP lists (politically exposed persons). | In this context we may process the following data: company name, first name and surname, name and address, contact details of contact persons, telephone number, references. | The processing is based on the following legal grounds: Art. 6(1)(c) GDPR – our legal obligation to carry out background checks; Art. 6(1)(b) GDPR – conclusion, performance or termination of a contract with you; Art. 6(1)(f) GDPR – our legitimate interest in carrying out assessments to determine your suitability. | We collect the data directly from you. We may also use data from public registers and sanctions lists. | In the context of the processing described here, the internal and external service providers described above may also have access to your data: procurement, IT solutions, IT support, postal and courier services, telecommunications, administration. |
Processing data to comply with legal obligations and to establish and defend legal claims
| Purpose | Data categories | Legal basis / legitimate interest | Data collection | Recipients of your data |
| We process your data to the extent necessary to fulfil official control, monitoring and audit obligations, including official information and notification obligations, as well as obligations under commercial or tax law. | In this context we process the following data: company name, first name and surname, name and address, contact details of contact persons, telephone number, overview of services provided, contract and accounting data, and other required data. | The processing is based on the following legal ground: Art. 6(1)(c) GDPR – compliance with legal obligations | We collect the data directly from you. | In the context of the processing described here, the following recipients may have access to your data: law enforcement authorities or other public bodies, courts, lawyers, consultants. |
| In individual cases we also process your data in order to establish and defend legal claims. | In this context we process the following data: company name, first name and surname, name and address, contact details of contact persons, telephone number, overview of services provided, contract and accounting data, and data required to establish and defend claims. | The processing is based on the following legal ground: Art. 6(1)(f) GDPR – our legitimate interest in defending against and pursuing legal claims. | We collect the data directly from you. | In the context of the processing described here, the following recipients may have access to your data: lawyers, consultants, courts, mediators. |
| We will process your data in the event of a restructuring, merger, sale, joint venture, assignment or other transfer or disposal of all or part of our business, to the extent necessary for those purposes. | In this context we process the following data: company name, first name and surname, name and address, contact details of contact persons, telephone number, overview of services provided, contract and accounting data. | The processing is based on the following legal grounds: Art. 6(1)(f) GDPR – our legitimate interest in the restructuring, merger, sale, joint venture, assignment or other transfer or disposal of all or part of our business; Art. 6(1)(a) – your consent. | We collect the data directly from you. | In the context of the processing described here, the following recipients may have access to your data: lawyers, new business owners and their advisers, courts. |
| We also process your personal data in order to fulfil our obligations under data protection law, in particular to guarantee your rights as a data subject. | In this context we process the following data: company name, first name and surname, name and address, contact details of contact persons, telephone number, contract and billing data, data protection declarations (e.g. consent to processing), declarations withdrawing consent you have given, objections to the processing of personal data, declarations exercising rights of access, rectification, erasure, restriction of processing and data portability, including the information you give us when exercising your rights. | The processing is based on the following legal ground: Art. 6(1)(c) GDPR – compliance with legal obligations | We collect the data directly from you. | In the context of the processing described here, the following recipients may have access to your data: lawyers, courts, internal and external service providers in the areas of administration, compliance, data protection and support. |
Cookies, analytics tools and social media
We use social media and various cookies and other analytics technologies on our website. More information can be found in our Cookie Policy.
Automated decisions and profiling
We do not make decisions based solely on automated processing; human intervention is always required before a decision is made.
We create two types of profiles based on candidates’ personal data:
- ………………….. is a tool available on our website that allows candidates to upload their CV. Matched to the skills, career aspirations and information in the CV, this tool helps us recommend job offers that fit the candidate’s aspirations and skills. However, this profiling does not limit or prevent access to other positions.
- We use an analytics tool based on semantic search technology (a type of artificial intelligence) that lets us intelligently search and filter CVs in our database. When relevant keywords such as years of experience or field of practice are entered into the tool, all submitted CVs are analysed and a pool of candidates is produced by matching the keywords in the candidates’ CVs and ranking candidates by their suitability for the job. We use it to streamline our recruitment processes by matching candidates better to more suitable job offers. As explained above, this process is always supervised by a recruiter, so decisions are not made in an automated way.
Please note that none of these profiling activities has any significant legal or similar effects on candidates. However, if you would like to know more, you can contact us.
Transfers of data to countries outside the EEA
In some cases we also process your personal data outside the European Economic Area (EEA). If data is transferred to one of the recipients mentioned above whose registered office or place of data processing is located outside the EEA or in a country for which an adequate level of data protection has not been established by a decision of the European Commission, before the transfer we will make sure that it is legally permitted and that there are guarantees of an adequate level of data protection for the transfer (e.g. through contractual guarantees, officially recognised rules or binding corporate data protection rules at the recipient), or that you have consented to the transfer.
Intra-group data transfers outside the EEA
Alimat Group is a group of companies operating globally. Our recruitment experts and key business staff in departments such as recruitment support, payroll and IT support are located around the world. For the purposes mentioned above, in the context of our cooperation within Alimat Group, we transfer your personal data in accordance with Art. 44 et seq. GDPR also to Alimat Group companies outside the EEA, or allow employees working at Alimat Group companies outside the EEA to access your personal data for the purposes of our cooperation and the performance of our contractual obligations towards you. The list of Alimat Group entities located outside the EEA.
If, for example, you are located in Germany in connection with the job you are looking for, or if you are looking for a qualified specialist to join your organisation or a recruitment partner, where necessary we share your personal data with our recruiters specialising in the German market who are based in Turkey (details of the Turkish company can be found in the list mentioned above). They process users’ personal data on behalf of our German entities. For this transfer, an adequate level of data protection is ensured under the company’s intra-group agreement and the SCCs, as described below.
We have an intra-group data transfer agreement containing the Standard Contractual Clauses (SCCs) approved by the European Commission, which allow cross-border transfers of personal data from the EEA to third countries outside the EEA (as data protection laws outside the EEA may not provide a level of protection equivalent to that in the EEA).
To obtain a copy of the SCCs, please contact us using the contact details below.
Data transfers to external service providers outside the EEA
For the purposes mentioned above we use IT service providers located in the United Kingdom, the USA and Israel. To protect your data, we have concluded Standard Contractual Clauses (SCCs) where required.
To obtain a copy of the SCCs, please contact us using the contact details below.
Security of your personal data
We have implemented and maintain appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. Only authorised employees and external service providers have access to personal data, on a strict need-to-know basis and subject to a contractual obligation to treat the information as confidential.
How long we keep your personal data
We will keep your personal data for as long as necessary to fulfil the purpose for which we collected it, which may be an ongoing purpose. For example, if you are a candidate, we will keep your personal data for the entire duration of our business relationship with you and beyond, as we often support candidates for many years and potentially throughout their careers.
We keep some personal data longer than other data. When determining the appropriate retention period, we take into account factors such as the purposes for which we process the personal data, including legal, regulatory, accounting and reporting obligations, the nature and amount of your personal data, and the potential risk of harm to you from unauthorised use or disclosure of the personal data.
If we process your personal data for direct marketing purposes, we will do so until you ask us to stop and for a short time afterwards (to allow us to implement your request). To be able to comply with your request, we also keep a record of your request to stop direct marketing or to permanently stop processing your data.
Your data protection rights
EU data protection law gives you a number of rights in relation to the processing of your data. These include the right to withdraw consent under Art. 7(3) GDPR, the right to access your personal data and request a copy of it (Art. 15 GDPR), the right to rectification (Art. 16 GDPR), erasure (Art. 17 GDPR) or restriction of processing of your personal data (Art. 18 GDPR), and the right to receive the personal data you have provided to us in a structured, machine-readable format and to ask us to transfer this data to another controller (Art. 20 GDPR).
Under Art. 21 GDPR, you have the right to object at any time, on grounds relating to your particular situation, to our processing of your data where it is based on Art. 6(1)(e) GDPR or on the protection of “legitimate interests” under Art. 6(1)(f) GDPR. If you exercise your right to object, we will stop processing the data unless we can demonstrate compelling legitimate grounds for further processing that override your rights and interests.
You can withdraw consent you have given to receive marketing communications or opt out of processing for direct marketing purposes by following the steps described in our communications and unsubscribing from marketing communications, or by contacting us using the contact details given in this Privacy Policy.
Please note that in some cases these rights may be limited. Your rights may be limited, for example, if complying with your request would reveal personal data about another person, if it would infringe the rights of a third party (including our rights), or if you ask us to delete information we are required by law to keep or have a legitimate interest in keeping. When responding to your request, we will inform you of any relevant exemptions we rely on.
In addition, for processing operations based on the Companies’ legitimate interests, we have carried out a legitimate interests assessment to make sure our interests do not override your interests or fundamental rights and freedoms; you can request this assessment through the contact persons listed at the end of this Privacy Policy.
Questions and complaints
If you have any questions about this Privacy Policy or the processing of personal data, or wish to make a complaint, you can email us or our data protection officer at iod@alimatgroup.com .
If you have unresolved concerns or believe your personal data has been infringed, you can lodge a complaint with the competent supervisory authority. A list of the relevant authorities in the EEA is available here.
Internal reporting procedure
In order to maintain high ethical standards at ALIMAT GROUP sp. z o.o., a new internal reporting procedure has been introduced. The purpose of this procedure is for ALIMAT GROUP sp. z o.o., based in Kraków, to provide balanced and effective protection for persons reporting breaches, in line with recitals 1 and 2 of Directive (EU) 2019/1937 of the European Parliament and of the Council of 23 October 2019 on the protection of persons who report breaches of Union law, which was implemented in Poland by the Act of 14 June 2024 on the protection of whistleblowers.
A detailed description of the procedure, including information on how to make a report, can be found in the file available via the link below:
Alimat Group internal reporting procedure (PDF, in Polish)Contact
Exercising your rights
To exercise your rights, withdraw consent to processing or unsubscribe from our commercial communications, you can contact us or our data protection officer at: iod@alimatgroup.com
Alimat Group, Marchołta 55/3, 31-416 Kraków, Poland
Changes to our Privacy Policy
We may change this privacy policy at any time. Any material changes to this privacy policy will be duly published on this website and, where appropriate, communicated through other communication channels.