Privacy Policy and Cookies Policy
Last updated: 7 September 2026
1. General information
This Privacy Policy sets out the rules for processing the personal data of users of skilldocs.pl, SKILLDOCS clients and persons who contact SKILLDOCS through the website, contact forms, email, telephone, messaging applications or other available communication channels.
This Policy also contains information regarding the use of cookies and similar technologies.
Personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR), as well as other applicable provisions of Polish and European law.
2. Personal data controller
The controller of personal data is:
SKILLDOCS sp. z o.o.
ul. Wincentego Rzymowskiego 30, lok. 323
02-697 Warszawa, Poland
KRS: 0000966749
NIP: 5252904413
REGON: 521786477
Contact regarding the processing of personal data:
3. What personal data we may process
The scope of personal data processed depends on how the website is used and on the selected service.
SKILLDOCS may process, in particular:
- first name and surname
- telephone number
- email address
- the content of a message or enquiry
- company name and information relating to business activity
- data provided through forms available on the website
- information concerning the selected service or a service in which the user is interested
- partner code and information regarding the source of a referral
- data required to prepare and conclude a contract
- data required to perform a contract
- billing and accounting data
- data contained in documents provided in connection with the performance of an ordered service
- IP address
- information about the browser, device and operating system
- information regarding pages visited and activity on the website
- identifiers related to cookies and similar technologies
- information regarding consents granted and withdrawn
SKILLDOCS aims to process only the personal data necessary for a specific purpose.
Special categories of personal data, data concerning criminal convictions or other particularly sensitive information should not be submitted through ordinary contact forms unless such data is directly necessary for a specific service or has been expressly requested by SKILLDOCS.
4. Where we obtain personal data from
In most cases, personal data is obtained directly from the user.
This occurs, in particular, when the user:
- completes a form on the website
- sends an email
- contacts us by telephone
- contacts us through a messaging application
- requests a consultation
- concludes a contract
- provides documents required for the performance of a service
- submits an application to participate in the partner programme
In certain cases, SKILLDOCS may receive contact details from a partner or another person who recommends SKILLDOCS services.
Where personal data has not been obtained directly from the person concerned, SKILLDOCS fulfils the information obligations under Article 14 GDPR unless an exemption provided by law applies.
At the time of first contact, such a person may be informed of the source from which their contact details were obtained and may be provided with access to this Privacy Policy.
A partner transferring another person's personal data should have an appropriate legal basis for doing so.
5. Purposes and legal bases for processing personal data
Responding to an enquiry
Where a user contacts SKILLDOCS on their own initiative with a question concerning a service, their personal data may be processed in order to respond to the enquiry, prepare an offer and take steps at the user's request prior to the possible conclusion of a contract.
Legal basis:
Article 6(1)(b) GDPR.
Where an enquiry is not related to the possible conclusion of a contract, the legal basis may also be Article 6(1)(f) GDPR - the legitimate interest of SKILLDOCS in conducting correspondence and responding to enquiries.
Conclusion and performance of a contract
A client's personal data is processed to the extent necessary to conclude and perform a contract, organise the ordered service and communicate with the client.
Legal basis:
Article 6(1)(b) GDPR.
Compliance with legal obligations
Personal data may be processed in order to comply with accounting, tax and other legal obligations imposed on SKILLDOCS.
Legal basis:
Article 6(1)(c) GDPR.
Establishment, exercise and defence of claims
Personal data may be processed for the establishment, exercise or defence of claims connected with a contract, service, correspondence or use of the website.
Legal basis:
Article 6(1)(f) GDPR - the legitimate interest of SKILLDOCS in protecting its rights.
Website security
Technical data may be processed to ensure website security, prevent abuse, detect errors and protect IT systems.
Legal basis:
Article 6(1)(f) GDPR.
Analytics and marketing technologies
Where the use of specific analytics or marketing technologies requires the user's prior consent, such technologies are used only after the relevant consent has been given.
The legal basis for processing personal data in such a case is:
Article 6(1)(a) GDPR.
Marketing communications
Commercial information and direct marketing by email, telephone or other means of electronic communication are carried out only where an appropriate legal basis exists and, where required by law, after the user's prior consent has been obtained.
Consent to marketing is not a condition for submitting an ordinary contact form or receiving a response to an enquiry submitted by the user.
6. Is providing personal data mandatory?
Providing personal data through a contact form is voluntary.
However, failure to provide data necessary to respond to an enquiry may make it impossible to provide a response.
Where personal data is necessary to conclude or perform a contract, failure to provide it may make it impossible to conclude the contract or provide the relevant service.
Where specific personal data is necessary to comply with a legal obligation, failure to provide such data may make it impossible to provide the relevant service.
7. Recipients of personal data
Personal data may be disclosed only to the extent necessary for the relevant purpose.
Recipients of personal data may include:
- hosting and server infrastructure providers
- IT service and technical support providers
- website management system providers
- CRM and customer service system providers
- email and electronic communication service providers
- analytics and advertising tool providers
- accounting and tax service providers
- legal advisers
- postal and courier operators
- contractors and partners involved in the performance of the ordered service
- public authorities and other authorised entities where disclosure is required by law
Entities processing personal data on behalf of SKILLDOCS are required to process it in accordance with applicable law and relevant agreements where such agreements are required.
8. Google, Meta and other external tools
The website may use tools provided by Google and Meta, including tools for tag management, analytics, advertising effectiveness measurement and advertising campaigns.
Where a particular tool uses cookies or similar technologies requiring prior consent, it is activated only after the relevant consent has been given.
Depending on the tool used and the settings selected by the user, the following data may be processed:
- IP address
- technical information about the device
- browser information
- cookie identifiers
- information about pages visited
- information about interaction with the website
- events related to advertising campaigns
The technologies actually used depend on the current configuration of the website and the choices made by the user.
9. Transfers of personal data outside the European Economic Area
Some providers of technology, analytics or advertising services may process personal data outside the European Economic Area.
Such transfers are carried out only using a legal mechanism provided for under the GDPR.
Depending on the specific recipient, the following safeguards may be used:
- a European Commission adequacy decision
- the EU-U.S. Data Privacy Framework for certified organisations
- European Commission Standard Contractual Clauses
- other mechanisms provided for under the GDPR
Information regarding the safeguards applied may be obtained by contacting contact@skilldocs.pl.
10. Personal data retention periods
Personal data is retained no longer than necessary for the purposes for which it was collected.
Enquiries and correspondence
Personal data is processed for the period necessary to handle an enquiry and conduct the relevant correspondence.
After the correspondence has ended, personal data may be retained for the period necessary to establish, exercise or defend potential claims.
Client data
Personal data connected with a contract is processed for the duration of the contract and its performance.
After the contract has ended, personal data may be retained for the period necessary to comply with legal obligations and until the expiry of applicable limitation periods for claims.
Accounting and tax data
Such personal data is retained for the periods required by applicable accounting and tax legislation.
Data processed on the basis of consent
Where consent is the sole legal basis for processing, personal data is processed until the consent is withdrawn or until the purpose of processing ceases to exist.
Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.
Cookies
The retention period of individual cookies depends on their type, provider and purpose.
Up-to-date information regarding cookie retention periods is available through the Cookiebot system.
11. Cookies and similar technologies
The website uses cookies and similar technologies.
Cookies allow certain information to be stored on or accessed from the user's device.
The website may use the following categories of cookies:
Necessary cookies
These cookies are necessary for the proper and secure functioning of the website and for providing functions directly requested by the user.
Where applicable law permits such technologies to be used without separate consent, the user's consent is not required.
Functional cookies
These cookies may be used to remember settings selected by the user and to provide additional website functions.
Where consent is required by law, they are used only after such consent has been given.
Statistical and analytics cookies
These cookies are used to analyse the operation of the website and how users interact with its content.
Where their use requires consent, they are activated only after consent has been given.
Marketing cookies
These cookies may be used to measure advertising effectiveness, create advertising audiences and display advertising content.
Such technologies are used only after the required consent has been obtained.
12. Cookiebot and consent management
The website uses Cookiebot to manage consent regarding the use of cookies.
When visiting the website, the user may choose which categories of cookies to allow.
Refusing optional cookies should not prevent access to the main content of the website.
The user may change or withdraw consent at any time using the cookie settings function available on the website.
Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
Up-to-date information regarding individual cookies, their purposes, providers and retention periods is available through Cookiebot.
13. Rights of data subjects
In the cases provided for under the GDPR, a person whose personal data is processed has the right to:
- receive information regarding the processing of their personal data
- obtain access to their personal data
- request rectification of personal data
- request erasure of personal data
- request restriction of processing
- exercise the right to data portability where applicable
- object to processing based on Article 6(1)(f) GDPR
- withdraw consent where processing is based on consent
- lodge a complaint with the supervisory authority
To exercise these rights, please contact:
Certain rights may be subject to limitations provided for by law, for example where continued retention of personal data is necessary to comply with a legal obligation or to establish, exercise or defend legal claims.
14. Right to object
Where personal data is processed on the basis of the legitimate interests of SKILLDOCS pursuant to Article 6(1)(f) GDPR, the data subject has the right to object to such processing on grounds relating to their particular situation.
Where personal data is processed for direct marketing purposes, the data subject has the right to object at any time to processing for such purposes.
15. Right to lodge a complaint
A person who believes that their personal data is being processed in breach of applicable law has the right to lodge a complaint with the Polish supervisory authority:
Prezes Urzędu Ochrony Danych Osobowych
ul. Stanisława Moniuszki 1A
00-014 Warszawa
Poland
16. Automated decision-making
SKILLDOCS does not make decisions concerning users based solely on automated processing of personal data that would produce legal effects concerning the user or similarly significantly affect the user, unless such processing is separately introduced and the user is appropriately informed.
Analytics and advertising tools may use technologies to create audiences or classify users for advertising purposes in accordance with the consents given and the rules of the relevant providers.
17. Data security
SKILLDOCS applies technical and organisational measures appropriate to the nature of the personal data processed and the risks associated with its processing.
Access to personal data is granted only to persons who require such access in order to perform their duties.
The connection to the website is protected using HTTPS.
Use of the Internet always involves certain technical risks, and users should also ensure the security of their own devices, software and access credentials.
18. External websites and services
The website may contain links to external websites, social networks, maps, messaging applications and other third-party services.
After accessing an external website, personal data is processed in accordance with the rules established by the relevant provider.
SKILLDOCS does not determine the data processing rules applied by independent controllers of external services.
19. Changes to the Privacy Policy
This Policy may be amended, in particular, due to changes in applicable law, website functionality, technologies used or methods of processing personal data.
The current version of the Policy is published on skilldocs.pl.
The date of the latest update is indicated at the beginning of this document.
20. Contact
For matters concerning the processing of personal data, please contact:
SKILLDOCS sp. z o.o.
ul. Wincentego Rzymowskiego 30, lok. 323
02-697 Warszawa
Poland
