Last updated: July 2026
This Privacy Policy explains how Ahoy Career Group PSA collects, uses and protects personal data when you use our website, contact us, subscribe to our newsletter, apply for job opportunities or interact with our recruitment and marketing campaigns.
We process personal data in accordance with the General Data Protection Regulation, commonly known as GDPR. GDPR gives individuals rights such as access to their data, correction, deletion and withdrawal of consent in certain cases.
1. Data Controller
The controller of your personal data is:
AHOY CAREER GROUP PROSTA SPÓŁKA AKCYJNA
Burakowska 5/7
01-066 Warsaw
Poland
KRS: 0001173810
NIP: 5273165926
REGON: 541775452
Contact email: [email protected]
2. What data we collect
Depending on how you interact with us, we may collect the following personal data:
Website and contact data
name and surname, email address, phone number, message content, company name, IP address, browser data, website usage data and cookie-related data.
Newsletter data
email address, name if provided, subscription status, consent information, newsletter engagement data such as opens and clicks.
Candidate and recruitment data
CV, name and surname, email address, phone number, location, language skills, work experience, education, salary expectations, availability, job preferences, LinkedIn profile or other professional links, communication history and information provided during the recruitment process.
Marketing campaign data
data submitted through forms connected with our performance marketing campaigns, including lead forms, landing pages, recruitment forms and social media campaigns.
We may also receive candidate data directly from candidates, from job boards, social media platforms, referral sources, recruitment campaigns or business partners involved in recruitment projects.
3. Why we process your data
We process personal data for the following purposes:
Recruitment and candidate matching
to assess your profile, contact you about job opportunities, match you with relevant roles, manage recruitment communication and present your profile to potential employers or recruitment partners where appropriate.
Candidate database
to keep candidate profiles in our recruitment database so we can contact candidates about future job opportunities matching their experience, language skills and career goals.
Newsletter
to send newsletters, updates, career content, job-related information and marketing communication to people who subscribed to receive such content.
Performance marketing
to run and measure recruitment and marketing campaigns, including campaigns on social media, search engines, advertising platforms and landing pages.
Website analytics and improvement
to understand how users interact with our website and improve content, functionality and user experience.
Business communication
to respond to messages, manage enquiries, communicate with clients, partners and candidates and maintain business relationships.
Legal and security purposes
to comply with legal obligations, protect our rights, prevent misuse, maintain website security and handle potential claims.
4. Legal basis for processing
We process personal data based on one or more of the following legal grounds under GDPR:
Consent
for newsletter subscription, some marketing communication, future recruitment contact where consent is required, and some cookies or tracking technologies. Consent is one of the legal bases under GDPR and must be given freely and clearly.
Steps before entering into a contract
when we process candidate data to support a recruitment process or job application.
Legitimate interest
for running recruitment operations, maintaining candidate databases, contacting candidates about relevant opportunities, conducting business communication, running basic analytics, protecting our website and improving our services.
Legal obligation
where we must process or retain certain information to comply with applicable law.
5. Newsletter
If you subscribe to our newsletter, we use your email address to send you updates, career content, job-related information and marketing communication.
You can unsubscribe at any time by using the unsubscribe link in the email or by contacting us at [email protected].
Newsletter data is processed until you unsubscribe or withdraw your consent, unless we need to keep limited information to prove consent, manage suppression lists or comply with legal obligations. The European Commission’s own newsletter privacy statement follows the same basic approach: newsletter data is kept for the purpose of delivery until the user unsubscribes.
6. Candidate CVs and recruitment database
If you send us your CV, apply through one of our forms or respond to one of our recruitment campaigns, we may store your data in our recruitment database.
We use this data to:
assess your profile for current recruitment processes, contact you about job opportunities, match your profile with suitable roles, communicate with employers or recruitment partners, and contact you about future opportunities if allowed by law or based on your consent.
We may share selected candidate information with potential employers, clients or recruitment partners only where it is relevant to a recruitment process and where we have a valid legal basis to do so.
If you want us to delete your CV or remove you from our candidate database, contact us at:
7. How long we keep your data
We keep personal data only for as long as necessary for the purpose for which it was collected.
Indicative retention periods:
Newsletter data
until you unsubscribe or withdraw consent.
Candidate data and CVs
for the duration of the recruitment process and, if you agree to future contact or where we have a legitimate interest, for future recruitment opportunities.
Contact form and business communication data
for the time needed to handle the enquiry and maintain business communication.
Marketing and analytics data
for the period required by the relevant tools, platforms or cookie settings.
Legal and claim-related data
for the period required by law or until potential claims expire.
Where possible, we remove, anonymise or limit access to data that is no longer needed.
8. Who we share data with
We may share personal data with:
clients and employers involved in recruitment processes, recruitment partners, IT and hosting providers, email and newsletter tools, CRM and candidate database providers, analytics and advertising platforms, legal/accounting advisors, and public authorities where required by law.
We do not sell personal data.
Some tools we use may process data outside the European Economic Area. In such cases, we aim to use appropriate safeguards required under GDPR, such as standard contractual clauses or equivalent legal mechanisms.
9. Cookies and tracking technologies
Our website may use cookies and similar technologies.
These may be used for:
website functionality, analytics, performance marketing, remarketing, measuring campaign effectiveness and improving user experience.
Some cookies may come from third-party platforms such as analytics tools, advertising platforms, social media platforms or embedded content providers.
Where required, we ask for cookie consent. You can manage cookies through your browser settings or, where available, through our cookie consent tool.
10. Performance marketing
We rely on performance marketing to reach candidates and employers. This may include paid campaigns on advertising platforms, social media, search engines, landing pages and lead generation forms.
When you submit your data through a campaign form, we may use it to contact you about a job opportunity, recruitment process, newsletter or other relevant service depending on the form and consent you provided.
Advertising platforms may also process certain technical and behavioural data according to their own privacy policies.
11. Your rights
Under GDPR, you may have the right to:
access your personal data, correct inaccurate data, request deletion of data, restrict processing, object to processing, request data portability, withdraw consent, and lodge a complaint with a supervisory authority.
The European Commission explains these GDPR rights as including the right to know what data is collected, why it is collected, who it is shared with, and the right to request access, correction or deletion.
To exercise your rights, contact us at:
If you are in Poland, you may also contact the Polish data protection authority:
Prezes Urzędu Ochrony Danych Osobowych
ul. Stawki 2
00-193 Warsaw
Poland
12. Security
We use organisational and technical measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.
Access to candidate and client data is limited to people who need it for recruitment, marketing, business or technical purposes.
13. Changes to this Privacy Policy
We may update this Privacy Policy from time to time, especially if our services, tools, legal obligations or data processing practices change.
The latest version will be available on this page.