Privacy Policy

1. Data Controller

The data controller of personal data is VELN sp. z o.o., with its registered office in Wrocław, ul. Gwiaździsta 66 lok. 12.B.03, 53-413 Wrocław, KRS (National Court Register) 0001052523, NIP (Tax ID) 8971926158 ("Veln"). Contact for personal data matters: biuro@veln.pl.

2. What data we process and why

We process data submitted through the forms on this website (first and last name, company, phone number, e-mail address, message content) in order to handle your inquiry and to contact you regarding potential cooperation - on the basis of Article 6(1)(b) and (f) GDPR (steps taken prior to entering into a contract; legitimate interest in handling correspondence). We process the data of job candidates as part of recruitment processes carried out on the MyVeln platform, in accordance with the separate information provided at the time of application.

3. How long we store data

We store data from the contact form for as long as necessary to handle your inquiry and any further discussions about cooperation, but no longer than justified. Recruitment data is stored in accordance with the rules described in the recruitment process.

4. Who may receive your data

Data may be entrusted to trusted IT service providers acting on our behalf and on the basis of data processing agreements. We do not sell data and do not share it with third parties for marketing purposes. To operate the website and recruitment processes, we use, among others:

• application hosting and infrastructure (cloud providers, database);
• e-mail and notification services;
• SMS message delivery;
• artificial intelligence technology providers, whose use is described in point 5.

Some providers may process data outside the European Economic Area (EEA) - in such cases this takes place on the basis of mechanisms compliant with the GDPR (including standard contractual clauses).

5. Automated processing and artificial intelligence (AI)

We use artificial intelligence tools to support our recruitment processes. We want this to be fully transparent to you:

• Preliminary match assessment (scoring). Applications and answers submitted through forms are automatically analyzed to assess fit for the job offer and to help the recruiter set the order of contact. This is decision support - final recruitment decisions are always made by a human, not by the system.
• Voice AI assistant (optional). If you give separate, voluntary consent, an automated voice assistant may call you regarding your application. Such a call is recorded and automatically transcribed, and its summary is added to your candidate profile. If you do not give consent, a recruiter will contact you instead - you will not be disadvantaged in the process.
• Voice CV generator (optional). If you use this feature, the recording of your voice is transcribed in order to prepare a CV.
• Voice assistant on our helpline (inbound calls). When you call our number, the call may be answered by a voice assistant. We recognise the number you are calling from so we immediately know which case the call concerns. The call may be recorded and transcribed. You may ask to speak to a human at any time.
• Call summaries. Calls with our coordinator may be recorded and automatically transcribed, and their summary (what was agreed and the next step) is added to your profile. We do this so that agreements are not lost - not in order to assess you automatically.

The providers of the AI technology we use include, among others, Anthropic, OpenAI, and ElevenLabs. We provide them with data on the basis of data processing agreements; the data is not used to train the AI models of these providers. You may withdraw any consent given at any time and request that a decision in your case be made with human involvement - write to biuro@veln.pl.

6. Your rights

You have the right to access your data, to have it rectified, erased, or its processing restricted, the right to data portability and to object, as well as the right to lodge a complaint with the Prezes UODO (the President of the Polish Data Protection Authority). For any matter, write to biuro@veln.pl.

7. Cookies, analytics, and traffic measurement

We activate marketing technologies only after your explicit consent - without it we store no advertising cookies and build no advertising audiences. To operate and improve the website, and - with your consent - to run campaigns, we use the following technologies:

• Anonymous traffic measurement (no cookies). We use Vercel Web Analytics and Speed Insights, which measure website traffic and performance in an aggregated way, without cookies and without identifying you personally. The legal basis is our legitimate interest (Article 6(1)(f) GDPR) in maintaining and improving the website.
• Analytics. We activate Microsoft Clarity and PostHog only after you accept the analytics category - if you choose "Essential only," they never start. Google Analytics 4 runs in Google Consent Mode v2: the script is present from the moment you open the page, but until you consent it neither writes nor reads any cookies and does not create an identifier for you. In that state it sends only an anonymised, cookieless signal (with IP anonymisation) from which Google estimates aggregate visit counts, with no way to tie them to you. Full measurement (visits, technical issues, page use and application steps) starts only after you accept the analytics category. The legal basis for the cookieless mode is our legitimate interest (Art. 6(1)(f) GDPR) in maintaining and improving the website; you may object by writing to biuro@veln.pl.
• Marketing category (remarketing). Once you enable the marketing category, we activate the Meta Pixel (Meta Platforms Ireland Ltd. - Facebook, Instagram), the LinkedIn Insight Tag (LinkedIn Ireland Unlimited Company) and the Google Ads remarketing tag (Google Ireland Ltd.). They store cookies and let us later show you our job ad or business offer on those platforms.We do not pass them your name, phone number, e-mail address or the content of any form - only the page you visited and the action you took. The sole legal basis is your consent (Art. 6(1)(a) GDPR); you may withdraw it at any time in the site footer, with effect for the future. Without that consent none of these scripts loads at all. These providers may process data outside the EEA (United States) under the EU-US Data Privacy Framework and standard contractual clauses. The same category also covers Leadfeeder (Dealfront Group, processing within the EEA) and Apollo Website Visitors (Apollo.io, United States; EU-US Data Privacy Framework and standard contractual clauses). They use the IP address and visited pages to help recognise the company name and assess interest in our B2B offer. Apollo is configured for company-level identification only; we do not enable identification of a specific individual. We do not send form content, names, phone numbers or e-mail addresses. The functional category remains unused today.
• Remembering your choice. We save your choice regarding analytics in the local storage of your browser (localStorage) so that we do not ask you again on every visit. This is not a cookie and is not used for tracking.
• Reporting technical errors. In the event of a website failure, we send ourselves an anonymous error signal (type of error and subpage address), without any personal data - solely so that we can fix issues faster.

Withdrawing consent: you can withdraw your consent to analytics at any time by clicking Change privacy settings (the banner will appear again) or by clearing the website data in your browser. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.