We care about your privacy. Below we explain what personal data we collect, why, on what legal basis, and what rights you have.

Dear User!

This Privacy Policy is intended to provide you with information on how data collected during your visits to our website is used. It serves to provide you with the information referred to in Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as "GDPR", which has been in force since 25 May 2018.

We protect your rights and privacy with the utmost care. We collect personal data only for clearly defined and lawful purposes and do not use them in a manner incompatible with those purposes. We make every effort to ensure that the processed data is up-to-date, correct, and limited to the scope necessary to achieve the specific purposes. We store them only for the period necessary to achieve them or to fulfill obligations resulting from legal regulations.

Who is the controller of your personal data?

The controller of your personal data is: Van Der Dak sp. z o.o. with its registered office in Białystok, ul. Złota 2/19, KRS number 0001207936 (hereinafter: the "Company"). In all matters related to the protection of personal data, you can contact us by email at: office@vanderdak.eu

a) Contact with us: We may register your data when you contact us by telephone, using the contact form, via email or traditional mail by writing or calling the number and address provided by the Company. The legal basis for processing data for the above purposes is our legitimate interest (Article 6(1)(f) GDPR).

b) Recruitment: If you submit application documents via the recruitment form available at the controller, we process your personal data in order to conduct the recruitment process, contact you, and take actions aimed at possibly concluding an employment contract or another cooperation agreement. The legal basis for data processing is Article 6(1)(b) GDPR, i.e., taking action at the request of the data subject prior to entering into a contract, as well as Article 6(1)(c) GDPR in the scope of obligations resulting from labor law regulations.

If you provide data in your application documents that goes beyond the scope required by law or if you consent to participate in future recruitment processes, the basis for processing this data will be your consent (Article 6(1)(a) GDPR), which you can withdraw at any time without affecting the lawfulness of the processing carried out prior to its withdrawal.

c) Analytical cookies: In addition, we may process your personal data for analytical purposes, which serve to understand how users interact with the website. These cookies help provide information on metrics for visitor counts, bounce rate, traffic source, etc. The legal basis for processing is voluntarily expressed consent (Article 6(1)(a) GDPR).

How long will we store your data?

a) The period for which we can process your personal data depends on the legal basis constituting the prerequisite for personal data processing. In particular: In the case of analytical cookies used to analyze the use of the website, the data may be stored for a period of 1 year, 1 month, and 4 days, or until consent is withdrawn, whichever occurs first.

b) In the case of processing personal data on the basis of the legitimate interest of the Controller (Article 6(1)(f) GDPR), the data will be stored until this interest ceases or an effective objection to the processing is raised.

c) In the case where we process personal data because it is necessary due to applicable legal regulations (Article 6(1)(c) GDPR), the periods of data processing for this purpose are determined by these regulations.

d) In the case where the legal basis for data processing is the performance of a contract, your personal data is processed and stored for the period necessary to perform the contract.

What personal data do we process?

In connection with the use of our website, we may process personal data provided by you during contact or when using available forms, in particular such as: name and surname, email address, telephone number, message content, data contained in submitted documents or attachments, as well as technical information related to the use of the website, including IP address and data collected via cookies.

What are your rights regarding personal data?

In connection with the processing of your personal data, you have the following rights:

• the right of access to data;
• the right to rectification of data;
• the right to erasure of data;
• the right to restriction of data processing;
• the right to data portability;
• the right to object (when the basis for processing is the legitimate interest of the Controller);
• the right to withdraw consent (when the basis for processing is consent).

The exercise of these rights depends on the conditions specified in the GDPR. In the event of refusal to grant a request, you will receive a response with the justification for the refusal.

Please note that:

• the right to erasure of data and the right to request restriction of its processing apply only in the cases enumerated in the GDPR regulations;
• the right to data portability applies only in the case where the legal basis for processing is consent or the performance of a contract;
• we may refuse to delete your data despite such a request, provided that one of the exceptions listed in the GDPR occurs, e.g., when data processing is necessary to comply with a legal obligation or to establish, exercise, or defend claims;
• in some cases, we may refuse to comply with your objection to data processing based on our legitimate interest when there are valid legitimate grounds for processing that override your interests, rights, and freedoms, or there are grounds to establish, exercise, or defend claims.

You also have the right to lodge a complaint with the competent supervisory authority if you believe that we violate legal regulations when processing your personal data. This authority in Poland is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych).

To whom do we transfer your data?

The recipients of the data may be entities processing data on behalf of the Controller, in particular hosting, email, and IT service providers, as well as entities acting as separate controllers, when resulting from the nature of the services provided or applicable regulations.

Your personal data may be transferred outside the European Economic Area (EEA), in particular to providers of analytical and marketing tools based in the USA (including Google LLC) based on appropriate agreements.

Security and confidentiality

We make every effort to ensure appropriate protection of the personal data entrusted to us. For this purpose, we apply technical and organizational solutions to prevent their loss, damage, unauthorized modification, disclosure, or access by unauthorized persons. Data is stored and processed in an IT environment that meets high security standards, using protection measures compliant with applicable laws, including requirements resulting from Polish legal regulations.

Automated processing, profiling, and use of artificial intelligence

Your personal data may be processed in an automated manner, including through the use of systems supported by artificial intelligence.

Systems supported by artificial intelligence may be used to support user service, in particular to prepare draft messages; the basis is, depending on the context, the performance of a contract (Article 6(1)(b) GDPR) or the legitimate interest of the Controller consisting in efficient user service, ensuring the quality of services and work organization (Article 6(1)(f) GDPR).

The use of the indicated functions does not always constitute profiling. Profiling may occur in cases where automated data processing serves to analyze or predict the personal characteristics of the user, in particular their behavior or the way they use the controller's website. Profiling may be carried out using IT systems, including solutions supported by artificial intelligence, for the purpose of conducting statistical analyses.

Automated processing, including profiling, is not used to make decisions regarding the user based solely on automated processing that would produce legal effects or similarly significantly affect their situation.

Changes to the privacy policy

We may introduce modifications to the Privacy Policy in the future, of which you will be informed. Users will be informed of significant changes.

If the start of a new processing method requires consent, the Controller will obtain it before starting such processing.

---

Cookie Policy

Effective date: August 12, 2026 Last updated: August 27, 2026

What are cookies?

This Cookie Policy explains what cookies are, how we use them, the types of cookies we use (i.e., the information we collect using cookies and how that information is used), and how to manage your cookie settings.

Cookies are small text files used to store small pieces of information. They are stored on your device when a website loads in your browser. These cookies help ensure that the website functions properly, enhance security, provide a better user experience, and analyse performance to identify what works and where improvements are needed.

How do we use cookies?

Like most online services, our website uses both first-party and third-party cookies for various purposes. First-party cookies are primarily necessary for the website to function properly and do not collect any personally identifiable data.

The third-party cookies used on our website primarily help us understand how the website performs, track how you interact with it, keep our services secure, deliver relevant advertisements, and enhance your overall user experience while improving the speed of your future interactions with our website.

Types of cookies we use

Necessary

Necessary cookies are required to enable the basic features of this site, such as providing secure log-in or adjusting your consent preferences. These cookies do not store any personally identifiable data.

Cookie	Duration	Description
NEXT_LOCALE	session	We use the NEXT_LOCALE cookie to enhance your browsing experience. This first-party, essential cookie stores your preferred language selection. It ensures that when you return to our website, the content automatically displays in the language you chose during your previous visit, eliminating the need to manually re-select it. Because this cookie is strictly used to fulfill a user-requested functionality, it does not track your behavior across other websites and is exempt from active consent requirements.
cookieyes-*	1 year	CookieYes sets this cookie for consent solution management.

Analytics

Analytical cookies are used to understand how visitors interact with the website. These cookies help provide information on metrics such as the number of visitors, bounce rate, traffic source, etc.

Cookie	Duration	Description
_ga	1 year 1 month 4 days	Google Analytics sets this cookie to calculate visitor, session and campaign data and track site usage for the site's analytics report. The cookie stores information anonymously and assigns a randomly generated number to recognise unique visitors.
ga*	1 year 1 month 4 days	Google Analytics sets this cookie to store and count page views.

Manage cookie preferences

Consent Preferences

You can modify your cookie settings anytime by clicking the 'Consent Preferences' button above. This will allow you to revisit the cookie consent banner and update your preferences or withdraw your consent immediately.

Additionally, different browsers offer various methods to block and delete cookies used by websites. You can adjust your browser settings to block or delete cookies. Below are links to support documents on how to manage and delete cookies in major web browsers.

• Chrome: Google Chrome Support
• Safari: Apple Safari Support
• Firefox: Mozilla Firefox Support
• Internet Explorer: Microsoft Internet Explorer Support

If you are using a different web browser, please refer to its official support documentation.