Recruitment privacy notice

Last updated 7 October 2026

This notice explains how we handle your personal data when you apply for a role at Spotco on spotco.app. It adds to our privacy policy.

Who is responsible

Keshi Henkeshi Ile (Aleje Jerozolimskie 190C, 02-486 Warsaw, Poland) is the controller of your data. For anything about it, write to privacy@spotco.app.

What we collect

• What you write in the form: your name, email address and city, and your phone number if you give it.
• Your answers: what you do now, why you are interested, your experience, the hours you can work, your student status, the role’s own questions and anything else you add.
• Your CV, if you attach one.
• The language of the page you applied on, and when you applied.
• Our own notes about your application, and the stage it is at (for example, an interview).

Why we use it, and on what basis

• To consider your application and get in touch about it: the steps you asked us to take before a possible contract (Article 6(1)(b) GDPR).
• To keep your application for future recruitment, only if you tick the box for it: your consent (Article 6(1)(a) GDPR). You can withdraw it at any time by writing to us, without affecting what we did before.
• To establish or defend legal claims, should any arise: our legitimate interest (Article 6(1)(f) GDPR).

Giving us your data is voluntary, but without the required fields we cannot consider your application. Please do not send us sensitive data, for example about your health: we do not need it.

How long we keep it

Six months from when you apply; then it is deleted automatically, your CV included. If you agreed to future recruitment, twelve months. If you join us, what the cooperation needs moves into the records of your contract.

Who sees it

The people at Spotco who run the recruitment. Our service providers process it for us under contract: Supabase (database and file storage, in the European Union), Resend (sending the confirmation email) and Vercel (hosting the website). We do not sell your data and do not use it for marketing.

Your rights

You may ask to see your data, correct it, delete it, restrict its use, object to its use, or receive a copy of what you gave us, and you may withdraw a consent at any time. Write to privacy@spotco.app. You may also complain to the President of the Personal Data Protection Office (Prezes UODO, ul. Stawki 2, 00-193 Warsaw).

We make no decision about you by automated means alone.