Request a Proposal
Privacy Policy
1. General Information
This privacy policy informs you about the type, scope and purpose of the processing of personal data (hereinafter referred to as “data”) within our online services and associated websites, functions and content, as well as external online presences such as our social media profiles.
The protection of your personal data is very important to us. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.
2. Controller
MCPK. Sp. z o.o.
Hoża 86/410
00-682 Warszawa, Poland
NIP: 7011253116
Phone: +49 1567 8533051
Email: dsgvo@mcpk.de
Authorized representative: Dipl. Inf. (FH) Martin Schlott
3. Data Protection Officer
Contact person for data protection questions:
Dipl. Inf. (FH) Martin Schlott
Email: dsgvo@mcpk.de
4. Your Rights
Within the framework of the applicable legal provisions, you have the right at any time to:
• Information about your stored data
• Correction of incorrect data
• Deletion or restriction of processing
• Object to processing
• Data portability
• Revocation of given consent with effect for the future
• Lodge a complaint with a supervisory authority (in Poland: Urząd Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, www.uodo.gov.pl)
To exercise these rights, an informal notification by email to dsgvo@mcpk.de is sufficient.
5. SSL/TLS Encryption
For security reasons and to protect the transmission of confidential content, this website uses SSL or TLS encryption. You can recognize an encrypted connection by the address line of your browser (“https://” and lock symbol).
6. Server Log Files
The website provider automatically collects and stores information that your browser automatically transmits. These include:
• Visited page
• Date and time of server request
• Browser type and version
• Operating system used
• Referrer URL
• Hostname of the accessing computer
• IP address
This data is not merged with other data sources. The data is automatically deleted after 7 days at the latest.
The legal basis for data processing is Art. 6 (1) lit. f GDPR (legitimate interest in secure and stable operation of the website).
7. Contact Form and Email Contact
If you send us inquiries via contact form or email, your details will be stored for the purpose of processing the inquiry and for possible follow-up questions. This data will not be passed on without your consent.
Processing is based on Art. 6 (1) lit. b GDPR (contract initiation) or Art. 6 (1) lit. a GDPR (consent).
8. Newsletter
To send our newsletter, we require a valid email address. Verification of the provided address is required. Your data will be used exclusively for sending the newsletter. You can unsubscribe from the newsletter at any time (e.g., via the “unsubscribe” link in the newsletter or by email).
Legal basis: Art. 6 (1) lit. a GDPR.
9. Cookies
Our website uses cookies to ensure basic functions and enable statistical analysis. Unless technically necessary, their use is based on your consent in accordance with Art. 6 (1) lit. a GDPR.
You can control the use of cookies through your browser settings and delete cookies that have already been set at any time.
10. Web Analytics with Google Analytics
This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google uses cookies to enable analysis of website usage. The information generated is usually transferred to a Google server in the USA and stored there.
IP anonymization is activated so that your IP address is shortened by Google within the EU/EEA before transmission.
You can prevent Google Analytics from collecting your data by installing the browser add-on to disable Google Analytics.
More information: https://support.google.com/analytics/answer/6004245
Legal basis: Art. 6 (1) lit. a GDPR (consent via cookie banner).
11. Recruitment / Application Management
We process personal data of applicants that are submitted to us by email, via platforms (e.g., LinkedIn) or by other means.
The processed data includes in particular:
• Name, contact details, qualifications, professional background, references, certificates
• Communication content (e.g., emails, notes, interview results)
Purpose and Legal Basis
Processing is carried out for the purpose of initiating and conducting placement processes between applicants and our clients in accordance with Art. 6 (1) lit. b GDPR. If special categories of personal data (e.g., health data) are processed, this is done on the basis of your explicit consent according to Art. 9 (2) lit. a GDPR.
Transfer to Third Parties
Your data will only be passed on to client companies with your prior explicit consent and exclusively for placement purposes.
Storage Period
Application data will be deleted at the latest 6 months after completion of the application process, unless longer storage is carried out with your consent.
12. Outstaffing
As part of our outstaffing services, we process personal data of employees who are placed with client companies.
The processed data includes in particular:
• Personnel master data (name, address, contact details)
• Contract data and employment documents
• Time tracking data and performance records
• Qualifications and training
Purpose and Legal Basis
Processing is carried out to fulfill employment contracts and to invoice the services provided in accordance with Art. 6 (1) lit. b GDPR. If statutory retention obligations exist, processing is based on Art. 6 (1) lit. c GDPR.
Transfer to Third Parties
Data is only passed on to client companies to the extent necessary to carry out the employment relationship or service.
Storage Period
Data is stored in accordance with statutory retention periods (generally 10 years for tax-relevant documents) and then deleted.
13. Talent Pool
With your explicit consent, we can include your application documents in our talent pool to consider you for future projects or positions.
Legal basis: Art. 6 (1) lit. a GDPR.
Consent is voluntary and can be revoked at any time informally by email to dsgvo@mcpk.de.
Data in the talent pool is stored for a maximum of 2 years and then deleted unless renewed consent is given.
14. Data Transfer Outside the EU
If personal data is transferred to a third country (e.g., USA), this only happens if there is an adequacy decision by the EU Commission for the country in question or if appropriate guarantees exist in accordance with Art. 46 GDPR (e.g., standard contractual clauses).
In the case of Google Analytics, data transfer to the USA is based on standard contractual clauses provided by Google as well as additional technical and organizational measures.
15. Revocation and Objection
You can revoke given consent at any time with effect for the future. The revocation does not affect the lawfulness of processing carried out until then. You can also object to the processing of your data for advertising purposes at any time.
16. Changes to this Privacy Policy
We reserve the right to adapt this privacy policy as necessary to adjust it to changed legal requirements or new processing operations. You can always find the current version on our website at www.mcpk.de/privacy.
Last updated: October 2025
© MCPK. Sp. z o.o. – All rights reserved