Zum Inhalt springen

Privacy Policy for hexjobs Mobile App

Effective Date: January 8, 2026

This Privacy Policy explains how Apptivity sp. z o.o., located at Podole 60, 30-394 Kraków (apptivity.pl), processes your personal data within the hexjobs mobile application.

Before using the App, please read the information below.

1. DEFINITIONS

  • Apptivity / Data Controller – Apptivity Spółka z ograniczoną odpowiedzialnością based in Kraków (apptivity.pl), registered in the Register of Entrepreneurs of the National Court Register by the District Court for Kraków-Śródmieście in Kraków, 11th Commercial Division of the National Court Register under KRS number: 0001168563, Tax ID (NIP): 6762692212, REGON: 541513315, with share capital of PLN 5,000;
  • App – hexjobs mobile application available on Android and iOS platforms;
  • User – a natural person using the App;
  • GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC;
  • Personal Data – any information relating to an identified or identifiable natural person ("data subject");
  • Account – a collection of resources and functionalities created for the User, used to manage services provided by the App;
  • Data Processor – a natural or legal person, public authority, agency or other body which processes personal data on behalf of the Data Controller;

2. WHO IS THE DATA CONTROLLER OF YOUR PERSONAL DATA?

The Data Controller of your personal data, i.e., the entity that independently or jointly with others determines the purposes and means of processing personal data, is Apptivity Spółka z ograniczoną odpowiedzialnością based in Kraków (apptivity.pl), registered in the Register of Entrepreneurs of the National Court Register by the District Court for Kraków-Śródmieście in Kraków, 11th Commercial Division of the National Court Register under KRS number: 0001168563, Tax ID (NIP): 6762692212, REGON: 541513315, with share capital of PLN 5,000.

3. HOW CAN YOU CONTACT THE DATA CONTROLLER?

For matters related to the processing of your personal data by hexjobs, in particular to exercise your rights, you can contact the Data Controller:

  • in writing, by sending a letter to the Apptivity headquarters address indicated above;
  • via email at: [email protected]

4. WHAT ARE THE PURPOSES AND LEGAL BASES FOR PROCESSING YOUR DATA?

4.1 Registration and Use of the Account

Registration of an Account in the hexjobs App is only possible via OAuth2 through LinkedIn or Google social media platforms. The App retrieves data necessary for Account registration from the social media account. Information about the scope and purposes of data processing by these platforms can be found in their privacy policies.

Personal data is processed:

  1. for the purpose of providing electronic services related to maintaining and operating the Account and providing its functionalities – the legal basis is the necessity of processing for the performance of a contract (Article 6(1)(b) GDPR);
  2. for analytical and statistical purposes – the legal basis is the legitimate interest of the Data Controller (Article 6(1)(f) GDPR), consisting of measuring the effectiveness of the App and improving its functionality;
  3. for the purpose of diagnosing problems related to the operation of the App, ensuring its proper configuration and IT security – the legal basis is the legitimate interest of the Data Controller (Article 6(1)(f) GDPR), consisting of ensuring the proper functioning of the App;
  4. for the purpose of direct marketing of own services and products – the legal basis is the legitimate interest of the Data Controller (Article 6(1)(f) GDPR).

For the above purposes, Apptivity processes personal data obtained from social media platforms during Account registration and data regarding activity in the App.

4.2 Processing of candidate's personal data in connection with applying for job offers through the App

If you, as a Candidate, apply for job offers through the App, Apptivity processes your personal data as a Data Processor, acting on behalf of and in accordance with the instructions of the Employer who published the job offer. This means that the Data Controller of your personal data contained in the application is the Employer to whom you directed your application. The hexjobs App processes data solely for the purpose of technically enabling the transmission of your application to the selected Employer.

5. APP PERMISSIONS AND DATA USE

The hexjobs mobile app requires access to the following permissions on your device:

5.1 Required Permissions (Android and iOS)

Internet (Android: INTERNET)

This permission is necessary to connect to hexjobs servers, download job offers, synchronize data, and communicate with the system.

Push Notifications (Android: POST_NOTIFICATIONS)

Allows sending notifications about new job offers, application status, and other important information. You can disable notifications at any time in your device settings.

Location (Android: ACCESS_COARSE_LOCATION, ACCESS_FINE_LOCATION; iOS: NSLocationWhenInUseUsageDescription, NSLocationAlwaysAndWhenInUseUsageDescription)

The App uses location data to:

  • search for job offers in your area,
  • personalize displayed results based on your geographic location,
  • enable employers to display offers targeted to people in specific locations.

Location data is processed only while using the App (when it is active) and is not stored on our servers in a way that allows continuous tracking of your location. You can deny access to location, but this may limit the App's functionality in terms of personalizing search results.

Microphone and Speech Recognition (Android: RECORD_AUDIO; iOS: NSMicrophoneUsageDescription, NSSpeechRecognitionUsageDescription)

The App may require access to the microphone to:

  • enable voice input,
  • recognize speech to facilitate searching for job offers or communicating with the chatbot.

Audio data is not stored on our servers without your explicit consent. Voice recordings are processed in real-time for speech recognition and then deleted.

Bluetooth (Android: BLUETOOTH, BLUETOOTH_ADMIN, BLUETOOTH_CONNECT)

Bluetooth permissions may be used by libraries and plugins used in the App, but are not actively used by the main hexjobs functionality. In the future, they may be used for additional features, such as communication with wearable devices or integration with other services.

Photo Library Access (iOS: NSPhotoLibraryUsageDescription)

The App requires access to the photo library to enable you to:

  • upload your CV or other application documents from your device,
  • add a profile photo.

Access to the photo library is used only at your request and only for reading selected files. We do not scan or process other files from your device.

5.2 Integration with Google Services

The App uses the following Google services:

Google Maps API

Used to display maps, job offer locations, and geographic search. Use of Google Maps is subject to Google's privacy policy available at: https://policies.google.com/privacy

Google Sign-In

Enables login using a Google account. Authentication data is managed by Google in accordance with their privacy policy.

Firebase Cloud Messaging

Used to send push notifications. Firebase may process data such as:

  • device identifier (device token),
  • basic device information (model, operating system),
  • notification delivery data.

More information about Firebase's privacy policy: https://firebase.google.com/support/privacy

6. TO WHOM MAY YOUR PERSONAL DATA BE DISCLOSED?

Your personal data may be disclosed or entrusted to entities cooperating with Apptivity in providing services, in particular entities providing hosting, mailing, and consulting and marketing services. Your anonymized data, which prevents identification of your person, may be transferred to third parties providing statistical tools, analytical and marketing service providers. These entities process data based on an agreement concluded with the Data Controller and solely in accordance with its instructions.

Your data may also, within the limits set by law, be transferred to authorized state authorities upon their request, in connection with the tasks they perform. This applies in particular to: organizational units of the prosecutor's office, the Police, the President of the Office for Personal Data Protection, the President of the Office of Electronic Communications, and the President of the Office of Competition and Consumer Protection.

7. WILL APPTIVITY TRANSFER YOUR DATA TO THIRD COUNTRIES?

The Data Controller will not independently transfer your personal data outside the European Economic Area. However, the Data Controller may, to the extent of using supporting tools, use services of entities that will – to a limited extent – transfer your personal data outside the European Economic Area.

In such situations, personal data will be transferred only to recipients who guarantee the highest protection and security of data, including through:

  1. application of standard contractual clauses issued by the European Commission,
  2. application of binding corporate rules approved by the relevant supervisory authority,
  3. cooperation with entities processing personal data in countries for which an appropriate decision of the European Commission has been issued regarding the finding of ensuring an adequate level of personal data protection.

This applies in particular to:

Microsoft Ireland Operations Limited

based in Dublin, Ireland, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18 D18 P521 - Microsoft Azure cloud hosting and analytical tools.

Microsoft Azure cloud hosting enables secure data storage and processing on servers located in Europe, in accordance with personal data protection regulations. Detailed information regarding Microsoft's privacy policy is available at: https://privacy.microsoft.com/

Google Ireland Limited

Gordon House Barrow Street Dublin 4 Ireland - statistical purposes, authorization, maps, and push notifications.

Google processes data for the purpose of:

  • generating statistics regarding the use of the App,
  • user authentication (Google Sign-In),
  • displaying maps and locations (Google Maps),
  • delivering push notifications (Firebase Cloud Messaging).

Detailed information about Google's privacy policy is available at: https://policies.google.com/privacy.

Cloudflare Inc.

101 Townsend St., San Francisco, CA 94107, USA.

Cloudflare offers a globally available content delivery network with DNS. As a result, the transfer of information between your App and our servers is technically routed through the Cloudflare network. This allows Cloudflare to analyze data transactions and act as a filter between our servers and potentially malicious data traffic from the Internet.

For more information about Cloudflare's precautions and data privacy policy, click this link: https://www.cloudflare.com/privacypolicy/.

8. HOW LONG WILL YOUR DATA BE PROCESSED BY APPTIVITY?

Apptivity guarantees that personal data will be stored only for the time necessary to achieve the purposes for which they were collected. The data processing period depends on the type of service provided, the purpose of processing, and the legal basis:

  • In the case of processing personal data based on consent, the processing period lasts until the withdrawal of consent.
  • In the case of processing personal data based on the legitimate interest of the data controller, the processing period lasts until the cessation of that interest (e.g., the limitation period for civil claims) or until effective opposition to further processing – in situations where such opposition is available under the law.
  • In the case of processing personal data based on a contract in connection with providing Account functionalities, data is processed until the deletion of the Account. After Account deletion, data may be stored to the extent limited to the company name, business contact details, application history, and information about consents given for the purposes of defense against possible claims for a period of 3 years from Account deletion.

9. WHAT RIGHTS DO YOU HAVE IN CONNECTION WITH THE PROCESSING OF YOUR DATA BY APPTIVITY?

To the extent limited by applicable law, in connection with the processing of your personal data by Apptivity, you have the following rights:

a) Right to request access to data – the right to obtain information about the processing of your personal data, including the purposes and legal bases of processing, the scope of data held, entities to which personal data is disclosed and the planned date of their deletion, as well as the right to receive a copy of the processed data (Article 15 GDPR);

b) Right to request rectification of data – the right to request correction or updating of personal data if it is inaccurate or incomplete (Article 16 GDPR);

c) Right to request erasure of data – the right to request deletion of data in cases and on the principles set out in Article 17 GDPR;

d) Right to request restriction of data processing – the right to request that we temporarily or permanently cease processing all or part of personal data in situations and on the principles set out in Article 18 GDPR;

e) Right to data portability – the right to receive in a structured, commonly used machine-readable format the personal data you have provided to us and the right to request the transmission of this personal data to another controller (Article 20 GDPR);

f) Right to object – the right to object to the use of your personal data in situations and on the principles set out in Article 21 GDPR;

g) Right to withdraw consent to the processing of personal data at any time without affecting the lawfulness of processing carried out before its withdrawal;

h) Right to lodge a complaint with a supervisory authority – in the event that you consider that the processing of personal data violates GDPR or other regulations on the protection of personal data, the data subject may lodge a complaint with the President of the Office for Personal Data Protection.

The rights specified in points a) - g) above can be exercised in accordance with the principles described in Articles 16 - 21 GDPR, by sending a message to the email address: [email protected]

Such a request should, as far as possible, precisely specify what the request concerns, i.e., in particular it should contain the following information:

a) indication of which of the above rights you wish to exercise; b) specification of which processing process the request concerns; c) specification of which processing purposes the request concerns.

If it is necessary to clarify the content of the notification, the Data Controller will ask you to provide additional information. A response to the request is provided immediately, no later than within one month from the date of receiving the request to the email address from which the request was sent.

10. SECURITY

Apptivity applies technical and organizational measures to ensure the protection of processed personal data. This protection is adapted to the threats and categories of data covered by it. Personal data is particularly secured against disclosure to unauthorized persons, modification, loss, damage or destruction, as well as against processing in violation of applicable regulations. The technical and organizational measures referred to in this section include in particular:

  1. access to the account conditional on providing login and password in a trusted external service (Google, LinkedIn);
  2. SSL certificate;
  3. connection encryption;
  4. encryption of files containing users' CVs and the database;
  5. protection of the data set against unauthorized access;
  6. hashing of data used for User authorization;
  7. encryption of data transmitted between the App and servers;
  8. regular security audits and software updates.

11. APP CHANGES AND UPDATES

Apptivity may from time to time update the App to introduce new features, improve performance or security. Updates may require additional permissions or change the way data is processed. In such cases, you will be informed about the changes before they are introduced.

12. FINAL PROVISIONS

Apptivity reserves the right to change this Privacy Policy for important reasons, which may include in particular:

  1. development of functionalities and services offered in the App, affecting the content of the Privacy Policy;
  2. changes in generally applicable law, including in the field of personal data processing.

In matters not regulated in this Privacy Policy, the provisions of GDPR and generally applicable law in the territory of the Republic of Poland apply.

If you have additional questions related to security and processing of personal data by the Data Controller, please contact us at: [email protected]