Data controller
The controller is IT FIRST Robert Paramuszczak, sole proprietorship (JDG), ul. Borowej Góry 4/35, 01-354 Warszawa, Poland, tax ID 835-147-99-43, CEIDG entry (Polish sole-trader register).
No data protection officer (DPO) has been appointed. For privacy matters, including GDPR rights requests, write to rodo@bridgecore.pl.
What data we collect
Identity and contact data: first name, last name, email, phone, country, city, links (e.g. LinkedIn, GitHub).
Professional data: path (software / project-product / IT recruitment), role, seniority, skills, experience, projects, languages, certificates, CV, rates and availability.
Account data: password hash, profile status, consents, security logs (e.g. sign-in attempts).
Administrator data: name, email, optional Telegram chat ID for 2FA codes and new-application alerts.
Purposes and legal bases
Creating and running the account, profile review and project matching — Article 6(1)(b) GDPR (pre-contractual steps and performance of the service).
Contact about specific projects — Article 6(1)(a) GDPR (consent) where required, and (b) where contact follows an existing collaboration.
Service security, complaints and establishing or defending claims — Article 6(1)(f) GDPR (legitimate interests).
Accounting or tax duties if they arise — Article 6(1)(c) GDPR.
Analytics and marketing cookies — only with consent (Article 6(1)(a) GDPR and e-privacy rules).
Recipients
The IT FIRST Robert Paramuszczak team authorised to operate Talent Network.
Hosting and email providers, to the extent needed to run the service.
BridgeCore clients — only after we have contacted the Talent. We do not sell databases.
Public authorities — where the law requires it.
Transfers outside the EEA
The service is hosted on a server outside the European Economic Area (DigitalOcean, Singapore region). Personal data is transferred on the basis of the hosting provider’s standard contractual clauses (SCCs), as permitted by Article 46 GDPR.
Safeguards include HTTPS encryption, restricted server and database access, and administrator access limited to what is needed to operate the service.
Retention
Account and profile: until the account is deleted or the data is no longer needed for review and matching, then for the limitation period of claims.
CV and documents: for the life of the account, unless you ask for earlier deletion.
Consents: until withdrawn, and for as long as we must be able to demonstrate that consent was given.
Security logs: for a period justified by risk (planned up to 12 months), unless a longer period is required by a proceeding.
Your rights
You have the right of access, rectification, erasure, restriction, data portability, objection to processing based on legitimate interests, and withdrawal of consent (withdrawal does not affect processing that already took place).
You may lodge a complaint with the President of the Personal Data Protection Office in Poland (uodo.gov.pl) or another EU supervisory authority in your habitual residence.
Requests are handled via rodo@bridgecore.pl. We may ask you to confirm your identity.
Voluntary data
Fields marked as required are needed to create an account. Without them registration is not possible. Other fields are optional, but leaving them empty may reduce matching quality.
Automated decisions
We do not make decisions based solely on automated processing that produce legal effects for you. Project matching is supported by the BridgeCore team.
Cookies
Details are in the cookie policy. Necessary cookies are required for the service to work. Analytics and marketing cookies run only after your consent — those categories are prepared, but measurement scripts are not wired in yet.