Privacy Policy

Who we are?

We are Tooploox and Tooploox Research, or more formally:

• Tooploox sp. z o.o. a limited liability company established in Poland with its registered seat in Wrocław (53-601) at Tęczowa 7;
• Tooploox Research sp. z o.o., a limited liability company established in Poland with its registered seat in Wrocław (53-601) at Tęczowa 7.

In principle, Tooploox and Tooploox Research are separate controllers of your personal data under the EU General Data Protection Regulation (“GDPR”). However, we jointly: (i) conduct recruitment processes; (ii) conduct marketing, promotional and sales-related activities, including sending our newsletters and (iii) organize events. We also jointly determine the purposes and means of the processing of your personal data, thus “are joint controllers of your personal data under the GDPR within these 3 areas”.

You can contact both Tooploox and Tooploox Research with all questions relating to your privacy as well as get information about the essence of the arrangements between Tooploox and Tooploox Research by sending an email to privacy@tooploox.com (a single point of contact for both controllers).

When and how do we collect your personal data?

We collect your personal data either directly from you or through third parties.

We collect your personal data directly from you when you:

• browse through our website;
• reach out to us using any contact method available on our website, during events which we take part in, through external directories or through our social media channels;
• download content from our website or register for any events that we organize;
• subscribe to our newsletter;
• respond to job postings available in the “Careers” section of our website.

We collect your personal data through third parties (indirectly) from the following sources: of contact for both controllers).

• recruitment agencies, recruitment platforms & recruitment events: in addition to hiring headhunters to work on our behalf, we cooperate with recruitment agencies and recruitment platforms as well as event organizers who have their own databases of work candidates and provide us with personal data of candidates who match our desired profile and might be interested in working for Tooploox. Thus, in recruitment context, we may receive your job application from such entities;
• public sources and professional networking platforms: we use public sources (e.g. Crunchbase, apollo.io, angel.co, public commercial registers) to reach out to companies and people who may be interested in our services. We collect your name, the name of the company you represent, designation/job role, email address and telephone number (where available) from these sources. We also use professional networking platforms such as LinkedIn to do so;
• our business representatives and our network: we rely on our business representatives and client network to get new leads. Thus, we may receive information related to your name, company you represent, designation/job role and email address through recommendations from our customers or directly from our business representatives, both of whom have established professional/personal connections directly with you;
• organizers of events that we participate in: we take part in various events and conferences relating to technology and startups. If available, we use networking possibilities provided by organizers of such events. In this case, we receive your name, the name of the company you represent, designation/job role, and email address from the organizers of such events;
• information received prior to/during fulfilment of contractual services: when we negotiate a new contract with the company that you work for or that you represent we may receive your personal data from your colleagues or from your employer. This may include your name, designation/job role, company you represent, telephone number and email address.

What do we use your personal data for and how long do we keep it?

You can get information about the source from which we received your personal data by sending an email at privacy@tooploox.com.

When and how do we collect your personal data?

Establishing business relationships

We process personal data that you provide when you contact us with business enquiries to respond to your message, including to prepare an offer or an estimate for you. The processing of your personal data in this context is based on our legitimate interest – the need to respond to business enquiries which we receive. You are not obliged to give us your personal data when contacting us, however we may not be able to properly respond to your enquiry if you refuse to provide or give incorrect personal data. We will process your personal data until your matter is resolved.

When we collect your personal data through third parties (indirectly) we will process it to reach out to you and establish a business relationship directly with you or with the organization which you work for. The processing of your personal data in this context is based on our legitimate interest – direct marketing of our services. We will process your personal data for this purpose until you object against such processing.

Maintaining business relationships

We process personal data that you provide when you contact us with business enquiries to respond to your message, including to prepare an offer or an estimate for you. The processing of your personal data in this context is based on our legitimate interest – the need to respond to business enquiries which we receive. You are not obliged to give us your personal data when contacting us, however we may not be able to properly respond to your enquiry if you refuse to provide or give incorrect personal data. We will process your personal data until your matter is resolved.

When we collect your personal data through third parties (indirectly) we will process it to reach out to you and establish a business relationship directly with you or with the organization which you work for. The processing of your personal data in this context is based on our legitimate interest – direct marketing of our services. We will process your personal data for this purpose until you object against such processing.

Cookies and similar technologies

What cookies do we use ?

We use two types of cookies:

• session cookies, which remain on your device until a web browser session is completed or the web browser is closed;
• persistent cookies, which remain on your device until their expiry date or until you delete them, but no longer than 2 years.

The table below lists all types of cookies that we use on our website: