Privacy policy

Last updated: 22.04.2026

1. PERSONAL DATA ADMINISTRATOR

The administrator of your personal data in the scope of using the website, contact forms and recruitment processes is P2P2 Sp. z o.o. with its registered office in Warsaw at 604a Wał Miedzeszyński Street, 03-994 Warsaw, entered into the register of entrepreneurs kept by the District Court for the m.st of Warsaw, XIV Commercial Division of the National Court Register (hereinafter referred to as: the "Administrator").

2. CONTACT REGARDING DATA PROTECTION MATTERS

In all matters related to the processing of personal data and the exercise of your rights, you can contact us:

  • via e-mail address: odo@p2p2.com.pl
  • in writing to the address of the Administrator's registered office indicated in point 1.

3. PURPOSES AND LEGAL BASES OF PROCESSING

Your personal data is processed in accordance with the provisions of the GDPR for the following purposes:

  • Handling inquiries and contact requests: responding to an inquiry sent via a form on the website (basis: Article 6(1)(f) of the GDPR – legitimate interest of the Administrator).
  • Recruitment processes: assessment of a candidate's qualifications for the position applied for and for the purposes of future recruitment (basis: Article 6(1)(a) of the GDPR – voluntary consent and Article 6(1)(c) of the GDPR – obligations arising from the Labour Code).
  • Use of Time Harmony system (Terminals and Mobile Application): provision of tools for recording working time, managing the user account and communicating with the employer (basis: Article 6(1)(b) of the GDPR – performance of the contract).
  • Product and service communication (information newsletter): informing users about technical changes and new functionalities of the system (basis: Article 6(1)(b) and (f) of the GDPR).
  • Marketing and Marketing Newsletter: sending commercial information, provided that a separate consent has been given for this (basis: Article 6(1)(a) of the GDPR).

    Important information about the role of P2P2 Sp. z o.o.: With regard to data on event registration in the system (RCP), activity on terminals and data within the mobile application provided by your employer, P2P2 Sp. z o.o. acts as the Processor. The main Administrator of this data is your Employer/Principal, with whom P2P2 Sp. z o.o. has concluded an appropriate agreement on entrusting the processing of personal data. This policy serves as an informative feature about the protection standards applied by the technology provider.

4. SCOPE OF PROCESSED DATA

  • Contact forms: first name, last name, email, phone number, company name.
  • Recruitment: data contained in application documents (CVs).
  • Terminal application: employee ID, date and time of events (start/end/break), attendance status, task name.
  • "My Time Harmony" mobile app: profile data (name, email, login). With your consent, the application may access local photos and files only for the purpose of allowing you to download documents or add attachments (e.g. certificates) to your employee file.

5. DATA RETENTION PERIOD

  • Contact inquiries: for the period necessary to handle the inquiry, and after the end of the correspondence – until the statute of limitations for any claims expires.
  • Recruitment: for a period of 1 year from the moment of submission of the application or until the consent is withdrawn.
  • Data in the Time Harmony system: for the duration of the service contract concluded with your employer, and after its termination in accordance with the deadlines specified in the entrustment agreement or labor laws.
  • Marketing: until you withdraw your consent. 

6. RECIPIENTS AND TRANSFERS OUTSIDE THE EEA

The data may be transferred to IT and hosting providers. In the case of using tools of companies outside the EEA (e.g. Google), the Controller uses Standard Contractual Clauses approved by the European Commission to ensure an adequate level of protection.

7. YOUR RIGHTS

You have the right to: access your data, rectify it, delete it, limit its processing, transfer your data, object and withdraw your consent at any time. In cases where P2P2 acts as a Processor, the exercise of these rights may require contact directly with your Employer.

8. RIGHT TO LODGE A COMPLAINT

You have the right to lodge a complaint with the supervisory authority: President of the Office for Personal Data Protection, 2 Stawki Street, 00-193 Warsaw.

9. VOLUNTARINESS AND SOURCE OF DATA

Providing data is voluntary. In Time Harmony system, data is most often provided to the Administrator by your employer/client in order to enable the use of work tools.