WebChili Privacy Policy
Your privacy matters to us. We take care to protect your personal data and the documents entrusted to us as part of the services we provide.
This privacy policy applies to our website and all of our services (including the ChiliONE and ChiliCLM systems and EOD systems), as well as the related mobile applications that belong to the WebChili brand and are controlled by us. In this document we fulfil the information obligation arising from the GDPR and set out the rules for the use of cookies.
WEBCHILI AS A DATA PROCESSOR
Within the SaaS services we offer (e.g. HR systems, contract registers), we are not the controller of the data entered by our Clients. In this respect, we process personal data solely on the Client’s instructions, as a data processor, on the basis of the concluded Data Processing Agreement (available here) It is our Clients who independently determine the purposes and means of processing this data and who are responsible for fulfilling their legal obligations towards their employees and contractors.
WEBCHILI AS A DATA CONTROLLER
The controller of the personal data of visitors to our website and of persons contacting us for business purposes is:
WEBCHILI SPÓŁKA Z OGRANICZONA ODPOWIEDZIALNOŚCIĄ, AL.WINCENTEGO WITOSA 16, 20-315 LUBLIN, NIP 9462594464, KRS 0000343959, REGON 060559367
Contact us:
- Form: available on the website in the Contact section.
- E-mail: biuro@webchili.pl
- By post: to the company’s registered address indicated above.
PURPOSES AND LEGAL BASES FOR DATA PROCESSING
We process your personal data for the following purposes:
- Performance of a contract or provision of services: (Art. 6(1)(b) GDPR) – so that we can deliver the system or service you have ordered.
- Legal obligations: (Art. 6(1)(c) GDPR) – e.g. issuing invoices and fulfilling tax obligations.
- The Controller’s legitimate interest: (Art. 6(1)(f) GDPR) – in particular:
- Marketing of our own services and trend analysis.
- Ensuring the security of services and preventing fraud.
- Handling claims and contact with the Client.
- Analysis of navigation data (IP address, browser type, visit time) in order to improve the functionality of the website.
When you use our mobile applications, we may collect data about your device model, operating system version and activity statistics (frequency of use, in-app events) in order to continuously improve our products.
RECIPIENTS OF PERSONAL DATA
We share data only when it is necessary to provide our services. Recipients may include:
- IT support and cloud system providers.
- Entities providing accounting, legal and courier services.
- State institutions (where required by law, e.g. in connection with integration with systems such as KSeF or CRU).
All our subcontractors process data solely on the basis of agreements and in accordance with our guidelines.
DATA RETENTION PERIOD
We store data for the period necessary to achieve our business purposes (e.g. the duration of the contract) or until the expiry of legal obligations and limitation periods for claims. After this time, data is deleted or anonymised within a maximum of 90 days, unless technical obstacles require it to be blocked from further processing.
YOUR RIGHTS
In connection with the processing of your data, you have the right to:
- Access your data and obtain a copy of it.
- Rectification, erasure or restriction of processing.
- Data portability.
- Object to processing (in particular for marketing purposes).
- Lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warszawa).
To exercise your rights, please contact us at: biuro@webchili.pl
COOKIES
The WebChili website uses cookies (text identifiers stored by your browser).
- Persistent cookies: remain on your device until their expiry date or until they are deleted.
- Session cookies: expire when you close your browser.
We use them to personalise settings, maintain security and collect statistics (e.g. through Google Analytics and Hotjar tools). You can manage cookies in your browser settings, however blocking them may affect the functionality of some elements of the website.
RECRUITMENT
If you send us your job application electronically by email, we process your data according to the following rules:
Purposes and legal bases for processing:
Fulfilment of legal obligations: for the data specified in Art. 22¹ § 1 of the Polish Labour Code (including first name, surname, professional experience, education), the legal basis is a legal obligation (Art. 6(1)(c) GDPR).
Your consent: for data going beyond the catalogue set out in the Labour Code (e.g. your photo, interests) or data submitted as part of recruitment for civil-law contracts, the legal basis is your voluntary consent expressed by sending your CV (Art. 6(1)(a) GDPR).
Future recruitment: if you include an appropriate clause in your CV, we process your data on the basis of your voluntary consent (Art. 6(1)(a) GDPR).
Legitimate interest: in order to defend against possible claims (Art. 6(1)(f) GDPR).
Data retention period: We process your data for the duration of the current recruitment process. If you consent to future recruitment, we store your data for a period of 24 months from the moment we receive it or until you withdraw your consent.
Withdrawal of consent: You can withdraw your consent to data processing (both for current and future recruitment) at any time by sending a message to: work@webchili.pl. Withdrawing consent does not affect the lawfulness of processing carried out before its withdrawal.
Recipients of data processed in recruitment processes:
Your data may be transferred to entities supporting us in HR processes, solely on the basis of personal data processing agreements.
CHANGES TO THIS POLICY
This policy may be updated as our services evolve. New versions will be published directly on this page. We encourage you to check its content regularly.
Last updated: 29 April 2026.