GDPR Clause for a CV in Poland (2026): Example Text, Where to Put It, and When You Need It

Short answer: in 2026, it still usually makes sense to add a GDPR clause to your CV if you send the document as a file in Poland. The two most common exceptions are simple: the employer gives its own consent wording in the job ad, or the recruitment form already collects consent during the application.

The easiest way to handle this is straightforward: check the job ad first, then choose the version of the clause that fits the current recruitment process or future processes as well.

Why the clause still matters in a CV

GDPR has applied since 25 May 2018, so older pre-GDPR wording is no longer a good template. For candidates, though, the practical question is simpler: should a CV include a short consent line, and which version should you use?

For CV purposes, GDPR is the legal framework behind personal data processing, and the clause is the short consent text placed inside the document. It still matters in practice because many employers expect it when a CV is sent as a file, and most CVs contain more than the narrow core data needed for recruitment.

At the same time, if the employer gives its own wording or collects consent separately in a form, that instruction should come first.

What data an employer in Poland can process without extra consent

Under the Polish recruitment framework, an employer may usually request certain core details without separate consent. In practical terms, this usually covers:

• name and surname,
• date of birth,
• contact details provided by the candidate,
• education, if necessary for the role,
• professional qualifications, if necessary for the role,
• previous employment history, if necessary for the role.

If a CV contains only that basic set of information, extra consent for one current recruitment process may not always be necessary.

Why real CVs often contain extra data

Most CVs go beyond that minimum. Common examples include:

• a photo,
• a LinkedIn profile or portfolio link,
• city of residence or a fuller address,
• a longer professional summary,
• hobbies or interests.

These details can help a recruiter, but they still go beyond the narrow core set of data. That is one reason why a GDPR clause remains common in Polish CV practice.

This is not about a rigid rule that every CV always needs the clause. It is about the fact that real documents rarely stop at the legal minimum.

If you are refreshing an older file, it is worth checking the last lines before sending it. In the editor, you can quickly update the clause and export a fresh PDF version of the CV.

Consent for the current recruitment and future recruitments

This is where many mistakes happen. Consent for one specific recruitment process does not automatically cover future openings.

If you want the company to keep your CV and contact you later, the clause should say so clearly. If you only want the document used for the current opening, keep the wording limited to that process.

The simplest rule is:

• one specific role: use the current recruitment version,
• future openings too: use the extended version,
• employer gives its own wording: use that wording.

If the clause includes the company name or the name of the data controller, check that detail before sending the application. It is easy to miss when you apply to several roles in a row.

Where should you put the clause in your CV?

Most often, at the end of the document, usually in the footer or in the final section of the CV. That keeps the main content clean while still leaving the clause easy to find.

A smaller font is fine as long as the text stays readable. If you prepare the document in the editor, you can place the clause as the final section and export the updated CV as a PDF.

Quick clarifications

• Do you need the clause in the email too? Usually not, if it is already in the CV.
• Do you need a signature? Usually not, unless the employer clearly asks for one.
• Will the clause improve ATS performance? No. If you want to check the full document, see how to write an ATS-friendly resume.

Current GDPR clause examples for a CV in Poland

Below are short, ready-to-use versions.

Clause for the current recruitment process

I consent to the processing of my personal data contained in my CV for the purposes necessary to carry out the current recruitment process.

Clause for the current and future recruitment processes

I consent to the processing of my personal data contained in my CV for the purposes necessary to carry out the current and future recruitment processes.

Version with the company name

If the employer asks for wording with the company name included, use exactly that version. Do not carry employer-specific wording from one application to the next without checking the name again.

Avoid the old 1997-law wording

Do not use wording that refers to the Polish Act of 29 August 1997 on personal data protection.

I consent to the processing of my personal data for recruitment purposes in accordance with the Polish Personal Data Protection Act of 29 August 1997.

If that line is still in your CV, replace it before sending the file.

When a generic template is not enough

A ready-made formula is useful, but not every situation should be handled with a generic clause. If the employer adds its own consent wording in the job ad, asks for a specific version, or collects consent directly in the application form, follow those instructions.

English CVs and applications abroad

If you are applying outside Poland, do not assume the same convention always applies. In many markets, consent is handled in the application form and a separate clause in the CV is not standard.

For an English CV used in Poland, keep the clause in English if the rest of the document is in English. In every case, the employer's instructions come first.

Quick checklist before sending your CV

• check whether the job ad or ATS already includes its own consent step,
• remove any old wording based on the 1997 law,
• choose the right version: current recruitment only or current plus future recruitment,
• if the clause includes a company name, update it for that application,
• place the clause at the end of the CV,
• review the whole file before sending it.

As a final pass, you can run the document through resume score to catch issues in the overall CV. For factual transparency on cvprofiler's own data handling, see the privacy policy.