Plan employee photographs with HR, marketing and the person responsible for data protection before the session. An employment relationship or company-funded shoot does not automatically settle promotional publication rights.
This is general information for typical promotional photography connected with Poland, not individual legal advice. Special professions, statutory duties and cross-border arrangements may need different treatment.
Distinguish the uses
A portrait on a team page, a recruitment advertisement, the employee's own profile and the photographer's portfolio are different proposed uses. Record who intends to publish, which files they need and the purpose. Confirm the company's copyright licence separately from the situation of each person pictured.
Decide whether names, roles and account tags will be added. Avoid a caption or layout that makes a person appear to endorse something they have not agreed to endorse.
Make participation genuinely voluntary where relying on consent
Employment involves a power imbalance. A signature alone does not demonstrate that a choice was free. The EDPB's consent guidance warns that employee consent is possible only in circumstances where there are no adverse consequences for refusal or withdrawal.
Arrange a private way to respond, communicate the plan in advance and provide a workable alternative where consent is the intended basis. Do not read out a list of people who declined or put somebody under pressure with a camera already waiting. Have the appropriate legal or privacy professional assess the actual basis and process.
Prepare the files and responsibilities
Identify who stores the images, who can download them and who handles requests. Provide the privacy information appropriate to the process. Do not assume a photographer always has the same data-protection role in every assignment.
Keep evidence of the agreed scope and a practical record connecting people, files and uses. A posed group photograph is not automatically exempt simply because several employees appear in it.
Review when circumstances change
When someone leaves, check the team page, captions and scheduled campaigns. An outdated role may mislead visitors even apart from permissions. If consent is withdrawn, assess the resulting action and any separate lawful retention need; retaining a record for a distinct purpose does not itself authorise continuing promotion.
Can one form cover every future campaign?
Do not assume so. Its scope and the actual legal conditions must match the intended processing and publication.
Does this guide provide a ready legal form?
See business portrait preparation. References reviewed 24 September 2026: GDPR Articles 6, 7 and 13; EDPB Guidelines 05/2020, paragraphs 21-23; Polish Copyright Act Article 81.
Cover: editorial illustration. It does not depict an actual KARIROOM room, included equipment, client session or preset result.