Notification on the processing of personal data – selection process

The business companies Profinit EU, s.r.o., ID No.: 044 34 081, having its registered office at Tychonova 270/2, Hradčany, 160 00 Prague 6, registered in the Commercial Register of the Municipal Court in Prague under File No. C 247646, Profinit Slovakia, s. r. o., ID No.: 36 617 521, having its registered office at Kukuričná 163/1, 831 03 Bratislava-Nové Mesto, Slovakia, registered in the Commercial Register of the District Court Bratislava I, Section: Sro, Insert number: 41367/B, and Techlake, s.r.o., ID No.: 096 58 645, having its registered office at Tychonova 270/2, Hradčany, 160 00 Prague 6, registered in the Commercial Register of the Municipal Court in Prague under File No. C 339883 (jointly the “Companies” and independently the “Company”) hereby in accordance with Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (the “GDPR”), inform applicants for employment or for another form of cooperation on the processing of their personal data in relation to the selection process.

For the purposes of this Notification, an applicant means any natural person who has expressed the interest in, or has applied for, employment or co-operation with the Company or for any other form of co-operation with the Company through the job portal of the website of the Company, by delivering a documentary application to the address of the Company or by any other means (the “Applicant”).

The personal data of the Applicant is processed by the Company, as the controller, within the meaning of the GDPR, which published the relevant offer, or which is identified in the relevant offer as the employer or contractual partner (the “Employer”, for both forms of the contractual relationship).

The Applicant is obliged to provide the Employer only with the correct and up-to-date personal data.

The Employer processes the personal data of the Applicant to the following extent: a name, surname, date of birth, contact details, data on education and previous work experience, and other data provided in the curriculum vitae of the Applicant or in any other document presented by the Applicant to the Employer when expressing the interest in employment or another form of cooperation, or when applying for employment or another form of cooperation.

The Employer processes the personal data of the Applicant under the previous paragraph for the purpose of selecting the suitable applicant for the employment position or other form of cooperation to be filled and for participation in the relevant selection process and, within this framework, primarily for the purpose of processing the application of the Applicant for employment or other form of cooperation, for the assessment of the relevant application within the selection process and for the purpose of assessing the suitability of the Applicant as a candidate for the employment position or other form of cooperation for which the Applicant is applying.

The legal basis for the processing of the personal data for the purposes stated in the previous paragraph is Article 6(1)(b) of the GDPR – the processing within the framework of the pre-contractual relationship.

The personal data of the Applicant may be provided to recipients. The categories of recipients are in particular the processors of the Employer within the meaning of the GDPR, e.g., companies providing IT support or other support within selection processes, companies providing IT solutions and platforms, and/or relevant licences (including companies providing cloud services).

The processing of the personal data of the Applicant under this notification may involve various processing operations with the personal data, namely the collection, recording, organisation, storage, retrieval, consultation, and use of personal data, by both automated and non-automated means.

Within the processing of the personal data under this notification, personal data may be used for profiling or automated decision-making. In the event of such processing of the personal data, the Employer will comply with any other applicable obligations to the Applicant pursuant to the GDPR.

The personal data will not be transferred to third countries (i.e., countries outside the European Union and the European Economic Area) or to international organisations within the meaning of the GDPR.

The provision of the personal data by the Applicant is voluntary. If the Applicant decides not to provide the Employer with the personal data, the participation of the Applicant in the relevant selection process will not be possible.

The Employer will process and store the personal data of the Applicant under this notification for the time of duration of the relevant selection process. After the end of the selection process, the personal data of the Applicant may be processed on another legal basis pursuant to the GDPR if the Applicant has given the consent to the Employer to the processing of the personal data or if an employment contract or other legal relationship has been entered into between the Applicant and the Employer.

To the extent and under the conditions defined by the GDPR, the Applicant has the right to request from the Employer access to the personal data (see Article 15 of the GDPR), their rectification and erasure (see Articles 16 and 17 of the GDPR), or restriction of their processing (see Article 18 of the GDPR). To the extent and under the conditions defined in the GDPR, the Applicant also has the right to the portability of the personal data (see Article 20 of the GDPR) and is entitled to object to the processing of personal data with the Employer (see Article 21 of the GDPR). Further, the Applicant is entitled to lodge a complaint or a motion to initiate a proceeding with the supervisory authority, which is – with respect to the above-identified controller Profinit EU, s.r.o. or Techlake, s.r.o. – the Office for Personal Data Protection of the Czech Republic and – with respect to the above-identified controller Profinit Slovakia, s.r.o. – the Office for Personal Data Protection of the Slovak Republic.

Any queries regarding the processing of the personal data, requests, or objections regarding the processing of the personal data, as well as the above-stated rights, may be made and exercised by the Applicant in writing at the address of the registered office of the Employer that is stated above in this notification.

In the processing of the personal data under this notification, the Companies are not joint controllers under Article 26 of the GDPR. The Employer itself is entitled to update the content of this notification at any time.