We only process personal data when we need it and to the extent necessary for our stated purposes. At the same time, we take care to ensure that the data we hold is accurate, appropriately protected and not used for any other purpose. We process the data only for the time required. The main purpose of this document is to inform you about the details of the processing we carry out and about your rights.
1/ Responsible persons
Data controller:
Stride XL s.r.o.
ID No. 072 34 783, with registered office at Sekaninova 869/3, Husovice, 614 00 Brno
(hereinafter referred to as the "Company", "we", "us", "our" or "ours")
e-mail:
zuzana.tancibudkova@stridexl.com 2/ Key terms
GDPR:
Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.
Data subject = you:
Data subject means an identified or identifiable natural person, where an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to a specific identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Controller = us:
Within the meaning of Article 4(7) of the GDPR, a controller is a natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. We act as a controller in relation to your personal data.
Processor:
Within the meaning of Article 4(8) of the GDPR, a processor means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller on the basis of instructions from the controller.
Supervisory authority:
In the Czech Republic, the supervisory authority is the Personal Data Protection Office (hereinafter referred to as the "PDPO").
Job seeker:
A job seeker is a person who is interested in working for the Controller and who participates in a selection procedure. The selection procedure may be terminated either by selection of a suitable candidate, cancellation or otherwise.
Contractual partners and clients:
This category includes both business and non-business persons with whom we have entered into a contract. This may include our clients, suppliers, cooperating freelancers or tenants.
3/ Categories of data subjects, personal data processed, purpose, legal basis and duration of the processing
Categories of data subjects
Legal basis and personal data processed
Legal basis and personal data processed
Respondents to questionnaires or interviews
Evaluation of the interview with the respondent
The legal basis is the respondent's consent.
For this purpose, we process in particular the identification and contact data of the respondent, the information provided by the respondent in the questionnaire or during the interview, and the recording of the interview.
For this purpose, personal data may be processed for the duration of the consent or until its withdrawal.
Contractual partners and clients
Performance and implementation of contracts
The legal basis is the performance of a contract between the entity in question and the Company.
For this purpose, we process the data of the natural persons with whom we communicate in the context of the conclusion and performance of the contract and the data of the contracting parties, namely identification data, contact data, accounting data (in particular, the bank account number), payment data, etc.
For this purpose, personal data may be processed for the duration of the contractual obligations.
Contractual partners and clients
Exercise of contractual claims after termination of the contract
The legal basis is the legitimate interest of the Company.
For this purpose, we process identification data, contact data, accounting data, communication history. After termination of the contract, this data is necessary for the recovery of claims and other obligations under contracts concluded between the Company and the entities concerned. Identification and contact details of natural persons representing legal persons may also be kept within this documentation.
For this purpose, personal data may be processed for a period of 3 years after the termination of the contractual relationship and, if administrative or judicial proceedings are initiated, for the entire duration of these proceedings.
Contractual partners and clients
Fulfilling the Company's accounting, tax and other legal obligations
The legal basis is the performance of legal obligations imposed on the Company by legal regulations such as the Accounting Act or the Value Added Tax Act and other tax laws, the Act on Certain Measures against the Legalization of Proceeds of Crime and Financing of Terrorism, etc.
For this purpose, we process data to the extent required by the relevant laws, in particular identification data, contact data and accounting data.
For this purpose, personal data may be processed for up to 10 years from the end of the tax year in which the transaction took place.
Respondents to questionnaires or interviews
For this purpose, personal data may be processed for the duration of the consent or until its withdrawal.
For this purpose, personal data may be processed for the duration of the consent or until its withdrawal.
For this purpose, personal data may be processed for the duration of the consent or until its withdrawal.
Selecting the right job seeker
The legal basis is the negotiation on the employment contract or the job seeker's consent in the event of a subsequent re-contacting with a job offer.
For this purpose, we process in particular identification data, contact data and other data provided by the job seeker, in particular in the CV and cover letter, and a criminal record extract, if necessary or appropriate.
For this purpose, personal data may be processed for up to 6 months after the end of the selection procedure (for the purpose of re-contacting the selected candidate in the event of termination of the employment relationship with the selected candidate during the probationary period) or for the duration of the consent, or until its withdrawal.
Proving the legality of the procedure for selecting a job seeker
The legal basis is the legitimate interest of the Company to demonstrate non-discriminatory treatment.
For this purpose, we may process in particular identification data, contact data and other data provided by the job seeker, especially in the CV and cover letter.
For this purpose, personal data may be processed for a period of 3 years (to prove non-discrimination, if applicable).
Selection of archival material (archiving)
The legal basis is the performance of legal obligations arising in particular from Act No. 499/2004 Coll., on archiving and file service.
Exceptionally, personal data of natural persons may appear in archived documents.
For this purpose, personal data may be processed for the period required by law or by the relevant district archives.
We only retain personal data for as long as is necessary for the purpose of processing – see the table above. After this period, personal data may be kept only for the purposes of the national statistical service, for scientific purposes and for archiving purposes.
4/ Recipients of personal data and transfer of personal data outside the European Union
In justified cases, we may also transfer your personal data to other entities (hereinafter referred to as "recipients").
Personal data may be transferred to the following recipients:
- processors who process your personal data on our instructions and whose relationships are governed by processing agreements (in particular, cooperating freelancers and providers of software used by us),
- public authorities and other entities if required by applicable law (in particular, the tax administration, the Police of the Czech Republic and other law enforcement authorities, etc.),
- other entities in the event of an unexpected event in which the disclosure is necessary to protect life, health, property or other public interest or is necessary to protect our rights, property or safety.
We do not transfer your personal data to third countries, i.e. outside the scope of authority of the GDPR. Some of the processors whose software we use are based in countries where the GDPR regime does not apply. However, these countries are so-called safe third countries that ensure an adequate level of protection for personal data.
5/ Your rights as a data subject
You have the right to request from us access to personal data relating to you under the conditions set out in Article 15 of the GDPR.
You have the right to withdraw your consent to the processing of personal data processed by us on the basis of your consent at any time under the conditions set out in Article 7 of the GDPR.
You have the right to request rectification of personal data under the conditions set out in Article 16 of the GDPR, restriction of processing of personal data under the conditions set out in Article 18 of the GDPR or erasure of data under the conditions set out in Article 17 of the GDPR.
You have the right to object to the processing of personal data concerning you on the basis of Article 21 of the GDPR.
You have the right to the transfer of data to another controller under the conditions set out in Article 20 of the GDPR.You have the right not to be subject to any decision based solely on automated processing, including profiling, under the conditions set out in Article 22 of the GDPR. When processing personal data, we do not use automated individual decision-making, including on the basis of profiling, i.e. without human intervention.
You have the right to obtain information about a breach of security of your personal data under the conditions set out in Article 34 of the GDPR.
If you believe that the processing of your personal data is in breach of the obligations set out in the GDPR, you have the right to lodge a complaint with a supervisory authority under the conditions set out in Article 77 of the GDPR. The supervisory authority in the Czech Republic is the Personal Data Protection Office.
Personal Data Protection Office
Pplk. Sochora 27, 170 00 Praha 7, Czechia
tel: +420 234 665 111, email: posta@uoou.cz, data box: qkbaa2n
www.uoou.czThis Privacy Policy is effective as of 25 May 2018.
