Information on personal data processing
Dear Sir or Madam,
In accordance with Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation – hereinafter “GDPR”), we hereby provide you with information regarding the processing of your personal data that you have provided to us in response to a job advertisement or that you may provide to us later in this context.
1. Personal data controller
1.1
The controller of your personal data is Nafisipado s.r.o., with its registered office at Na záhonech 809, Michle, 141 00 Prague 4, Czech Republic, Company ID No.: 172 22 788, registered in the Commercial Register maintained by the Municipal Court in Prague, File No. C 368459 (hereinafter the “Controller”).
1.2
The Controller acts as an employment agency authorised to provide employment intermediation in the form of finding employment for a natural person seeking a job, and finding employees for an employer seeking new staff, pursuant to Section 14(1)(a) of Act No. 435/2004 Coll., on Employment, as amended (hereinafter the “Employment Act”).
1.3
The Controller can be contacted as follows:
a)by e-mail at info@talentem.com,
b)by phone at +420 736 186 528,
c)by post sent to Nafisipado s.r.o., Na záhonech 809, Michle, 141 00 Praha 4, Česká republika, or
d)by a message sent to the Controller’s data box (ID: x76dpab).
1.4
The Controller can be contacted as follows:
2. Purposes of processing and related information (legal basis for processing, recipients of personal data, period of storage of personal data)
2.1
The primary purpose of processing your personal data is the intermediation of employment in the form of finding employees for an employer who has engaged the Controller as an employment agency for this purpose, and whose job offer is contained in the advertisement to which you responded (hereinafter the “Client“). For this purpose, the Controller will analyse the personal data you provided, and if you meet the requirements for the advertised position with the Client, the Controller will transfer your personal data to the Client, who may thus be the recipient of your personal data. The Client may also be a person from a third country (i.e. a country outside the European Union or the European Economic Area), but always a country which the European Commission has decided ensures an adequate level of protection of personal data. In accordance with Section 17(2) of the Employment Act, your consent is required for the processing of your personal data for the above purpose. The legal basis for processing your personal data is therefore the consent of the data subject pursuant to Article 6(1)(a) GDPR. You granted this consent by completing the relevant fields in the online form and submitting it to the Controller. It was not your obligation to provide personal data to the Controller, but without providing them the Controller would not be able to intermediate employment for you with the Client. The Controller will store your personal data for the above purpose only until it decides, based on its analysis, whether to transfer them to the Client or not, unless you withdraw your consent to their processing earlier (see below).
2.2
Another purpose of processing your personal data may be the intermediation of employment in the form of finding a job for you with another employer, different from the Client. For this purpose, the Controller would include the personal data you provided in its records, analyse them in relation to the demand of employers seeking staff through the Controller, and potentially contact you with a job offer from another client. If you are interested, the Controller would subsequently transfer your personal data to this other client, who may thus become the recipient of your personal data. This other client may also be a person from a third country (i.e. a country outside the European Union or the European Economic Area), but always a country which the European Commission has decided ensures an adequate level of protection of personal data. In accordance with Section 17(2) of the Employment Act, your consent is required for the processing of your personal data for the above purpose. The legal basis for processing your personal data is therefore the consent of the data subject pursuant to Article 6(1)(a) GDPR. You may have granted this consent by ticking the relevant box in the online form through which you provided your personal data to the Controller. The Controller will store your personal data for this purpose until you withdraw your consent to their processing (see below).
Your rights
3.1
You have the right to request access to your personal data from the Controller, i.e. the right to obtain confirmation from the Controller as to whether or not your personal data are being processed, and, if so, the right to access your personal data and other prescribed information. You also have the right to the rectification of inaccurate personal data or the completion of incomplete personal data.
3.2
If one of the grounds referred to in Article 17(1) GDPR applies, and none of the exceptions under Article 17(3) GDPR applies, you have the right to the erasure of personal data.
3.3
If the case referred to in Article 18(1) GDPR arises, you have the right to the restriction of processing of personal data.
3.4
You also have the right to withdraw your consent to the processing of personal data at any time for one or both purposes of processing specified in Sections 2.1 and 2.2 of this document. However, any withdrawal of such consent shall not affect the lawfulness of processing based on this consent prior to its withdrawal.
3.5
All of the rights specified herein may be exercised via the Controller’s contact details set out in Section 1.3 of this document.
3.6
If you believe that the processing of your personal data has infringed the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement. The supervisory authority for the Czech Republic is the Office for Personal Data Protection, with its registered office at Pplk. Sochora 27, 170 00 Prague 7, Czech Republic, Company ID No.: 708 37 627, https://uoou.gov.cz/.
Nafisipado s.r.o.
