Principles relating to Personal Data Processing and Protection hereinafter „the Principles“
Who are we?
As a controller and processor of the personal data we use the following legal identification details:
i42, a.s., trade registration number: 06981917, based at U Kamýku 284/11, Kamýk, registered at the commercial register of the Municipal Court in Prague under file No. B 23341.
To whom do the Principles apply?
The Principles apply to the processing of personal data related to you, as you are a data subject directed to these Principles while communicating with us.
No personal data is processed at the i42.cz website.
As a controller and processor of your personal data we declare that all data is considered confidential and is treated in accordance with the personal data protection laws in force, since protecting your personal data is a primary principle we follow when doing business.
Controller contact details:
e-mail: contact@i42.cz
What data do we collect and process?
Based on the purpose of data processing and under conditions stated in the Principles, we collect, control and process the following personal data related to you:
- identification information, in particular name, surname, tax identification number, and in case of job applicants other information stated in the applicants’ CVs or in other documents necessary to provide job offerings to the applicants,
- contact details, in particular phone number, electronic address, contact address, or a bank account number,
- other information that is always processed only when its subject is clearly informed, at the time of processing at the latest.
Why do we process data and how do we use it?
Some of your data can be processed even without your consent:
- identification information you provided to us to for an electronic communication (especially e-mail) and for the purposes of our rightful interest to process the data you provided to ensure mutual communication,
- contact details you provided to us for the purposes of our rightful interest to contact possible job applicants,
- your identification information, contact details or if needed other personal data to the essential extent, as you are a person acting for a business partner of our company (i.e. especially representatives of our customers and other business partners), for the purposes of unambiguous identification when implementing a contract and taking measures before making a contract (i.e. negotiations preceding a contract itself, such as demands, offers, contract drafts, etc.), and also for the protection of our rights and legally secured interests (e.g. litigation concerning contract implementation), including the administration of a database of customers and their contact persons,
- your data to the legally essential extent, necessary to fulfil our legal obligations (especially identification information and contact details necessary to issue, include and archive contracts, orders or receipts to do bookkeeping, etc.).
If you apply for a job in our offer, we do need your consent to process certain types of personal data for certain purposes; types of data and purposes of processing are always stated in the consent given by you. We need your consent to be able to:
- administer a database of job applicants,
- forward your personal data to persons possibly interested in your services,
- inform you on current job offerings coming from persons possibly interested in your services,
- perform other activities we would inform you about if needed and before processing the data.
How do we obtain data?
We obtain the personal data on the grounds of a contractual agreement with you, based strictly on you voluntarily providing us with the data. To ensure that the personal data is accurate and updated, we can collect, or update, the data information as obtained from the data subjects, third parties or public resources (internet, public registers, etc.).
How do we process data?
The data you provided is processed in an electronic way and is stored that way. The applicants’ CVs are not printed and there is no extraction nor profiling of their content.
Personal data in a printed form is process exceptionally (e.g. signed contracts).
For accessing the personal data sources (including mail servers) we use a secured connection and security access rights using unique passwords of the authorized users. All of these systems are standard products and their providers guarantee that the data processing is in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation, hereinafter GDPR).
How do we protect data?
Your personal data is under a permanent electronic and procedural control secured by technical and organizational procedures. Individuals who come into contact with your personal data when carrying out their professional or contractual duties are legally or contractually committed to maintain the confidentiality. Your right to personal data protection is granted by the Czech law No. 101/2000 Coll. on personal data protection and by the GDPR. The technical procedures are tested for their security regularly, at least once a year, whereas the organizational procedures are examined and secured continuously.
If the personal data of job applicants is forwarded to persons possibly interested in applicants’ services, the data is treated in a secure manner, using a secured electronic communication (via e-mail).
How long do we store and process data?
The personal data is being processed as long as there is a legal reason for its processing, or until the data processing is terminated due to other legal reasons. If there is a consent, the data is being processed until the consent to its processing is withdrawn and unless there is no other legal reason for its further processing.
If you gave the consent to the personal data processing, your personal data, processed for the purpose of job offering to applicants, will be processed for maximum 5 years unless you give your consent to extend that period of processing.
After the period of processing is over (any legal reason for processing is no longer applicable), your personal data will be irreversibly destructed or anonymized.
With whom do we share data?
We share the personal data with:
- public authorities, or other subjects having legal obligations such as supervisory bodies, state administration bodies, etc.,
- persons possibly interested in your services in case you are a job applicant and you give us your consent,
- external subjects that process data on the grounds of a relevant contract on personal data processing signed with our company,
- providers of additional applications and systems who do not process data but who can obtain access to it under conditions stated in a contract and to such an extent that is needed for a particular service to be provided,
- other subjects in case you give us your consent.
The extent of the personal data being provided or accessed is always limited to data necessary to fulfil a given purpose, and its provision depends on legal reasons for its processing.
We do not forward the personal data to third-country receivers (outside the EU) or international companies.
What rights are you granted?
Mainly, you have the right to:
- demand access to personal data,
- have data corrected,
- have data deleted,
- limit data processing,
- personal data portability,
- express objections against processing,
- withdraw your consent at any time.
How can you exercise other legal rights?
Based on your request, we will perform the required actions to such an extent that is defined by law. Any requests, objections, data change declarations and other requirements can be sent to our e-mail address: contact@i42.cz.
If the requests from data subjects are clearly unreasonable or inappropriate, especially because they repeat themselves, we can charge the subjects an appropriate fee or we can deny such requests.
You also have the right to fill a complaint at the Office for Personal Data Protection.
The Principles relating to personal data processing and protection come into effect on 25th May 2018.