Principles of personal data processing pursuant to Article 13 of the European Parliament and Council (EU) 2016/679 of 27 April 2016 (General Data Protection Regulation) hereinafter referred to as “GDPR”

1. WHO IS THE DATA CONTROLLER?

The controller of your personal data is the company Expat Services s.r.o., with registered office at Elektrárenská 126, 739 11 Frýdlant nad Ostravicí, ID No.: 06134564, registered in the Commercial Register kept at the Regional Court in Ostrava, sec. C, entry 70753 (hereinafter referred to as “Expat Services”).

2. WHAT PERSONAL DATA DO WE PROCESS?

We process the following categories of personal data in the context of job placement:

– Identification data: name, surname, date of birth, nationality.
– Contact details: telephone number, e-mail, home address.
– Professional data: CV, education, work experience, professional skills, language skills, references.
– Other data: employment preferences, interview or testing results, or other relevant information needed for job placement.

3. WHAT IS THE PURPOSE OF PROCESSING PERSONAL DATA?

We process personal data for the following purposes:

– Providing employment on the basis of your consent (Article 6(1)(a) GDPR).
– Performance of a contract in the course of employment (Article 6(1)(b) GDPR).
– Compliance with legal obligations (e.g. under the Employment Act) (Article 6(1)(c) GDPR).
– The company’s legitimate interest in the efficient operation of the job placement service (Article 6(1)(f) GDPR).

4. HOW LONG DO WE KEEP YOUR PERSONAL DATA?

We keep your personal data:

– For the duration of the selection process or until the end of the job placement process.
– For a period of 3 years after you have given your consent if you wish to be on our database of candidates.
– For as long as required by law (e.g. for the purpose of an inspection by the Labour Office).

After this period, the data is securely deleted or anonymised.

5. TO WHOM CAN YOUR PERSONAL DATA BE PASSED ON?

Your data may be shared with:

– Prospective employers who are looking for employees matching your profile.
– Government authorities, if required by law (e.g. the Czech Labour Office).
– IT service providers who ensure the security and operation of our systems.

We always ensure that personal data is protected and shared only to the extent necessary.

6. WHAT RIGHTS DO YOU HAVE?

Under the GDPR, you have the right to:

– Request access to your personal data.
– Request correction of inaccurate or outdated data.
– Request the erasure of your data when it is no longer needed.
– Request a restriction on the processing of your data.
– Object to processing based on legitimate interest.
– Withdraw your consent to data processing at any time.
– File a complaint with the Data Protection Authority.

7. HOW DO WE PROTECT YOUR PERSONAL DATA?

We use appropriate technical and organisational measures to ensure the security of your personal data, including encryption, controlled access and regular security audits.

8. HOW CAN YOU WITHDRAW YOUR CONSENT TO THE PROCESSING OF YOUR PERSONAL DATA?

You may withdraw your consent to the processing of your personal data at any time by notifying us at ostrava@expatservices.info. Withdrawal of consent does not affect the lawfulness of processing based on consent prior to withdrawal.