The company Draslovka Holding a.s., ID No.: 075 06 546 (hereinafter referred to as "we" or "us") as a personal data controller pays great attention to the protection of personal data. In this document, you will find information about what personal data and on what legal grounds we process personal data, for what purposes we use it, to whom we may transfer it and what rights you have in relation to the processing of your personal data.
In this Privacy and Cookie Policy you will more information on how we process personal data in these situations:
• Processing of personal data from contact forms;
• Processing of personal data of job applicants;
• Processing of personal data of website visitors.
A. Processing of personal data from contact forms
A.1 What personal data do we process?
We provide contact forms on our website that you can use to contact us. In connection with the submission of such a form, we process the following personal data:
• Identification data (e.g., name, name of the company you represent);
• Contact data (e.g., contact address, e-mail, telephone number);
• Submitted content (e.g., an inquiry or request you send us via the contact form).
A.2 Why do we process personal data, and what entitles us to do so?
If you contact us via the contact form and enquire about our products and services, we process your personal data based on the performance of the contract or the steps leading to its conclusion. In other cases, which do not involve entering into a contract with us, we process personal data based on our legitimate interest in dealing with your enquiry or request.
We may also process personal data to improve the quality of the provided services.
We process your personal data for 3 years from the date you provide your personal data. In cases where a contract is concluded, we process personal data for the entire duration of the contractual relationship.
A.3 From what sources do we obtain personal data?
We obtain personal data directly from you by filling in the relevant forms.
A.4 Who processes your data, and to whom do we pass it on?
All of the above-mentioned personal data are processed by us as the controller. This means that we determine the above-defined purposes for which we collect your personal data, determine the means of processing and are responsible for its proper execution.
We generally do not pass on your personal data to other controllers. The exceptions to this are where we are obliged to transfer such data by law. Based on our legitimate interest, we may share personal data with other companies of the Draslovka Group to efficiently handle your inquiries and requests.
We also involve other entities as data processors that process personal data for us and according to our instructions. These are mainly providers of information systems and technical infrastructure. All processors are bound by a processing agreement to comply with the requirements under data protection legislation, in particular, to protect your personal data.
B. Processing of personal data of job applicants
B.1 What personal data do we process?
If you send us your CV or respond to our job offer, we will process your following personal data:
1. Identification data (e.g., name, surname and date of birth and other information you provide on your CV, such as a photograph);
2. Contact data (e.g., e-mail, postal address, telephone number;
3. Details of your qualifications (e. g., your education, work experience, skills and abilities).
B.2 Why do we process personal data, and what entitles us to do so?
We process personal data for the following purposes:
a) evaluation of job applicants and the implementation of the recruitment process based on the performance of the contract and the steps leading to its conclusion;
b) internal administrative needs, production of statistics and records based on our legitimate interest in ensuring proper registration of job applicants as well as maintaining an internal overview of the activities taking place in our company;
c) the protection of legal claims based on our legitimate interest in ensuring the proper protection and effective exercise of our rights and claims; and
d) if you give your consent, also for keeping records of job applicants so that we can contact you in future selection procedures.
We store personal data for the duration of the selection process. In order to protect legal claims, internal administrative needs and the creation of statistics and records, we keep personal data for a maximum of 1 year after the end of the selection procedure.
If you consent to be entered in the database of job applicants, we will keep your data in such register for 3 years after the end of the selection procedure.
B.3 From what sources do we obtain personal data?
In most cases, we obtain personal data directly from you by filling in the relevant forms.
B.4 Who processes your data, and to whom do we pass it on?
All of the above-mentioned personal data are processed by us as the controller. This means that we determine the above-defined purposes for which we collect your personal data, determine the means of processing and are responsible for its proper execution.
We generally do not pass on your personal data to other controllers. The exceptions to this are where we are obliged to transfer such data by law. Based on our legitimate interest, we may share personal data with other companies of the Draslovka Group to efficiently manage human resources and administrative needs and to meet Group`s reporting duties.
We also involve other entities as data processors that process personal data for us and according to our instructions. These are mainly providers of information systems and technical infrastructure. All processors are bound by a processing agreement to comply with the requirements under data protection legislation, in particular, to protect your personal data.
C. Processing of personal data of website visitors
When you visit our website, we use cookies and similar technologies to store and read data from your device. We use these cookies to collect information about your behavior on the website, which includes information about the links you click on, the way you move around our website, and information about the device from which you view our website, such as the IP address and its derived location, the identification of the device, its technical parameters such as operating system and its version, screen resolution, browser used and its version.
You can read more about cookies and similar technologies in this document. You can change your preferences regarding the use of cookies on our website in the Cookie settings at the webpage bottom. What are cookies?
Cookies are small text files of letters and numbers that we store on your browser or on your computer, mobile phone or other device from which you browse our website.
We may also use web beacons, which allow us to detect that you have accessed certain content and obtain data about your device, but are not stored in your browser for later reading. Web beacons are small invisible images or scripts that are embedded in our website. For simplicity, we will refer to all of these technologies as cookies later in this document.
C.1 What types of cookies do we use and what are they for?
We use different types of cookies on our website, some of which are placed on your device or used directly by our website, others are placed and read by third party tools we use. Some of these we may use without your consent, others only with it.
Necessary cookies and the basic functionality and security of the website
These cookies and the personal data we collect through them ensure that our website works properly, so that you can contact us via the online form, so that we can record that you have given us your consent as set out in this document, or so that we can identify you when you move between pages of the website, for example so that your order in progress is not deleted.
These cookies and the data collected are also used to prevent attacks on our website and compromise its functionality and the security of your data. Such cookies are necessary for the functioning of our website and therefore we do not need your consent to store and read them. We process the personal data collected based on our legitimate interest in ensuring the functionality of our services to you and the security of your data.
Analytics and statistics
Based on your consent, we store cookies on your device to process data about your behavior on the website and to analyze how our website works in terms of visitor behavior. We adapt and change our website accordingly. These cookies and the data collected also help us to show you different variations of our website when we are testing new functionality.
In connection with the use of statistical cookies, we use the following third-party tools whose providers are also the recipients of this data.
Google Analytics
This tool allows us to analyze the behavior of visitors to our website. This allows us to monitor site usage and optimize our site and applications for better performance and ease of use. More information can be found at Google Analytics`s website.
Marketing
With your consent, we also use cookies on our website for marketing purposes. By using the information about your behavior on the site collected by these cookies, we can tailor the offers shown to you. We also pass on data about your behavior on the site to advertising and social networks so that our tailored offers can also be shown to you on third-party websites and social networks.
In connection with the use of marketing cookies, we use the following third-party tools whose providers are also the recipients of this data.
LinkedIn
Our website uses features of the LinkedIn social network. The provider is the LinkedIn Ireland Unlimited Company, Gardner House, 2 Wilton Pl, Dublin 2, Ireland. We use Insight Tag to help us to optimize our marketing especially regarding previous visitors of our Website. For more information, see the LinkedIn privacy policy at LinkedIn.
We use personal data for all the above purposes for a maximum period of 12 months.
C.2 Who processes your data, and to whom do we pass it on?
We transfer the personal data collected through cookies to the operators of the above-mentioned third-party tools. In some cases, personal data may also be transferred to countries outside the European Economic Area. These countries may have different data protection laws and standards. However, we only make any such transfers on the basis of standard contractual clauses issued by the European Commission and available at https://eur-lex.europa.eu/eli/dec_impl/2021/914, which the recipient in the third country has agreed to comply with in addition to other additional measures.
D. What rights do you have when processing personal data?
Just as we have rights and obligations when processing your personal data, you also have certain rights when processing your personal data. These rights include:
D.1 Right to withdraw consent to processing
You may withdraw your consent at any time. However, this does not affect the lawfulness of the processing based on the consent given before its withdrawal.
D.2 Right of access
Simply put, you have the right to know what data we process about you, for what purpose, for how long, where we obtain your personal data, to whom we transfer it, who processes it outside of us and what other rights you have in relation to the processing of your personal data. You can find out all of this in this Privacy Policy. However, if you are unsure which personal data we process about you, you can ask us to confirm whether or not personal data relating to you is processed by us and, if it is, you have the right to access it. As part of your right of access, you can ask us for a copy of the personal data we are processing and we will provide you with the first copy free of charge and subsequent copies at a charge.
D.3 Right to rectification
If you find that the personal data we process about you is inaccurate or incomplete, you have the right to have it corrected or completed without undue delay.
D.4 Right to erasure
In some cases, you have the right to have us delete your personal data. We will delete your personal data without undue delay if one of the following reasons is met:
a) We no longer need your personal data for the purposes for which we processed it.
b) You exercise your right to object to processing (see "Right to object to processing" below) for personal data that we process on the basis of our legitimate interests and we find that we no longer have such legitimate interests that would justify such processing.
c) It turns out that our processing of personal data no longer complies with generally binding regulations.
This right does not apply if the processing of your personal data is still necessary for:
a) to fulfil our legal obligation;
b) for archival, scientific or historical research or statistical purposes; or
c) establish, exercise or defend our legal claims.
D.5 Right to restriction of processing
In some cases, in addition to the right to erasure, you can exercise the right to restrict the processing of personal data. This right allows you in certain cases to request that your personal data be marked and not subject to any further processing operations - in this case, however, not forever (as in the case of the right to erasure), but for a limited period of time. We must restrict the processing of personal data if:
a) you dispute the accuracy of the personal data before we agree on what data is correct;
b) We process your personal data without a sufficient legal basis (e.g. beyond what we need to process), but you will prefer to limit such data before deleting it (e.g. if you expect to provide us with such data in the future anyway);
c) We no longer need your personal data for the above processing purposes but you require it for the establishment, exercise or defense of your legal claims; or
d) object to the processing. The right to object is described in more detail in the section "Right to object to processing" below. We are obliged to restrict the processing of your personal data for the period of time that we are investigating whether your objection is justified.
D.6 Right to portability
You have the right to obtain from us all your personal data that you have provided to us and that we process on the basis of the performance of the contract. We will provide you with your personal data in a structured, commonly used and machine-readable format. In order to enable us to easily transfer the data at your request, it may only be data that we process automatically in our electronic databases. Therefore, we cannot always and under all circumstances transfer to you in this form all data that we keep in paper form.
D.7 Right to object to processing
You have the right to object to the processing of your personal data based on your legitimate interest. We will stop processing your personal data if we do not have compelling legitimate grounds to continue such processing.
D.8 Right to lodge a complaint
Exercising your rights in the above manner is without prejudice to your right to lodge a complaint with the Office for Personal Data Protection. You can exercise this right in particular if you believe that we are processing your personal data unlawfully or in violation of generally binding legal regulations.
You can lodge a complain with the Office for Personal Data Protection, which is located at Pplk. Sochora 27, 170 00 Prague 7.
E. How can I exercise individual rights?
You can contact us on all matters related to the processing of your personal data, whether it is an enquiry, exercising a right, complaining or anything else, using the following contacts:
a) By email to: info@draslovka.com
b) In writing to: Generála Píky 430/26, Dejvice, 160 00 Prague 6
We will process your request without undue delay, but within one month at most. In exceptional cases, in particular due to the complexity of your request, we are entitled to extend this period by a further two months. We will, of course, inform you of any such extension and the reasons for it.