GDPR 🇬🇧

For our company, pretlak s. r. o., the privacy protection is extremely important. We process personal data in full compliance with Regulation (EU) 2016/679 Of The European Parliament And Of The Council of 27th April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter as “Regulation” or “GDPR”), as well as Act No. 18/2018 coll. on Personal Data Protection and on Amendments to Certain Acts (hereinafter referred to as the “Act” or “Personal Data Protection Act”).

In accordance with the transparency principle, as conveyed in Art. 5 of the Regulation, we have defined clear rules for you, which specify the conditions for the processing of personal data.

---

Controller

The controller of personal data is pretlak s. r. o., residing at Lazovná 236/5 974 01 Banská Bystrica, company ID: 52 310 965, registered in the Business Register of the District Court Banská Bystrica Ltd., Insert No.: 36285/S.

Email contact: [email protected]

Our business partners, who use this portal to advertise their job offers, are also independent data controllers.

These principles of personal data processing apply to:

1. People responding to job offers published on the pretlak.com website;
2. People we help finding a job, e.g., by publishing their CV after signing up at our website;
3. Users of pretlak.com website,
4. Representatives of our clients and business partners;
5. Persons whose personal data we use for our marketing activities;

The personal data processing rules below describe the categories of personal data that we process, the purposes and legal bases that are required for legal processing of personal data, the categories of persons, storage term, as well as all other necessary information in accordance with Art. 13 and 14 of the Regulation.

Important information:

We may collect personal information about you in several ways. For example, through our website – using the contact form, by signing up with a private account of a natural person, uploading a CV to our database, by signing up with a private account of a legal person on whose behalf you act; through a contract if you are our business partner or otherwise as stated below.

Depending on the nature of the relationship with you, the specific purpose, and the legal basis, we may collect selected personal data, the scope of which corresponds to the following facts.

1. Personal data provided via the „I am interested“ contact form, which the job applicant uses to respond to a specific job offer

One of the basic services provided by the Controller is the possibility to respond through our website to specific job offers published by our business partners. The applicant will do so by using the „I am interested“ button, followed by filling out the contact form.

This way of processing your personal data includes your first name, surname, email address and other data you provide in the contact form, and which may be considered as personal. As this message may include your CV, cover letter or other documents as an attachment, personal data may be processed to the extent specified in these documents.

pretlak s. r. o. recommends to job applicants as the data subjects, that their CVs and other documents sent to our business partners (job offer advertisers) through our website, contain only personal data within the scope of a professional CV, or only to the extent expressly required by the job advertiser. Communicating personal data in greater extent may not be in accordance with the intended purpose, and thus with the principle of data minimization, as set forth in Art. 5 of the Regulation.

our personal data, obtained through resumes, may be shared with other employers looking for suitable candidates for job positions based on legitimate interest, for a maximum period of 12 months. If you do not wish for your personal data to be processed further, you have the right to request its deletion at any time.

If you are one of the users signed up to our portal, we process your data for a period of eighteen months or until the withdrawal of consent.

We consider the twelve months, or eighteen months period to be appropriate for the specific purpose, based on our heretofore experience. During this period, we do not expect your professional competences and qualifications, skills, or experience to change significantly, nor that your contact details will change to such an extent as to prevent us from contacting you.

The processing of personal data may even take less than twelve or eighteen months. This shall be the case if, as the data subject, you withdraw your consent to process the data. You can withdraw the consent online using the [email protected] email, in writing at the address of the controller’s registered office, or via our website in your private profile, if you are a signed-up user.

For the processing of personal data by our business partners, to whose job offer you respond and who act as separate controllers in relation to you as the data subjects, we confirm that they regulate the conditions of processing your personal data independently without any interaction from us.

In general, however, the principle applies that by responding to a specific job offer you enter into the so-called pre-contractual relationship (you take actions to sign a contract of employment or one of the fixed-term employment contracts performed outside the employment relationship) with the advertiser of the job offer, while such a provided data can be processed as necessary and for the necessary time, even without your consent. If you wish our business partner to process your job application, or your CV for a longer period of time, for example to register these into their job applicant database, you shall be required to give them your consent to do so.

The purpose of processing the personal data by our business partners advertising on our website, is to fill a vacancy with a suitable candidate (employee) or to include your CV into their database of job applicants.

2. Personal data provided through a CV, by including them into a CV database

Another type of service, that we provide to you as a job applicant and in which personal data are being processed, is the possibility to include your CV, motivation letter, as well as other documents pursuant to the purpose in question, into our database of job applicants, or into our CV database.

You can use this service online through our website. In this case, the legal basis for the processing of your personal data is your consent.

The controller of personal data processed in accordance with this policy, is pretlak s. r. o. It can also be a job advertiser, our business partner, who can be provided with your personal data, if they require us to do so in order to fill a vacancy that matches your expertise and work experience. A list of business partners who may be provided with your personal data, is available here.

The purpose of processing your data is to help you, as a job applicant, find a suitable job. To do so, our company can provide or make your personal data available to our business partners (perspective employers), who will thus become separate controllers of your personal data and are obliged (each separately) to you as the data subject, to fulfill their obligations consequent to the Regulation.

Processing of personal data for the above purpose is subject to your consent. Generally, you grant your consent for the duration of eighteen months. In this case too, you can withdraw your consent to process your personal data at any time. You can withdraw the consent online at [email protected], or in writing sent to the registered office of the controller.

3. Personal data made available / published through your freelancer’s personal account

Other services we provide to you, include the option to create a professional CV and post it through your personal profile, making it available to our business partners and to the public (i.e. the visitors of our website). You can create your CV by completing the online form on our website.

You will thus have published your data on our website, within the scope of your professional CV (the scope as chosen by you) in an anonymized format, i.e. without stating your name or contact information. Therefore, at that moment, the visitor of our website will not yet be able to identify you. This will only change after the website visitor obtains your personal data within the scope of your contact details upon request, i.e. after submitting an online application with a completed email address info, to which we will send your data.

The controller of personal data processed in accordance with this article, is pretlak s. r. o. and any person to whom we send your contact information.

pretlak s. r. o. processes your data with the purpose to provide you, as a job applicant, with support in finding a suitable job, by reaching out to the general public (visitors of our website).

Processing of personal data for the above purpose is subject to your consent.

The period, during which the personal data shall be posted in your profile within extent specified above, thus making it available to our business partners or website visitors, can be directly influenced by you as the data subjects, and therefore this period is solely in your competence. In their private profile, all users / freelancers can enable or disable the access to / posting of their data, making the data available or not accessible. You can withdraw your consent to process your personal data under this article at any time online, by disabling this service in your personal profile.

At the same time, after eighteen months from the date of the last login into your account, your personal data will be anonymized, thus ceasing to be personal and pretlak s. r. o. may continue to use them for statistical purposes only.

pretlak s. r. o. advises the data subjects not to disclose personal data in their personal accounts, which, in accordance with Art. 9 of the Regulation fall into the so-called special data category (data on health, religion or political affiliation, data on integrity, etc.). Birth ID numbers are also not information that your potential employer would need before entering an employment relationship.

4. Personal data of our business partners, if they are natural persons, or their employees, if they are legal entities

In connection with the services we provide to you, our business partners, we may process the personal data of your employees, as long as they are listed as points of contact for job applicants, or your personal data directly, if you are a natural person and / or if you are a party to a contractual relationship with pretlak s. r. o.

The scope of personal data used for this purpose, is defined in Article 78, par. 3 of the Personal Data Protection Act and may consist of first name and surname (including titles), email address, telephone number and job role.

Providing personal data or posting personal data must not impair the esteem, dignity, or security of the data subject. These data shall be processed for a maximum of 10 years from the delivery of the client’s last order; after this period the data will be permanently deleted.

5. Cookies

Since processing of Cookies also includes the processing of personal data, we would like to provide you, as the data subject, with information on the conditions of this type of personal data processing.

Cookies are usually small text files generated by a web server, that are stored on user’s computer (website visitor’s computer) through user’s web browser (if these are enabled in the web browser settings). When the user later reopens the same website, the browser sends these cookies, stored earlier on user’s computer, back to the web server. The Session cookies are temporary files and are deleted at the end of the current session, or after closing the browser.

Our website processes cookies in such a manner, that allows to recognize previous website visitors when logging in to the user interface, and to remember their choices when opening a new window. By using cookies, we are also able to measure website traffic or to monitor users’ behavior. This helps us improve and adjust our services provided through this site, which is essentially the actual purpose of using cookies.

The legal basis for processing your personal data using cookies is solely your consent. In this context, however, we point out to Art. 55 par. 5 of Act No.351/2011 Coll. on electronic communications, that sets forth the following „Anyone who stores or gains access to information stored on a user’s terminal shall have the right to do so only if the user concerned has given his/her consent based on clear and complete information on the actual purpose of its processing; the use of the particular web browser settings or other computer program settings is also considered consent for this purpose.“ However, we also give you the option to grant or deny consent to process cookies, you can even do so directly on our website via a pop-up window.

6. Rights of Data Subjects

A) The right of access to personal data pursuant to Art. 15 of GDPR:

As the data subject, you shall have the right to obtain information (confirmation) from us on whether or not we process personal data concerning you, as well as the right to have access to this data, under the conditions set forth in Art. 15 of the Regulation

B) The right to rectification of personal data pursuant to Art. 16 of GDPR:

As the data subject, you shall have the right to obtain rectification of inaccurate personal data we process about you, or you have the right to supplement them, if they are incomplete, under the conditions set forth in Art. 16 of the Regulation.

C) The right to erasure (‘right to be forgotten’) pursuant to Art. 17 of GDPR:

As the data subject, you shall have the right to obtain the erasure of personal data we process about you, if you fulfill the conditions set forth in Art. 17 of the Regulation. However, we are obliged to thoroughly assess the exercise of this right from the perspective of all relevant circumstances in accordance with Art. 17 of the Regulation. E.g. we are not obliged to comply with your request, if the processing is necessary to fulfill legal obligations of the controller, to perform a contract, or to establish, exercise or defend legal claims.

D) The right to restriction of processing of personal data pursuant to Art. 18 of GDPR:

As a data subject, you shall have the right to limit the processing of personal data concerning you, if any of the cases referred to in Art. 18 par. 1 of the Regulation applies.

E) The right to personal data portability pursuant to Art. 20 of GDPR.

F) The right to object pursuant to Art. 21 of GDPR.

G) The right to withdraw consent to processing of personal data:

As the data subject, you shall have the right to withdraw your consent anytime. However, the withdrawal of consent shall not affect the lawfulness of the processing pursuant to the consent prior to its withdrawal. You can withdraw your consent as follows:

a) In writing at the address of the controller’s registered office;

b) By email at [email protected],

c) Using your personal account, after signing up on our website;

H) The right to submit a motion or a complaint to the Office for Personal Data Protection.

7. How long will we process your personal data?

The duration of processing your personal data depends on the specific purpose for which it is being processed.

Data processing times are continuously stated herein. Unless otherwise stated above, the processing times are as follows:

If your personal data is processed in course of fulfilling controller’s legal obligations and the retention period is specified by law, we shall store personal data and the related documentation for the period as required by applicable law.

If we process personal data for accounting purposes, it is stored for a period of 10 years.

Job applicants‘ personal data provided for the purpose of a specific selection process to third parties (our business partners) as recipients of your data, must not be processed longer than the period given by the actual due date of the selection process. However, meeting the given period is sole responsibility of the third party, as a separate controller.

Personal data of job applicants, provided for the purpose of registering job applicants with third parties, shall be kept for the period specified in the consent, or until the withdrawal of the consent. Meeting the given period is sole responsibility of the third party, as a separate controller.

8. Sending news about the activities on our portal:

To send you news about what is happening on our portal, whether to those looking for a suitable job on our website, or to you, our business partners, as a legal basis (i) we use a legitimate interest, which pursuant to the Recital 47 of the Regulation, is an appropriate legal basis when certain conditions are met. In most cases, however, we use (ii) your consent as the legal basis.

9. Which countries do we transfer your personal data to?

Your personal data is not transferred to third countries, i.e. to countries outside the EU and the EEA (Norway, Liechtenstein and Iceland). All servers we use for our activities, are located within the EU and EEA; most of them in the Slovak Republic.

10. Automated decision-making, including profiling

Pretlak s. r. o. as the controller of your data, does not use automated individual decision-making, nor profiling when processing your data.

These terms and conditions took effect on 1st September 2018. Updateted 1.1.2022.