Personal data protection

Information on the processing of personal data is provided in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data (hereinafter the ‘GDPR’).
Business partners
Job applicants

Personal data processing in supplier-customer relationships

Information on the processing of personal data provided in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data (hereinafter the ‘GDPR’).

Personal data means any information about an identified or identifiable natural person; an identifiable natural person is a natural person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, a network identifier or to one or more specific elements of the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

 

Personal data controller

The personal data controller is JP - PROLAK a.s. ID 17289785, with its registered office at Opatov 183, 56912 Opatov v Čechách, Czech Republic (hereinafter the ‘Controller’).

 

Legal basis for data processing

We process personal data on a legal basis for the performance of contractual obligations and the introduction of pre-contractual measures, for the fulfilment of a legal obligation, for the purposes of our legitimate interests, which include, in particular, the introduction of security measures and the protection of company interests in the event of litigation, and exceptionally based on personal consent.

 

Why do we process your data?

We process your data to the necessary extent for:

// negotiating the terms of contractual relations
// verifying status and selecting suitable business partners
// fulfilling obligations arising from contracts and terms and conditions
// fulfilling obligations arising from generally binding legal regulations, such as accounting for business transactions
// maintaining a database of customer representative, business partner and service customer contacts
// to protect our rights and legitimate interests, assert legal claims and prevent adverse legal consequences
// to assert liability claims and avoid legal risks and negative economic consequences, detect and process potentially harmful e-mails, control access, prevent crimes, efficiently and quickly process digital signatures on contracts, check the validity of electronic signatures and for other internal administrative purposes (such as user and contract management, project control and approval), and to comply with legal requirements for the storage and identification of information, e.g., in connection with anti-money laundering legislation, tax, audit and reporting obligations, and data processing requirements of government authorities such as the police.

 

What data do we process?

We usually obtain your data from you. However, we sometimes may need to process data obtained from other companies and third parties, or data extracted from publicly available sources (online surveys), to comply with legal obligations or in our legitimate interest (e.g. as part of a compliance check with a business partner). We process the following data categories:

// Identification data: to identify you unambiguously, we process the following data: name, surname, academic degree if any, nationality, sample signature
// Contact data: for us to be able to contact you, we process the following data: e-mail, telephone number(s), affiliation or contact address, content of communication
// Address data: for us to be able to deliver goods to you, we process the following data: contact person’s name and surname, telephone number and delivery address
// Job title: in order to establish your position in the business partner company, we process data such as your job title and department, supervisor, data on company structure and ownership, photos and video footage, username
// Signature including digital signature: if you use a digital signature to sign contracts, we will process your related personal data (in particular your email address, IP address and date(s) and time(s) of signing the relevant contractual document). Some contracts can also be signed with a qualified digital signature. In this case, we also process your signature certificate data (which may include, for example, a unique identifier). This personal data is accessible to all persons involved in the approval and signing of the contract.

 

Who will receive your data?

The data will be accessible to our authorised personnel. In this case, access will only be granted if it is necessary for the above purposes.

We may share your data with other third parties, such as carriers and delivery services, to the necessary extent.

In certain conditions, your data may be disclosed to public authorities (Police, Courts, Financial Administration, etc.) in the exercise of their legal powers.

 

How long will your data be stored?

We process your data for the duration of the business relationship between JP - PROLAK and the company you represent. Thereafter, we may continue to store and process your data for the purposes and period for which we are required to do so under generally applicable law, in particular under tax and accounting regulations, which provide for a retention period of up to 10 years, and for the period necessary to pursue our legitimate interests, such as managing the history and development of customer relationships, reference compliance and the protection of our rights.

 

What rights do you have?

Right of access

You have the right to obtain a copy of your data we keep and some details about how we use it. This information will usually be provided to you electronically or in writing if specifically requested, and such request can be granted.

Right to data correction

We take reasonable steps to ensure the accuracy and completeness of the information we keep about you. Data accuracy is important and we thereby ask you to inform us about any incorrect/out-dated information, for example, if you have changed your name or postal address.

Right to data erasure

In certain circumstances, you have the right to request that we delete your data, for example, if the data we have collected is no longer necessary for the initial purpose, if the data is stored longer than is strictly necessary or if you have withdrawn your consent. However, we may have legal and regulatory obligations that prevent us from complying with your request, for example, if we are required to keep data on accounting records.

Right to restrict scope of processing

In certain circumstances, you may request that your data is no longer used, for example, if you believe that the data we keep about you may be inaccurate or is no longer necessary for us. Starting from the date of the requested data correction or objection to its processing, you have the right to restrict such data processing until we are able to investigate the problem or confirm the accuracy of your data (or amend it as you instruct us). This means that we will only retain and further process your data in accordance with your consent where it is necessary in connection with legal claims, to protect the rights of another entity or where there is a significant public interest in its processing. You can also request the processing of your data to be restricted if it is unlawful but do not want the personal data to be deleted.

Right to data portability

You have the right to request that we transfer any data that you have provided to us based on your consent or for concluding or performing a contract. You may request the data to be transferred to a third party of your choice and we will comply if technically possible.

Right to object

You have the right to object to the processing for our legitimate interests. If we do not have sufficient legitimate grounds for processing, we will no longer process your data if you object to its processing.

Right to withdraw consent

We do not largely need your specific consent to process your data. However, in certain cases we may ask you for your consent. Where we process your data based on your specific consent, you have the right to withdraw such consent at any time. If you wish to withdraw your consent to the processing and there is no other legal basis for such data processing, you have the right to have the data erased or its processing restricted. You can exercise your rights by sending a written request by post or electronically to gdpr@prolak.cz.

If you believe that the processing of your data is not in order, you can file a complaint with the Personal Data Protection Office.

To request a change to the use of your personal information or to exercise your privacy rights, please use the following link:
https://nntb.cz/c/5llqeyz4
You can also use the mobile app available at
Google Play and App Store to communicate.
The access code to send a message is: 9yJAFU3ZTM

Submit a complaint

Processing of personal data in communication with job applicants and employees

Information on the processing of personal data provided in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data (hereinafter the ‘GDPR’).

Personal data means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

 

Personal data controller

The personal data controller is JP - PROLAK a.s. ID 17289785, with its registered office at Opatov 183, 56912 Opatov v Čechách, Czech Republic (hereinafter the ‘Controller’).

 

Legal basis for the processing of personal data

Many of our recruitment activities are based on our legitimate interests, which include, in particular, the selection of a suitable candidate for the position to be filled. The legal basis for processing the data of successful candidates is the introduction of pre-contractual measures. Although we tend not to use your data to fulfil our statutory and other legal obligations in this area, your data may appear, for example, within the registration obligation. In some cases, we may also ask you to consent to the processing of your personal data.

 

Data processed upon application for employment with us:

We shall obtain the following information from you:

// Contact details: for example, your name, surname, academic degree, permanent address, temporary address, private e-mail address, telephone number

// Information from your CV: for example, your previous employment, education, skills including language skills and any other information you choose to include in your CV

// Cover letter: any information you decide to include in your cover letter.

// Eligibility to work: you may be required to prove that you are legally eligible for employment with us, e.g., education, language skills, medical fitness for selected positions

// Statement of good character: depending on the nature of the job and the country concerned, we may ask you to provide a statement or document confirming that you have not been convicted of any crime or offence that would disqualify you for the position. In addition, depending on the position you are applying for, we may obtain information from third parties: employment agencies.

// Assessment: we may ask you to undergo an assessment of your skills, personality or cognitive abilities. Such assessments are usually conducted using third-party software or through a third party who will provide us with the results, such as an assessment centre. We will provide you with additional information relating to your particular situation before conducting such an assessment.

// Reference: We may choose to obtain references from people who have worked with you in the past; we will only contact these people if you provide us with their names and contact details.

 

If you are successful in the selection process and are selected for the position:

In addition to the above personal data, we will also obtain the following information from you in order to implement the pre-contractual measures:

// Personal data: e.g. date of birth, surname at birth, ID card or other identity document number, birth number, marital status, nationality, photograph, work permit.

// Details of relatives and family members: e.g. name, surname, academic degree, date of birth of your spouse, name(s), surname(s), academic degree(s), date(s) of birth and birth number(s) of your children if any.

// Information on remuneration, pension, health insurance and other benefits: e.g. name of your health insurance company, old-age insurance, pension scheme, bank name and account number, payroll deductions

// Information from the employment assessment and employment certificate. We will only process specific categories of personal data for purposes that are strictly related to the proper performance of our duties as your prospective employer and to the extent permitted or required by applicable law. We will process the following specific categories of personal data:

// Data concerning your health (your certificate of disability and disadvantage as an employee, results of initial and preventive medical examinations in relation to the position, information on your mental and medical fitness for the position),

// Criminal record statement for selected positions, such as handling of entrusted funds, cash, etc.

// Information from social networks, your former employers, verifying the documents submitted by you (verification of the existence of institutions that issued the documents submitted by you). The data will only be accessible to our authorised personnel if you are bound by the duty of confidentiality. We may share your data with other third parties acting on our behalf, such as providers of advertising services, consultancy services, occupational health services, payroll accounting bodies, professional consultants and advisors who are bound by statutory and/or contractual obligations of confidentiality; recruitment agencies; systems management companies (e.g. jobseeker management system) and their subcontractors. Where we obtain information from third parties (as set out above), we will provide them with your name and such other information as necessary to enable them to provide us with relevant information about you. In such cases, these third parties may only use the information about you for the purposes described above and only in accordance with our instructions. Your personal information may be disclosed to government authorities (Police, Courts, Financial Administration, etc.) in the exercise of their lawful powers under certain conditions.

 

Duration of storage of your data

We will process your personal data during the recruitment process. Thereafter, we may retain some basic data (e.g. e-mail communications), and only for as long as necessary to protect our rights and interests. The CVs that you have consented to provide will be retained for a period of 3 years from the date of consent.

 

What are your rights under the GDPR

Right of access

You have the right to obtain a copy of the personal data we keep about you and some details about how we use it. Your information will usually be provided to you electronically or, if you have made a request in writing, the information will be provided to you in writing where possible.

Right to data correction

We take reasonable steps to ensure the accuracy and completeness of the information we keep about you. It is important that we have the correct information about you and request that you inform us if any of your personal information is incorrect, for example, if you have changed your name or postal address.

Right to data erasure

In certain circumstances, you have the right to request that we delete your data, for example, if the collected data is no longer necessary for its initial purpose, if we have processed the data for longer than is strictly necessary or if you have withdrawn your consent. We may have legal and regulatory obligations that prevent us from complying with your request, for example, if we are required to keep the data in the accounting records.

Right to restrict processing

In certain circumstances, you may request that we stop using your data, for example, if you believe that the data we keep about you may be inaccurate or if you believe that we no longer need to use your data. Starting from the date of your requested for personal data correction or objection to its processing, you have the right to restrict the processing until we are able to investigate the problem or confirm the accuracy of your data (or amend it as you instruct us). This means that we will only retain and further process your data in accordance with your consent where it is necessary in connection with legal claims, to protect the rights of another entity or where there is a significant public interest in its processing. You can also request us to restrict the processing of your personal data if the processing is unlawful but you do not want the personal data to be deleted.

Right to data portability

You have the right to request that we transfer the data you have provided to us based on your consent or for concluding or performing a contract. You may request the data to be transferred to a third party of your choice and we will comply if technically possible.

Right to object

You have the right to object to the processing of your data for our legitimate interests. If we do not have sufficient legitimate grounds for the processing when you object, we will no longer process your data.

Right to withdraw consent

We largely do not need your specific consent to process your data. However, in certain cases we may ask you for your consent. Where we process your data based on your specific consent, you have the right to withdraw such consent at any time. If you wish to withdraw your consent to the processing of your data and there is no other legal basis for its processing, you have the right to have the data erased or to restrict its processing. You can exercise your rights by sending a written request by post or electronically to gdpr@prolak.cz.

If you believe that the processing of your data is not in order, you can file a complaint with the Personal Data Protection Office.

To request a change to the use of your personal information or to exercise your privacy rights, please use the following link:

https://nntb.cz/c/5llqeyz4

You can also use the mobile app available at
Google Play and App Store.
The access code to send a message is: 9yJAFU3ZTM

Submit a notification