INFORMATION ON THE PROCESSING OF PERSONAL DATA
Company Rockero s.r.o. , company ID 09351876, Hasičská 551/52, 70030 Ostrava, registered at the Regional Court in Ostrava, contact e-mail: info@rockero.cz , contact phone: 773 486 704 , website: www.rockero.cz (hereinafter also referred to as "Company"), as a personal data controller within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC ("GDPR"), considers one of its primary obligations to protect your privacy and the personal data we process. We always treat your personal data with due care in accordance with our obligations under applicable privacy legislation and endeavour to protect it as far as possible.
This Privacy Policy ("Policy") describes how we collect and process personal data from the Company's customers, prospective customers and job applicants. It is intended to provide you (the data subjects) with an overview of how we handle personal data, how we collect it, from what sources we obtain it and how we protect the confidentiality of your personal data, in order to fulfil our information obligation under Article 13 et seq. of the GDPR.
Below you will find in particular:
- What personal data we process about you;
- For what purposes and how we will process your personal data;
- To whom your personal data may be transferred;
- For how long we will process your personal data
- What rights you have in relation to the protection of your personal data.
If you need any part of the text to be explained, advised or to discuss further processing of your personal data, you can contact us at any time at the e-mail address listed in the introduction.
1. What personal data we process about you
Due to the nature of our business, we collect and process in particular the following personal data. The scope of the data processed depends on the purpose of the processing. For some purposes, data can be processed directly on the basis of the law (without your consent), for others only on the basis of consent.
A. For customers or prospective customers of the Company's services:
identification data – especially:
- name, surname and title
- date of birth
- residential address
- the entrepreneur's registered office, registration number and VAT number
contact details – personal data enabling contact with the customer, in particular:
- phone number
- e-mail address
other data related to the provision of services, in particular:
- bank connection
- records of payments
- records of communication with the customer
B. For jobseekers:
identification data – especially:
- name, surname and title
- date of birth
- residential address
contact details – especially:
- phone number
- e-mail address
other data – those that the applicant states in his/her CV or discloses to the Company, in particular:
- experience, work experience and information on previous employment
- language skills
- education, completed courses, training and certificates
- knowledge and skills
- information on holding a driving licence
- a photograph (if the applicant provides it as an attachment to his/her CV)
- records of communication with the applicant
We do not require personal data that are not necessary for the purpose, in particular we do not require a birth number, ID or other ID number, copies of documents and it is not necessary to include these data in the CV.
2. Source of personal data
We only process personal data that you provide to us, in particular for customers when making a non-binding enquiry or order, when preparing contracts and in connection with their implementation and for job applicants when enquiring about a job in our Company or in response to our job offer. We may obtain personal data in this way when we contact you in person, by telephone, in writing, by email, via the contact form on our Company's website or by other means of communication (e.g. SMS messages) and in other dealings and communications with the Company.
3. Purpose of processing and legal basis for processing
There are several legal bases that entitle us to process your personal data, but at least one of them must always be met for us to process your personal data lawfully. We are authorised to process personal data under certain legal provisions, in particular where the processing is necessary for the performance of a contract to which the data subject is a party or for the performance of measures taken prior to the conclusion of the contract at the request of the data subject, or where the processing is necessary for the performance of our legal obligations or where we have a legitimate interest in the processing. In other cases, we need your consent to process your personal data for a specific purpose.
These cases are described in more detail below in relation to the Company:
A. For customers or prospective customers of the Company's services:
Processing without your consent
Processing of personal data for the purpose of concluding a contract for the provision of our Company's services and for the performance of contractual obligations
One of the basic reasons for the Company's legitimate processing of your personal data is that the processing is necessary for the performance of the rights and obligations under the contract you have entered into with the Company or for the implementation of measures taken prior to the conclusion of the contract at your request. Such processing of personal data is permitted by Article 6(1)(b) of the GDPR.
We process the personal data specified above mainly for the following purposes:
- for the purpose of pre-contractual negotiations - the processing of your non-binding enquiry or order and negotiations for the conclusion of a contract for the provision of services to our Company (the "Contract"), and only for the duration of these negotiations, unless you are subsequently given another title for the processing of personal data as described below. In this context, we process the personal data that you provide to us when making an enquiry or order (in particular, identification and contact details, communication records, etc.),
- for the purpose of the proper implementation of the rights and obligations under the concluded Contract, for the duration of the contractual relationship arising from the Contract, i.e. until the rights and obligations arising from the Contract are fully settled. For this purpose, we process the data necessary for the conclusion of the contract and its performance. After the end of the contractual relationship, certain data are then retained for the purpose of fulfilling legal obligations, for the period of time directly stipulated by the applicable legislation that obliges us to process them or by virtue of our legitimate interest as described below.
Please also note that we are entitled to use your e-mail address, which we have obtained legitimately in connection with the sale of the service, for the purpose of disseminating commercial communications relating to our own similar services, provided that you have not initially refused such use, in accordance with Section 7(3) of Act No. 480/2004 Coll., Act on Certain Information Society Services and on Amendments to Certain Acts (Act on Certain Information Society Services). You can unsubscribe from these commercial communications at any time, in particular by clicking on the unsubscribe link in the commercial communication.
Processing of personal data for compliance with accounting, tax and other legal obligations
Furthermore, we are entitled to process personal data in particular in cases where this is necessary to comply with legal obligations applicable to the Company, in particular pursuant to Act No. 235/2004 Coll., on Value Added Tax, Act No. 563/1991 Coll., on Accounting or Act No. 634/1992 Coll., on Consumer Protection, etc., to the extent and for the period of time specified by the relevant legal regulation. Article 6(1)(c) GDPR allows such processing of personal data.
Processing of personal data to protect the legitimate interests of the Company
We may also process your personal data to protect our legitimate interests. In particular, the Company's legitimate interest is to protect and prove our rights and legal claims, especially those arising from contracts entered into or damages caused. For these purposes, we process personal data for a period of 1 year after a non-binding enquiry or order has been made, if no contract has been concluded on the basis of the enquiry or order, and for a period of 10 years after the contractual cooperation has ended. This period is set in relation to the limitation periods for claims, taking into account that we may not become aware of a potential claim immediately.
The provision of personal data for the above purposes is voluntary, but the processing of such personal data is necessary for us to enter into a contract and to properly perform our obligations under the contract and to comply with our legal obligations. We therefore do not need your consent to process this personal data.
Processing of personal data on the basis of your consent
We also process your personal data for purposes for which your consent is required, for the period and in the manner specified in the specific consent.
The specific conditions of consent are set out in the terms of consent, in particular the purpose and duration of the processing of personal data. The company may process personal data in this way, for example, for the purpose of marketing campaigns, sending commercial communications beyond the scope specified above, etc.
It is your sole discretion whether to provide your consent to the extent proposed by the Company. The provision of consent is entirely voluntary and is not a condition of entering into a contract with the Company. You may subsequently withdraw your consent as further described below.
B. For jobseekers:
Processing of personal data for the purpose of the selection procedure and the negotiation of the (employment) contract
The Company is conducting selection procedures for vacant positions at the Company. By applying for a specific job vacancy, either by filling in a form on the Company's website, or by third parties through whom we advertise vacancies, or by filling in a form in person at a Company branch, you indicate your interest in applying for a specific job vacancy and thus in concluding an (employment) contract.
We process the personal data mentioned above for the duration of the candidate's participation in the selection procedure. We process this personal data solely for the purpose of the proper implementation of the selection procedure, which is the negotiation of the (employment) contract. Such processing of personal data is permitted by Article 6(1)(b) GDPR.
Processing of personal data for compliance with accounting, tax and other legal obligations
Furthermore, we are entitled to process your personal data in particular in cases where this is necessary for the fulfilment of a legal obligation to which the Company is subject, in particular pursuant to Act No. 235/2004 Coll., on Value Added Tax, Act No. 563/1991 Coll., on Accounting or Act No. 634/1992 Coll., on Consumer Protection, to the extent and for the period stipulated by the relevant legislation. Article 6(1)(c) GDPR allows such processing of personal data.
Processing of personal data to protect the legitimate interests of the Company
The Company's legitimate interest is primarily to protect and prove our rights and legal claims. For these purposes, we retain personal data for at least 3 years after the end of the selection procedure, for example, in order to prove the proper and lawful conduct of the selection procedure, unless another reason for processing is subsequently given (e.g. conclusion of an employment contract, ongoing legal proceedings, etc.).
The provision of personal data for the above purposes is voluntary, however, the processing of this personal data is necessary in order to carry out the selection procedure and to negotiate the conclusion of the (employment) contract made on the basis of the candidate's proposal in the form of an application for the selection procedure, as well as to fulfil our legal obligations. We therefore do not need your consent to process this personal data.
Processing of personal data on the basis of your consent
We also process your personal data for purposes for which your consent is required, for the period and in the manner specified in the specific consent.
The specific conditions of consent are set out in the terms of consent, in particular the purpose and duration of the processing of personal data. Most often, the processing of personal data continues after the end of the selection procedure, for the purpose of sending job offers for vacancies at the Company.
It is your sole discretion whether to provide your consent to the extent proposed by the Company. Providing your consent is entirely voluntary and is not a condition of entering into a contract with the Company, however, otherwise we will not be able to fully perform our obligations under such contract.
4. Who has access to your personal data
Your personal data will be processed by the Company as the controller. This means that the Company determines the purposes for which it collects your personal data as defined above, chooses the means of processing and is responsible for their proper implementation. The Company uses the professional and specialized services of other entities to fulfill its obligations.
We transfer your personal data for the aforementioned purposes, in particular to the cooperating accountant, law firm, providers of data storage and software applications, cloud, web and other IT services, competent administrative authorities if we are obliged to do so by law, in particular in the case of an inspection in which the authority is entitled to require the submission of personal data.
We will only choose as contractual partners a person who provides maximum guarantees on the technical and organisational security of the protection of the personal data transmitted. We will provide you with a list of processors according to your request sent to the email address mentioned in the introduction.
Personal data will not be transferred to third countries outside the EU.
Personal data is protected and secured against leakage and misuse and the Company takes technical and organizational measures to ensure the highest possible level of protection of personal data.
5. Period of processing of personal data
Personal data for these purposes are processed to the extent necessary for the fulfilment of these purposes and for the time necessary to achieve them, as specified above for each processing purpose.
If the processing is based on your consent, then we will only process personal data for the duration of that consent.
6. Your rights arising from the processing of personal data
You have the following rights in relation to our processing of your personal data:
- the right of access to personal data;
- the right to rectification;
- the right to erasure ("right to be forgotten");
- the right to restriction of data processing;
- the right to object to processing;
- the right to lodge a complaint about the processing of personal data;
- the right to withdraw your consent to the processing of personal data.
Your rights are explained below to give you a clearer idea of their content.
Right of access means that you can ask us at any time to confirm whether or not the personal data concerning you is being processed and, if so, for what purposes, to what extent, to whom it is disclosed, for how long we will process it, whether you have the right to rectification, erasure, restriction of processing or to object, where we obtained the personal data and whether automated decision-making, including possible profiling, takes place on the basis of the processing of your personal data. You also have the right to obtain a copy of your personal data, the first provision of which is free of charge, and we may charge reasonable administrative costs for further provision.
Right to correction means that you can ask us to correct or complete your personal data at any time if it is inaccurate or incomplete.
Right to erasure means that we must delete your personal data if (i) it is no longer necessary for the purposes for which it was collected or otherwise processed, (ii) the processing is unlawful, (iii) you object to the processing and there are no overriding legitimate grounds for the processing, or (iv) we are under a legal obligation to do so.
Right to restriction of processing means that until we have resolved any disputed issues regarding the processing of your personal data, we must restrict the processing of your personal data so that it can only be stored and, where appropriate, used for the establishment, exercise or defence of legal claims.
Right to object means that you can object to the processing of your personal data that we process for direct marketing purposes or on the grounds of legitimate interest. If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.
Right to withdraw consent means that where your consent is required for processing, you can withdraw your consent at any time. For example, you can withdraw your consent by email or in writing by letter stating that you are withdrawing your consent to the processing of your personal data. It is essential that you state the purpose for which you are withdrawing your consent to the processing. Withdrawal of consent does not affect the lawfulness of the processing based on the consent you gave prior to the withdrawal. We will delete your personal data after the expiry of your consent in accordance with this article, unless there is another lawful reason for further processing.
You may exercise all your rights set out in the preceding paragraph with the Company, for example, in writing by registered letter sent to the registered office address or electronically at the e-mail address set out in the introduction. The Company has the right to request reasonable proof of the identity of the applicant in justified cases in order to protect data subjects.
If you suspect that there has been a breach on our part of any of the obligations set out in the law, you can contact us to have the matter explained to you, to remedy the improper condition by making a correction, supplementing or destroying the data.
If this is not sufficient, you may lodge a complaint with the supervisory authority, which is the Office for Personal Data Protection.
We ask you to notify the Company of any changes to your personal data without undue delay at the email address mentioned in the introduction and to inform us that there has been a change in your personal data. Following this, we will amend the personal data without undue delay to ensure that the personal data is always accurate and correct.
There is no automated decision-making or profiling based on the personal data processed.
This Privacy Policy is effective as of 28.6.2023