If you are applying for a job, professional experience, internship, or similar opportunity with one of the companies within the KKCG Group ("KKCG Group", "we", "us"), you will find below information on how we handle your personal data that request or collect from you in this context ("Personal Data"). We assure you that your data will be processed with due care and in accordance with Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation; hereinafter referred to as "GDPR") as well as other applicable national laws and regulations.
1. CONTROLLER AND CONTACT DETAILS
The controller of your personal data will always be the KKCG Group company responsible for the recruitment process for the specific position, typically KKCG Services a.s., with its registered office at Evropská 866/71, Vokovice, Prague 6, Company ID No.: 27107744 (hereinafter referred to as "KKCG Services a.s."). An up-to-date list of KKCG Group members, including the contact details of individual KKCG Group companies, is available here.
2. PURPOSES OF PROCESSING, LEGAL BASIS FOR AND RETENTION PERIOD
Personal data in the KKCG Group are processed only to the extent necessary for the specific purpose described below:
- To assess job applicants and conduct the recruitment process. This includes inviting you to interviews, communicating with you throughout the process, and evaluating your suitability for the position based on the information and documents you provide. For these purposes, we process personal data for the duration of the recruitment process, legal basis for such processing is the performance of a contract (or steps taken prior to entering into a contract).
- To verify the accuracy of the information provided during the recruitment process. This processing of personal data helps ensure fairness and transparency in the selection process. Legal basis for this processing is our legitimate interest. We process personal data to this extent for the time necessary to complete the verification during the recruitment process.
- To contact you in the future regarding other job opportunities, if you have given your consent. Legal basis for this processing is your consent, which you may withdraw at any time.
- To protect the legal rights and interests of the company wo which you are applying. Legal basis for this processing is legitimate interest. You have the right to object to such processing at any time (see Chapter 5. Rights of the data subject). We will process your personal data for the duration of the recruitment process and for 3 years after its conclusion. If judicial, administrative or other legal proceedings are initiated, we will retain your data for the duration of such proceedings and to the extent necessary.
Providing your personal data is voluntary in accordance with Article 13(2)(e) of the GDPR. However, it is necessary for participation in the recruitment process; without it, we are unable to include you in the selection procedure.
Your personal data are protected against loss, misuse, and accidental or unauthorized access by third parties, regardless of the format in which the data are stored.
Depending on the information you choose to include in your CV or application, we may incidentally process certain special categories of personal data, such as data concerning health or disability, for the purpose of accommodating the selection process.
You may be invited to interviews or other meetings via phone or video conferencing platforms (e.g. Microsoft Teams). We do not record these interviews at present. If we decide to do so in the future, we will request your explicit consent beforehand.
3. PERSONAL DATA OR CATEGORIES OF PERSONAL DATA
As a rule, we process the following categories of personal data about applicants:
- Identification data (in particular your name, surname, title, date of birth);
- Contact details (in particular your contact address, telephone number and email address);
- Job-related information (such as your education, completed courses and training, previous work experience and skills, references, and—where required for the position—background or integrity information); and
- Assessment data (particularly information relating to your suitability for the position).
In addition to the personal data you provide directly, we may also process other data collected within the KKCG Group, as well as publicly available data or data obtained from third parties. In such cases, we will always comply with the limitations set out by applicable laws.
We do not process special categories of personal data (as defined by Article 9 of the GDPR) for the purposes described above.
4. RECIPIENTS OR CATEGORIES OF RECIPIENTS OF PERSONAL DATA
Access to your personal data will be granted only to selected employees and managers involved in the recruitment process. If the HR services of the company you are applying to are provided by another company within the KKCG Group, the HR department of that company will act as a processor of your personal data. In general, if the user is not acting as a data controller, KKCG Services a.s. will be the recipient of your personal data in the capacity of a processor.
If we engage external service providers, we only use trusted partners with whom we have entered into personal data processing agreements. These partners are required to provide sufficient guarantees of appropriate safeguards in line with the requirements of the GDPR.
We will not misuse your personal data in any way. For the purposes described above, your personal data will not be transferred to third countries.
For the sake of completeness, please note that if you choose to apply for a position via LinkedIn Inc. or similar job portals, you will be required to log in using your personal credentials. In such cases, your personal data will be collected by LinkedIn or the respective service provider, who acts as a separate data controller. We encourage you to review their privacy policies to understand how your data will be processed. Information from your LinkedIn profile or other platform may also be processed by us in connection with your job application.
5. RIGHTS OF THE DATA SUBJECT
As a data subject, you have the following rights under the GDPR:
- Right of access: You have the right to request access to your personal data, including information about the purposes of the processing, the categories of personal data concerned, the recipients or categories of recipients, the planned retention period, the existence of your rights, the source of your personal data (if not obtained directly from you), and whether automated decision-making, including profiling, takes place. You may also request a copy of your personal data processed by the relevant KKCG Group company. The first copy will be provided free of charge; additional copies may be subject to a reasonable administrative fee.
- Right to rectification: You have the right to request correction of inaccurate personal data concerning you. You may also complete your incomplete data, for example by providing a supplementary statement.
- Right to erasure ("right to be forgotten"): You have the right to request the erasure of your personal data if certain conditions under the GDPR are met, including (a) the personal data are no longer necessary for the purposes for which they were collected or otherwise processed; (b) you withdraw your consent and there is no other legal ground for processing; (c) you object to the processing and there are no overriding legitimate grounds for continuing it; or (d) the personal data have been processed unlawfully. If your request is justified, we will delete your personal data to the appropriate extent. However, we may retain your data if processing is necessary for the establishment, exercise, or defence of legal claims of a KKCG Group company, or if retention is required by applicable law.
- Right to restriction of processing: You have the right to request the restriction of the processing of your personal data if any of the following conditions are met: (a) you contest the accuracy of the data, for a period allowing us to verify its accuracy; (b) the processing is unlawful, but you oppose the erasure of the data and request the restriction of its use instead; (c) we no longer need your personal data for the purposes of the processing, but you require it for the establishment, exercise, or defence of legal claims; (d) you have objected to the processing, pending verification of whether our legitimate grounds override yours. If your request is justified, we will restrict the processing to what is strictly necessary. However, we may still process the data for the establishment, exercise, or defence of legal claims of a KKCG Group company.
- Right to data portability: You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, and to transmit that data to another controller, where the processing is based on your consent or on a contract and is carried out by automated means.
- Right to object: You have the right to object at any time to the processing of your personal data where such processing is based on our legitimate interests.
You may exercise any of the above rights in any form (in writing, by email, by phone, etc.), provided that we are able to verify your identity. We will respond to all legitimate requests without undue delay.
- Right to lodge a complaint: If you have any concerns about how we handle your personal data, we encourage you to contact us first. You also have the right to lodge a complaint with the relevant supervisory authority. In the Czech Republic, this is the Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, www.uoou.cz.
If you have any questions regarding processing of your personal data, or wish to exercise your rights under the GDPR, please do not hesitate to contact: (i) the contact person provided to you in connection to the recruitment process (if applicable), and/or (ii) the contact listed for this purpose on the websites of individual KKCG Group companies (where applicable), and/or (iii) directly to the [email protected].
