In accordance with Article 13 of the General Data Protection Regulation (the “Regulation”), the OSPEN s.r.o. company (the “Company”) has provided below the information regarding the processing of personal data that the Company has collected from natural persons interested in obtaining the Company’s services or cooperating with the Company (“data subjects”):
1. The Company’s contact information regarding personal data protection.
The data controller’s contact information: OSPEN s.r.o., Trader Identification Number/Certificate of Registration Number (IČ) 25262823, registered office address: Hradecká 1383, 535 01 Přelouč, registered in the Commercial Register maintained by the Regional Court in Hradec Králové, file reference number (sp. zn.) C 11036.
2. Why and how the Company processes a data subject’s personal data, or “the purpose and legal basis for personal data processing and the storage period”.
It is lawful for the Company to process a data subject’s personal data without the data subject’s consent when the following applies:
The Company processes the personal data for the purposes of procedural defence when there is a legal dispute between the Company and a job applicant who was not hired, in particular regarding anti-discrimination disputes (under Article 6 (1) (f) of the Regulation – when the processing is necessary for the purposes of legitimate interests pursued by the Company). The storage period runs for the duration of the limitation period or otherwise for the whole period of the legal dispute. If the data subject gives the Company consent to the processing of his or her personal data (under Article 6 (1) (a) of the Regulation), it is lawful for the Company to process the personal data for the period stated in the consent agreement so as to keep open the possibility to contact the data subject later during the stated period with a potential employment offer.
3. To whom the Company transmits the data subject’s personal data.
The recipient of the data subject’s personal data is the Company. The personal data are not transmitted to third parties, with the exception of the enforcement authorities and law firms with whom the Company cooperates. The personal data are not processed by or transmitted to third countries or international organizations. The processing of the personal data by the Company does not include automated decision-making or profiling.
4. Rights of the data subject regarding the processing of personal data.
The Company processes personal data in a fair, lawful, and transparent manner, in accordance with legal regulations. The rights of the data subject regarding the processing of the personal data concerning the data subject include the following:
Right of access to the personal data concerning the data subject, under Article 15 of the Regulation.
Right to rectification of the personal data concerning the data subject if these data are incorrect or incomplete.
Right to erasure (“right to be forgotten”), which means the data subject may request that the Company erase without undue delay the personal data concerning the data subject, but only if at least one of the grounds under Article 17 of the Regulation applies.
Right to restriction of processing, but only if at least one of the grounds under Article 18 of the Regulation applies.
Right to data portability, which means the right to receive the personal data concerning the data subject that he or she has provided to the Company in a structured, commonly used and machine-readable format, and the right to transmit these data to another controller of personal data, where technically feasible.
Right to withdraw consent with the processing of the personal data concerning the data subject.
Right to object to the processing of personal data under Article 6 (1) (f) of the Regulation (the so-called legitimate interests pursued by the Company).
Right to file a complaint with a supervisory authority if the data subject believes that the processing of the personal data concerning him or her is unlawful. The complaint can be filed with the following supervisory authority:
The Office for Personal Data Protection
(Úřad pro ochranu osobních údajů, ÚOOÚ)
Pplk. Sochora 27
170 00 Praha
www.uoou.cz