Our company Heureka Group a.s. considers the protection of personal data to be an integral part of its commitment to job applicants.
This document contains information about what personal data we process as part of the recruitment process. Here you will find information on whether we process personal data on the basis of your consent or on the basis of other legal grounds, the purposes for which we process the data, whether we transfer it to anyone and what rights you have in relation to the processing of your personal data.
1. Controller
The personal data controller is Heureka Group a.s., Company ID No.: 07822774, with registered office at Karolinská 706/3, 186 00, Prague 8 – Karlín, Company ID No.: 078 22 774 Tax ID No.: CZ07822774, registered in the Commercial Register administered by the Municipal Court in Prague, File No. B 24131 (hereinafter referred to as „We“).
2. Purposes and legal grounds for processing
We process personal data for the following purposes:
a) the evaluation of job applicants and the implementation of the recruitment process, on the basis of performance of a contract and the steps leading to its conclusion;
b) internal administrative requirements, the production of statistics and records, based on our legitimate interest in ensuring proper registration of job applicants, as well as maintaining an internal overview of the activities taking place in our company;
c) protection of legal claims, based on our legitimate interest in ensuring the proper protection and effective exercise of our rights and claims;
d) if you have given your consent, then also to keep a record of job applicants so that we or our subsidiaries referred to in Article 4 below can contact you in future selection procedures; and
e) the fulfilment of general legal obligations, in particular in the areas of tax and accounting and whistleblower protection, on the basis of the legal obligation to which we are subject as controllers.
3. Processed personal data and retention period
For the above purposes, we process your identification data, contact data, data on your qualifications (education, skills and abilities, work experience) and other data contained in your CV or required for a specific position, data on the assessment of your suitability (performance evaluation, test results) and information that you provide as a whistleblower in the notification of an infringement. In some cases, we obtain personal data to a limited extent from publicly available sources, which are public records, always in accordance with legal requirements.
We keep personal data for:
a) the duration of the selection procedure in the case of the purpose referred to in point (a) above;
b) the duration of the limitation period, including the period covering any suspension or interruption thereof, but typically no more than 5 years after the end of the selection procedure, unless a contract is concluded with you, in the case of the purposes under (b) and (c) above;
c) the duration of your consent, but no longer than 2 years, in the case of the purpose under (d) above;
d) the fulfilment of the relevant legal obligations in the case of the purpose under point (e) above.
4. Who processes your personal data and to whom do we transfer it?
All of the above-mentioned personal data is processed by us as the controller. This means that we determine the above defined purposes for which we compile your personal data, determine the means of processing and are responsible for its proper implementation.
Based on our legitimate interest, we may also share personal data with other group companies for the purpose of managing the recruitment process within the group. These companies are:
- DATAWEPS services s.r.o., with registered office at Nováčkova 401/53, Husovice, 614 00 Brno, Company ID No.: 026 02 059 Tax ID No.: CZ02602059;
- Balíkobot, s.r.o., with registered office at Karolinská 706/3, 186 00 Prague 8 – Karlín, Company ID No. 062 83 799, Tax ID No.: CZ06283799;
- Online Comparison Shopping Kft., with registered office at Rákóczi út 70–72, 1074 Budapest, Hungary, Company ID No.: 01–09–186759, Tax ID No.: 24868291–2–42;
- Ceneje d.o.o., with registered office at Dunajska cesta 155, 1000 Ljubljana, Slovenia, Company ID No.: 6699421000, Tax ID No.: SI87922878;
- sMind d.o.o., with registered office at Ulica grada Vukovara 269D, 10000 Zagreb, Croatia, Reg: 080725733, Tax ID No.: 69167525631;
- HEUREKA GROUP RO s.r.l., with registered office in Bucureşti Sectorul 2, Bulevardul DIMITRIE POMPEIU, Nr. 9–9A, IRIDE BUSINESS PARK, CLADIREA 14, BIROUL RESCO-WORK14, Bucharest, Romania;
These companies may, if you give your consent, contact you for a period of 2 years after you have given your consent with a relevant offer of employment if they assess you as a suitable candidate on the basis of the information you have provided. You may withdraw your consent at any time with respect to any individual company. You can withdraw your consent by following the procedure for exercising your rights described below. Withdrawal of consent does not affect the lawfulness of processing prior to such withdrawal.
We also involve other entities as processors who process personal data for our company and according to our instructions. Such processors are advertising portals that collect CVs for us, such as Alma Career Czechia s.r.o. Company ID No. 26441381 or Recruitis.io recruitment software from the recruitis.io s.r.o. Company, with registered office at Chmelova 357/2, postcode 500 03, Hradec Králové, Czech Republic, Company ID No.: 275 08 391, registered in the Commercial Register administered by the Regional Court in Hradec Králové, File No. C 23184.
If you are sending your CV directly to us via our careers site https://join.heureka.group/ your data may be processed by the provider of this website, which is MarketSoul s.r.o., with registered office at tř. Tomáše Bati 269, 760 01 Zlín, IČO: 047 14 121.
As part of whistleblower protection, your data may be transferred to Whistleblowing Solutions AB, with registered office at Norrgatan 10, 432 41 Varberg, Sweden, for processing.
Your personal data may also be transferred to other entities if we are required to do so by law.
All processors are bound by a processing agreement to comply with the requirements of data protection legislation, in particular to protect your personal data.
5. From what sources do we obtain personal data?
Most personal data is obtained directly from you by providing it to us as part of the recruitment process, whether in an oral interview, CV or other documentation, or in a notification under the Whistleblower Protection Directive. In addition, to a limited extent, we also obtain and further process personal data obtained from persons who have been listed as a contact for your references and from public registers.
6. What rights do you have when your personal data is processed?
Just as we have rights and obligations when processing your personal data, you also have certain rights when your personal data is processed. These rights include:
Right to withdraw consent to processing
You may withdraw your consent at any time. However, this does not affect the lawfulness of processing based on consent given before its withdrawal.
Right of access
Simply put, you have the right to know what data we process about you, for what purpose, for how long, where we obtain your personal data, to whom we transfer it, who processes it outside of us and what other rights you have in relation to the processing of your personal data. You have learned all this in this Information on the processing of personal data. However, if you are not sure which personal data we process about you, you can ask us to confirm whether or not personal data concerning you is processed by us and, if it is, you have the right to access it. As part of your right of access, you can ask us for a copy of the personal data we process, and we will provide you with the first copy free of charge and subsequent copies for a fee.
Right to correction
If you discover that the personal data we process about you is inaccurate or incomplete, you have the right to have it corrected or completed without undue delay.
Right to deletion
In some cases, you have the right to have us delete your personal data. We will delete your personal data without undue delay if one of the following reasons is met:
a) We no longer need your personal data for the purposes for which we processed it.
b) You exercise your right to object to processing (see „Right to object to processing“ below) of personal data that we process on the basis of our legitimate interests and we find that we no longer have such legitimate interests that would justify such processing.
c) It turns out that the processing of personal data carried out by us is no longer in compliance with generally binding regulations.
This right does not apply if the processing of your personal data is still necessary for:
a) fulfilment of our legal obligation;
b) for archival, scientific or historical research or statistical purposes; or
c) establishing, exercising or defending our legal claims.
Right to restriction of processing
In some cases, in addition to the right to deletion, you can exercise the right to restrict the processing of personal data. In certain cases, this right allows you to request that your personal data be marked and not be subject to any further processing operations – but in this case not forever (as in the case of the right to deletion), but for a limited period of time. We must restrict the processing of personal data if:
a) you dispute the accuracy of the personal data before we agree what data is correct;
b) We process your personal data without a sufficient legal basis (e. g. beyond what we need to process), but you may prefer to restrict such data before deleting it (e. g. if you expect to provide us with such data in the future anyway);
c) We no longer need your personal data for the above processing purposes but you require it for the establishment, exercise or defence of your legal claims; or
d) you object to its processing. The right to object is described in more detail in the section „Right to object to processing“ below. If your objection is justified, we are obliged to restrict the processing of your personal data for the period of time we carry out investigation of the matter.
Right to portability
You have the right to obtain from us all your personal data that you have provided to us and that we process on the basis of performance of a contract. We will provide you with your personal data in a structured, commonly used and machine-readable format. In order to be able to easily transfer the data at your request, it may only be data that we process automatically in our electronic databases. Therefore, we cannot always and under all circumstances transfer to you in this form all the data that we keep in paper form.
Right to object to processing
You have the right to object to the processing of your personal data on the basis of our legitimate interest. We will stop processing your personal data unless we have compelling legitimate grounds for continuing to do so.
Right to lodge a complaint
Exercising your rights in the above manner is without prejudice to your right to lodge a complaint with the Office for Personal Data Protection. You can exercise this right in particular if you believe that we are processing your personal data unlawfully or in violation of generally binding legal regulations.
You can file a complaint with the Office for Personal Data Protection, which is located at Pplk. Sochora 27, 170 00 Prague 7.
7. How can I exercise individual rights?
For all matters relating to the processing of your personal data, whether it is a query in relation to exercising a right, making a complaint or any other matter, you can contact: jobs@heureka.group
We will settle your request without undue delay, but within one month at the latest. In exceptional cases, particularly due to the complexity of your request, we are entitled to extend this period by a further two months. We will of course inform you of any such extension and the reasons for it.