PRIVACY POLICY

Passengera s.r.o., ID No. 04276515, with its registered office at Evropská 2758/11, 160 00 Prague 6, registered in the Commercial Register maintained by the Municipal Court in Prague (File C 245006, hereinafter referred to as "We") as a personal data controller, informs you, as a user of our website, our customers, suppliers and persons involved in the development and testing of our products, about the collection of personal data described below and the principles of privacy protection.

The protection of your personal data is important to us and we will always abide by this policy in our relationships with you. This Privacy Policy explains, in particular:
what personal data we will process about you;
for what purposes and in what manner we will process your personal data and the legal basis for their processing;
to whom your personal data may be transferred;
for how long we will process your personal data, and
what rights you have in relation to the protection of your personal data.

If you need any part of the text to explain, advise or discuss further processing of your personal data, you can contact us at any time at the e-mail address gdpr@passengera.com or at the address of our company's registered office.

SCOPE OF PERSONAL DATA PROCESSING

1. In the event that you only visit our website, we will process the following personal data:
Cookies

2. If you contact us as a job seeker with us (either through the startupjobs.cz website or otherwise), you will be asked to fill in certain data about yourself, which we will further process, and these are:
name and surname;
email address and phone number;
a curriculum vitae, which may contain, in addition to the above, at least information about your education and work experience and about your other knowledge or expertise according to the position requested; If you provide any other personal data in your CV, it is your free decision to provide us with this data and we will therefore also process the personal data provided by you for the purposes of the selection procedure.

3. If you are our customers or suppliers, you may be asked to fill in your data, which we will further process, which includes, in particular, the following personal data:
name and surname, date of birth or ID number;
representing the company (business name);
address, telephone number, and email address;
the position of a company representative;
bank account number;
other personal information that will be necessary to fulfill our obligation with you.

4. If you are involved in the development and testing of our products, we will process personal data that are necessary for cooperation in the development and testing, in some cases this may also include special categories of personal data, in particular health data. It is not possible to provide a complete list of personal data without specifying a specific project and this will always be communicated to you within the framework of a specific project, but we will always require:

name and surname;
E-mail address.

COOKIES

Our website uses cookies (small text files placed on your device) to provide websites and online services and to collect data. The text in a cookie file is often made up of a series of numbers and letters that uniquely identifies your computer, but it can also contain other information. We may collect this information when you interact with the Website, such as submitting a registration form or submitting a job applicant form. You can learn more about cookies on the online encyclopedia Wikipedia at https://cs.wikipedia.org/wiki/HTTP_cookie
We collect this data when you access our website. Some cookies are essential for the website to function and will always be active. Other cookies that are not used for the functioning of the website can only be used if you give us your consent to their use through the settings in your web browser. If your web browser is set to accept 3rd party cookies, such settings are considered consent to the use of these cookies
In addition, our websites may collect information such as browser or operating system type, IP address, website visits, Internet service provider, and other similar information.

HOW TO REFUSE THE USE OF COOKIES

Some features of our services are based on cookies. Even if you have given your consent to the use of cookies that track your behavior on the website, you can subsequently block their use. If you choose to block cookies, you may not be able to log in or use certain features, and you may lose your preferences.
which are based on cookies. The use of cookies can be set using your internet browser. Most browsers automatically accept cookies by default. You can use your web browser to refuse cookies or to set the use of only certain cookies.
Information about browsers and how to set your cookie preferences can be found on the following websites:

Chrome
Firefox
Internet Explorer
Safari
Android
A cookie management tool is also available on the http://www.youronlinechoices.com/cz/ website.

PURPOSE OF PROCESSING AND LEGAL BASIS OF PROCESSING

1. If you are a visitor to our website, we process your personal data in the form of cookies as stated above, due to our legitimate interest, which consists in our interest in monitoring the use of our services and improving them. We will only process your personal data for the purpose set out above. We do not require you to provide the above data, but without the provision of this data, some functions of our website may be limited. Your personal data will not be used for the purpose of any solely automated decision-making, including profiling based on such decision-making.

2. If you are a job seeker with us, we process your personal data on the grounds of a legitimate interest, which consists in our interest in filling our vacancies and in your interest in obtaining a job according to your wishes. The purpose of processing is therefore to find a suitable candidate for the vacancy we are looking for. We use the information you provide to us to:
to contact you regarding the status of the selection process. We will process your personal data only for the above purpose and if you are interested in a specific job position, we will process your personal data only for the purpose of filling this job position, or for positions similar to the position you are looking for. The provision of the above data is our requirement, without the provision of this data we cannot include you in the selection procedure. Your personal data will not be used for any exclusively automated decision-making, including profiling.
If the job seeker is with us, you can also give us your consent to the processing of your personal data, namely to the processing of data for the purposes of selection procedures for a period of five years, or to send you business and marketing communications from the controller and invitations to events, trade fairs and workshops. The legal basis for these processing operations is the legal basis granted by you
consent that we will not force from you and is therefore completely voluntary; You can also give us only one of the consents, so these are completely separate. Giving consent is not a contractual requirement for us, but consent to keep data for the purposes of the selection process for a period of 5 years allows us to contact you for a longer period of time and we can offer you a job with us for a longer period of time. Consent to receive commercial and marketing communications and invitations to events, trade fairs and workshops will allow us to send you information that would be useful to you, from our
We will definitely not bother you excessively in any way.

3. If you are our customers or suppliers, we process your personal data in particular because they are needed for the purposes of performing a contract or fulfilling legal obligations (especially tax and accounting), or for the reason of a legitimate interest (which consists in particular in being able to improve our services and contact you with our offers). The purpose of the processing is primarily to ensure the smooth implementation of our business relationship and to further develop our joint business cooperation. We can use your name, surname and e-mail address to send you business and marketing communications and invitations to events, trade fairs and workshops, i.e. to provide you with information that, in our opinion, could be interesting and beneficial for you. We may also use your personal data for our internal needs, in particular to monitor your satisfaction, optimize and improve the quality of products and services provided, develop new products and reduce risks. The provision of personal data for the purposes of performing a contract and for fulfilling a legal obligation is our requirement, and failure to provide such data may be a reason for not concluding a contract or terminating further business cooperation. However, the processing of your personal data for the purpose of sending commercial communications is not our contractual requirement and you can refuse it at any time and it will not affect our other mutual relationships. All you have to do is send us an e-mail with a relevant request to the gdpr@passengera.com or other address from which you received the commercial communication from us. Your personal data will not be used for the purpose of any exclusively automated decision-making, including profiling.

4. If you are involved in the development and testing of our products, all detailed information will be provided to you before the start of the project, as each project is original and the information cannot be provided as a blanket basis. However, we will always process your name, surname and e-mail address in order to be able to contact you. We request that we provide this information.

WHO HAS ACCESS TO YOUR PERSONAL DATA

Your Personal Data may be processed for us by processors as part of certain activities, or they may be provided to recipients; In particular, the following entities will be involved:
Entities that provide server, web, cloud or IT services to us;
Entities that provide accounting services to us;
Entities that provide legal services to us;
Entities that are involved in the development and testing of our products with us,
Processors who provide us with other services – consulting, audits and other external services.

With regard to the frequency of our projects, in some cases we may also find ourselves in the position of a joint administrator with our partner; if this is the case, we will inform you accordingly in that specific case.

DURATION OF PERSONAL DATA PROCESSING

We will process your personal data for the period for which we provide you with our services or perform a mutual contract, for the duration of our legitimate interest or for the period necessary to fulfil archiving and other obligations under applicable legal regulations, such as the Accounting Act, the Archiving and Records Act, the Value Added Tax Act and others.
We will retain your personal information for as long as necessary to provide our services and complete the transactions you have requested, or for other purposes necessary to comply with our legal obligations, resolve disputes, and legally enforce our agreements. These needs may vary for different types of data in the context of different situations, and therefore the actual retention period may vary significantly. The criteria used to determine the retention period include:
How long is personal data needed to provide services and to ensure the operation of our company? This includes activities such as maintaining and improving the performance of these services, maintaining the security of our systems, and maintaining relevant business and financial records. This is a general rule of thumb that is the basis for determining the data retention period in most cases.
Do you provide us with your data with the expectation that we will keep it until you specifically want it to be deleted? If so, we will only delete them upon your express request.
Have we established and announced a specific retention period for a certain type of data? If so, we will definitely never cross it.
Have you given your consent to the extension of the retention period? If so, we will retain the data in accordance with your consent.
Are we subject to legal, contractual or similar retention obligations? Examples include laws that mandate data retention, government mandates to retain data related to investigations, or data that must be retained for litigation.

With regard to the above criteria, which may vary over time (in particular due to changes in legislation), we cannot set out retention periods in general terms in this policy. However, if you contact us (for example, by e-mail at gdpr@passengera.com ), we will always inform you of the exact period of processing of your personal data.

YOUR RIGHTS ARISING FROM THE PROCESSING OF PERSONAL DATA

You have the following rights in relation to the processing of your personal data carried out by us:
the right of access to personal data;
the right to rectification;
the right to erasure;
the right to restriction of data processing;
the right to object to processing;
the right to data portability;
the right to human intervention, the right to express one's point of view and the right to contest a decision;
the right to lodge a complaint about the processing of personal data.

Your rights are explained below so that you can get a clearer picture of their content.
The right of access means that you can request our confirmation at any time as to whether or not personal data concerning you is being processed, and if so, for what purposes, in what
to the extent to whom it is disclosed, how long we will process it, whether you have the right to rectification, erasure, restriction of processing or to raise an objection, from where we obtained the personal data and whether automated decision-making, including profiling, takes place on the basis of the processing of your personal data. You also have the right to obtain a copy of your personal data, the first provision being free of charge, and we may require reasonable reimbursement of administrative costs for further disclosure.
The right to rectification means that you can ask us at any time to correct or complete your personal data if it is inaccurate or incomplete.
The right to erasure means that we must erase your personal data if (i) it is no longer necessary in relation to the purposes for which it was collected or otherwise processed, (ii) the processing is unlawful;
(iii) you object to the processing and there are no overriding legitimate grounds for the processing, (iv) we are legally obliged to do so, or (v) you withdraw your consent to the processing of your personal data.
The right to restriction of processing means that until we resolve any disputed issues regarding the processing of your personal data, we may not process your personal data in any other way than by storing them and, where applicable, we can only use them with your consent or for the establishment, exercise or defence of legal claims.
The right to object means that you can object to the processing of your personal data that we process for direct marketing purposes or for the reason of a legitimate interest.
If you raise an objection against the processing for the purposes of direct marketing, your personal data will no longer be processed for these purposes, in the case of an objection to the processing due to a legitimate interest, this objection will be evaluated and we will subsequently inform you whether we have complied with it and will no longer process your data, or that the objection was not justified and the processing will continue. In any case, until the objection is resolved, the processing will be restricted.
The right to data portability means that you have the right to obtain personal data concerning you, which is processed by automated means and on the basis of consent or a contract, in the
in a structured, commonly used and machine-readable format, and the right to have such personal data transmitted directly to another controller;
If you have comments or complaints regarding the protection of your personal data, or if you have a question about the person responsible for data protection in our companies or if you are exercising any of your rights, please contact us using our e-mail address gdpr@passengera.com. We will respond to your questions or comments within one month.
Our activities are also supervised by the Office for Personal Data Protection, to which you can file a complaint if you are dissatisfied. Find out more on the Office's website
(www.uoou.cz).

REPORTING SECURITY INCIDENTS

In today's age full of modern technologies, there is a slight, but still risky that your personal data could be leaked, misused or lost. As part of our activities, we will do everything in our power to prevent such a security incident from occurring, in particular we will regularly train all our employees who come into contact with your personal data on the topic of personal data protection, we will accept and familiarize our employees with the internal company regulations governing the protection of your personal data and we will always use only the most appropriate technical solutions to secure our processing, such as data encryption, complex passwords, and corresponding software.
However, if, despite our best efforts, a security incident occurs and this incident could pose a high risk to your rights and freedoms, we will immediately inform you of this fact by using the e-mail address provided and by publishing such information on our website, including all necessary details.

POLICY CHANGES

Our Privacy Policy may be changed from time to time. We will not restrict your rights under this Privacy Policy without your explicit consent. We will post any changes to the Privacy Policy on this page and will notify you more prominently if the changes are significant (for some Services, we may notify you of changes to the Privacy Policy by email).

This Privacy Policy is effective from 25.5.2018.