Privacy Policy

Personal Data Controller:

Stride XL s.r.o.
ID No. 072 34 783, with registered office at Sekaninova 869/3, Husovice, 614 00 Brno (hereinafter also referred to as "company", "we", "us", "our" or "us")

email: zuzana.tancibudkova@stridexl.com
‍
Processors of personal data:

MAJAK agency, s.r.o.
ID No. 060 47 548, with registered office at Sekaninova 869/3, Husovice, 614 00 Brno
‍
Webflow, Inc.
398 11th Street, 2nd Floor, San Francisco, CA 94103, United States, EIN - 46-1068692

We also use Microsoft Clarity and Google Analytics on our website - through them we are able to find out in an anonymised form how our website is laid out correctly and what things we still need to work on. For example, we can see your mouse movements, what actions you take while browsing the website and what form they take. We use the application for analytics purposes based on our legitimate interest. You can object to such processing (especially of your IP address) by contacting us at the contacts listed below. You can find more information about Microsoft Clarity here, and about Google Analytics here.

GDPR:
Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.

Data subject = You:
Data subject means an identified or identifiable natural person, where an identifiable natural person is a natural person who can be identified, directly or indirectly, in particular by reference to a specific identifier, such as a name, an identification number, location data, a network identifier or to one or more specific elements of the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Controller = us:
A controller within the meaning of Article 4(7) of the GDPR means a natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data. We act as a controller in relation to your personal data.

Supervisory Authority:
In the Czech Republic, the supervisory authority means the Office for Personal Data Protection (hereinafter referred to as the "OPPD").

Job applicant:
A job applicant is a person who is interested in working for the controller and who participates in a selection procedure. The selection procedure may be terminated either by the selection of a suitable candidate, by cancellation or otherwise.

Contractual partners and clients:
This category includes both business and non-business persons with whom we have any contract. These may include, but are not limited to, our clients, suppliers, collaborating freelancers or tenants.

We process personal data for a clearly defined purpose:

Respondents to questionnaires or interviews

Purpose of processing personal data

Legal basis and personal data processed

Processing time

Evaluation of the interview with the respondent

The legal basis is the consent of the respondent.

For this purpose, we process, in particular, the identification and contact data of the respondent, the information provided by the respondent in the questionnaire or during the interview, and the recording of the interview.

For this purpose, personal data may be processed for the duration of the consent or until its withdrawal.

Contractual partners and clients

Purpose of processing personal data

Legal basis and personal data processed

Processing time

Performance and implementation of contracts

The legal basis is the performance of the contract between the subject and the company.

For this purpose, we process the data of the natural persons with whom we communicate in the context of the conclusion and performance of the contract and of the contracting parties, namely identification data, contact data, accounting data (in particular bank account number), payment data, etc.

For this purpose, personal data may be processed for the duration of the contractual obligations.

Exercise of contractual claims after termination of the contract

The legal basis is the legitimate interest of the company.

For this purpose, we process identification data, contact data, accounting data and communication history. After termination of the contract, this data is necessary for the recovery of claims and other obligations under contracts concluded between the company and the entities concerned. Identification and contact data of natural persons representing legal entities may also be stored within this documentation.

For this purpose, personal data may be processed for a period of 3 years after the termination of the contractual relationship and, if administrative or judicial proceedings are initiated, for the entire duration of these proceedings.

Fulfilling the company's accounting, tax and other legal obligations

The legal basis is the fulfilment of legal obligations imposed on the company by legal regulations such as the Accounting Act or the Value Added Tax Act and other tax laws, the Act on Certain Measures against the Legalization of Proceeds of Crime and Terrorist Financing, etc.

For this purpose, we process data to the extent required by the relevant laws, in particular identification data, contact data and accounting data.

For this purpose, personal data may be processed for up to 10 years from the end of the tax year in which the transaction took place.

Job applicants

Purpose of processing personal data

Legal basis and personal data processed

Processing time

Selecting the right job candidate

The legal basis is the negotiation of the employment contract, or the consent of the applicant in the event of a later re-approach with a job offer.

For this purpose, we process in particular identification data, contact data and other data provided by the applicant, especially in the CV and motivation letter, and an extract from the criminal record, if necessary or expedient.

For this purpose, personal data may be processed up to 6 months after the end of the selection procedure (for the purpose of re-contacting the selected candidate in the event of termination of the employment relationship with the selected candidate during the probationary period) or for the duration of the consent, or until its withdrawal.

Proving the legality of the procedure for selecting a job applicant

The legal basis for this is the company's legitimate interest in demonstrating non-discriminatory treatment.

For this purpose, we may process in particular identification data, contact data and other data provided by the applicant, especially in the CV and cover letter.

For this purpose, personal data may be processed for a period of 3 years (to prove non-discrimination, if applicable).

All data subjects

Purpose of processing personal data

Legal basis and personal data processed

Processing time

Selection of archival material (archiving)

The legal basis is the fulfilment of legal obligations arising in particular from Act No.499/2004 Coll., on archiving and file service.

Personal data of natural persons may exceptionally appear in archived documents.

For this purpose, personal data may be processed for the period required by law or by the relevant district archives.

We only retain personal data for as long as is necessary for the purpose of processing - see table above. After this period, personal data may only be kept for the purposes of the National Statistical Service, for scientific purposes and for archiving purposes.

In justified cases, we may also transfer your personal data to other entities (hereinafter referred to as "recipients").

Personal data may be transferred to the following recipients:

- processors who process your personal data on our instructions and whose relationships with them are regulated by processing contracts (in particular, cooperating freelancers and providers of software used by us)
- public authorities and other entities if required by applicable law (in particular, the tax administration, the Police of the Czech Republic and other law enforcement authorities, etc.
- other entities in the event of an unexpected event in which the provision of data is necessary to protect life, health, property or other public interest or if it is necessary to protect our rights, property or safety.

We do not transfer your personal data to third countries, i.e. outside the scope of the GDPR. Some of the processors whose software we use are based in countries where the GDPR regime does not apply. However, these countries are so-called safe third countries that provide an adequate level of protection for personal data.

You have the right to request from us access to personal data relating to you under the conditions set out in Article 15 of the GDPR.

You have the right to withdraw your consent to the processing of personal data processed by us on the basis of your consent at any time under the conditions set out in Article 7 of the GDPR.

You have the right to request the rectification of personal data under the conditions set out in Article 16 of the GDPR, the restriction of the processing of personal data under the conditions set out in Article 18 of the GDPR or the erasure of data under the conditions set out in Article 17 of the GDPR.

You have the right to object to the processing of personal data concerning you under Article 21 of the GDPR.

You have the right to data portability to another controller under the conditions set out in Article 20 of the GDPR.

You have the right not to be subject to any decision based solely on automated processing, including profiling under the conditions set out in Article 22 of the GDPR. We do not process personal data on the basis of automated individual decision-making, including on the basis of profiling, i.e. without human intervention.

You have the right to obtain information about a breach of security of your personal data under the conditions set out in Article 34 of the GDPR.

If you believe that the processing of your personal data is in breach of the obligations set out in the GDPR, you have the right to lodge a complaint with a supervisory authority under the conditions set out in Article 77 of the GDPR. The supervisory authority in the Czech Republic is the Office for Personal Data Protection.

Pplk. Sochora 27, 170 00 Praha 7
tel.: +420 234 665 111, e-mail: posta@uoou.cz, data box: qkbaa2n

This Privacy Policy is effective as of May 25, 2018.

Privacy Policy

Let's design something great together