This document outlines the main principles of personal data protection processed by MEDIA FACTORY Czech Republic a.s. in accordance with applicable laws, particularly the Personal Data Protection Act and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (the "General Data Protection Regulation").
Who processes your data?
MEDIA FACTORY Czech Republic a.s., with its registered office at Žerotínova 1133/32, 130 00 Prague 3, Czech Republic, ID No.: 26288311 (hereinafter referred to as the "Company" or "we"), processes the personal data of its employees, job applicants, and contact persons of its customers and suppliers in the role of Data Controller under the conditions specified below.
Additionally, the Company processes the personal data of other individuals in project databases delivered to customers as part of its activities. The relevant customer is the Data Controller for this processing, and the Company acts as the Data Processor. The Company has entered into appropriate Data Processing Agreements with these customers, specifying the scope, form, and purpose of the processing and detailing the Company's obligations in this regard. This document does not cover the Company's activities as a Data Processor.
What personal data do we process as the data controller?
We only process personal data that you provide to us in connection with the use of our services. This includes:
Employee and Collaborator Data
- The scope of processed personal data, processing conditions, form, and other aspects are subject to employment or collaboration contracts and are further specified by internal data processing guidelines with which these individuals are familiar.
Job Applicant Data
- During negotiations for collaboration, we process personal data that the applicant provides either directly or through third-party job portals such as jobs.cz.
- We process the following personal data about applicants:some text
- Name and surname
- Address
- Telephone number
- Email address
- Resume / CV (which may include a correspondence address, date of birth, photograph, etc.)
- This personal data is processed based on your consent, which you grant when submitting your job application to us or through the job portal, and subsequently based on your legitimate interest (negotiating an employment contract). If no employment contract is concluded, we will process your personal data for a maximum of 3 years due to the potential reopening of negotiations (you can withdraw your consent to further processing during this period). Afterward, the data is deleted.
- If an employment contract is concluded, the rules applicable to company employees govern the further processing of personal data.
- Personal data is processed electronically in secure storage with controlled access and is available only to HR department staff and team managers for the relevant position. During interviews, personal data is also processed in physical form (printed CV) for a limited time (during the specific negotiation, a maximum of 2 months). If no employment contract is concluded, physical documents are shredded.
Customer and supplier contact data
- In the course of our activities, we process the personal data of our customers and their contact persons:some text
- Name and surname
- Telephone number
- Email address
- Job position or function
- Registered office address, correspondence address, ID number, VAT number
- This personal data is processed to fulfill contracts and provide services.
- Personal data is processed electronically in the Company's CRM system for the duration of the contractual relationship and for 3 years thereafter due to potential cooperation renewal; afterward, the data is deleted.
- Some personal data may also be processed to fulfill legal obligations, such as contact person data listed on tax documents or contractual documents. In such cases, personal data is also processed in physical documents, which are appropriately secured and processed for the duration specified by applicable laws.
Who has access to your data?
Your personal data is safe with us. We have implemented personal data management systems that prevent unauthorized access or manipulation of personal data. All computer systems and storage are appropriately secured, and individuals with access to personal data are trained and contractually obligated to protect it.
If we share your personal data with our business partners, such as providers of accounting services or cloud storage, we carefully select these partners to ensure they can provide the necessary technical and organizational safeguards to prevent unauthorized or accidental access to your data or other misuse. We have signed data protection agreements with such partners in compliance with applicable laws, in which they commit to protecting your personal data, are bound by confidentiality, and cannot use the provided data for any purpose other than the one for which we disclosed it to them.
Do we need your consent for data processing, and how can you withdraw it?
If we need to process your personal data beyond the scope of legitimate interest or legal obligation, we must obtain your voluntary consent for such processing. You can withdraw your consent to data processing at any time, free of charge, by emailing gdpr@mediafactory.cz.
However, withdrawing consent does not affect the processing of personal data that we process on another legal basis, such as fulfilling a contract, legal obligation, or other reasons specified in applicable laws.
What are your rights regarding personal data protection?
With respect to your personal data, you have the following rights:
- The right to withdraw consent to data processing at any time;
- The right to correct or update personal data;
- The right to request a restriction on data processing;
- The right to object to or complain about data processing in certain cases;
- The right to request data portability;
- The right to access personal data;
- The right to be informed about a personal data breach in certain cases;
- The right to request the deletion of personal data ("right to be forgotten") in some instances;
- The Personal Data Protection Act and the General Data Protection Regulation stipulate other rights.
How can you contact us?
If you have any questions regarding personal data protection or wish to withdraw your consent to the further processing of your personal data, please contact us in writing at the Company's registered office or by email at gdpr@mediafactory.cz.
