JOB LEADER EUROPE
Privacy Policy
How we collect, use and protect your personal data
This Privacy Policy explains how JOB LEADER EUROPE s.r.o. processes your personal data when you use our recruitment services and our applicant tracking platform, and sets out the rights you have under the General Data Protection Regulation.
Data Controller
Who is responsible for your data
The controller of your personal data is:
- Company
- JOB LEADER EUROPE s.r.o.
- Registered office
- Václavské náměstí 819/43, 110 00 Prague 1, Czech Republic
- Company ID (IČO)
- 28885279
- Commercial register
- File No. C 151061, Municipal Court in Prague
- Data protection contact
- gdpr@jobleader.cz
For any questions about this policy or about how your data is handled, please contact us at the address above.
Data We Collect
What personal data we process
Depending on how you interact with us, we may process the following categories of personal data:
- Identification and contact data — name, email address, telephone number, postal address.
- Professional data — CV, education, work history, qualifications, professional licences, language skills.
- Application data — the positions you apply for, cover letters, notes and assessments related to the recruitment process.
- Technical data — IP address, device and browser information, and cookie data when you use our website (see our Cookie notice).
We collect personal data primarily directly from you. Where data is obtained from another source (for example a job portal you used to apply), we will inform you in accordance with Article 14 GDPR.
Purposes & Legal Bases
Why we process your data and on what basis
We process personal data only where we have a valid legal basis under Article 6 GDPR:
| Purpose | Legal basis (Art. 6 GDPR) |
|---|---|
| Providing recruitment services and matching candidates to positions | Performance of a contract / steps prior to a contract — Art. 6(1)(b) |
| Maintaining a talent pool for future opportunities | Consent — Art. 6(1)(a) |
| Communicating with you and responding to enquiries | Legitimate interest — Art. 6(1)(f) |
| Marketing communications | Consent — Art. 6(1)(a) |
| Security, fraud prevention and platform integrity | Legitimate interest — Art. 6(1)(f) |
| Compliance with legal obligations (e.g. accounting, archiving) | Legal obligation — Art. 6(1)(c) |
Recipients & Processors
Who has access to your data
We share personal data only where necessary to deliver our services. Recipients may include:
- Client companies to whom you apply or who are seeking candidates — only with an appropriate basis and, where relevant, your consent.
- Service providers (processors) acting on our instructions under data processing agreements, including our cloud and infrastructure providers (Microsoft Azure) and our network security provider (Cloudflare).
- Public authorities where we are required to do so by law.
All processors are bound by written data processing agreements in accordance with Article 28 GDPR.
International Transfers
Transfers outside the EEA
Most processing takes place within the European Union. Transfers outside the European Economic Area occur in particular with the artificial-intelligence tools that analyse your CV and calculate match scores, and with our e-mail delivery service. Such transfers are protected by Standard Contractual Clauses approved by the European Commission under Article 46 GDPR, or by the EU-US Data Privacy Framework. We will provide a copy of the clauses on request.
Retention
How long we keep your data
- Active recruitment process — for the duration of the process and for the period necessary to complete it.
- Talent pool (with consent) — up to 3 years, after which data is deleted unless you renew your consent.
- Legal and accounting records — for the periods required by applicable law.
When personal data is no longer required, it is securely deleted or anonymised.
Your Rights
The rights you have under the GDPR
As a data subject, you have the right to:
- Access your personal data (Art. 15).
- Rectification of inaccurate or incomplete data (Art. 16).
- Erasure of your data where the conditions are met (Art. 17).
- Restriction of processing (Art. 18).
- Data portability (Art. 20).
- Object to processing based on legitimate interest or to direct marketing (Art. 21).
- Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal (Art. 7(3)).
To exercise any of these rights, contact us at gdpr@jobleader.cz. You also have the right to lodge a complaint with the Czech supervisory authority, the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, uoou.gov.cz).
Security
How we protect your data
We apply appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or misuse. These measures are governed by our Information Security Management System and include:
- Encryption of data in transit (TLS) and at rest (AES-256).
- Multi-factor authentication and role-based access control.
- Network protection through a web application firewall and DDoS mitigation.
- Continuous monitoring, logging and a defined incident-response process.
Our information security management is aligned with the ISO/IEC 27001:2022 standard.
Cookies
Use of cookies on our website
Our website uses cookies. Strictly necessary cookies are used to ensure the basic operation and security of the site. Functional, analytical and marketing cookies are activated only with your consent, which you can manage or withdraw at any time through the cookie settings available in the website footer.
Changes to This Policy
Updates
We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. The current version is always published on our website, with its effective date shown at the top. Material changes will be communicated as appropriate.
Václavské náměstí 819/43, 110 00 Prague 1
IČO 28885279 · File No. C 151061, Municipal Court in Prague
Data protection: gdpr@jobleader.cz