Personal data protection

Privacy Policy for the Website www.profesia.sk

Table of Contents:

Introductory Provisions
Personal Data Controller
Personal Data Processing and Security Principles
Processing of Personal Data when Providing Services on the Website
Subcontractors
Cookies
Plug-ins
Rights of Data Subjects

1. Introductory Provisions

Profesia, spol. s r.o. thanks you for visiting our website. We place great importance on protecting your personal data and therefore we would like to disclose the following information concerning the processing of your personal data when visiting our website and when using our services.

Profesia, spol. s r.o. publishes this privacy policy outlining its basic principles for processing personal data when visiting and providing services through the website www.profesia.sk (hereinafter “Website”).

Please read the contents of this Privacy Policy (“Policy”) carefully. The Policy is always available on the Website, where it may be viewed and downloaded and saved on your device at any time.

Any legislative changes or changes in our internal processes may result in changes to this Policy, and therefore Profesia, spol. s r.o. reserves the right to amend the contents of the Policy.

2. Personal Data Controller

The personal data controller is:

Profesia, spol. s r.o.

Address: Pribinova 19, 811 09 Bratislava, Slovakia,

Company ID No.: 35 800 861

Registration: Commercial Register, Bratislava I District Court, section: Sro, file no.: 22949/B

Tel.: +421 2 33 00 67 90

Email: [email protected]

(hereinafter “Profesia” or “Controller”)

3. Personal Data Processing and Security Principles

Profesia processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC on the protection of personal data (hereinafter “GDPR”).

The basic principles of the processing of your personal data are:

“Principle of legality, fairness and transparency" - We always process your personal data legally, fairly and transparently,

“Principle of limited use” - Your personal data is collected for specific, explicit and legitimate purposes and is not further processed in a way that is incompatible with the original purpose of such processing,

“Principle of accuracy” - We only process personal data which is correct and updated as needed,

“Principle of data minimisation” - We only process the specific personal data necessary to accomplish the purpose of its processing,

“Principle of retention minimisation” - We retain your personal data in a format that only permits your identification when necessary for the purposes for which the personal data is processed,

“Principle of integrity and confidentiality” - We process personal data in a way that guarantees reasonable protection of personal data, including protection against unauthorised or unlawful processing and accidental loss, destruction or damage, by employing appropriate technical or organisational measures.

4. Processing of Personal Data When Visiting and Providing Services on the Website

With respect to Profesia’s processing of your personal data, please find the following information about the specific processes, scope and purposes of data processing, the legal basis for such processing and the relevant retention periods.

4.1. Processing of Personal Data When Visiting the Website

Purpose and Scope of Personal Data Processing

We only record and use the personal data of Website visitors in the scope necessary to operate a functional Website and its content and services. This means that we only collect the personal data that your browser automatically transmits and temporarily retain this data in a log file. The following data is involved: The IP address of the requesting computer, the date and time of access, the name and URL of the downloaded file, the website from which access is made, the browser used and possibly the operating system of your computer, as well as the name of your Internet access provider.

General administration of the Website, providing a smooth connection to the Website, and facilitating convenient use of the Website are the purposes of processing such data.

Legal Basis

Article 6(1)(f) GDPR is the legal basis for personal data processing as the processing of the above data is necessary to operate the Website. The provisioning of the above personal data for the purposes of processing is not a statutory or contractual requirement; however, it is impossible to visit our Website without such processing. A data subject is authorised to opt out of the processing of this data.

Retention Period

Personal data is processed for the period necessary to accomplish the purpose of its processing. A data subject’s personal data is deleted once the purpose is accomplished.

4.2. Contact Form

Purpose and Scope of Personal Data Processing

A Website visitor may decide to contact Profesia using the online contact form. When using the contact form, it is necessary that you provide us with the following details: first name, last name, email address and message. Personal data in this case is processed to accomplish our mutual communication and to resolve your suggestion or complaint.

Legal Basis

Article 6(1)(a) GDPR is the legal basis for personal data processing, i.e. your express consent. Personal data processing is necessary to resolve your request and therefore we request that you provide your express consent for such purpose. The provisioning of the above personal data for this purpose is not a statutory or contractual requirement; however, it is impossible to respond to your request or suggestion without such processing. You can revoke your consent to the processing of personal data at any time.

Retention Period

You can revoke your consent to the processing of personal data at any time, otherwise Profesia will process your personal data for a period of 3 years from its acquisition. Your personal data will be deleted upon expiry of this period.

4.3. Newsletter

Purpose and Scope of Personal Data Processing

Visitors to the Website may subscribe to our newsletter. We plan to send the newsletter to individuals who have not specifically subscribed to the newsletter, but whose email addresses we received directly from them in the process of providing our services. Personal data in this case is processed to keep Website visitors and our clients informed about the latest news related to our services. We process the following data for subscribing and sending our newsletter: email address.

Legal Basis

Profesia has a legitimate interest under Article 6(1)(f) GDPR to process your personal data for the purposes of distributing the newsletter. The provisioning of the above personal data for this purpose is not a statutory or contractual requirement; however, it is impossible to send you the newsletter without such processing.

Article 6(1)(a) GDPR is the legal basis for personal data processing, i.e. your express consent if you have subscribed to the newsletter.

You may opt to unsubscribe from the newsletter at any time. Opting out of the processing of your personal data, which is your right under Article 21(1) and (2) GDPR, is also considered unsubscribing from the newsletter.

Once you unsubscribe from the newsletter, we will no longer send you the electronic newsletter and will not process your personal data for such purposes.

Retention Period

We will retain your personal data for the purposes of your subscription and distribution of the newsletter for the duration of such time that you subscribe to the newsletter, or for a period of 3 years from the date on which you provide consent.

4.4. Personal Data in the CV Database

Purpose and Scope of Personal Data Processing

Among the services we provide to job seekers is the ability to complete an online form on the Website or send in a printed form to Profesia, or Profesia CZ, spol. s r.o. with its registered office at Opletalová 55, Prague 110 00, Czech Republic, to create a CV and to disclose/provide it to Profesia’s business partners using the CV database published on the Website.

The CV database is a shared database with the above-specified companies, who are its co-creators and who process personal data in the database as co-controllers. Cooperation between the co-controllers is stipulated in a written agreement concluded for an open-ended term and defining the conditions for processing personal data between the co-controllers.

The co-controllers have agreed:

- the contact point for data subjects will be either of the co-controllers, while the co-controllers will publish information about their contact points on their websites,

- a data subject may exercise their rights under GDPR with each of the co-controllers and towards each of the co-controllers,

- each of the co-controllers shall fulfil the disclosure obligation contained in Article 13 GDPR,

- Profesia, spol. s r.o. shall perform the obligations and tasks related to rights exercised by data subjects.

The purpose of the processing of such personal data is to provide assistance to the data subject as a job seeker to find a suitable job opportunity. Profesia is authorised to disclose/provide the personal data contained in a data subject’s CV to its business partner based on the consent of the data subject and for the purposes disclosed in the previous sentence.

In the interest of providing assistance with job search Profesia is entitled to inform the Person Concerned via text message (SMS) or email about the fact that Profesia's business partner showed interest in the CV of the Person Concerned. The Person Concerned is entitled to object to such personal data processing.

CVs stored in the CV database include: at least one means of contact (email address or phone number), the highest level of completed education, specification of the job field and position they are interested in, identification of the location in which they are looking for a job, the type of employment sought and gender (for statistical processing purposes only). A job seeker alone decides what other data to provide in a CV.

Registration on the Website is required to create a CV in the CV database. Registration requires the use of a login email address and access password; registration may be cancelled at any time by sending an email to Profesia in which you state your intent to cancel your registration.

Legal Basis

Your personal data may be processed in the CV database and provided to a business partner by the controller in the manner specified above exclusively under Article 6(1)(a) GDPR, i.e. with the data subject’s consent.

Your personal details may be processed in the CV database also pursuant article 6 section 1 letter f) GDPR, ie. legitimate interest for the purpose of providing the information (via text message or email) that a business partner of Profesia showed interest in your CV. After unsubscribing from the text message or the email, we will no longer send you these electronic messages and we will not process your personal data for this purpose.

Retention Period

Personal data contained in a data subject’s CV is disclosed/provided to our business partners via the Website for a period of 3 months from the date of your consent to such processing of this personal data. Once this period expires, your personal data provided in the CV will be retained if you decide to once again disclose/provide your CV to our business partners.

Data contained in the CV database shall be rendered permanently anonymous and shall only be used for statistical purposes after a period of 3 years has passed since your most recent login into your registered account on the Website. Profesia is obliged to definitively delete personal data upon a written request from a data subject.

4.5. Personal Data in a Response to a Job Advert

Purpose and Scope of Personal Data Processing

Among its services, Profesia makes it possible to publish job adverts on the Website, and these job adverts are published by the business partners of our company. Job seekers are permitted to respond to these job adverts.

A response to a job advert published on the Website includes: at least one means of contact (email address or phone number), the highest level of completed education and gender (for statistical processing purposes only). It is at the sole discretion of the job seeker as to what additional details to provide in a response to a job advert.

The purpose of the processing of such personal data is to provide assistance to the data subject as a job seeker to find a suitable job opportunity. Profesia therefore archives the responses sent by job seekers to job adverts posted on the Website and ensures they are sent (provided) to the business partner who published the job advert on the Website.

Legal Basis

Responses to job adverts published on the Website archived by Profesia, spol. s r.o. contain data considered personal data under GDPR. Profesia may only process this personal data under Article 6(1)(a) GDPR, i.e. with the data subject’s consent.

Legal Basis of a Business Partner of Profesia, spol. s r.o.

Profesia’s business partner (who published the job advert) is only authorised to process the personal data of a job seeker on a legal basis under GDPR and for the purposes of finding a suitable employee, while it is at the sole discretion of Profesia’s business partner to decide on the legal basis for the processing of personal data. A situation when processing is required to fulfil an agreement to which the job seeker is a party is one example. A job seeker sends their CV to Profesia’s business partner who published the job advert via the Website, along with attachments, and may grant consent to this business partner via the Website to process their personal data for inclusion in any future hiring processes, or into the given business partner’s CV database. It is at the sole and voluntary discretion of the job seeker to provide consent to such personal data processing by the business partner.

Profesia does not obtain personal data under the authorisation from the business partner. Profesia obtains personal data and then provides it to the business partner based on the job seeker’s specific consent. When publishing a job advert, Profesia and the business partner who publishes such job advert function as independent personal data controllers and, as such, they work independently and on their own behalf after receiving such personal data. This has no prejudice towards the right of a job seeker as a data subject to exercise their rights under GDPR with each controller and towards each controller.

Retention Period

Consent to personal data processing is granted voluntarily for a period of 3 years. After a period of 3 years, personal data will be made anonymous and used for statistical purposes only. A job seeker has access to their responses to job adverts on the Website (to view, reuse, resend, etc.) during this period. The period of three years is considered the time in which no significant changes are expected with respect to the job seeker’s qualifications. The three-year period was determined on the basis of HR-specific knowledge and expertise. A job seeker may revoke consent to personal data processing at any time during the above-specified three-year period.

4.6. Sending Matching Job Adverts via Email

Purpose and Scope of Personal Data Processing

Among the Services provided to job seekers is also the possibility to create an ‘agent’ via the Website for sending job offers by email. The agent allows the job seeker to define specific search criteria for job adverts published by Profesia’s business partners. The job adverts are then sent to the job seeker’s provided email address.

Legal Basis

Given that an email address may be considered personal data under GDPR, the data subject must provide consent under Article 6(1)(a) GDPR to the processing of their personal data prior to activating the agent service; the processing of personal data in the scope of the email address is a technical necessity for providing this service.

Registration on the Website is required to create an agent (for technical reasons). Registration on the Website requires the use of a login email address and access password; registration may be cancelled at any time by sending an email to Profesia in which you state your intent to cancel your registration.

Retention Period

Consent to personal data processing is granted for a fixed term of 3 years, but consent may be revoked at any time.

4.7. Referring a Job Advert to a Friend

Purpose and Scope of Personal Data Processing

Job seekers may recommend a job advert published on the Website to another person directly via the Website. These job adverts are then sent with a fully customisable message from the job seeker and identification of the email address of the job seeker who sent the link to the given job advert.


Legal Basis

Given that an email address may be considered personal data under GDPR, the data subject must provide consent under Article 6(1)(a) GDPR to the processing of their personal data prior to sending their recommendation.

Registration on the Website is required to refer a job advert to a friend (for technical reasons). Registration requires the use of a login email address and access password; registration may be cancelled at any time by sending an email to Profesia in which you state your intent to cancel your registration.

Retention Period

Consent to personal data processing is granted for a fixed term of 3 years, but consent may be revoked at any time.

4.8. Communicating in Job Forums

Purpose and Scope of Personal Data Processing

Job seekers have the ability to communicate with other job seekers in the job forums via the Website. This feature is only accessible by registering an account on the Website (for technical reasons). The data subject’s email address is used to register an account on the Website.

Legal Basis

Given that an email address may be considered personal data under GDPR, the data subject must provide consent under Article 6(1)(a) GDPR to the processing of their personal data prior to registration. The processing of personal data in the scope of an email address is technically necessary for communicating in job forums.

Retention Period

Consent is granted for a fixed term of 3 years and it may be revoked at any time.

4.9. Requesting References via the Website

Purpose and Scope of Personal Data Processing

Job seekers may request a reference from a former employer via the Website. This opportunity is only accessible by registering an account on the Website (for technical reasons). The data subject’s email address is used to register an account on the Website.

Legal Basis

Given that an email address may be considered personal data under GDPR, the data subject must provide consent under Article 6(1)(a) GDPR to the processing of their personal data prior to registration. The processing of personal data in the scope of an email address is technically necessary for sending a request for a reference.

Retention period

Consent is granted for a fixed term of 3 years and it may be revoked at any time.

4.10. Registration on the Website

Purpose and Scope of Personal Data Processing

Job seekers are required to register on the Website to use certain services. A job seeker may use any login email and password to register. Registration makes the following features available: communicating in job forums, requesting references, recommending a job advert to a friend, and the agent for sending matching job adverts via email.

Legal Basis

Given that an email address may be considered personal data under GDPR, the data subject must provide consent under Article 6(1)(a) GDPR to the processing of their personal data prior to registration.

Retention Period

Consent to the processing of personal data may be revoked at any time, and otherwise consent shall expire within 3 years from the date granted and all such data shall be deleted.

4.11. Personal Data of Employees of Profesia's Business Partners

When using the services, business partners have the ability to provide and publish contact information for their employees in the following scope: first name, last name, email address, phone number and position. Such data is classified under GDPR as information that the controller, which in this case is the employer of the data subject, is authorised to provide to its contractor if necessary in the course of the performance of the data subject’s work-related duties or other functional responsibilities.

The provisioning or publication of personal data may not interfere with the standing, dignity and security of the data subject. This data will be processed for a maximum of 10 years from the delivery of the last order of the business partner; after this period the data will be permanently deleted.

5. Subcontractors

Personal data processors for the purposes hereof include:

Google Ireland Limited, Google Cloud Platform service pursuant to the Google Cloud Platform Terms of Service published online at https://cloud.google.com/terms/;

Hotjar Limited, C 65490, Level 2, St Julian’s Business Centre, 3, Elia Zammit Street, St Julian’s STJ 1000, Malta;

Functional Software Inc. (Sentry) 132 Hawthorne Street, San Francisco, California 94107, USA, through an agreement concluded in accordance with the decision of the European Commission of 5 February 2010 on standard contractual clauses for the transfer of personal data to processors established in third countries under Directive 95/46/EC of the European Parliament and of the Council, due to the judgement of the EU Court of Justice of 16 July 2020 in Case C 311/18).

Mailjet SAS, 13 – 13 bis Rue de I’Aubrac, 75012 Paris, France.

Quality Unit, s.r.o., Vajnorská 100/A, Bratislava, Slovakia

TOPefekt s.r.o., B. Němcové 767/13, 787 01 Šumperk, Czech Republic

Imper CZ, s.r.o. , Nádražní 762/32, 150 00, Praha 5, Czech Republic

6. Cookies

Scope and Purpose of Processing

Cookies are small data files that are downloaded onto a device (PC, tablet, mobile phone, etc.) while using the Website. The controller uses cookies to examine the effectiveness of the Website. Cookies generally do not contain any information intended to identify individual persons, but instead are used to identify the browser on a specific device. Cookies may be temporary or may permanently remain on the device even after closing the browser for the time specified in the cookies.

These permanent cookies can be checked every time the Website is visited. The information we collect through the Website includes: browser type, the web address from which the Website was visited, the device operating system, and the IP address of the device. To display more relevant ads, some cookies are set up by a third-party advertising system, such as Google Adsense. This may be disabled in a Google account. A computer may be set to refuse cookies, although in this case it is possible that some website functions will not work.

We use permanent cookies for better user orientation and individualised presentation of services. We also use the so-called temporary cookies (session cookies), which are automatically deleted after closing the browser. You can set your browser to inform you about the use of cookies. This will ensure the transparency of the use of cookies. Important: if you completely exclude the use of cookies, you may not be able to use certain features of our Website. We use the following five categories of cookies on our Website: necessary cookies, performance cookies, functionality/personalisation cookies, transient cookies and targeting cookies.

Necessary cookies are required for visitors to be able to navigate the Website and use its functions. Without these cookies we cannot provide you with certain services or Website features. These cookies are used to identify registered users.

Performance cookies: these cookies collect information about how visitors use the Website. These cookies do not collect any data that can be used to identify visitors. All information collected through these cookies is anonymous.

Functionality/personalisation cookies: these cookies allow you to remember previous information about the visitor (such as username, language or selected market) to offer optimised functions tailored to the visitor's needs. These cookies do not collect information that can be used for advertising purposes and cannot track where you have been on the Internet outside of our Website.

Functional/personalised cookies are used to recognise visitors to the Website. The Website uses temporary cookies, which are automatically deleted when the browser is closed. This type of cookie allows us to store your session ID, which allows you to assign various browser requests to a common session and allow us to recognise your terminal during further visits to the Website.

Targeting cookies: these cookies are used to tailor advertising to you and your interests even more specifically; they are placed on the websites of advertising networks with the consent of the operator of the Website. They recognise that the user has visited the Website and this information is then provided to another entity, e.g. advertising companies.

Marketing cookies are used to monitor the preferences of the website user in order to target advertising, ie. display marketing and advertising announcements (also on third-party sites) in accordance with these preferences, or the application Leady from Imper CZ, s.r.o. to identify legal entities, website visitors who may be interested in our services.

Legal Basis

Given the above, we hereby inform you that the processing of personal data using cookies under Article 6(1)(f) GDPR is conducted based on Profesia’s legitimate interest.

It is at the discretion of a Website visitor to reject cookies. You can delete cookies or pre-set your internet browser so that it either refuses to accept cookies or notifies you when the server tries to send you cookies.

If you provide consent to the use of cookies based on a reference (‘cookie banner’) on the Website, the legal basis for the processing of personal data for the affected cookies is your consent under Article 6(1)(a) GDPR.

Retention Period

Data transmitted by cookies is only processed for the time necessary to achieve the purpose described above. Cookies are deleted as soon as the data transmitted by them is no longer needed.

7. Plug-ins

Our Website contains social network plug-ins:

‘Facebook’ (Facebook Inc., located at 1601 S. California Ave., Palo Alto, California 94304, USA),

More information: https://en-gb.facebook.com/policy.php

‘YouTube’ (YouTube LLC, located at 901 Cherry Ave., San Bruno, CA 94066, USA),

More information: https://policies.google.com/privacy?hl=en&gl=de

‘LinkedIn’ (LinkedIn Corporation, 2029 Stierlin Ct, Mountain View, CA 94043, USA). More information: https://www.linkedin.com/legal/privacy-policy?trk=uno-reg-guest-home-privacy-policy

These services are provided by their relevant companies (‘operators’). Based on the data transmitted by the relevant services via social plug-ins, the service is able to log you into your account, if it is necessary. After logging in to one of the operator's social networks, the operator can immediately assign a visit to this Website to your profile.

If you work with social media plug-ins, the relevant information is also transferred directly to the operator's server and stored there. This information can also be published on a social network and displayed there under your contacts.


To prevent such immediate association of data collected through our Website to your profile, you must log out of your relevant provider's account before visiting our Website. Information on the scope and purpose of data collection by the relevant service, as well as on further processing and such use of your data, can be found in the data protection and privacy information found directly on the website of the relevant operator's service.

8. Rights of Data Subjects

Profesia, spol. s r.o. will take appropriate measures to provide the data subject with all the information referred to in Articles 13 and 14 GDPR and all communications under Articles 15 to 22 and Article 34 GDPR relating to processing, in a concise, transparent, comprehensible, and easily accessible form, clearly and easily formulated, especially in the case of information intended specifically for a child. Information shall be provided in writing or by other means, including where appropriate by electronic means. If a data subject so requests, information may be provided verbally, as long as the identity of the data subject has been proven in another way.

A data subject has the right to obtain confirmation from the controller if their personal data has been processed and, if so, they have the right to access this personal data and the following information:

- the purposes of the processing;

- the categories of the personal data concerned;

- the recipients or categories of recipients to whom the personal data has been or will be provided, in particular recipients in third countries or international organisations;

- where possible, the foreseeable period of retention of the personal data or, if that is not possible, the criteria for its determination;

- the existence of the right to require the controller to correct personal data relating to the data subject, or to delete or restrict the processing thereof, or to object to such processing;

- the right to file a complaint with the supervisory authority;

- where personal data has not been obtained from the data subject, any available information as to the source of such data;

- the existence of automated decision making, including profiling.

A data subject has the right to have the personal data controller correct any incorrect personal data relating to them without undue delay. With regard to the purposes of the processing, a data subject has the right to supplement incomplete personal data, including through the provision of a supplementary statement.

A data subject is entitled to request that Profesia, spol. s r.o. delete their personal data. All consent to the processing of personal data provided to Profesia, spol. s r.o. is revocable. Please send your request to the email address: [email protected]

The supervisory authority is the Office for Personal Data Protection of the Slovak Republic. A data subject is entitled to file a complaint with the supervisory authority.

In case of questions, please contact the data protection officer:

Mgr. Csaba Zachar,

Legal Department Profesia, spol. s r.o.,

email: [email protected]

In Bratislava, dated 30 April 2021 Mgr. Ivana Molnárová, Managing Director of Profesia, spol. s r.o.