Information on the processing of personal data of job applicants (selection procedures)


The company CV Machining s.r.o., registered office Zlín, Vavrečkova 5333, Postal Code: 760 01, ID No.: 276 96 057, registered no. in the Commercial Register kept by the Regional Court in Brno under C 52535 (hereinafter referred to as the “Administrator”) hereby informs about the basic principles and principles in accordance with Art. Art. 13 et seq. Regulation No. 2016/679 of 27. 4. 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (hereinafter referred to as the “GDPR”), the job applicant about the processing of his/her personal data by the Administrator in connection with the participation of the applicant in the job selection procedure or the applicant’s interest in a job with the Administrator.


  1. Definition of personal data

The controller will process strictly personal data corresponding to the stated purposes of their processing. This includes identifying data provided in the CV or other documents submitted (proof of education, motivation letter, etc.), data provided by the job seeker in the completed contact form, personal questionnaire or data submitted in person during interviews, etc. All information concerning previous work, skills, knowledge (qualifications) and, consequently, the prerequisites for future work with the Administrator.


  1. Purpose and duration of processing

The above personal data of the job applicant will be processed by the Administrator for the following purposes:

(a) selection of a suitable staff member in the context of an ongoing selection procedure (conclusion of the employment relationship)

For the selection of a suitable employee and the subsequent conclusion of an employment contract, or an agreement to perform work or an agreement to perform work, it is necessary to process the personal data of the job applicants involved in the selection procedure. This purpose is fulfilled by completing the selection process with the job applicant.

b) protection of the legitimate interests of the Controller

As a result of the selection procedure, the personal data of unsuccessful job applicants will also be retained after the end of the procedure in order to protect the legitimate interests of the Administrator. This processing thus applies in particular to cases where the Controller believes that there is a risk of a dispute with the (unsuccessful) job applicant about the reasons for his/her non-acceptance, or to demonstrate compliance with all legal obligations in the event of an inspection conducted by the Labour Inspectorate (or other inspection bodies). With this purpose in mind, the personal data of job applicants will be stored for the period of time when there is a possible dispute with the job applicant, or when the Controller can be sanctioned by the control authorities, i.e. generally for up to 3 years after the end of the selection procedure.


  1. Method of processing and data protection

The personal data of the job seeker is obtained directly from the job seeker, in particular through a completed contact form, by sending a CV, motivation letter, etc., or by the job seeker personally providing it during the selection procedure.


  1. Transmission of personal data

The controller does not envisage the transfer or disclosure of personal data to third parties, in particular not to third countries outside the EU. However, the transfer of personal data to the Controller’s partners and advisors (e.g. lawyers, auditors) cannot be excluded if there is a legitimate interest of the Controller in doing so. At the same time, disclosure may be mandatory, in particular to government authorities and other institutions.


  1. Jobseeker’s rights

The job applicant acknowledges that he/she has the right to request information from the Controller about the scope of data processed by the Controller, to request access to such data and have these updated or correctedand has the right to request the erasure of such personal data or to restrict their processingas well as the GDPR right to data portability, all under the conditions set out in the relevant legislation (Articles 15 to 21 GDPR). In order to exercise his/her rights, the job seeker may contact the Administrator by email –

In processing, the Controller will comply with all security principles for the processing of personal data. To this end, the Controller has taken technical and organizational measures to ensure the protection of personal data. The controller will not process personal data for any purpose other than those defined herein. In case of doubts about compliance with the obligations related to the processing of personal data, the applicant may contact the Administrator or the supervisory authority, namely the Office for Personal Data Protection.