Privacy Notice for Referees in accordance with the General Data Protection Regulation (EU GDPR) 2016/679

The company ManpowerGroup s.r.o., with its registered office at Na Florenci 2116/15, Nové Město, 110 00 Praha 1, as the Data Controller, hereby provides the following information, in compliance with General Data Protection Regulation (EU) no. 679 of 27 April 2016 (hereinafter referred to as the “Regulation”), regarding the use of your personal data (hereinafter “Personal Data”).

 

A. PERSONAL DATA PROCESSING PRINCIPLES

The Regulation establishes the rules on the protection of natural persons with regard to personal data processing and the rules concerning the free flow of personal data. It protects the fundamental rights and freedom of natural persons and especially their right to personal data protection. Your Personal Data will be collected only as far as compatible with the purposes described in the following paragraph and their processing will be based on the principles of fairness, lawfulness and transparency.

 

B.  PROCESSING PURPOSES AND LEGAL BASIS

Your Personal Data (name, surname, email address and/or phone number) will be processed only for the purpose to contact you in order to collect the work reference of your former employees or of 

Data Controller ́s candidates that you may have known for other reasons.

 

The processing of your Personal Data by the Data Controller for the purpose above is necessary for the pursuit of the legitimate interests of the Data Controller, pursuant to art. 6 c. 1 letter f of the Regulation.

 

If the Data Controller intends to use the Personal Data it has collected for any other purpose which is incompatible with the purpose for which the Personal Data were originally collected, the Data Controller will inform you in advance.

 

 

C. DATA PROCESSING METHODS

Your Personal Data may be processed by the Data Controller in accordance with articles 4-6 of the GDPR, both manually and using IT methods and procedures.
In our companies, data are processed by employees and staff as part of their functions and in compliance with the instructions received, always and solely for achieving the specific purpose indicated in this privacy information notice.

Personal data are not disclosed.
In performing their processing operations, the Data Controller undertakes to:

• §  guarantee the accuracy and updating of the processed Personal Data, and promptly implement any corrections and/or additions requested by the data subject;
• §  adopt security measures to ensure adequate Personal Data protection, taking into account the potential impact of the processing operations on the respect for the data subject’s rights and fundamental freedom;
• §  inform the data subject, according to the deadlines and cases provided for by law, of any violations of Personal Data;
• §  guarantee that the processing operations comply with applicable legal requirements.

 

D. SCOPE OF PERSONAL DATA CIRCULATION AND DISCLOSURE

The employees of the Data Controller who need the data to perform their duties or as a result of their position, or other entities that provide services for the Data Controller and have been specifically appointed as Data Processors or Persons in charge of Data Processing, may have access to your Personal Data. Such persons, in relation to their duties will only have access to Personal Data related to their job.

 

Your Personal Data will not be transferred outside the EEU.

 

E. RETENTION PERIOD

Your Personal Data will be available for the Data Controller for up to twenty-four months and will then be deleted automatically

You may request your information to be deleted earlier by contacting the Data Controller to the contacts below.

 

F. EXERCISE OF RIGHTS

According to the Regulation (articles 15-22), the data subject may exercise the following rights vis-à-vis the Data Controller:

1. Right of Access: The data subject has the right to access the Personal Data regarding him or her that are being processed in order to check whether his or her Personal Data have been processed in compliance with the law.
2. Right to Rectification: The data subject has the right to obtain the rectification of any inaccurate or incomplete data regarding him or her in order to ensure the accuracy of such information based on the purposes of the processing operations.
3. Right to Erasure: The data subject has the right to request that the Data Controller erase information regarding him/her and no longer process such data.
4. Right of Restriction of Processing: The data subject has the right to request that the Data Controller restrict the processing of his or her Personal Data.
5. Right to Data Portability: The data subject has the right to receive Personal Data in a structured, commonly used and machine-readable format and has the right to transmit those data to another Data Controller.
6. Right to object to the processing: The data subject has the right to object to the processing of his or her Personal Data in the cases referred to in the GDPR, at any time and with no need to justify his/her decision.
7. Right not to be subject to automated decision-making: The data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her, or similarly significantly affects him or her.
   
   
   

If the data subject believes that the processing that concerns him violates the Regulation, he/she has the right to lodge a complaint with the Supervisory Authority of the Member State in which he/she resides or works, or of the State in which the alleged violation occurred.

 

G. CONTACT

If you wish to exercise the rights listed in the previous section or wish to receive more information about the processing of your personal data, please contact the Data Controller via its website www.manpowergroup.cz or at Na Florenci 2116/15, Nové Město, 110 00 Praha 1.