In this document, we describe how we process your personal data for recruitment and selection purposes (this refers in particular to your name, contact details, education and/or other information provided in your CV), as well as for sending our newsletters (this refers in particular to your email address and phone number) and/or for other marketing activities (in particular photos from our events and/or direct marketing).
The administrator of your personal data is the company 2FRESH s.r.o, ID No. 27442195, with registered office at Bořivojova 878/35, 130 00 Prague 3, registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, Insert 113067 (hereinafter referred to as the "Administrator").
The contact details of the administrator are as follows:
Address: Bořivojova 878/35, Prague 3, 130 00
Phone: +420 775 009 015
The legal basis for processing your personal data is in the case of processing personal data for the purpose of selecting employees, negotiating an employment and/or other contract, which is in accordance with Article 6(1)(b) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27. April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) ("GDPR"). In the case of processing personal data for marketing activities, the legal basis is the legitimate interest of the Controller, which is in accordance with Article 6(1)(f) GDPR.
Your personal data is processed solely for the purpose of recruitment and selection of employees, sending our newsletters and carrying out other marketing activities of the Administrator (publication of photos from our events and/or direct marketing).
If you send us your CV, we will process your personal data for the duration of the selection process for the position, but no longer than 6 months after we receive your CV, unless you consent to us archiving your CV for a longer period.
If you are a client of ours, we will send you our newsletters to your Email (and/or phone number) for 3 years from the last PO.
If we take photographs at our events, we will keep these photographs in our archive for the duration of our company and reserve the right to use them on the Website and/or social media for 10 years.
We may delegate the processing of your personal data to a third party. A personal data processor is an entity that processes personal data on the basis of specific legislation or on the basis of our mandate or the mandate of the controller. In these cases, your personal data is guaranteed to be subject (by contract or by law) to the same protection as when processed by the Controller.
We currently use the following Processors:
Marketing service collaborators (consultants, copywriters, strategists and other entities working with the Controller as subcontractors).
Google, MailChimp. As the Controller, we do not intend to transfer your personal data to any third country (non-EU country) or to any international organisation.
We know how important your privacy and the security of your personal information is. Therefore, we strive to maintain a high level of security when processing your personal data so that your data cannot be misused.
Your data may be processed manually or automatically. Automated processing takes place in our information systems and/or in the information systems of our processors.Your personal data is processed by our employees and/or other processors.
We always conclude a written processing contract with all processors of your personal data. These agreements contain the same safeguards that apply to the processing of personal data within 2FRESH.
Measure site traffic and provide statistics on user traffic and behaviour.
Improve site functionality.
The collection of cookies may be considered as processing of personal data. Such processing is possible for a legal reason - the legitimate interest of the controller and is in accordance with Article 6(1)(f) of the GDPR.
The website may also be used in a mode that prevents the website operator from collecting information about user behaviour - this mode can be selected within the browser settings or you can object to such information collection in accordance with Article 21 of the GDPR. Such an objection should be sent to firstname.lastname@example.org. Objections will be evaluated without undue delay and within 30 days of receipt. Cookies necessary for the functioning of the Website will only be stored for the time necessary for this functioning.
If you object to the processing of technical cookies necessary for the functionality of our Website, the full functionality and compatibility of the Website is not guaranteed.Cookies collected for the purpose of measuring traffic to the Website and providing statistics on traffic and user behaviour are analysed as part of cumulative data and in a pseudonymised version.
Cookies are stored for a maximum period of 13 months after their last use.
Cookies are processed by Google Analytics, Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, in accordance with its terms and conditions, available at:
Under the terms of the GDPR, you have the right to request access to your personal data from the controller, the right to request a copy of your personal data from us, the right to rectification or erasure of your personal data and/or the right to request limited processing of your personal data and the right to portability of your personal data where such data has been obtained by automated processing based on your consent or performance of a contract.
You have the right to object to the processing of your email address (and/or telephone number) for the purpose of sending newsletters where such newsletters are sent on the basis of our legitimate interest - i.e. you are our customer. You also have the right to object to the processing of other personal data on the basis of the legitimate interest of the controller - i.e. the processing of cookies.
If you believe that the processing of your personal data has violated the GDPR, you have the right, among other things, to lodge a complaint with the Data Protection Authority and/or go to court.