Legal Policies for the use of Skreenbe

Conditions of personal data protection

These conditions of personal data protection provide for the protection and processing of personal data of SKREENBE j.s.a. as a controller as regards the operation of the internet application SKREENBE, in particular providing interactive video calls for interviews with job applicants (hereinafter referred to as the “Application”).

Personal data are processed in accordance with the applicable legislation, in particular Act No. 18/2018 Coll. on the protection of personal data as amended (hereinafter referred to as the “Personal Data Protection Act”) and regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the “Regulation” or as “GDPR”) and in accordance with these conditions of personal data protection.

1. Controller

Controller is the company: SKREENBE j.s.a.
Business identification number 53 660 277
Registered office at Ružová dolina 25, 821 09 Bratislava, Slovak Republic
Registered with the Commercial Register of District Court Bratislava I, section: Sja, insertion No. 157/B
E-mail: info@skreenbe.com

(hereinafter referred to as the “Controller”)

2. Data subjects

These conditions of personal data protection apply to:

  • users of the Application, i.e. persons registered with the Application for the purpose of using the Application services, or persons acting in the name or on behalf of these persons (hereinafter referred to as the “Application User”) and
  • persons invited to job interviews by the Application Users, e.g. job applicants (hereinafter referred to as the “Invited Person”); and
  • persons interested in the Application (hereinafter referred to as the “Prospective Clients”).

(hereinafter jointly referred to as the “Data Subjects”).

3. Purpose of the personal data processing

Purpose of the processing of personal data of the Data Subjects pursuant to these conditions is:

  1. implementation of measures prior to the conclusion of a contract with the Application Users, conclusion of the contract with the Application Users for the purpose of using the Application and subsequent provision of the services;
  2. conducting a job interview through a video call and personality tests between the Application User and the Invited Person;
  3. keeping record of job applicants;
  4. compliance with tax and accounting regulations;
  5. compliance with regulations in the field of archiving;
  6. securing of possible legal claims of the Controller;
  7. direct marketing for the Application Users by providing current information about products and services relating to the Application through newsletters;
  8. marketing for the Prospective Clients of the Application that sign up to receive current information about products and services relating to the Application through newsletters;
  9. operation of the Application – the Controller uses functional and technical cookies in the Application that are required for the proper operation of the Application, i.e. necessary for the performance of the contract;
  10. analysis of the operation of the Application – the Controller uses analytical cookies in the Application to analyse the operation of the Application, for the purposes of the Application traffic statistics, to improve the functioning of the Application and to ensure the user optimality; to this effect, the Controller also retains and analyses information about the user traffic within the Application;
  11. relevant advertising – the Controller uses marketing cookies in the Application to provide relevant advertising to the Data Subject;
  12. analysis of the operation of the Application social media (e.g. Facebook) – the Controller uses cookies on its social media to analyse the operation of these pages.

4. Legal basis for the processing

Legal basis for the processing is:

  1. Section 13(1)(b) of the Personal Data Protection Act, or Article 6(1)(b) of GDPR – performance of the contract and pre-contractual relationships (including the operation of the Application, which is the subject-matter of the contract);
  2. Section 13(1)(a) of the Personal Data Protection Act, or Article 6(1)(a) of GDPR – consent given by the Data Subject (conducting a job interview through a video call and personality tests);
  3. Section 13(1)(a) of the Personal Data Protection Act, or Article 6(1)(a) of GDPR – consent given by the Data Subject (retention of job applicant records);
  4. Section 13(1)(c) of the Personal Data Protection Act, or Article 6(1)(c) of GDPR in conjunction with Act No. 595/2003 Coll. on the income tax as amended, Act No. 431/2002 Coll. on the accounting as amended and other relevant laws – compliance with tax and accounting regulations;
  5. Section 13(1)(c) of the Personal Data Protection Act, or Article 6(1)(c) of GDPR in conjunction with Act No. 395/2002 Coll. on archives and registries as amended and other applicable laws – compliance with regulations in the field of archiving;
  6. Section 13(1)(f) of the Personal Data Protection Act, or Article 6(1)(f) of GDPR – legitimate interest of the Controller to secure and assert its possible legal claims;
  7. Section 13(1)(f) of the Personal Data Protection Act, or Article 6(1)(f) of GDPR – legitimate interest of the Controller to perform direct marketing for the Application Users;
  8. Section 13(1)(a) of the Personal Data Protection Act, or Article 6(1)(a) of GDPR – consent given by the Data Subject by signing up to receive newsletters;
  9. Section 13(1)(f) of the Personal Data Protection Act, or Article 6(1)(f) of GDPR – legitimate interest of the Controller to operate the Application (necessary cookies);
  10. Section 13(1)(a) of the Personal Data Protection Act, or Article 6(1)(a) of GDPR – consent given by the Data Subject through the cookies notification bar in the Application (analytical cookies);
  11. Section 13(1)(a) of the Personal Data Protection Act, or Article 6(1)(a) of GDPR – consent given by the Data Subject through the cookies notification bar in the Application (marketing cookies);
  12. Section 13(1)(a) of the Personal Data Protection Act, or Article 6(1)(a) of GDPR – consent given by the Data Subject (analysis of the operation of the Application’s social media pages).

     

5. Subject-matter of the processing

Subject-matter of the processing is:

  1. basic identification and contact personal data of the Application User provided by the Application User and necessary for the performance of the contract – first name, surname, address, e-mail, telephone number; provision of these data is voluntary, however, without providing the data, proper performance of the contract is not possible; the Application User can edit and update the data in its user profile in the Application;
  2. video call made between the Application User and the Invited Person (e.g. a job applicant); making the video call is voluntary, however, without making the video call, the job interview cannot take place; the Data Subjects are entitled to end the video call at any time; the Controller does not retain the video call; recording of the video call is only made upon request of the Application User, and the video call is recorded solely to the Application User’s local device; the Application User is responsible for acquiring consent of the Data Subject for recording the video call and, subsequently, processes the video call in its own name as a controller; prior to the video call the Invited Person will provide his or her basic identification and contact personal data; as part of the video call, the Invited Person will have a possibility to upload his or her curriculum vitae or other documents containing personal data, which he or she thereby provides to the Application User and which the Application User shall process in its own name as a controller and bears full responsibility for their protection; the Controller shall only retain the curriculum vitae and other documents uploaded by the Invited Person, if the Invited Person gave his or her consent to be included in job applicant records;
  3. before and during the video call, the Invited Person may be subjected to personality tests executed through various tasks assigned by the Application User; personality tests will also be performed through facial mimicry and body language of the Invited Person that will be processed by automated means; a report will be made on the personality testing and delivered to the Application User that will process it in its own name as a controller; the Controller will only retain the report if the Invited Person gives his or her consent to be included in the job applicant records;
  4. a file of the Invited Person containing (i) his or her curriculum vitae and other documents uploaded by him or her and the data contained therein and (ii) the report pursuant to the previous section, if the Invited Person gives his or her consent to be included in the job applicant records;
  5. IP addresses through which the Data Subjects use the Application;
  6. information about the activities of the Data Subjects when using the Application;
  7. Cookies:
  • The Controller uses cookies in the Application to ensure proper operation of the Application (functional and technical cookies), to analyse the operation of the Application (analytical cookies) and to provide relevant advertising to the Data Subject (marketing cookies). Cookies are small text files stored by a website in the computer or mobile device of the Data Subject when viewing the website. The Data Subject may reject, control or delete cookies at its own discretion through the setting of its web browser, more information is available at org, for example. However, the Application may not work properly if functional and technical cookies are rejected;
  • the Controller uses cookies at its social media such as Facebook. These cookies are provided to the Controller by Facebook in an anonymised form to analyse the operation of the Controller’s social media pages. More information about cookies used by Facebook is available at https://www.facebook.com/policy/cookies/.

6. Categories of recipients

Personal data are provided to the following recipients:

  1. the Application Users and the Invited Persons – these persons conduct job interviews between them using the Application;
  2. providers of IT services;
  3. Google Ireland Ltd. – for the purpose of provision of the Google Analytics service;
  4. Facebook Ireland Ltd;
  5. external accountant of the Controller;
  6. providers of legal and tax consulting services;
  7. providers of postal and courier services;
  8. tax authority;
  9. Slovak Trade Inspection;
  10. courts, law enforcement authorities, enforcement agents;
  11. other entities authorised under applicable legislation.

7. Personal data portability

The Controller does not transfer personal data to a third country or international organisation.

8. Storage period

Personal data will be stored for the period for which the purpose for the processing of personal data remains in existence, i.e. at least for the duration of the contractual relationship and within the necessary scope until a limitation period for the assertion of possible legal claims does not lapse and for the period of archiving laid down by the applicable legislation, however, always at least until all proceedings concerning the legal claims are concluded.If the processing is based on a consent of the Data Subject, personal data will not be processed for such purpose longer than for the period of the consent given. In the event of inclusion in the job applicant records, the consent is given for the maximum period of 5 years. Consent may be withdrawn in accordance with Article 11 below.

If the processing is based on a legitimate interest of the Controller, personal data will not be processed for such purpose longer than for the period of justified objecting to the processing in accordance with Article 12 below.

The Data Subject may control or delete cookies at its own discretion, more information is available at aboutcookies.org, for example.

The Controller does not store the recordings of video calls. Recording of the video call is only made upon request of the Application User, and the video call is recorded solely to the Application User’s local device. The Application User is responsible for acquiring consent of the Data Subject for recording the video call and, subsequently, processes the video call in its own name as a controller. The Invited Person is informed about the video call being recorded and, if he or she does not agree with the recording, he or she may end the video call at any time during the video call. The Controller can only store the documents provided by the Invited Person within the video call and the reports on the Invited Person, if the Invited Person gives his or her consent (for the purpose of inclusion in the job applicant records). In other cases, the Application User processes these documents in its own name as a controller.

9. Measures to protect personal data

The Controller processes personal data in accordance with the applicable legislation, especially the Personal Data Protection Act and the Regulation. The Controller uses state-of-the-art technologies to store and transfer data securely and pays attention to the expertise of its staff on a regular basis.

10. Rights of the Data Subjects

The Data Subject whose personal data are processed has the following rights as regards the processing of its personal data:

  1. right to request access to its personal data or information about the processing (including confirmation about the processing) from the Controller;
  2. right to rectification of incorrect personal data and to have incomplete personal data completed;
  3. right to erasure of personal data or to restriction of the processing (in particular, if the purpose of the processing expired, if the consent was withdrawn, or if the processing is unlawful; personal data may not be erased before statutory and contractual time limits set for their retention expire);
  4. right to object to the processing;
  5. right to data portability;
  6. right to withdraw consent if the processing is based on the consent;
  7. right to lodge a complaint with the supervisory authority, i.e. Office for Personal Data Protection of the Slovak Republic (action pursuant to Section 100 of the Personal Data Protection Act).

 

The Data Subject may contact the Controller at the following e-mail address info@skreenbe.com or by mail sent to the address SKREENBE j.s.a., Ružová dolina 25, 821 09 Bratislava, Slovak Republic. The Controller may only charge a fee for providing information in cases set out in the Personal Data Protection Act, or the Regulation (e.g. with a clearly unsubstantiated request or repeated request). To acquire the information, a person must identify itself as the Data Subject or to prove to be authorised to receive the information relating to a third person.

11. Right to withdraw consent

If the processing is based on consent, the Data Subject has the right to withdraw its consent at any time. Lawfulness of the processing of its personal data based on the consent given remains unaffected until the actual withdrawal of the consent. The Data Subject may withdraw its consent at any time at this e-mail address: info@skreenbe.com or by mail sent to the address SKREENBE j.s.a., Ružová dolina 25, 821 09 Bratislava, Slovak Republic When there is doubt about the identity, the Controller may request that it is proved or request other way of authenticating the withdrawal of the consent. With newsletters it is sufficient that the Data Subjects unsubscribe from the newsletters by following the instructions provided in the newsletter itself.

If the Data Subject does not agree with making the video call, or its recording, it may end the video call at any time during the video call.

The Data Subject may reject cookies at its own discretion, or by not giving consent through the cookies notification bar in the Application. More information available at aboutcookies.org, for example.

12. Right to object to the processing

The Data Subjects have the right to object at any time to the processing of personal data based on the legitimate interests of the Controller. The Controller may not continue to process the personal data unless the Controller demonstrates compelling legitimate grounds for the processing which override the rights and interests of the Data Subject or reasons for the exercise of a legal claim. Where the Data Subject objects to the processing of personal data for direct marketing purposes, the Controller may no longer process the personal data for such purposes.

The Data Subjects may object by sending an e-mail to the address info@skreenbe.com or by mail sent to the address SKREENBE j.s.a., Ružová dolina 25, 821 09 Bratislava, Slovak Republic. When there is doubt about the identity, the Controller may request that it is proved. With newsletters it is sufficient that the Data Subjects unsubscribe from the newsletters by following the instructions provided in the newsletter itself.

The Data Subject may reject cookies at its own discretion by setting up its web browser, more information is available at aboutcookies.org, for example.

13. Profiling

During the video call, the Invited Person may be subjected to personality tests executed through various tasks assigned by the Application User; personality tests will also be performed through facial mimicry and body language of the Invited Person that will be processed by automated means. A report will be made on the personality testing and delivered to the Application User. The report will constitute one of the basis for the Application User’s decision about employing, or not employing, the Invited Person. The Invited Person gives consent for the profiling before participating in a video call. The consent is voluntary, however, without giving the consent, the job interview cannot take place as it represents an essential part thereof. The Invited Person is entitled, among other things, to request its report and comment on this report as well as to request its revision.

The Data Subjects are entitled to contact the Controller in the matter at info@skreenbe.com or by mail sent to the address SKREENBE j.s.a., Ružová dolina 25, 821 09 Bratislava, Slovak Republic. When there is doubt about the identity, the Controller may request that it is proved.

14. Blog

The Controller is running a blog in the Application. For more information about data processing for these purposes, please see our blog policy. These conditions shall apply unless otherwise specified in the blog policy. 

15. Supervisory authority

The Controller complies with all the set legislative rules and safety measures when handling personal data. If the Data Subjects deem it necessary and do not agree with how the processing of personal data is done, they may turn to:Office for Personal Data Protection of the Slovak Republic seated at Hraničná 12, 820 07 Bratislava

16. Final provisions

These conditions of personal data protection become valid and effective on 25.04.2021. These conditions also form part of the Controller’s General Sales Conditions for the use of the Application and are regularly revised and updated. Valid and effective conditions are available on the Controller’s website SKREENBE.com or directly in the Application.