INFORMATION FOR DATA SUBJECTS ON PERSONAL DATA PROCESSING AND PRIVACY

Before providing us personal data, please read this information on personal data processing, provided according to the Art. 12-14 of the Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter the „GDPR“) and of the Section 19 and 20 of the Slovak Act 18/2018 Coll. On personal data protection.

1. Data Controllers.

Who processes your personal data and how to contact us: Your personal data is processed by joint controllers, companies of PERSONALITY Group: 1. Personality, s.r.o. with its registered office at Svätoplukovo námestie 1/B, Nitra 949 01, ID. No. 44 549 733, 2. Personality Leasing Services, s.r.o., with its registered office at Svätoplukovo námestie 1/B, Nitra 949 01, ID.NO.: 45 275 742 and 3. Personality HR Consulting, s.r.o., with its registered office in Rybná 716/24, 110 00 Prague 1, Czech Republic, ID.No 021 55 982 (hereinafter together referred to as the “Personality Group” or “we”). In Section 2 there is more information about joint controllers´ contract. If you have any questions relating to personal data, you can contact us by email at: data@personalityhr.com

2. Basic Data from the Joint Controllers’ Contract.

The companies belonging to the PERSONALITY Group have jointly concluded the Joint Operators Agreement pursuant to Article 26 of GDPR, in which they have agreed on the rules for sharing the databases they create and use together. They have also agreed that the organisational and security rules for the databases are determined by Personality, s.r.o., with registered office at Svätoplukovo námestie 1/B, Nitra 949 01, ID No. 44 549 733 (hereinafter referred to as the “Company“), which also represents all joint controllers vis-à-vis the data subjects, is the contact point for the data subjects, cooperates with supervisory authorities and performs other rights and obligations of the controller pursuant to the GDPR. Notwithstanding the existence of a joint controllers’ agreement, you may exercise your rights with any company in the PERSONALITY group, but the quickest way to do so is to contact the Company at the contact address set out above.

3. Information for different categories of data subjects and purposes of processing

Below we provide information for each processing purpose and for each data subject. For more detailed information, please click on the link that applies to you.

Jobseekers – applicants for specific position

Data subjects: data subjects are for this case natural persons who have contacted the Personality Group electronically, by telephone, in person, by letter or in any other way in response to a specific published advertisement or offer of employment or a job position with a specific employer (hereinafter referred to as “applicants“)

What data are processed, on what legal basis, for what purpose and for how long:

Scope of personal data: If you responded to a specific offer of employment or a job position made in any form or respond to an advertisement or information about a vacancy for a specific employer or the PERSONALITY Group for a specific employer (hereinafter referred to as the “Offer“), we process your personal data included in the response form and data requested in the Offer, which is mainly name, surname, title, date of birth, address, email, telephone number, professional history, language skills, education, salary expectations, the data contained in the CV, public profiles on the candidate’s personal networks and other documents you have provided to us and the data contained in the records of interviews you have had with the PERSONALITY Group or the potential employer.

Purposes of processing:

1. Identification and recommendation of suitable candidates for a job position, verification that the candidates meet the requirements and needs of the specific employer and the process of recruiting an employee or worker for a job position (hereinafter referred to as the “recruitment process“) as well as the preparation of an employment contract or other similar private law contract or agreement between the candidate and the prospective employer.

2. Providing data of applicants to prospective employers for the purposes of the recruitment process and the selection of employees or workers for a vacant position, as well as the preparation of an employment contract or other similar private law contract or agreement between the applicant and the prospective employer.

3. Establishment, exercise or defence of legal claims of the PERSONALITY Group and employers related to the recruitment process of the job applicant or the services provided by the PERSONALITY Group to the employer.

4. Archiving, scientific research or statistical purposes.

Legal Basis

The legal basis for the processing of applicants’ personal data for the purposes of points 1 and 2 above is Article 6(1)(b) of the GDPR, i.e. the fact that the processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract (pre-contractual relationship between the applicant, PERSONALITY Group and the potential employer).

For the purpose of point 3, the legal basis is Article 6(1)(f) of the GDPR, i.e. the existing legitimate interest pursued by PERSONALITY Group and/or the employer with respect to establishment, exercise or defence of legal claims asserting, defending and proving the legal claims of the PERSONALITY Group and/or the employers related to the recruitment process or the services provided by the PERSONALITY Group to the employer.

For purpose 4, the legal basis in accordance with Article 6(1)(c) of the GDPR is the fulfilment of the legal obligation of the controller, arising in particular from Act 395/2002 Coll. on archives and registers and on the amendment of certain acts

Processing period

For the purposes under 1 and 2, personal data are processed until the recruitment process is fully concluded by the employer for a specific offer and the selection of a specific employee.

For the purposes of point 3, the data shall be processed until the expiry of the limitation period for private law claims, i.e. for a maximum period of 4 years from the end of the recruitment process and, if any legal claims process has been initiated, then until the final conclusion of all proceedings and the recovery of all related claims.

For the purposes of point 4, the processing period shall be determined by the retention period of the record, determined by law or by the registration regulations, usually 5 years.

Categories of processors or other recipients of data:

The PERSONALITY Group provides personal data of applicants and candidates to third parties, which are natural or legal persons or institutions established in the European Union that search for or recruit employees or workers for vacancies or similar positions (hereinafter referred to as the “Employer“). The Employer is an independent controller within the meaning of the GDPR.

In addition, the PERSONALITY Group provides personal data of applicants and candidates to data processors who provide the PERSONALITY Group with services and activities related to the processing of personal data, which are in particular:

External personnel and contractors: Natural or legal persons established in the EU who provide the PERSONALITY Group with work or services related to its core business where personal data is or may be provided or processed, in particular external consultants and coordinators of the recruitment process, lectors, other persons coordinating the recruitments process or processing its results for the PERSONALITY Group.

Accounting, tax and legal advisors: natural or legal persons established in the EU who provide accounting, tax or legal advice to the PERSONALITY Group.

IT Services and IT Platforms: Individuals and legal entities usually based in the EU who are the authors, operators or administrators of electronic platforms or social networks through which PERSONALITY communicates with employers, applicants or candidates, conducts online seminars, online interviews or transmits or stores information are recipients of applicants’ or candidates’ personal data. Main contractual data processors for PERSONALITY Group are:

The operator of the RECRU recruiting software, Cloud-IT s.r.o., based at Jozefská 7, 811 06 Bratislava, ID No.: 46731610
The operator of the mailing server for email communication Websupport, s.r.o., with registered office at Staré Grunty 12, 841 04 Bratislava, registered in the Commercial Register of the District Court Bratislava I, section Sro, insert no. 63270/B
Separate controllers whose conditions for the collection and processing of personal data are governed by their specific rules, such as in particular –
Google Ireland Limited Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as “Google”)
Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta (hereinafter referred to as “Hotjar”)

LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland (hereinafter referred to as “LinkedIn”)

Data Transfers

We do not transfer personal data outside of European Union member countries or to international organisation.

Consent Withdrawal

If we process data on the basis of consent, you have the right to withdraw this consent at any time. You may withdraw your consent by email to data@personalityhr.com or by sending a notice by post to the Company’s address. Withdrawal of consent does not affect the lawfulness of the processing of personal data prior to its withdrawal.

Objection

In respect of data that we process on the basis of legitimate interest, you have the right to object to processing at any time on grounds relating to your particular situation. You can exercise your rights by emailing data@personalityhr.com or by sending a notice by post to the Company’s address.

Your other rights

You have also other rights as a data subject, which are described in section 5 of this information.

Candidates for employment

Data Subjects: In this case the data subjects are those who have responded electronically, by telephone, in person, by letter or in any other way to the invitation or opportunity of the PERSONALITY group to be included in the database of candidates for employment, i.e. database of persons, who may be from time to time sent information about job offers and who may also be contacted as candidates for non-specified positions and whose data may be provided to non-specified employers looking for employees or workers and who have given their voluntary consent to such processing (hereinafter referred to as “candidates”). If you give us your consent to include you in our database of candidates, we will communicate with you and contact you when positions that may be suitable for you appear on our job offers. We may also collect and process more detailed information about you to help us recognise for which positions your skills might be suitable. That may be considered as profiling, which helps us to sort candidates by certain traits and characteristics to find a suitable job for them.

What data are processed, on what legal basis, for what purpose and for how long

Scope of personal data: The PERSONALITY Group processes candidates’ personal data to the extent that it is provided in the contact form or collected via personal or telephone interview or retrieved from the publicly available sources by the PERSONALITY Group after a candidate has expressed a consent with being included in the database of candidates, usually in extent of mainly first name, surname, title, date of birth, address, email, telephone number, professional history, language skills, education, salary expectations, the data contained in the CV, publicly available data (profiles on the candidate’s personal networks or public speeches) and other documents you have provided to us and the data contained in the records of interviews you have had with the PERSONALITY Group or the potential employer. Purposes of processing:

Maintaining a database of job candidates, including the ability to (i) share their personal data with unspecified clients of the PERSONALITY Group and to contact the candidate if they are a suitable for a job position (ii) contact the candidate with questions about their priorities, skills, education and adding information to the candidate’s profile
Establishment, exercise or defence of legal claims of the PERSONALITY Group and employers related to the recruitment process of the job applicant or the services provided by the PERSONALITY Group to the employer.
Archiving, scientific research or statistical purposes.

Legal basis

The legal basis for the processing of candidates’ personal data for purpose 1 is the consent of the candidate in accordance with Article 6(1)(a) of the GDPR.

The legal basis for purpose 2 is Article 6(1)(f) of the GDPR, i.e. the existing legitimate interest pursued by PERSONALITY Group and/or the employer with respect to establishment, exercise or defence of legal claims asserting, defending and proving the legal claims of the PERSONALITY Group and/or the employers related to the recruitment process or the services provided by the PERSONALITY Group to the employer.

For purpose 3, the legal basis in accordance with Article 6(1)(c) of the GDPR is the fulfilment of the legal obligation of the controller, arising in particular from Act 395/2002 Coll. on archives and registers and on the amendment of certain acts

Processing period

For the purpose personal data are processed for the period specified in the consent usually 3 years from the date of its granting or until the consent is withdrawn.

For the purpose under 2 the data shall be processed until the expiry of the limitation period for private law claims, i.e. for a maximum period of 4 years from the end of the recruitment process and, if any legal claims process has been initiated, then until the final conclusion of all proceedings and the recovery of all related claims.

For the purposes under point 3, the processing period shall be determined by the retention period of the record, determined by law or by the registration regulations, usually 5 years.

Categories of processors or other recipients of data:

Accounting, tax and legal advisors: natural or legal persons established in the EU who provide accounting, tax or legal advice to the PERSONALITY Group.

The operator of the RECRU recruiting software, Cloud-IT s.r.o., based at Jozefská 7, 811 06 Bratislava, ID No.: 46731610
The operator of the mailing server for email communication Websupport, s.r.o., with registered office at Staré Grunty 12, 841 04 Bratislava, registered in the Commercial Register of the District Court Bratislava I, section Sro, insert no. 63270/B
Separate controllers whose conditions for the collection and processing of personal data are governed by their specific rules, such as in particular –
Google Ireland Limited Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as “Google”)
Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta (hereinafter referred to as “Hotjar”)

LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland (hereinafter referred to as “LinkedIn”)

Data Transfers

We do not transfer personal data outside of European Union member countries or to internationalal organisation.

Consent Withdrawal

Objection

Your other rights

You have also other rights as a data subject, which are described in section 5 of this information.

Individuals interested in webinar, online training or e-publication

Data Subjects: In this case the data subjects are individuals who have contacted PERSONALITY Group electronically, by telephone, in person, by letter or otherwise in response to an offer of a webinar, training, seminar or other educational or informational event (an “Event“) or to request an e-publication.

What data we process, on what legal basis, for what purpose and for how long.

If you are responding to an offer of a paid or free webinar, seminar, training or other educational event organised by the PERSONALITY Group or request to receive an electronic publication, you will fill in the contact form with the following personal data: title, first name, last name, email, telephone number, profession, employer we will use this personal data for the following purposes:

1. Organisation of an Event: i.e. to allow you access in person or electronically to an event organised by the PERSONALITY group at the time and on the topic indicated in the form or event offer;

2. Consultation: if specified in the event offer, then also to provide you with a time- limited telephone or online consultation on the topic of the webinar

3. Delivery of requested content: With respect to e-publication we use data to deliver the requested publication to you.

4. Establishment, exercise or defence of legal claims of the PERSONALITY Group.

5. Tax and accounting purposes as determined by the applicable law in case of paid services/events, in extent of data required by such laws

6. Archiving, scientific research or statistical purposes.

By submitting the completed form and agreeing to the terms and conditions of the event, you enter into a contract for free or consultancy services paid (according to the terms and conditions of the event) with the company of the PERSONALITY Group organising the event, under which the company undertakes to give you access to the event, or to provide you with an personal consultation for a specified period of time after the event you have registered for, or to provide you with the information and educational publications produced by the PERSONALITY Group.

Legal basis

The legal basis for the processing of personal data of participants in an event for the purposes of points 1 to 3 above is Article 6(1)(b) of the GDPR, i.e. the fact that the processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract with the participant and company from Personality Group organising the event or providing a content.

For the purpose of point 4, the legal basis is Article 6(1)(f) of the GDPR, i.e. the existing legitimate interest pursued by PERSONALITY Group with respect to establishment, exercise or defence of legal claims asserting, defending and proving the legal claims of the PERSONALITY Group.

For purpose 5, the legal basis in accordance with Article 6(1)(c) of the GDPR is the fulfilment of the legal obligation of the controller, arising in particular from applicable tax and accounting laws.

For purpose 6, the legal basis in accordance with Article 6(1)(c) of the GDPR is the fulfilment of the legal obligation of the controller, arising in particular from Act 395/2002 Coll. on archives and registers and on the amendment of certain acts

Processing period

For the purposes 1-3 the data is processed for the time necessary for fulfilment of obligations and liabilities relating to the respective event, publication or consultation

For the purpose under 4 the data shall be processed until the expiry of the limitation period for private law claims, i.e. for a maximum period of 4 years from the end of event, or completion of other services and, if any legal claims process has been initiated, then until the final conclusion of all proceedings and the recovery of all related claims.

For the purposes under points 5 and 6, the processing period shall be determined by the retention period of the record, determined by law or by the registration regulations, usually 5 years from the end of calendar year in which they were collected.

Categories of processors or other recipients of data:

Accounting, tax and legal advisors: natural or legal persons established in the EU who provide accounting, tax or legal advice to the PERSONALITY Group.

The operator of the RECRU recruiting software, Cloud-IT s.r.o., based at Jozefská 7, 811 06 Bratislava, ID No.: 46731610
The operator of the mailing server for email communication Websupport, s.r.o., with registered office at Staré Grunty 12, 841 04 Bratislava, registered in the Commercial Register of the District Court Bratislava I, section Sro, insert no. 63270/B
Separate controllers whose conditions for the collection and processing of personal data are governed by their specific rules, such as in particular –
Google Ireland Limited Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as “Google”)
Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta (hereinafter referred to as “Hotjar”)

LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland (hereinafter referred to as “LinkedIn”)

Data Transfers

We do not transfer personal data outside of European Union member countries or to international organisation.

Consent Withdrawal

Objection

Your other rights

You have also other rights as a data subject, which are described in section 5 of this information.

Recipients of newsletters, recipient of marketing communication and notices

Data Subjects: Data subjects are persons that have consented to be included in the database for sending the newsletters, marketing communication and notices

What data we process, for what purpose on what legal basis and for how long:

Categories of personal data: provided by data subjects are first name, surname, email address, telephone number, or address, as the case may be.

Purpose is delivery of advertising and marketing notifications, offers and information and important notices of PERSONALITY Group

Legal basis for sending the marketing and advertising notification is data subject´s consent in accordance with Section 6 (1) a) of the GDPR.

Processing period is determined in the consent, usually 5 years unless withdrawn earlier.

Categories of processors or other recipients of data:

We operate marketing database with the cooperation of data processor: RECRU recruiting software, Cloud-IT s.r.o., based at Jozefská 7, 811 06 Bratislava, ID No.: 46731610

We may also process them with assistance of our external co-operators or provide them to our tax, accounting or legal advisors.

Consent withdrawal:

You have the right to withdraw the consent by email to data@personalityhr.com with the wording “I hereby withdraw the consent for marketing purposes.” Withdrawal of consent does not affect the lawfulness of the processing of personal data prior to its withdrawal. The consent may be withdrawn also on the link provided in the advertisement or marketing notice.

Objection

Your other rights

You have also other rights as a data subject, which are described in section 5 of this information.

Contractual partners of PERSONALITY Group, members of their statutory bodies or their contact persons

Data Subjects: Data subjects are individuals, that are the contractual partners of PERSONALITY Group or members of statutory bodies or contact persons of contractual partners of PERSONALITY Group.

What data we process, on what legal basis, for what purpose and for how long.

Purpose We process the personal data of the contractual partners – individuals as well as members of the statutory bodies of the contractual partners and their contact persons for the following purposes:

1. For the purposes of preparation, conclusion and performance of the contract with the contractual partner;

2. For the performance of legal obligations (in particular under the Accountancy Act, the Income Tax Act and the Archives Act and other legislation)

3. Verifying the authorisation to act on behalf of the contractual partner and contacting the contractual partner with respect to individuals acting and communicating on behalf of the contractual partners (statutory officers, employees or contact persons under the contract) for the purposes of fulfilling contractual obligations under our contracts, contacting the contractual partners and registering the documents on which their data is stated in accordance with the law.

4. Establishment, exercise or defence of legal claims of the PERSONALITY Group (company from the group)

The legal basis for processing is for point:

Article 6(1)(b) of the GDPR, i.e. processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract with the contractual partner;

2. Article 6(1)(c) the legal obligation of the controller in cases where the law imposes an obligation to record or report the documents on which their personal data are contained, in particular the Income Tax Act and the Accountancy Act

3. Article 6(1)(f) of the GDPR the legitimate interest of the Personality Group in performing its contractual or legal obligations with respect to contractual partner or contacting the partner via its contact person with respect to personal data of contact partners

4. Article 6(1)(f) of the GDPR the legitimate interest of the Personality Group with respect to establishment, exercise or defence of legal claims.

Categories of data:

We process personal data in the scope of title, name, surname, function (position), telephone, email, or other contact data specified in the contract.

Processing period:

We process personal data for the duration of the contract in which it is included or for the performance of which it is used. After termination of the contract, we still process the personal data during the limitation period for claims (generally 4 years) in order to establish, exercise or defend legal claims or, if during such period proceedings have been commenced or are threatened, until such proceedings have been concluded and all claims have been fully resolved. Personal data on documents and papers subject to mandatory filing or archiving shall continue to be retained for the duration of the filing or archiving period.

Categories of data processors or other data recipients

We may process data with assistance of our external co-operators or provide them to our tax, accounting or legal advisors.

Objection

Your other rights

You have also other rights as a data subject, which are described in section 5 of this information.

Website visitor – information about cookies

Data Subjects: Individuals – owners and/or users of computers and other electronic devices used for access to the websites of the Personality Group

https://www.personalityhr.com/

https://topheads.sk/

https://www.topheads.com/

https://techitpeople.com/

What data we process, for what purposes, on what legal basis and for how long

When you visit our website, small files – cookies – may be stored on your device. These serve either to ensure that the website functions correctly and optimally on your device (so-called essential cookies) or to enable the Personality Group to make statistical and analytical surveys about visitors to the website and their behaviour on the website (so-called optional cookies).

Legal Basis for essential basis is the legitimate interest of the Personality Group on proper functioning of the information website. For optional cookies it is the consent granted by the website visitor.

Categories of personal data, purposes in detail and data processors and recipients (other than Personality Group) and time of processing with respect to cookies are in this chart

Consent wording: By clicking on the link or button “I agree” (or similar wording) the user of the electronic devices issues a consent to the joint controllers, companies of PERSONALITY Group: 1. Personality, s.r.o. with its registered office at Svätoplukovo námestie 1/B, Nitra 949 01, ID. No. 44 549 733, 2. Personality Leasing Services, s.r.o., with its registered office at Svätoplukovo námestie 1/B, Nitra 949 01, ID.NO.: 45 275 742 and 3. Personality HR Consulting, s.r.o., with its registered office in Rybná 716/24, 110 00 Prague 1, Czech Republic, ID.No 021 55 982 (hereinafter together referred to as the “Personality Group” or “we” with storage of cookies on its devices, by means of which Personality Group and other recipients listed in the chart below obtain and process data for the purposes and for the period of time set out in the chart below. Consent can be withdrawn at any time, to withdraw consent contact us by email at data@personalityhr.com or adjust the settings on your device. Withdrawal of consent does not affect the lawfulness of the processing of personal data prior to its withdrawal.

Not granting the consent/withdrawal of consent

If you do not wish to grant the consent, click the button “set the cookies” (or similar wording) and you can adjust storage of cookies individually. If you have granted the consent and wish to withdraw if, you can contact us by email on data@personalityhr.com

Objection

Your other rights

You have also other rights as a data subject, which are described in section 5 of this information.

Cookies overview, name, purpose, processing periods, recipients

Cookie/name	Essential (E) or optional (O)	Data/purpose	Processing period	Recipients
_ga	O	To distinguish the users Details https://support.google.com/analytics/topic/2919631?hl=sk&ref_topic=1008008 How to reject cookies https://tools.google.com/dlpage/gaoptout	24 months	Google
_gid	O	To distinguish the users Details https://support.google.com/analytics/topic/2919631?hl=sk&ref_topic=1008008 How to reject cookies: https://tools.google.com/dlpage/gaoptout	24 hours	Google¹
_gat	O	It is used to speed up the response time of a web page. If Google Analytics is deployed via Google Tag Manager, this cookie will be named _dc_gtm_ <property-id>. For more information: https://support.google.com/analytics/topic/2919631?hl=sk&ref_topic=1008008 How to reject cookies: https://tools.google.com/dlpage/gaoptout	1 minute	Google¹
_gac_<property-id>	O	Contains user information related to the Google Adwords advertising campaign More information:https://support.google.com/analytics/topic/2919631?hl=sk&ref_topic=1008008 How to reject cookies: https://tools.google.com/dlpage/gaoptout	90 days	Google¹
PHPSESSID	E	Maintains the state of the user’s session within the website visit.	Session	Personality s.r.o.
_hjClosedSurveyInvites	O	A hotjar cookie that is set when a visitor interacts with a modal contextual window with an invitation to explore. It is used to ensure that the same invitation does not reappear if it has already been displayed. More information: https://www.hotjar.com/legal/policies/privacy/ How to reject cookies: https://www.hotjar.com/privacy/do-not-track/	12 months	Hotjar
_hjDonePolls	O	A Hotjar cookie that is set when a visitor completes a survey using the Feedback widget. It is used to ensure that the same survey does not reappear if it has already been completed. More information: https://www.hotjar.com/legal/policies/privacy/ How to reject cookies: https://www.hotjar.com/privacy/do-not-track/	12 months	Hotjar²
_hjMinimizedPolls	O	Hotjar cookie that is set when a visitor minimizes the Feedback widget. It is used to ensure that the widget remains minimized as the visitor navigates through the website. More information: https://www.hotjar.com/legal/policies/privacy/ How to reject cookies: https://www.hotjar.com/privacy/do-not-track/	12 months	Hotjar ²
_hjShownFeedbackMessage	O	A hotjar cookie that is set when a visitor minimizes or completes incoming feedback. This is done so that incoming feedback is loaded as little as possible if the visitor navigates to another page where the form is set to display. More information: https://www.hotjar.com/legal/policies/privacy/ How to reject cookies: https://www.hotjar.com/privacy/do-not-track/	12 months	Hotjar ²
_hjid	O	The Hotjar cookie, which is set when the visitor first arrives on the site using the Hotjar script. It is used to persist the Hotjar user ID, which is unique to that page, in the browser. This ensures that the visitor’s behavior is mapped to the same user ID on subsequent visits to the same page. More information: https://www.hotjar.com/legal/policies/privacy/ How to reject cookies: https://www.hotjar.com/privacy/do-not-track/	12 months	Hotjar²
_hjRecordingLastActivity	O	Records visitor behaviour while recording their movement around the site More information: https://www.hotjar.com/legal/policies/privacy/ How to reject cookies: https://www.hotjar.com/privacy/do-not-track/	session	Hotjar²
_hjUserAttributesHash	O	User attributes sent via the Hotjar Identification API are cached for the duration of the session to detect when an attribute has changed and needs to be updated. More information: https://www.hotjar.com/legal/policies/privacy/ How to reject cookies: https://www.hotjar.com/privacy/do-not-track/	session	Hotjar²
_hjCachedUserAttributes	O	This cookie stores user attributes that are sent via the Hotjar Identification API whenever the user is not in the sample. These attributes are only stored if the user interacts with the Hotjar feedback tool. More information: https://www.hotjar.com/legal/policies/privacy/ How to reject cookies: https://www.hotjar.com/privacy/do-not-track/	session	Hotjar²
_hjLocalStorageTest	O	This cookie is used to check whether the Hotjar tracking script can use local storage. If possible, this cookie is set to 1. The data stored in in_hjLocalStorageTest does not have an expiration time, but is deleted almost immediately after it is created. More information: https://www.hotjar.com/legal/policies/privacy/ How to reject cookies: https://www.hotjar.com/privacy/do-not-track/	>100 ms	Hotjar² Malta
_hjIncludedInSample	O	This cookie is set to inform Hotjar whether this visitor is included in the sample used to generate the funnel. This is a session cookie that is deleted when you leave the site. More information: https://www.hotjar.com/legal/policies/privacy/ How to reject cookies: https://www.hotjar.com/privacy/do-not-track/	session	Hotjar²
_hjAbsoluteSessionInProgress	O	This cookie is used to detect the user’s first page view session. More information: https://www.hotjar.com/legal/policies/privacy/ How to reject cookies: https://www.hotjar.com/privacy/do-not-track/	30 minutes	Hotjar²
UserMatchHistory	O	LinkedIn Advertisement ID Sync More information: https://www.linkedin.com/legal/privacy-policy How to reject cookies: https://www.linkedin.com/psettings/advertising	30 days	LinkedIn
li_sugr	O	Browser identifier More information: https://www.linkedin.com/legal/privacy-policy How to reject cookies: https://www.linkedin.com/psettings/advertising	3 months	LinkedIn³
BizographicsOptOut	O	Specifies the status of deactivation of third-party tracking by the user More information: https://www.linkedin.com/legal/privacy-policy How to reject cookies: https://www.linkedin.com/psettings/advertising	10 years	LinkedIn ³
_guid	O	Member indirect identifier for conversion tracking, redirection, analytics More information: https://www.linkedin.com/legal/privacy-policy How to reject cookies: https://www.linkedin.com/psettings/advertising	3 months	LinkedIn ³
li-oatml	O	Indirect identifier for conversion tracking, redirection, analytics More information: https://www.linkedin.com/legal/privacy-policy How to reject cookies: https://www.linkedin.com/psettings/advertising	1 month	LinkedIn ³
li_fat_id	O	Indirect identifier for conversion tracking, redirection, analytics More information: https://www.linkedin.com/legal/privacy-policy How to reject cookies: https://www.linkedin.com/psettings/advertising	1 month	LinkedIn³
U	O	Browser identifier More information: https://www.linkedin.com/legal/privacy-policy How to reject cookies: https://www.linkedin.com/psettings/advertising	3 months	LinkedIn³
bcookie	O	Browser cookie ID More information: https://www.linkedin.com/legal/privacy-policy How to reject cookies: https://www.linkedin.com/psettings/advertising	24 months	LinkedIn ³
bscookie	O	Secure browser cookie More information: https://www.linkedin.com/legal/privacy-policy How to reject cookies: https://www.linkedin.com/psettings/advertising	24 months	LinkedIn ³
lang	O	Sets the default local setting/language More information: https://www.linkedin.com/legal/privacy-policy How to reject cookies: https://www.linkedin.com/psettings/advertising	session	LinkedIn ³
lidc	O	Used for routing More information: https://www.linkedin.com/legal/privacy-policy How to reject cookies: https://www.linkedin.com/psettings/advertising	24 hours	LinkedIn ³
rc::c	E	Recognizes a human visitor from a robot	Session	Google¹
Facebook Pixel	O	identification within the Facebook advertising network, retargeting of advertising based on user action (remarketing)	3 months	Facebook

G. Other Data Subjects

If you do not belong into any of above categories or you are not sure, to which category you belong, but you assume that we process your personal data, please contact us by email on data@personalityhr.com

Objection

Your other rights

Right of access

You have the right to know which of your personal data we process, for what purposes and to whom we disclose it, as well as other information according to GDPR (right of access). If you would like this information or would like to obtain a copy of your personal data we process, please contact us at the address below. We may ask you to verify your identity and provide further information about your request before responding to your request. We will endeavour to respond within a reasonable period of time and in any event within the time limits set by law.

Right to request rectification and completion of your incomplete data

It is your responsibility to provide true, accurate and complete data that are up to date. You can also update your personal data by contacting us using the contact details below. You have the right to request that we correct your information if it is incorrect or to complete it if it is incomplete. Please remember to include your name, username (if it is an account) and postcode, or first name, last name and date of birth if it is data we process for the purposes of providing services, in your initial correspondence for such a case; this will help us to protect the details and preferences relating to your data from unauthorised access.

Right to restriction of processing

You have the right to restrict processing in cases determined by regulations, for example pending rectification or during an objection procedure, or in cases where data controller no longer needs the personal data but you need it to exercise your rights.

Right to erasure and right to be forgotten

You have the right to erasure in cases determined by the regulations, in particular in cases where the period or purpose for which we processed it has expired or the processing is unlawful, or you have successfully objected to the processing, unless this right is restricted by law.

Right to data transfer

If we process data by automated means on the basis of consent or contract, you have the right to data transfer (the right to obtain the data in a structured, commonly used, machine-readable format and the right to transfer it to another controller). If technically feasible, you can request that we transfer the data directly to the new controller.

Right to file a complaint

If you are dissatisfied with the way we have responded to the exercise of your rights or if you believe that we are processing your data in breach of the regulations, you have the right to File a complaint with the Office for Personal Data Protection of the Slovak Republic or with the competent authority of your usual place of residence or work.

Exercise of rights

You can exercise your rights at any time by emailing us at data@personalityhr.com , or by sending a notice by post to our address.

Provision of personal data electronically by persons under 16 years of age

If you are under the age of 16, please obtain your parent/legal guardian’s permission before providing information to us through our website. Users without this permission are not authorised to provide us with personal data and if they do, we will stop processing their personal data as soon as we become aware of it.