Privacy Policy

1. Controller Identity

TNT agency s.r.o.
Na Spravedlnosti 1533, Zelené Předměstí, 530 02 Pardubice, Czech Republic
Email: jobbohemiacz@gmail.com
Phone: +420 776 858 284

TNT agency s.r.o. is the controller of personal data processed in connection with its employment mediation services and website tntgency.org, in accordance with Regulation (EU) 2016/679 ("GDPR") and Act No. 110/2019 Coll. on personal data processing (zákon č. 110/2019 Sb., o zpracování osobních údajů).

2. Categories of Data Subjects and Personal Data Processed

2.1 Website Visitors

• Technical data: IP address (anonymised), browser type, device type, pages visited, time on site, referral URL.
• Communication data: name, email address, phone number, and message content submitted via the contact form.

2.2 Job Seekers / Candidates

• Identification data: name, date of birth, nationality, address, contact details.
• Professional data: CV, employment history, education, skills, certifications, professional references.
• Communication records: emails, messages, interview notes, recruiter assessments.
• Special category data: only where strictly necessary for a specific role and with explicit consent (e.g., health-related requirements for safety-critical positions).

2.3 Clients (Employers)

• Contact persons' names, email addresses, telephone numbers, job titles.
• Contractual and invoicing data.
• Correspondence and meeting records relating to recruitment mandates.

3. Purposes and Legal Bases for Processing

Purpose	Legal Basis (GDPR)
Providing employment mediation services (matching candidates with vacancies)	Article 6(1)(b) — performance of a contract / pre-contractual steps
Responding to enquiries submitted via the contact form	Article 6(1)(f) — legitimate interests (responding to prospective clients and candidates)
Compliance with legal obligations (labour law, tax law, AML)	Article 6(1)(c) — legal obligation
Website analytics (Google Analytics, activated only on consent)	Article 6(1)(a) — consent
Processing special-category data (e.g., health data for specific roles)	Article 9(2)(a) — explicit consent
Maintaining a candidate database for future vacancies	Article 6(1)(a) — consent (separately obtained)
Invoicing and accounting	Article 6(1)(c) — legal obligation (Act No. 563/1991 Coll.)

4. Recipients and Transfers

We share personal data only where necessary:

• Client companies — candidate profiles are shared with prospective employers only with the candidate's knowledge and for the agreed vacancy.
• Formspree, Inc. — contact form submissions are processed by Formspree as a data processor. Formspree Privacy Policy.
• Google LLC — website analytics (only if consent is given). Google Privacy Policy. Data may be transferred to the United States under EU Standard Contractual Clauses.
• Accountants and legal advisers — where required for compliance and professional obligations, under appropriate confidentiality obligations.

We do not sell, rent, or otherwise commercially exploit personal data. We do not transfer data to third countries outside the EEA without appropriate safeguards (Standard Contractual Clauses or adequacy decision).

5. Retention Periods

Data Category	Retention Period
Contact form enquiries (not resulting in engagement)	12 months from last contact
Active candidate profiles (with consent to retain)	Until withdrawal of consent, max. 3 years
Placed candidate records	5 years after end of placement (warranty and tax obligations)
Client contractual data and invoices	10 years (accounting / tax law — zákon č. 563/1991 Sb.)
Analytics data (Google Analytics)	Up to 14 months (Google default setting)

6. Your Rights

Under the GDPR, you have the following rights:

• Access — request a copy of the personal data we hold about you (Article 15).
• Rectification — request correction of inaccurate data (Article 16).
• Erasure — request deletion of your data where it is no longer necessary or consent has been withdrawn (Article 17).
• Restriction — request that we limit processing in certain circumstances (Article 18).
• Portability — receive your data in a structured, commonly used, machine-readable format (Article 20).
• Objection — object to processing based on legitimate interests or for direct marketing (Article 21).
• Withdrawal of consent — withdraw any consent given at any time, without affecting the lawfulness of prior processing (Article 7(3)).

To exercise your rights, contact us at jobbohemiacz@gmail.com. We will respond within 30 days. Where requests are complex or numerous, we may extend this period by a further 60 days with notification.

7. Right to Lodge a Complaint

You have the right to lodge a complaint with the supervisory authority. In the Czech Republic, the competent authority is:

Úřad pro ochranu osobních údajů (ÚOOÚ)
Pplk. Sochora 27, 170 00 Praha 7
Web: www.uoou.cz

8. Automated Decision-Making

We do not make decisions based solely on automated processing (including profiling) that produce legal or similarly significant effects on individuals. Candidate assessments always involve human judgment by our recruiters.

9. Cookies

We use cookies for analytics and functionality. For full details, see our Cookie Policy.

10. Security

We implement appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These include access controls, encryption in transit (TLS), and regular security reviews. In the event of a data breach, we will notify the supervisory authority and affected individuals in accordance with GDPR Articles 33–34.

11. Changes to This Policy

We may update this Privacy Policy as our services or legal requirements evolve. The "Last updated" date at the top reflects the most recent revision. Material changes will be communicated via the Site or directly to affected individuals where required.

12. Contact

Privacy enquiries and rights requests: jobbohemiacz@gmail.com
TNT agency s.r.o., Na Spravedlnosti 1533, Zelené Předměstí, 530 02 Pardubice, Czech Republic