A. Data Controller

The functions of data controller are performed by ROWAN LEGAL, law firm, s.r.o., IČO: 28468414, registered at Na Pankráci 1683/127, Nusle, 140 00 Prague 4, enrolled in the trade register kept by the Prague Metropolitan Court under Ref. No. C 143781.

B. The Purposes and Legal Bases for Data Processing

We process personal data to address and evaluate job applicants and for recruitment purposes, based on our legitimate interest in expanding our organizational structures.

C. Data Processed and Retention Period

For the above purposes, we process your data on personal identification, contact information, qualifications (education, skills, work experience) and other data that is contained in your CV or required for a specific job position.

The data is retained for the duration of the recruitment process.

D. Who Processes Your Data and Where Is It Transferred

All the mentioned data is processed by us – the data controller. This means that we determine top-down the purposes for which your data is collected, the means of data processing, and ensure that it is processed appropriately.

Generally, we do not involve other data processors and do not transfer your personal data to other controllers for the purposes mentioned above. The only exception to this rule is the company ROWAN TAX s.r.o., IČO: 25671341, registered at Na Pankráci 1683/127, Nusle, 140 00 Prague 4, and the providers of job portals that we use as processors in the recruitment process.

E. Your Rights in the Processing of Personal Data

Just as we have our specific rights and obligations in the processing of your personal data, you have yours. These rights include:

E.1 Right to Access

In simple terms, you have the right to know what data of yours is processed, for what purposes, for how long, where we collect your data, to whom we transfer it, who processes it apart from us, and what other rights you have relating to the processing of your personal data. You will have seen all of this in the “Information on the Processing of Personal Data” provided. Still, if you are not sure which of your personal data we process, you may request us to confirm whether data concerning you is processed by us, and if so, you have the right to access this data. As a part of your right to access, you may request a copy of the processed data from us. The first copy is free of charge, while further copies are provided at a fee.

E.2 Right to Rectification

If you find out that your processed data is inaccurate or incomplete, you have the right to have this data rectified or completed without undue delay.

E.3 Right to Erasure

In some cases you have the right to request the erasure of your data. We will delete your personal data without undue delay if some of the following conditions are met:

Your personal data is no longer needed for the purposes that it was processed,you exercise your right to object to the processing (see the below “Right to Object to the Processing of Data” section) of your personal data that is processed on the basis of our legitimate interests, and we ascertain that we no longer have such legitimate interests that would justify the processing, or it is proved that our processing of personal data is no longer pursuant to generally applicable regulations.However, this right cannot be exercised if the processing of your personal data is still needed:

to fulfil our legal obligations,for the purposes of statistics, archiving, scientific or historical research, orfor the establishment, exercise or defense of our legal claims.

E.4 Right to Restriction of Processing

In some cases, apart from the right to erasure, you may also exercise the right to restrict the processing of your personal data. This right allows you to request in some cases that your personal data be marked so that it is not subject to further processing operations, though not permanently (as in the case of the right to erasure), but only for a limited period. We must restrict processing of personal data in the following cases:

you contest the accuracy of the personal data and it must be agreed which data is accurate,we process your personal data without a sufficient legal basis (e.g. beyond what we should process), but you prefer to limit the processing of this data rather than erasing it (e.g. you expect that you will need to provide this data to us again in the future),we do not need your data for the above purposes, but you need it for the establishment, exercise or defense of your legal claims, or you object to the processing of your personal data. The right to object is described in more detail below in the “Right to Object to Processing” section. We are obliged to limit the processing of your personal data until we establish whether your objection is legitimate.

E.5 Right to Object to Processing of Personal Data

You have the right to object to the processing of your personal data based on our legitimate interests. Since these activities do not concern marketing, we will stop processing your personal data, unless there are compelling legitimate grounds on our part to continue the processing.

E.6 Right to Lodge a Complaint

Exercising your rights through the procedures described above does not affect your right to lodge a complaint with the Office for Personal Data Protection following the procedure outlined in this section. You may exercise this right particularly if you believe that your personal data is processed unlawfully or in violation of the generally applicable legal regulations.

F. How to Exercise Individual Rights?

In all matters related to the processing of your personal data, be it the exercise of your rights, the lodging of a complaint, questions or anything else, you can contact us using the following details:

E-mail: osobniudaje@rowan.legalDelivery

Address: ROWAN LEGAL, law firm s.r.o., Na Pankráci 1683/127, Nusle, 140 00 Prague 4

Current contact information is available on our website: www.rowan.legal

We will process your request without undue delay, in any event within one month. In exceptional cases, particularly if the request is complex, we may extend this period to two months. You will of course be informed should there be any delay, and an explanation will be provided.

You can lodge a complaint against the processing of personal data conducted by us at the Office for Personal Data Protection located at Pplk. Sochora 27, 170 00 Prague 7.