TERMS AND CONDITIONS

effective and valid from 18 February 2026

1. INTRODUCTORY PROVISIONS

The company Good tribe s.r.o., IČO: 22588922, with its registered office at Příčná 4, 110 00 Prague, registered in the Commercial Register C 418359 maintained by the Municipal Court in Prague ("TRIBEE") offers an online platform available at www.tribee.cz, which is intended for presenting employers to the public and created for the purpose of promoting and increasing visibility among potential candidates.

These terms and conditions ("Terms and Conditions") issued by TRIBEE regulate, in accordance with the provisions of § 1751 of Act No. 89/2012 Coll., the Civil Code, as amended ("OZ"), the mutual rights and obligations of the parties arising on the basis of a contract ("Contract") concluded between TRIBEE and the client ("Client"). The Contract is concluded on the basis of an offer addressed by TRIBEE to the Client and accepted by the Client, which constitutes a proposal to enter into a contract with TRIBEE, and upon written acceptance by the Client, in the case of supplementary services pursuant to Art. 9.1 of these Terms and Conditions, also by creating a personal profile through the web interface at www.tribee.cz.

If the Contract contains provisions that differ from the Terms and Conditions, the provisions of the Contract shall prevail over the Terms and Conditions to the extent of such difference.

By concluding the Contract, the Client undertook to fully and without reservations accept the Terms and Conditions and acceded to them without objections.

2. DESCRIPTION OF THE SERVICE

The subject of performance is the preparation and publication of the Client's profile on the TRIBEE website ("Profile"), for the purpose of attracting job seekers, spreading awareness of the Client, and strengthening the Client's employer brand ("Service"). The Client's Profile is prepared to enable job seekers to familiarise themselves with the corporate culture and working environment of the Client. For the purpose of preparing the Client's profile, TRIBEE will create audiovisual materials with the Client's employees and collaborators at the Client's workplace, which subsequently serve as source material for creating the Client's profile on the TRIBEE website.

TRIBEE undertakes that during the term of the contract pursuant to Art. 4 of the Terms and Conditions, the Client's profile will achieve a certain number of views, specifically defined in the Contract. In the event that the Client's profile does not achieve the guaranteed number of views during the term of performance, TRIBEE undertakes to provide the service free of charge until the Client's profile achieves the guaranteed number of views, but for no longer than six months from the end of the prepaid period.

Part of the Service is a client administration panel ("Client Administration"), through which the Client can manage their Profile, post job offers and receive responses from job seekers. TRIBEE shall ensure compliance with all regulations in the area of personal data protection within the Client Administration.

TRIBEE provides the option of connecting the Client Administration with the Client's own applicant tracking system ("Client's ATS System"). In such a case, TRIBEE provides a technical solution for the transfer of applicant data to the Client's ATS System. When providing this service, TRIBEE is only responsible for the functionality of the technical mediation solution.

3. CONCLUSION OF THE CONTRACT

TRIBEE shall send the Client an offer containing detailed information regarding the scope and price of the Service and other Supplementary Services.

The offer is sent to the Client by e-mail and confirmed by the Client by sending a signed copy in electronic form. The Terms and Conditions form an integral part of the Contract and are available to the Client without restriction at https://www.tribee.cz/cs/b2b/vop. The parties exclude the application of § 1740(3) OZ. Any response by the Client to the offer that contains any, even immaterial, changes to the offer or the Terms and Conditions shall be considered a rejection of the offer.

4. DURATION OF THE CONTRACT

The Contract is concluded for a period of 12 months.

The term of performance of the Service begins from the date of launching the Client's Profile on the TRIBEE website, or upon the expiry of 3 months from the conclusion of the Contract, whichever occurs earlier ("Commencement of the Term of Performance"). The extension of the Contract pursuant to the following paragraph is calculated from the expiry of 12 months from the Commencement of the Term of Performance.

The Contract shall be extended for a further 12 months unless either party delivers to the other party a written notice 2 months before the termination of the Contract stating that it does not wish to continue the Contract. In the event that such notice is delivered, the Contract shall terminate on the respective date.

5. TERMINATION OF THE CONTRACT

The parties are entitled to terminate the Contract for a material breach of the Contract by the other party with immediate effect. The Client is entitled to terminate the Contract only after a prior written notice to TRIBEE drawing attention to the breach of obligation and with a request for remedy within 30 days from the delivery of the written notice.

The following shall be considered a material breach by the Client in particular:

  • delay in payment of the price for the provision of Services by more than 15 days,

  • failure to comply with the obligations relating to informing and obtaining consent of photographed and recorded persons pursuant to Art. 8 of the Terms and Conditions,

  • infringement of intellectual property rights pursuant to Art. 10 of the Terms and Conditions,

  • repeated breach of the duty of cooperation in the provision of Services.

The following shall be considered a material breach by TRIBEE:

  • unavailability of the TRIBEE website for more than a continuous 72 hours.

Termination of the Contract by TRIBEE shall result in the termination of the provision of Services and the acceleration of all TRIBEE's receivables from the Client. Upon termination of the Contract by the Client for a material breach of the Contract, TRIBEE shall terminate the provision of Services and refund to the Client the portion of the price corresponding to those services that TRIBEE has not commenced to provide or prepare materials for performance, such as production of profile creation and the like.

6. PRICE AND PAYMENT CONDITIONS

The price for the services provided by TRIBEE to the Client for a period of 12 months is stated in the Contract. VAT shall be added to each amount invoiced to the Client in accordance with applicable legal regulations.

The price of services for a period of 12 months is payable in a single payment within 10 days from the conclusion of the Contract on the basis of an invoice. TRIBEE shall send the Client an invoice to the contact e-mail address specified in the Contract after the conclusion of the Contract. TRIBEE shall not commence the provision of services under the Contract before the price for the provided services has been paid.

Upon extension of the Contract pursuant to Art. 4 of the Terms and Conditions, the Contract is renewed at the same rate, except in cases where TRIBEE notifies the Client in writing (whereby an e-mail with a simple electronic signature shall suffice) of a change in rates in accordance with the first paragraph of Article 13 of the Terms and Conditions. In such a case, the Client has the right to terminate the Contract under the conditions set out in the first paragraph of Article 13 of the Terms and Conditions. TRIBEE shall issue an invoice to the Client for a period of 12 months no later than on the date of the Contract extension with a payment term of 10 days.

In the event of a delay in the payment of an invoice, the Client is obliged to pay TRIBEE the statutory default interest. If the Client is in delay with the payment of an invoice by more than 15 days, TRIBEE has the right to suspend the services provided to the Client or part thereof. Suspension of services shall result in the acceleration of all TRIBEE's receivables from the Client.

The Client may also use the TRIBEE virtual payment instrument ("Credit") to pay for the Services and Supplementary Services pursuant to Art. 9, which the Client has the option to prepay with TRIBEE. Credits may be used by the Client within one year of their purchase; Credits may only be used for payment of Services and Supplementary Services; reverse exchange of Credits for money is not possible.

TRIBEE may, at its own discretion, based on the cooperation with the Client, provide the Client with special non-claimable (bonus) Credits in an amount it deems appropriate. Purchased and bonus Credits have the same validity and the Client may use them to purchase Services and Supplementary Services at the Client's discretion.

7. PROVISION OF SERVICES AND DEFECTIVE PERFORMANCE

TRIBEE shall ensure the operation of and stable and quality access to the TRIBEE website. With regard to this commitment, TRIBEE shall make every effort to ensure access to its services and their 99% availability.

In the event of a malfunction or other problem that prevents the proper functioning of the website www.tribee.cz, TRIBEE undertakes to take, as soon as possible, all necessary steps to remedy the situation and to duly inform the Client about the situation.

TRIBEE may restrict or suspend access to the TRIBEE website for the purpose of performing maintenance or updating its Services.

TRIBEE shall inform the Client in advance in a timely manner (whereby an e-mail with a simple electronic signature shall suffice) of planned maintenance and update activities that result in the unavailability or limited functionality of the TRIBEE website.

However, the Client expressly acknowledges that these obligations do not apply to malfunctions or interruptions of Services caused by third parties, in particular telecommunications operators or the company providing web hosting for the TRIBEE website, or as a result of intentional unlawful conduct against TRIBEE or force majeure.

If the provided services have a defect, the Client must notify TRIBEE of the defect without undue delay and request its remedy, after the Client discovered or should have discovered the defect with due diligence, but no later than within 3 months from the commencement of the provision of services (i.e. the first publication of the Client's Profile), or upon acceptance of the work.

The Client shall further not be entitled to rights from defective performance if:

  • the Client knew before the commencement of the provision of Services or acceptance of the work that the provided Services or the work had a defect;

  • the Client did not provide TRIBEE with the necessary cooperation;

  • the defect consists in the Client's subjective opinion regarding the quality of the provision of Services or the execution of the work, as the Client was acquainted with the creation, aesthetic elements and technical execution of the work and the provision of Services before the conclusion of the Contract.

If TRIBEE acknowledges properly and timely claimed defects of the provided Services or the work, it shall remedy the defect within 30 days from the delivery of the claim. If it is not possible for technical or other reasons to remedy the defect within this period, TRIBEE shall agree with the Client on another realistic deadline for the remedy of the defect.

The handling of Client complaints is ensured by TRIBEE electronically via the e-mail address specified in the Contract or on the TRIBEE website.

The Client's right to compensation for damage caused by defective provision of Services under the Contract is limited to the amount of the price (excluding VAT) paid by the Client for the provided Services for the current contractual year.

8. CLIENT'S OBLIGATIONS

The Client undertakes to cooperate in the provision of services by TRIBEE, in particular to fully cooperate and follow instructions during the provision of Services.

The Client undertakes to ensure that there is no infringement of the right to likeness or any other right to protection of privacy of photographed or recorded persons in connection with the provision of Services. The Client undertakes to (i) inform these persons about the photography or recording, its purpose and the manner of publication and (ii) obtain written consent for the use of rights to the likeness and audio and visual recordings signed by all photographed or recorded persons for the purpose of reproducing and using their likeness and audio and visual recordings on all media in connection with the provision of Services under the Contract.

The Client undertakes to indemnify and hold TRIBEE harmless from any breaches, lawsuits, claims or complaints by a third party, or seizure of property by a third party, that would seek to hold TRIBEE liable directly or indirectly based on the right to likeness and privacy of any of the photographed or recorded persons, or that could adversely affect the provision of Services under the Contract.

The Client further undertakes to:

  • communicate and provide only information, files and content that are truthful, genuine and honest,

  • refrain from publishing personal data or data (texts, photos and videos) of third parties without their consent or other legal basis, whether through the Client's Profile or Client Administration,

  • refrain from uploading and disseminating unlawful statements or content, in particular content that violates legal regulations or is defamatory, offensive, obscene, abusive, discriminatory, violent, xenophobic or that incites racial hatred or any other content that is contrary to legal regulations or good morals.

9. SUPPLEMENTARY SERVICES

In addition to the Service defined in Art. 2. of the Terms and Conditions, the parties may agree in the Contract on the provision of additional services offered by TRIBEE ("Supplementary Services"). Unless otherwise agreed, all Supplementary Services shall be governed by these Terms and Conditions and the Contract.

9.1. JOB BOARD

TRIBEE offers through its online platform the option of advertising job offers of Clients ("job board"), in the form of text, image or audiovisual advertisements. Advertisements are displayed on the TRIBEE website during the term of the provision of the job board service.

The job board service is governed by separate payment conditions and the price for the provision of the job board service is not included in the price of the Service pursuant to Art. 6 of the Terms and Conditions. The price for the provision of the job board services is payable before the commencement of the provision of the service; TRIBEE shall not commence the provision of the job board before the price for this service has been paid. The provision of the job board service is governed by the price list available at https://www.tribee.cz.

The Client undertakes to state only truthful and non-misleading information about the job offer, the nature of the offered cooperation and truthful contact information in the advertisement published through the TRIBEE website.

TRIBEE reserves the right to review the content of published advertisements for compliance of the advertisements with the Terms and Conditions, the Contract, legal regulations, good morals and the rules of decent conduct. In the event that an advertisement contains inappropriate content, TRIBEE is entitled to remove the advertisement even without prior notice to the Client. If the advertisement is removed due to inappropriate content, the Client shall not be entitled to a refund of the price paid for the job board service.

The Client is responsible for ensuring that the advertisement does not infringe the rights of third parties, in particular copyright, personality or other rights. All claims of third parties arising from the infringement of copyright, personality or other rights shall be borne by the Client. In the event that TRIBEE learns of such an infringement, it is entitled to remove the advertisement without prior notice to the Client. If the advertisement is removed due to the infringement of third-party rights, the Client shall not be entitled to a refund of the price paid for the job board service.

9.2. MARKETING SERVICES

In addition to the Service provided within the online platform www.tribee.cz, TRIBEE provides marketing services ("marketing services") consisting in particular of:

  • preliminary analysis of the Client's market position,

  • consulting,

  • preparation and subsequent management of online and offline marketing strategy,

  • setup and subsequent management of advertising campaigns on online platforms,

  • creation of text, graphic and audiovisual materials for advertising campaigns,

  • subsequent data analysis and campaign performance services, or

  • other services agreed upon and further defined within the Contract.

The specific scope of marketing services shall be agreed within the Contract concluded between TRIBEE and the Client. Unless the provision of marketing services is expressly agreed in the Contract, marketing services shall not be the subject of performance provided by TRIBEE to the Client. The provision of the Service is not a prerequisite for the provision of marketing services to the Client.

The price of marketing services shall be stated in the Contract and may be determined:

  • as an hourly rate set out in the Contract; such provision shall also include an indicative estimate of the number of hours required for the provision of the agreed scope of marketing services; in the case of an hourly rate, the price for marketing services is payable on the basis of an invoice issued by TRIBEE to the Client always retrospectively for the preceding month,

  • as a fixed price set for a specific scope of marketing services; in the case of a fixed price, the price is payable on the basis of an invoice issued by TRIBEE to the Client always in advance for the following month.

TRIBEE uses third-party advertising systems for the purposes of achieving the agreed results of marketing services. The price of marketing services does not include the costs of third-party advertising systems (credits for social media advertising systems, costs of offline advertising and others). TRIBEE shall not be liable for outages and changes in third-party systems used for the purposes of performing marketing services.

The Client shall provide written approval of the content and visual aspects of the campaign before the launch of a specific campaign within the provision of marketing services.

10. REACH OF SERVICES

Within the provision of the Service, TRIBEE guarantees the contractually agreed reach of the provided Supplementary Services to the target group, in cases where this reach can be objectively monitored.

In the case of supplementary services where their nature precludes this (offline advertising, advertising spaces, billboards and the like), TRIBEE does not guarantee the reach. By concluding the Contract, TRIBEE does not assume liability, nor is the Client guaranteed to achieve any number of interactions on their profile, through the job board or any other advertising product.

11. INTELLECTUAL PROPERTY

All elements of intellectual property, in particular the TRIBEE website or any part thereof, trademarks, logos, systems, software, databases and content of all kinds (texts, images, music, videos, visual elements, etc.), which are related to the TRIBEE website, as well as any other elements relating to the provided Services, are the exclusive property of TRIBEE or its licensors.

The Client's use of the provided Services does not result in the transfer or granting of any licence to intellectual property rights to the Client, unless otherwise stated in the Contract, and the Client expressly acknowledges this fact. In connection with the performance of the Contract, the Client receives works created by TRIBEE and in this form they may be used by the Client without modification for the duration of the Contract, and solely for the purpose arising from the Contract.

The Client grants TRIBEE a non-exclusive, irrevocable, worldwide and royalty-free licence to use all information in any form (text, documents, photos, design, graphics, comments, brands, trade names, job offers, etc.) provided by the Client to TRIBEE for the purpose of creating the Client's Profile and its promotion by all means. TRIBEE has the right to translate all or part of the Client's information into Czech or any foreign language, the right to modify, adapt in any format and compile. This licence is granted for the duration of the provision of Services by TRIBEE to the Client. The Client represents that it is the holder of all intellectual property rights and is entitled to grant this licence to TRIBEE. In the event of a breach of this representation, the Client is obliged to remedy this situation at its own expense so that the licence is validly granted, and is liable for all damages that arise to TRIBEE as a result of the breach of this representation.

TRIBEE grants the Client a non-exclusive, worldwide and royalty-free licence to use photographs and video recordings created by TRIBEE within the provision of Services ("TRIBEE Content"), in their unaltered form, without the right to grant sublicences, for any purpose, for the duration of the Contract. The Client is not entitled to modify, alter or interfere with the TRIBEE Content in any way.

Upon termination of the Contract, the licence to TRIBEE Content pursuant to the preceding paragraph shall expire. The parties may individually agree on an extension of the licence to use TRIBEE Content even after termination of the Contract, under terms and for a fee determined by agreement of the parties.

12. CONFIDENTIALITY OBLIGATION

The Client undertakes to keep confidential all information of a confidential nature about TRIBEE and its affiliated persons that it learns in the course of mutual cooperation, including for a period of 5 years after the termination of the Contract, in particular information about the price, business activities, cases, clients, suppliers, plans and strategies ("Confidential Information"). The contracting parties undertake that they will not disclose Confidential Information obtained under or in connection with the Contract to a third party, will protect it against misuse and disclosure, will not allow access to such information, and will not use it for their own needs or for the needs of another person or to the detriment of the other party, if such conduct would be contrary to the purpose of their provision under this Contract, with the exception set out in the following paragraph.

The Client may:

  • disclose any Confidential Information to any of its employees, collaborators, members of statutory bodies, representatives or advisors ("Representatives") who need to know the relevant Confidential Information for the purpose of fulfilling any obligations under the Contract, provided that the Client must ensure that each of its Representatives to whom Confidential Information is disclosed is aware of its confidential nature and agrees to comply with the confidentiality obligation as if they were a party to the Contract;

  • disclose any Confidential Information required by law to any court, governmental, regulatory or supervisory authority (including any stock exchange) or any other authority of the relevant jurisdiction to which it is to be disclosed.

The Client is obliged to pay a contractual penalty in the amount of CZK 10,000 for each proven individual breach of the obligations it has caused for the protection of Confidential Information, which is payable within 5 business days after delivery of the notice by TRIBEE to the Client.

13. PERSONAL DATA

In the provision of TRIBEE Services consisting of the Client Profile and Client Administration, TRIBEE as a processor processes personal data for the Client as a controller within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC ("GDPR").

Details regarding the processing operations, in particular the categories of personal data and the purposes of processing for which TRIBEE processes personal data for the Client, are set out in Appendix 1A in relation to the Client Profile and in Appendix 1B in relation to the Client Administration.

The Client ensures that:

  • it fulfils the obligations of the controller under the GDPR, including informing data subjects about the processing of personal data;

  • the processing does not include personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, genetic or biometric data for the purpose of uniquely identifying a natural person, data concerning health or concerning a natural person's sex life or sexual orientation, or data relating to criminal convictions and offences.

TRIBEE as a processor processes personal data only on the basis of documented instructions from the Client in writing (including electronic form), unless such processing is required by European Union or Member State law applicable to TRIBEE. In such a case, TRIBEE shall inform the Client of such legal requirement before the processing, unless the legal regulations prohibit this on grounds of important public interest. Throughout the entire period of processing of personal data, the Client may also issue further instructions for the processing of personal data. These instructions must always be documented in writing (including electronic form).

TRIBEE shall immediately inform the Client in the event that, in its opinion, the Client's instructions infringe the GDPR or the relevant provisions of European Union or Member State law on the protection of personal data.

TRIBEE processes personal data only for the specific purpose or purposes of processing as set out in Appendices 1A and 1B, unless it receives further instructions from the Client.

The processing of personal data by TRIBEE for the Client takes place only for the duration of the Contract.

For the purpose of ensuring the security of personal data, TRIBEE has implemented the technical and organisational measures set out in Appendix 2. These measures include the protection of personal data against a security breach that would lead to their accidental or unlawful destruction, loss, alteration, unauthorised disclosure of or access to them ("Personal Data Breach"). When assessing the appropriate level of security, the parties shall take into account the state of the art, the costs of implementation, the nature, scope, context and purposes of the processing and the risks to data subjects.

TRIBEE shall grant its employees and collaborators access to the processed personal data only to the extent strictly necessary for the provision of Services and the execution, administration and control of the Contract. TRIBEE shall ensure that persons authorised to process the received personal data have committed themselves to confidentiality or are under an appropriate statutory obligation of confidentiality.

TRIBEE shall promptly and appropriately handle the Client's enquiries relating to the processing of personal data.

TRIBEE shall provide the Client with all information necessary to demonstrate compliance with the obligations set out in these Terms and Conditions or arising directly from the GDPR.

TRIBEE shall, at the Client's request and expense, allow audits of the processing activities at reasonable intervals, but no more than once per calendar year. The Client shall inform TRIBEE of its intention to conduct an audit of processing at least 30 calendar days in advance, and the parties shall agree on the conduct of the audit and its parameters. The Client may decide whether to conduct the audit itself or entrust it to an independent auditor. The Client may conduct the audit on TRIBEE's premises in the event that the documentation and information provided by TRIBEE is insufficient to ascertain that the obligations set out in the GDPR have been fulfilled.

The parties shall, upon request, make available in accordance with legal regulations the information referred to in this article, including the results of any audits, to the competent supervisory authority.

The Client agrees to the engagement of further processors listed in TRIBEE's list of further processors. TRIBEE shall inform the Client in writing (including electronic form) of all intended changes to the said list by the addition or replacement of further processors at least 15 days in advance, thereby providing the Client with sufficient time to raise objections against such changes before the engagement of the further processor concerned. TRIBEE shall provide the Client with the information necessary for the Client to exercise its right to object. If the Client does not raise an objection within the said period, it shall be deemed to have consented to the change. If the Client raises an objection and the parties are unable to resolve the objection, the Client is entitled to terminate the Contract in accordance with the Terms and Conditions.

Where TRIBEE engages a further processor to carry out specific processing activities, it shall do so by means of a contract that imposes on the further processor essentially the same data protection obligations as those imposed on TRIBEE in accordance with these Terms and Conditions. TRIBEE shall ensure that the further processor complies with the obligations applicable to processors under these Terms and Conditions and the GDPR.

TRIBEE is entitled to transfer personal data outside the European Economic Area ("EEA"). The Client agrees that where TRIBEE engages a further processor to carry out specific processing activities and such activities involve the transfer of personal data outside the EEA, the processor and the further processor may ensure compliance with the provisions of Chapter V of the GDPR also by using standard contractual clauses adopted by the European Commission in accordance with Art. 46(2) GDPR.

TRIBEE shall immediately inform the Client of any request relating to personal data processed for the Client that it has received from a data subject. TRIBEE shall not respond to such a request itself unless authorised to do so by the Client. TRIBEE shall assist the Client in fulfilling its obligations to respond to requests from data subjects for the exercise of their rights, taking into account the nature of the processing. In fulfilling its obligations, TRIBEE shall act in accordance with the Client's instructions.

TRIBEE shall assist the Client in ensuring compliance with the following obligations, taking into account the nature of the data processing and the information available to TRIBEE:

  • the obligation to carry out an assessment of the impact of the intended processing operations on the protection of personal data ("DPIA"), where it is likely that a certain type of processing will result in a high risk to the rights and freedoms of natural persons;

  • the obligation to consult the competent supervisory authority or authorities prior to processing, where a DPIA indicates that the processing would result in a high risk in the event that the Client does not take measures to mitigate this risk;

  • the obligation to ensure that personal data are accurate and up to date, by TRIBEE promptly informing the Client if it becomes aware that the personal data it processes are inaccurate or outdated;

  • the obligations under Art. 32 GDPR concerning the security of processing.

In the event of a Personal Data Breach, TRIBEE shall cooperate with the Client and assist it in fulfilling its obligations under Articles 33 and 34 GDPR, taking into account the nature of the processing and the information available to TRIBEE.

In the event of a Personal Data Breach of personal data processed by TRIBEE for the Client, TRIBEE shall inform the Client without undue delay and, where possible, within 72 hours after becoming aware of the breach. Such notification shall contain at least:

  • a description of the nature of the Personal Data Breach (including, where possible, the categories and approximate number of affected data subjects and data records);

  • the details of the contact point where more information about the personal data breach can be obtained;

  • the likely consequences and the measures taken or proposed to be taken in connection with the Personal Data Breach, including measures to mitigate possible adverse effects.

If TRIBEE is unable to provide all such information at the same time, the notification shall contain the information available at the time, and further information shall be provided without undue delay as soon as it becomes available.

The Client's right to compensation for damage is limited to the amount of the price (excluding VAT) paid by the Client for the provided Services for the current contractual year.

TRIBEE is entitled to terminate the Contract to the extent that it relates to the processing of personal data under this article if, after having informed the Client that its instructions infringe applicable legal regulations, the Client insists on compliance with such instructions.

Upon termination of the Contract, TRIBEE shall, at the Client's choice, delete all personal data processed for the Client and confirm to the Client that it has done so, or return all personal data to the Client and delete existing copies, unless European Union or Member State law requires the retention of personal data. Until the personal data are deleted or returned, TRIBEE shall continue to ensure compliance with this article.

14. FINAL PROVISIONS

TRIBEE has the right to unilaterally amend these Terms and Conditions. If this occurs, TRIBEE is obliged to inform the Client of such amendment via the contact e-mail address specified in the Contract. The Client is entitled to reject the amendment of the Terms and Conditions by notification via the contact e-mail of TRIBEE no later than 15 days from the delivery of the information about the amendment; otherwise, the amendment shall be deemed accepted. In such a case, the Contract shall be terminated either on the date of effectiveness of the amendment of the Terms and Conditions, or upon the expiry of 15 days from the delivery of the notification of the rejection of the amendment to TRIBEE, whichever occurs later.

These Terms and Conditions shall apply to all contractual relationships between TRIBEE and the Client, unless the Contract itself provides otherwise. The parties exclude the application of the Client's terms and conditions or any other terms and conditions different from these Terms and Conditions.

The contracting parties conclude the Contract in connection with their business activities. The Client expressly declares that it is not in the position of a consumer within the meaning of § 419 OZ. These Terms and Conditions shall not apply to contractual relationships concluded between TRIBEE and a consumer.

Any rights or obligations of the parties shall also apply to their potential legal successors, assignees, subsidiaries, affiliated companies, jointly and severally with such parties and among themselves, in particular in the event of a change of control, transfer of a business enterprise or assets, merger, acquisition, contribution or transfer, this list not being exhaustive.

The Contract shall be governed by Czech law. The provisions of § 1765, 1766, 1899 and 2050 OZ shall not apply to the relations arising from the Contract.

All court disputes relating to the provision of services under the Contract shall be decided by the Municipal Court in Prague or the competent regional court in cases where legal regulations so require (e.g. in disputes concerning intellectual property rights).

APPENDIX 1A: DESCRIPTION OF PROCESSING IN THE CLIENT PROFILE SERVICE

1. Categories of data subjects whose personal data are processed

Employees and collaborators of the Client.

2. Categories of personal data processed

Photographs, audio recordings and video recordings, job position, name.

Special categories of data are not processed.

3. Nature of the processing

Preparation of photographs and video recordings of the Client's employees and collaborators and their publication on the Client's Profile.

4. Purpose for which personal data are processed on behalf of the controller

Provision of the Client Profile Service under the Contract.

5. Duration of the processing

For the duration of the Contract.

APPENDIX 1B: DESCRIPTION OF PROCESSING IN THE CLIENT ADMINISTRATION SERVICE

1. Categories of data subjects whose personal data are processed

Persons who respond to the Client's job offer placed in the TRIBEE interface ("applicant"), and persons authorised by the Client to access the Client Administration.

2. Categories of personal data processed

Identification and contact data of the applicant, data from the applicant's CV, applicant's responses.

Special categories of data are not processed.

3. Nature of the processing

Management of the Client's job offers, receiving responses from job seekers and management of applicant data within the Client Administration. In the case of connection to the Client's ATS System, also the mediation of the transfer of applicant data to the Client's ATS System.

4. Purpose for which personal data are processed on behalf of the controller

Provision of the Client Administration Service under the Contract.

5. Duration of the processing

For the duration of the selection procedure for a specific position and always for no longer than the duration of the Contract.

APPENDIX 2: TECHNICAL AND ORGANISATIONAL MEASURES TO ENSURE DATA SECURITY

  1. Physical security:

    • Access to premises where personal data are processed is restricted to authorised persons.

    • Electronic entry systems with authentication and access monitoring are used.

    • Servers and data storage are located in data centres of the cloud service provider with a high level of physical protection.

  2. Control and management of access to IT systems:

    • Access to the administrative interface of the platform is restricted to authorised users only and is governed by the following mechanisms:

      • Employees: identity verification for system access is carried out through enforced two-factor authentication (2FA), with the assignment of user roles enabling control of access to individual parts of the platform.

      • Clients: the option of logging in using the standard method for web applications – by e-mail or through external identity providers (Google, LinkedIn, etc.). The Client has access only to its own data and the data of applicants responding to job offers.

      • Applicants: the option of logging in using the standard method for web applications – by e-mail or through external identity providers (Google, LinkedIn, etc.). They manage only their own user account.

    • Access to the server infrastructure is possible only for DevOps engineers using SSH keys and whitelisted IP addresses.

  3. Measures for encryption and data protection:

    • All data transfers between clients and servers are encrypted using HTTPS (TLS 1.2+).

    • Unique identifiers (UUID) prevent the prediction of numerical sequences of identifiers and thus their unauthorised querying.

    • All data APIs are accessible only within the internal network of the server infrastructure. Data is protected by a mechanism that ensures user authentication and verifies whether the given user has access to the requested data.

    • The frontend application communicates with the backend through a dedicated API that limits the scope of querying to data required for the operation of the specific frontend application.

  4. Data protection and retention:

    • The database is accessible only to whitelisted IP addresses and ranges, protected by access credentials (user / password). The cloud provider operates the database in a High Availability mode and backs it up automatically.

    • Media content for the platform's needs is uploaded in the cloud provider's Object Storage, which ensures High Availability mode and backs it up automatically.

    • Other multimedia content is stored on a backed-up shared drive with access restricted to authorised persons only.

  5. Logging and monitoring:

    • The platform has a centralised monitoring, logging and alerting system detecting unusual activity.

    • Audit logs record changes made in the system (update, delete) by individual users.

  6. Response to security incidents:

    • Incident detection: Traffic monitoring and security alerts. Escalation of incidents to responsible persons.

    • Analysis and escalation: Rapid assessment of the scope and impact of the incident. Identification of affected components and subjects.

    • Response and remediation: Ensuring the analysis of logs and relevant data. Isolation of compromised elements and recovery of affected systems.

    • Incident notification: In the event of a personal data protection breach, the incident will be reported to the supervisory authority in accordance with the GDPR. All affected users will be informed of the potential impacts if necessary.

    • Improvement of measures: Evaluation of incident causes and implementation of preventive measures. Updating of internal security policies and processes.

APPENDIX 3: LIST OF FURTHER PROCESSORS

  1. Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

    • Data sharing and exchange with the Client (Google Drive / Google Workspace)
    • Web analytics (Google Analytics)

  2. DigitalOcean, LLC, 101 6th Ave, New York, NY 10013, USA

    • Cloud Provider (data centre: Frankfurt, Germany – region eu-fra1, within the EEA)
    • Object storage (multimedia content), Database (all data), Operation of the web platform (servers)

  3. Railsware Products Studio LLC (Mailtrap.io), 925 N La Brea Ave, Suite 400, office 560, West Hollywood, CA 90038, USA

    • Sending of marketing and transactional e-mails.

  4. Anthropic PBC, 548 Market St, PMB 90375, San Francisco, CA 94104, USA

    • AI-assisted processing of applicant CVs – summarisation, structuring of CV content and indicative evaluation of the degree of match between the applicant's profile and the job position requirements. Outputs serve exclusively as supporting material for human decision-making; no automated decision-making within the meaning of Art. 22 GDPR is carried out.

  5. PostHog Inc, 2261 Market Street #4008, San Francisco, CA 94114, USA

    • Web analytics, session recording.

  6. Vimeo, Inc., 555 West 18th Street, New York, NY 10011, USA

    • Hosting and streaming of audiovisual content of the Client's Profile (videos of the Client's employees and collaborators).