TRIBEE PERSONAL DATA PROTECTION POLICY

valid and effective from 1 April 2025

1. INTRODUCTION AND SCOPE

The company Good tribe s.r.o., IČO: 22588922, with its registered office at Příčná 4, 110 00 Prague, registered in the Commercial Register maintained by the Municipal Court in Prague under sp. zn. C 418359 (hereinafter referred to as "TRIBEE", "we", "us" or "our"), is the controller of your personal data that we process in connection with the use of our website www.tribee.cz and its subdomains (hereinafter referred to as the "Site").

The protection of your personal data is important to us. This personal data protection policy explains what data we collect, how we use it, how we protect it, and what your rights are.

This policy applies to:

  • users who browse the Site without creating an account (hereinafter referred to as "Visitors"),
  • persons who have created a user account (hereinafter referred to as "Registered Users"),
  • applicants responding to job offers (hereinafter referred to as "Applicants").

This policy does not apply to our customers (companies), for whom separate terms apply.

2. DATA CONTROLLER AND CONTACT INFORMATION

The controller of your personal data is the company Good tribe s.r.o. (TRIBEE). If you have questions regarding this policy or the processing of your personal data, you can contact us:

3. WHAT PERSONAL DATA WE PROCESS

3.1 Visitor Data

When you visit our Site, we may process:

  • IP address
  • Browser and device information
  • Time and date of visit
  • Pages you visited
  • Information obtained through cookies (more in our Cookie Policy)

3.2 Registered User Data

When you create a user account, we process, in addition to the data referred to in section 3.1, also:

  • First name and surname
  • E-mail address
  • Password (in encrypted form)
  • Any additional data you choose to provide in your profile, such as:
    • Profile photo
    • Phone number
    • City or region
    • Information about education and work experience
    • Skills and certifications
    • Language skills
    • Employment preferences

3.3 Applicant Data

When you respond to a job offer, we process, in addition to the data referred to in sections 3.1 and 3.2, also:

  • Your curriculum vitae
  • Cover letter
  • Other documents you provide (certificates, references, etc.)
  • Information from your social media profiles, if you grant us access to them (e.g. LinkedIn)
  • History of your job applications

3.4 Data from Social Networks and External Login Services

If you log in through external services or social media accounts, we may gain access to certain data from these accounts:

  • LinkedIn: name, e-mail address, profile photo, current job position, professional history
  • Google: name, e-mail address, profile photo
  • Microsoft: name, e-mail address, profile photo
  • Facebook: name, e-mail address, profile photo, age category, gender (if they are in your public profile)
  • Seznam: name, e-mail address

Magic Link login: When logging in using Magic Link, we process your e-mail address to send a one-time login link.

4. WHY WE PROCESS YOUR PERSONAL DATA AND ON WHAT LEGAL BASIS

4.1 Performance of a Contract

We process your personal data for the purposes of:

  • Creating and managing your user account
  • Enabling you to respond to job offers
  • Providing the functionality of following companies and job offers
  • Sending notifications related to your account and job applications

This processing is necessary for the performance of the contract between you and TRIBEE, which is established by accepting our Terms of Use.

4.2 Legitimate Interest

On the basis of our legitimate interest, we process your personal data for the purposes of:

  • Improving our Site and services
  • Ensuring the security of our Site
  • Prevention and detection of fraudulent conduct
  • Statistical and analytical purposes
  • Handling enquiries and complaints

4.3 Your Consent

On the basis of your consent, we may process your personal data for the purposes of:

  • Sending personalised job offers and recommendations
  • Displaying your profile to potential employers (the "Be Visible to Recruiters" feature)
  • Marketing communications about our services and news
  • Use of certain cookies (other than strictly necessary ones)

You may withdraw your consent at any time without any negative consequences.

4.4 Legal Obligations

We may process certain personal data in order to fulfil our legal obligations, particularly in the areas of accounting, taxation and consumer protection.

5. HOW LONG WE RETAIN YOUR PERSONAL DATA

5.1 Visitor Data

Data obtained through cookies is retained for the period specified in our Cookie Policy.

5.2 Registered User Data

Data associated with your user account is retained for as long as you have an active account. In the event of inactivity for a period longer than 5 years, we may contact you to ask whether you wish to keep your user account. If you do not respond or request its deletion, the account and the data associated with it will be deleted or anonymised.

5.3 Data for Marketing Purposes and Newsletter

Your contact details collected as part of subscribing to our newsletter are retained until you request their deletion via the unsubscribe link available in our communications.

In the event of inactivity without your consent for a period longer than 3 years, we reserve the right to send you a communication asking whether you wish to continue receiving our communications. If you do not respond, we reserve the right to delete your personal data.

5.4 Applicant Data

Data provided as part of responding to a job offer is retained for the duration of the recruitment process. If you grant your consent, your data may be retained in the employer's database in case a similar position opens, for a period of up to 5 years.

5.5 Other Cases of Retention

Regardless of the above time limits, we may retain certain personal data for a longer period if required by law or if it is necessary for the protection of our legal claims.

6. SHARING YOUR PERSONAL DATA

6.1 Sharing with Employers

If you respond to a job offer, your data (curriculum vitae, cover letter and other documents provided) will be shared with the respective employer. In such a case, we act as a processor of personal data and the employer acts as the controller.

If you activate the "Be Visible to Recruiters" feature, the information in your profile will be visible to employers searching for suitable candidates.

6.2 Sharing with Service Providers

We may share your personal data with trusted third parties who help us provide our services, such as:

  • Cloud service and hosting providers
  • Analytics tool providers
  • CRM and e-mail system providers
  • Payment service providers (in the case of paid services)

These third parties have access to your personal data only to the extent necessary for the performance of their functions and are bound by an obligation to maintain the confidentiality of your data.

6.3 Legal Requirements

We may share your personal data if required by law, court order or other legal process, or if we believe in good faith that such sharing is necessary for:

  • Protection of our rights or property
  • Protection of the safety of our users or the public
  • Investigation of fraud or responding to a request from government authorities

7. INTERNATIONAL DATA TRANSFERS

Your personal data is primarily processed on servers located in the European Union. However, some of our service providers may be based or have servers outside the European Economic Area (EEA).

In the event of a transfer of your personal data outside the EEA, we ensure an adequate level of protection by means of:

  • Adequacy decisions issued by the European Commission
  • Standard contractual clauses approved by the European Commission
  • Binding corporate rules (for some service providers)

You may request a copy of these safeguards through the contact details provided in section 2.

8. SECURITY OF YOUR PERSONAL DATA

We implement appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures include:

  • Encryption of data in transit and at rest
  • Regular testing and evaluation of the effectiveness of our security measures
  • Strict access control to your personal data
  • Training of our employees in the area of personal data protection

9. YOUR RIGHTS

Under applicable personal data protection legislation, you have the following rights:

  • Right of access to personal data - You have the right to obtain information as to whether we process your personal data, and if so, you have the right to access such data.
  • Right to rectification - You have the right to request the rectification of inaccurate personal data or the completion of incomplete personal data.
  • Right to erasure (right to be forgotten) - Under certain circumstances, you have the right to request the erasure of your personal data, for example when the data is no longer necessary for the purposes for which it was collected.
  • Right to restriction of processing - Under certain circumstances, you have the right to request the restriction of processing of your personal data.
  • Right to data portability - You have the right to obtain your personal data in a structured, commonly used and machine-readable format and to transmit it to another controller.
  • Right to object - You have the right to object at any time to the processing of your personal data that is based on the legitimate interest of TRIBEE or a third party.
  • Right to withdraw consent - If the processing is based on your consent, you have the right to withdraw this consent at any time, without affecting the lawfulness of processing based on consent prior to its withdrawal.
  • Right to lodge a complaint - You have the right to lodge a complaint with a supervisory authority, which is the Office for Personal Data Protection (www.uoou.cz).

You may exercise your rights by contacting us at the e-mail address [email protected] or through the contact form on our Site. We will respond to your request within one month of receiving it. We may extend this period by a further two months if necessary, of which we will inform you.

10. AUTOMATED DECISION-MAKING AND PROFILING

In certain cases, we may use automated systems to recommend job offers based on your profile, search history and preferences. However, this recommendation does not lead to decisions that would have legal effects for you or similarly significantly affect you.

If you believe that automated decision-making is unlawfully harming you, you have the right to request human intervention, express your point of view and contest the decision.

11. CHANGES TO THIS POLICY

We may update this personal data protection policy from time to time to reflect changes in our practices or changes in legal requirements. The current version will always be available on our Site.

In the event of significant changes, we will inform you by e-mail or by a notification on our Site. We recommend that you regularly review this policy so that you are informed about how we protect your data.

12. CONTACT US

If you have any questions or comments regarding this policy or our personal data protection practices, please do not hesitate to contact us at the e-mail address [email protected].

Last updated: 1 April 2025