Privacy policy

7. August 2025

Adaptačně - integrační kurzy - Poučení o zpracování osobních údajů -  CZ, ENG, SRB, UA

Žádost o uplatnění práv subjektů.pdf

The company HOFMANN WIZARD, sro , with its registered office at Prešovská 201/4, Plzeň, Company ID: 252 36 016, is the controller of personal data and processes it in accordance with Regulation (EU) 2016/679 (GDPR).

👉 What we process: name, contacts, CV data, data necessary for an employment contract or business cooperation.
👉 Why: so that we can offer you a suitable job, fulfill our obligations as an employer, or collaborate with our clients and partners.
👉 How: we protect your data technically and organizationally, we do not share it without reason and we only cooperate with proven partners.
👉 Your rights: you have the right to request access to your data, its correction or deletion, withdraw consent or file a complaint with the Office for the Protection of Personal Data at any time.
👉 Update: 23.9.2025

1. Introduction

The company HOFMANN WIZARD, sro , with its registered office at Prešovská 201/4, Plzeň, Company ID: 252 36 016, is the controller of personal data and processes it in accordance with Regulation (EU) 2016/679 (GDPR).

This page is intended to give you an overview of how we handle your data in various situations – whether you are a job applicant, employee, client or subscriber to our newsletters .

2. Information for job seekers

What data do we process?

• first and last name
• contact details (phone, email, address)
• date of birth
• CV data (education, experience, knowledge, skills)
• data provided during an interview or in communication with our AI assistant

Where we get candidates’ data

Most often, we obtain personal data directly from you (e.g., from your CV, when you fill in a form, via e‑mail/phone, during an interview, or through communication with our AI assistant).

In some cases, we may also obtain your data from other sources, for example:

• from job portal databases, where you have created a profile or uploaded your CV,
• from publicly available professional sources (e.g., LinkedIn),
• based on a referral (if someone shares your contact details with us).

If we do not obtain your data directly from you, we will inform you in accordance with Article 14 of the GDPR (typically at the first contact, and at the latest within one month, depending on the situation).

Purposes of processing

• records of job applicants
• job vacancies
• negotiating and concluding employment contracts or agreements
• protection of the legitimate interests of the company

Legal basis

• your consent
• performance of a contract or negotiations prior to the conclusion of a contract

Recipients

• potential employers (users)
• IT systems and web service providers
• automatic voice assistant technology provider

Retention period

• 5 years from the date of granting consent or until its revocation.

In some cases, we use an automated AI voice assistant during the initial contact , which can collect basic information from you and pass it on to our consultant. However, you always have the option to request to communicate directly with our colleague.

Within our applicant tracking system (ATS), we may use AI-based tools to enable more efficient searching and comparison of profiles in our database (e.g., based on skills and work experience). These tools support our recruiters; this is not fully automated decision-making, and the final assessment is always carried out by a person.

3. Information for employees

What data do we process?

• data from employment contracts and agreements
• payroll and accounting data
• attendance, work accidents, medical reports on health fitness
• other data required by labor regulations

Purposes of processing

• fulfillment of the employer's obligations under the law
• personnel and payroll management
• protection of rights and legitimate interests

Legal basis

• performance of the contract
• fulfillment of legal obligations

Recipients

• accounting and payroll companies
• health insurance companies
• occupational health service providers

Retention period
according to legal deadlines (e.g. 10 years for payroll documents).

4. Information for Employees Regarding the Use of the Munipolis Application 

What data do we process?

• First name; last name; email address; mobile phone number; employee ID number; request statuses; language settings; mobile phone device type; relationship to the Data Controller; interest groups (areas). 

Purposes of processing

• management of data subject requests,

• verification of eligibility for access to the product and its content,

• communication with the data subject, including sending messages and information that may be of interest to the data subject.

Legal basis

• consent

Recipients

• MUNIPOLIS s.r.o., as the provider of the MUNIPOLIS application

Retention period

• Personal data are processed for the duration of the active user account and subsequently for a maximum period of 6 months for the purpose of handling potential requests from the data subject and the technical closure of the account.

5. Information for clients, partners, prospects

What data do we process?

• name and surname of the company representative
• business contact details (email, telephone, address)
• data from business communications and contracts

Purposes of processing

• service offers and contract negotiations
• implementation and management of contractual relationships
• marketing and business communication

Legal basis

• performance of the contract
• legitimate interest (customer care, offering related services)

Recipients

• internal business teams
• parent company
• IT system providers

Retention period

• for the duration of the contractual relationship and subsequently for the duration of the statutory archiving periods.

6. Newsletters (Hofmann Newsletter and TOP Talents )

What data do we process?

• first and last name
• e-mail address

Purposes of processing

• sending newsletters, job offers and information about the labor market

Legal basis

• your consent (double opt -in)

Option to log out

• at any time by clicking on the link in the email

Recipients

• email system provider

Retention period
until consent is revoked.

7. Information for referrers and referred persons within the “Refer a Friend” campaign

What personal data we process

For the referrer:

• first name and surname
• contact details /phone number, e-mail/
• bank account number
• data necessary to assess entitlement to the reward
• data related to the payment of the reward

For the referred person:

• first name and surname
• contact details /phone number, e-mail/
• information about who provided us with the referral
• data related to the subsequent recruitment process, if the referred person enters such process

Where we obtain the data from

We obtain the referrer’s data directly from the referrer through the form for the “Refer a Friend” campaign, by which the referrer provides us with contact details of a person they believe may be interested in a job offer.

The referrer is obliged to inform the referred person in advance that their contact details are being provided to HOFMANN WIZARD for the purpose of contacting them with a job offer and carrying out the “Refer a Friend” campaign. The referrer must not provide the data of a person who does not agree with the transfer of their data or with being contacted.

If we do not obtain the referred person’s data directly from them, we will inform them in accordance with Article 14 GDPR, typically at the first contact, and no later than within 1 month.

Purposes of processing

• recording participation in the “Refer a Friend” campaign
• verifying compliance with the campaign conditions
• contacting the referred person with a job offer
• conducting the subsequent recruitment process
• communication with the referrer and the referred person
• assessing the referrer’s entitlement to the reward
• paying the reward to the referrer
• fulfilling accounting and tax obligations
• protecting the legitimate interests of the company

Legal basis

• the controller’s legitimate interest in carrying out the referral campaign, acquiring new job applicants and verifying entitlement to the reward
• performance of a contract or steps taken prior to entering into a contract, if the referred person enters the recruitment process
• compliance with legal obligations, particularly in the areas of accounting and taxation
• protection of the company’s legitimate interests

Recipients

• employees and cooperating persons of HOFMANN WIZARD involved in recruitment and campaign administration
• potential employers /users/, if the referred person enters a specific recruitment process
• providers of IT systems and web services
• accounting, tax or legal advisors, where necessary

Retention period

We retain the data of the referred person processed solely for the purpose of initial contact for the period necessary to carry out the campaign, but no longer than 6 months from the delivery of the referral, unless the referred person enters the recruitment process or gives consent to further processing.

If the referred person enters the recruitment process, we will further process their data in accordance with the rules applicable to job applicants.

We retain the referrer’s data for the period necessary to assess entitlement to the reward, document compliance with the campaign conditions and protect the company’s rights. Accounting and tax documents are retained for the period required by applicable legal regulations.

8. Your rights

According to the GDPR, you have the right to:

• to access, correct and delete your data
• to restrict processing
• object to processing
• on data portability to another controller
• withdraw your consent at any time
• file a complaint with the Office for Personal Data Protection

Practically: just contact us by e-mail at kontakt@hofmann-personal.cz or in person at one of our branches.

9. Request to delete your personal data from our database

If you wish us to delete your personal data from our database, you can contact us at any time by e-mail at kontakt@hofmann-personal.cz , contact your consultant directly or use the prepared form in PDF format, which you can simply fill out and send back to us by e-mail. We will process your request without undue delay, but no later than within 30 days in accordance with legal regulations.

Žádost o uplatnění práv subjektů.pdf

10. Contacts

HOFMANN WIZARD, s.r.o.
Prešovská 201/4301 00 Pilsen

📧 contact@hofmann-personal.cz

11. Statement and information on the processing of personal data

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

   

The company HOFMANN WIZARD, sro , with its registered office at Prešovská 201/4, Plzeň, ZIP code 301 00, Company ID: 252 36 016 , registered in the Commercial Register kept by the Regional Court in Pilsen, Section C, Insert 11501, email contact: plzen@hofmann-personal.cz (hereinafter referred to as the " Administrator "), is an employment agency and personal data administrator.

The Administrator's business is to find employment for a natural person applying for a job, and to find employees for an employer looking for workers, as well as to employ natural persons for the purpose of performing work for a user, which is understood to be another legal or natural person who assigns the work and supervises its performance, including production, trade and services not listed in Annexes 1 to 3 of the Trade Licensing Act. The Administrator's main activity is therefore the mediation of employment and the temporary assignment of so-called agency employees to perform work for users; additionally, the Administrator provides advisory, consulting and training services, and carries out advertising and marketing activities.

 

The personal data controller declares that it processes personal data under the following conditions:

 

The Administrator processes personal data of natural persons as part of its normal activities, i.e. in particular as part of managing personnel affairs, maintaining a database of job applicants and cooperating with the Administrator's clients or users in the sense of employment law.

Personal data are processed to the extent that the relevant data subject has provided them to the administrator, in connection with the conclusion of a contractual or other legal relationship with the administrator, or which the administrator has otherwise collected and processes in accordance with applicable legal regulations, as well as to fulfill the administrator's legal obligations or based on the consent of the job applicant.

Categories of personal data that are subject to processing:

Address and identification data used for the unambiguous and unmistakable identification of the data subject (e.g. name, surname, title, or birth number, date of birth, permanent address, ID number, VAT number) and data enabling contact with the data subject (contact data - e.g. contact address, telephone number, e-mail address and other similar information), other data necessary for the performance of the contract or obligations arising from legal regulations.

In the case of employees of the Administrator, all personal data necessary for managing the personnel agenda are processed. For the purposes of marketing and promotion of the Administrator, based on the special consent of the data subject, the appearance and voice of the data subject captured by a photograph, audio and/or video recording, age, and possibly also the duration of the employment relationship of the data subject with the Administrator, his/her job position and place of work are also processed.

During the first contact with the applicant, basic personal data may also be collected via an automatic voice assistant using artificial intelligence technology. This assistant serves exclusively for initial communication and information transfer to the Administrator. The data subject always has the option to request communication with a human employee of the Administrator.

In the case of clients, business partners and so-called prospects , the Controller processes the personal data of company representatives, in particular the name and surname, business contact details (e-mail, telephone, address) and data from business communication and contracts. This data is processed for the purpose of providing service offers, negotiating contracts, implementing and managing contractual relationships, as well as for marketing and business communication. The legal basis is the performance of the contract and the legitimate interest of the Controller, which is mainly customer care and the offer of related services. Recipients of the data may be internal business teams, the parent company and IT system providers. The data is stored for the duration of the contractual relationship and subsequently for the period of statutory archiving periods.

For the purpose of sending newsletters (in particular Hofmann Newsletter and TOP Talents ), the Administrator processes the name, surname and e-mail address of the data subject. The purpose is to send newsletters, job offers and information about the labor market. The legal basis for this processing is the consent of the data subject, which is obtained through a double opt -in process. The data subject has the option to unsubscribe at any time by clicking on the link in each e-mail sent. The recipient of the data is the provider of the e-mailing system. The data are stored until the consent is revoked.

As part of the operation of the employment agency, special categories of data are not processed (e.g. on racial or ethnic origin, political opinions, religious beliefs). As part of the management of the personnel agenda, personal data on health status (data on health fitness or its limitations, data in the records of work accidents or occupational diseases), or membership in trade unions, may be processed.

 

The controller processes data with the consent of the data subject, except in cases provided for by law where the processing of personal data does not require the consent of the data subject. In accordance with Article 6(1) of the GDPR, the controller may process the following data without the consent of the data subject:

The data subject has given consent for one or more specific purposes (in particular, for the processing of job seeker data for the purpose of searching for opportunities to conclude an employment relationship, sending employment offers and maintaining a database of job seekers, or for the purposes of marketing and promotion of the Administrator). The processing is necessary for the performance of a contract (employment contract, work performance agreement or work activity agreement, temporary assignment agreement for employees to work for the user or employment agency agreement) to which the data subject is a party, or for the implementation of measures taken prior to the conclusion of the contract at the request of this data subject. The processing is necessary for the fulfillment of a legal obligation to which the administrator is subject (in particular, obligations in the field of labor law, i.e. obligations of an employment agency, obligations of an employer). The processing is necessary to protect the vital interests of the data subject or another natural person. Processing is necessary for the purposes of the legitimate interests pursued by the controller or a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data.

 

Processing is carried out at the registered office and branches of the controller by individual authorized employees of the controller, or by the processor. Processing takes place using computer technology, or manually in the case of personal data in paper form, in compliance with all security principles for the management and processing of personal data. For this purpose, the controller has adopted technical and organizational measures to ensure the protection of personal data, in particular measures to prevent unauthorized or accidental access to personal data, their alteration, destruction or loss, unauthorized transfers, their unauthorized processing, as well as other misuse of personal data. All entities to which personal data may be made available respect the right of data subjects to privacy and are obliged to proceed in accordance with applicable legal regulations regarding the protection of personal data and to comply with the obligation of confidentiality to which they have committed themselves.

In accordance with the deadlines specified in the relevant contracts, in the Administrator's filing and disposal rules or in the relevant legal regulations, this is the period strictly necessary to ensure the rights and obligations arising from both the contractual relationship and the relevant legal regulations and to protect the rights and legitimate interests of data subjects, the Administrator and third parties (e.g. users or clients of the Administrator).

In accordance with Article 12 of the GDPR, the controller shall, upon request by the data subject, inform the data subject of the right of access to personal data and to the following information:

The purpose of the processing, the category of personal data concerned, the recipient or categories of recipients to whom the personal data have been or will be disclosed, the planned period for which the personal data will be stored, any available information about the source of the personal data, if not obtained from the data subject, the fact whether automated decision-making, including profiling, is taking place.

The data subject has the right, in accordance with the Regulation, to request from the Controller access to his/her personal data, their correction or deletion, or restriction of processing, and to object to processing, has the right to the portability of this data to another controller, as well as the right to file a complaint with the Office for Personal Data Protection if he/she believes that the Controller is acting in violation of the Regulation when processing personal data.

Any data subject who discovers or believes that the controller or processor is processing his or her personal data which is contrary to the protection of the data subject's private and personal life or contrary to the law, in particular where the personal data are

data that is inaccurate with regard to the purpose of its processing may:

Ask the administrator for an explanation. Request that the administrator eliminate the situation that has arisen in this way. In particular, this may involve blocking, correcting, supplementing or deleting personal data. If the data subject's request is found to be justified, the administrator will delete

immediately the defective condition. If the controller does not comply with the data subject's request, the data subject has the right to contact the supervisory authority directly, i.e. the Office for Personal Data Protection. The controller has the right to demand reasonable compensation for the provision of information not exceeding the costs necessary to provide the information.

The Administrator has not appointed a Data Protection Officer. The Administrator is not a public authority or public entity. The Administrator's main activity is the mediation of employment and temporary assignment of so-called agency employees to perform work for users. This does not involve processing operations that would require extensive or systematic monitoring of data subjects. When mediating employment or temporarily assigning employees to perform work for users, there is no extensive processing of special categories of personal data or personal data relating to criminal convictions and criminal offences. In view of the above, there is no obligation to appoint a Data Protection Officer pursuant to Article 37 of the General Data Protection Regulation. The Officer has not been appointed.

The Administrator does not intend to transfer the personal data of the Data Subject to a third country, an international organization or to third parties other than those listed below:

• Provider of websites and information systems for managing employee recruitment.
• Providers of payroll, accounting, tax and occupational health services.
• Training and insurance service providers.
• Website providers and external marketing agencies for the purpose of creating and commercial promotion of specific material.
• Parent companies, information system providers.
• Users to whom the data subject has been assigned under a temporary assignment agreement.
• For administrator customers who are interested in finding a suitable employee.
• To providers of electronic document signing services, for the purposes of identifying the signatory and administering signed documents
• Providers of consulting services in the field of quality management and whistleblowing .
• To technology providers for the operation of an automatic voice AI assistant, exclusively to the extent necessary for its functionality.

 

HOFMANN WIZARD, sro, company ID 252 36 016

Update: 23.9.2025