Privacy – BS&P Czech Republic

This notice explains how BS&P Czech Republic a.s. processes the personal data of people who visit this website, contact us or send us a job application, in accordance with Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and Act No. 110/2019 Coll., on the Processing of Personal Data.

Data controller

BS&P Czech Republic a.s., Mánesova 917/28, Vinohrady, 120 00 Praha 2, Company ID (IČO) 247 41 892, registered in the Commercial Register kept by the Municipal Court in Prague, Section B, Insert 16513. For any request concerning personal data: info@bsep.cz · +420 222 513 961.

What data we process and why

Contact requests	Name, email address, telephone number and the content of the message you send us, in order to reply and, if you ask, to prepare a proposal. Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in replying to communications (Art. 6(1)(f) GDPR).
Job applications	Data contained in your CV and cover letter, in order to assess your application. Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR). With your consent, your application may be kept for future positions (Art. 6(1)(a) GDPR).
Website browsing	Technical data recorded automatically by the server (IP address, date and time, page requested, browser type), to ensure the operation and security of the website. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).

Client data processed in the course of our professional engagements are governed by the engagement agreements and the related data processing agreements, not by this notice.

Cookies

This website does not use cookies or any analytics or profiling tools, and does not embed third-party content. Fonts are hosted on our own server.

How long we keep the data

Contact requests	For as long as needed to handle the request; if no engagement follows, for no more than 12 months from the last contact.
Job applications	Until the selection process is completed; with your consent, for up to 12 months for future positions.
Server technical data	For a limited period, for security purposes, according to the hosting provider’s settings.

Who receives the data

The data are processed by authorised staff of our firm who are bound by confidentiality. We use providers acting as data processors: the website hosting provider, with servers in the Czech Republic, and Google, for email services (Google Workspace). In the case of Google, data may be transferred outside the European Economic Area on the basis of the European Commission’s standard contractual clauses and the EU-U.S. Data Privacy Framework. We do not sell or disclose personal data to third parties for marketing purposes.

Your rights

You may request access to your data, rectification, erasure, restriction of processing and data portability, and you may object to processing based on legitimate interest. Where consent is required, you may withdraw it at any time, without affecting the lawfulness of processing carried out before its withdrawal. To exercise your rights, write to us at info@bsep.cz.

You also have the right to lodge a complaint with the supervisory authority: Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Praha 7, uoou.gov.cz.