Data Privacy Consent Statement
Terms and conditions for the use of job applicants’ data by ČSOB/KBC Group companies
Information on personal data processing
Dear Applicants,
If you have shown interest in becoming an employee of one of the CSOB/KBC Group companies ("Administrators") by filling in the personal data stated in the form and the attached CV, we have processed your personal data in order to initiate recruitment procedures for job vacancies, i.e. so we can contact you and assess the possibility of your employment in the relevant company.
We hereby inform you how and why we process your personal information and what rights you have in this field. The processing of your personal data is governed by legal regulations, Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of personal data (GDPR) in particular. Personal data protection is important to us, so all companies associated in the CSOB or KBC Group adhere to the strictest security standards in personal data processing. We recommend that you study the information carefully. Should you have any questions, please contact us by e-mail kariera@csob.cz (in case you are applying for a position at KBC Group, Shared Service Center, then by e-mail ssc.recruitment@kbc.com). You may also exercise your rights listed in paragraph 4 below in the manner indicated therein. If we have not accommodated your request, or you are dissatisfied with the information provided or the handling of your request, you can contact the Data Protection Officer (see Annex hereto for contact details) or file a complaint with the Supervisory Authority at the following points of contacts:
Supervisory Authority: Office for Personal Data Protection
• address: Pplk. Sochora 27, 170 00 Praha 7
• telephone: +420 234 665 111
• website: www.uoou.cz
1. Who is the Data Controller of your personal information?
The Data Controller of your information is always the ČSOB or KBC Group company to which you have provided your personal information in order to participate in a job application process with the company ("Data Controller"). If you apply for multiple positions, all of these companies may act as the Data Controller in relation to your personal data. A specification of the CSOB Group companies is set out in the
Annex to this document. For more information on the KBC Group, see the KBC Group Companies List at https://www.kbc.com/en/our-structure.
2. What is the purpose and legal basis for personal data processing and what is the personal data retention period?
2.1 Personal data processing is always performed solely within the scope defined by the purpose of processing. We process your personal data for the purposes and on the basis of the legal titles listed below, for the duration of the hiring procedure. For the purpose of proper recruitment process for job vacancies, we process your personal data as provided by you, within the scope of:
a) Identification: name, surname, academic degree, permanent address, nationality, date and place of birth, passport or ID card number and issuing authority (in the case of aliens), personal photograph;
b) The Applicant’s profile information: your curriculum vitae and the information contained therein - e.g. previous employers, work experience, education so far, names and contact details of references, diplomas, certificates, information on integrity; and
c) The Applicant’s private contact details: mailing address, e-mail, telephone number or profile address and other contact details on professional social networks (e.g. LinkedIn).
d) A recording (video and audio) of the interview (if it is made and the candidate does not refuse to be recorded).
The legal basis for processing the above data is the implementation of measures prior to entering into the employment contract. Another legal title for such processing is also the Data Controller’s legitimate interest to know about your relevant characteristics - as a job applicant. The personal data will be processed for the necessary time - i.e. until we inform you that you have possibly not been accepted for job in question. If you are successful in your application, we will further process your personal data under the legal title of the employment contract.
2.2 If you are not accepted for the position but agree to be contacted even after this recruitment process has ended in the case of a similar process in the future, you may grant us your consent to process your personal data indicated in 2.1 of this document for a period of 2 years from the end of the recruitment process. This time limit may be prolonged in case of your re-approval. You have the right to withdraw his consent at any time.
To whom can we provide your personal information?
Based on a consent, we may pass your personal data on to other CSOB Group companies or to KBC Group of which CSOB Group is a member (a list of ČSOB Group members is available in Annex hereto; a current list is always available at www.csob.cz/skupina; For more information on the KBC Group, see KBC Group
Companies List at https://www.kbc.com/en/our-structure) however, adequate protection of the personal data processed is always ensured (by means of appropriate technical and organizational measures).
2.3 In the event that you successfully complete the hiring procedure, and you are accepted, we only collect and process such data so that we can function properly as your employer, resp. the company for which you are acting or cooperating. You can find a more detailed definition of the data we process on data subjects below.
Basic data on employees
Identification data
name, surname, academic degrees, permanent residence, nationality, date and place of birth, passport number and name of issuing authority (for Aliens), personal photograph or appearance from camera recordings, signature of an authorised person on a power of attorney, personal data required for authentications and authorisations. digital signatures of employees.
Private contact details
contact address, e-mail, phone number
Basic data on employment
type of employment contract, whether full-time or (and what) part-time and all data listed in the employment contract and closely related to the employment relationship with the employer, in particular the following: type of work, workload, position, job description, place of work, date of commencement, position with organizational unit, etc.
Data on benefits
personal data required to maintain your profile in the current scheme of employee benefits (e.g. Cafeteria Benefit Plus, e-meal vouchers Naše stravenka, Multisport card).
Data necessary for compliance with the obligations regarding taxes, health insurance, social security, life insurance and supplementary pension insurance
all previous surnames, birth number, number of health insurance company, name and address of foreign insurance provider and foreign insurance policy number, registration number of social security (for Aliens), data on your pension, registration records at the employment bureau, data on spouses and children, data on wage deductions, data on trade licenses (where applicable) and secondary jobs.
Data on external activities
in certain cases, data on other employments, businesses and similar activities including memberships in bodies and ownerships and legal or other relations to the employer, the ČSOB Group / KBC Group or third parties, data on eligibility and credibility
Information on integrity
information on integrity or (where applicable) criminal records, for mandated persons - for the purposes of preventing conflicts of interest and incompatibility of mandates, data on past criminal, administrative and similar decisions
Information on records in the insolvency register
information on records in the insolvency register of natural persons and legal entities
Basic HR data
Financial data
salary, bonuses and other remunerations paid by the employer to the employee, data listed in the statement of minor expenses, personal bank account number, ID card purchase data, personal data processed for the purpose of buying group insurance (management insurance, liability insurance and life insurance) and information on whether the employee has such insurance
Health information
information on the capacity for work, data on health-related handicaps
Work contact information
e-mail address, phone number, mailing address at work
Technical profile
login information for employer’s ICT systems, access permissions, data on assets assigned
Physical profile
access permissions, data from employee’s ID card (in particular number of ID card and identification data present on the card)
HR personal administration and special services
Basic HR agenda
we process your basic personal data to be able to carry out the basic activities required by labour law. These include activities such as registering new and terminated employment contracts.We collect the basic data from you by using questionnaires and add more information coming from external sources. As part of some of our other obligations, we may also process your confidential information: for instance, to meet the obligation of calculating the mandatory proportion of persons with a disability in the total number of employees, we must process the data on your disability. We retain the data for this agenda in your employee’s dossier.
Physical security
Physical identification and authentication
At the beginning of our cooperation, ČSOB/KBC creates an ID card for you, which may contain your identification data including your photograph and which you will use to accede to our premises.
Camera records
We monitor many parts of our premises with CCTV, which may record your appearance. It may then be processed as part of the activities associated with the protection of property and the security of persons.
Catering
ČSOB processes your data so that it can record and account for expenses for food, beverages and other purchases. Personal data is passed to an external partner for billing the e-meal voucher.
Health services and prevention
Health services
We provide, by means of a provider of occupational medical services, initial medical examinations of incoming employees and the mandatory periodical or specific medical examinations of current employees. We only process the information provided by the physician whether and to what extent you are fit for work.
Information and communication technologies
Electronic identification and authentication
We use login data and access permissions for you to be able to use all tools necessary for your work and so that we can administer and check your access to them. We process your data in the access databases.
3. What rights do you, as the Data Subject, hold in connection with the processing?
As a Data Subject, you have the following rights in relation to personal data processing: the right of access, the right to rectification/erasure/restriction of processing of personal data, the right to data portability, the right to object to processing or to file a complaint with the Supervisory Authority.
If you have agreed to processing, you have done so voluntarily and you maintain your right to withdraw your consent at any time, in a very simple way in the settings of your profile in our SuccessFactors HR system.
You can exercise all of your rights in the following manners:
• by request sent as a letter wherein your signature will be officially certified, to the Data Controller’s registered officeaddress;
• by request sent to the above e-mail with your electronic signature; or
• by request sent via databox.
4. Methods and means of processing
We collect your personal information directly from you, for example when you fill in the online form, upload your CV to SuccessFactors, or provide information during a phone call or personal meeting. We may also obtain some information from your references, employment agencies, publicly accessible registers (such as the Trade Register) or, as the case may be, from professional social networks.
Personal data is processed in the electronic form by automated methods. Personal information is stored in our information systems, and may be backed up on the backup server/information carriers as needed.
The personal data is under our permanent physical, electronic and procedural control, we employ modern control, technical and security mechanisms to ensure maximum protection of the data we process from unauthorized access or transmission, loss or destruction, and other possible misuse.
All persons coming into contact with your personal data as part of their job descriptions or contract obligations are bound by a legal or contractual non-disclosure obligation that even survives the termination of their employment or contractual relationship with us.
5. What happens if changes in processing occur?
We may modify the information contained herein as needed based on the current situation. In that case, we will inform you as the Data Subjects of such a change in a timely manner. However, we recommend that you regularly check the current version of this document in our SuccessFactors HR system.
ANNEX
List of ČSOB/KBC Group members - Data Controllers and contacts for the Data Protection Officers:
A list of members of the ČSOB Group - personal data controllers and contacts of the personal data fiduciaries can be found under the link About us - who is the ČSOB Group https://www.csob.cz/portal/csob/ochrana-osobnich-udaju.
The e-mail and telephone contact in relation to personal data issues is identical for all of the companies: 800 023 003 and osobni-data@csob.cz.
Data Privacy Consent Statement
Terms and conditions for the use of job applicants’ data by ČSOB/KBC Group companies
Information on personal data processing
Dear Applicants,
If you have shown interest in becoming an employee of one of the CSOB/KBC Group companies ("Administrators") by filling in the personal data stated in the form and the attached CV, we have processed your personal data in order to initiate recruitment procedures for job vacancies, i.e. so we can contact you and assess the possibility of your employment in the relevant company.
We hereby inform you how and why we process your personal information and what rights you have in this field. The processing of your personal data is governed by legal regulations, Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of personal data (GDPR) in particular. Personal data protection is important to us, so all companies associated in the CSOB or KBC Group adhere to the strictest security standards in personal data processing. We recommend that you study the information carefully. Should you have any questions, please contact us by e-mail kariera@csob.cz (in case you are applying for a position at KBC Group, Shared Service Center, then by e-mail ssc.recruitment@kbc.com). You may also exercise your rights listed in paragraph 4 below in the manner indicated therein. If we have not accommodated your request, or you are dissatisfied with the information provided or the handling of your request, you can contact the Data Protection Officer (see Annex hereto for contact details) or file a complaint with the Supervisory Authority at the following points of contacts:
Supervisory Authority: Office for Personal Data Protection
• address: Pplk. Sochora 27, 170 00 Praha 7
• telephone: +420 234 665 111
• website: www.uoou.cz
1. Who is the Data Controller of your personal information?
The Data Controller of your information is always the ČSOB or KBC Group company to which you have provided your personal information in order to participate in a job application process with the company ("Data Controller"). If you apply for multiple positions, all of these companies may act as the Data Controller in relation to your personal data. A specification of the CSOB Group companies is set out in the
Annex to this document. For more information on the KBC Group, see the KBC Group Companies List at https://www.kbc.com/en/our-structure.
2. What is the purpose and legal basis for personal data processing and what is the personal data retention period?
2.1 Personal data processing is always performed solely within the scope defined by the purpose of processing. We process your personal data for the purposes and on the basis of the legal titles listed below, for the duration of the hiring procedure. For the purpose of proper recruitment process for job vacancies, we process your personal data as provided by you, within the scope of:
a) Identification: name, surname, academic degree, permanent address, nationality, date and place of birth, passport or ID card number and issuing authority (in the case of aliens), personal photograph;
b) The Applicant’s profile information: your curriculum vitae and the information contained therein - e.g. previous employers, work experience, education so far, names and contact details of references, diplomas, certificates, information on integrity; and
c) The Applicant’s private contact details: mailing address, e-mail, telephone number or profile address and other contact details on professional social networks (e.g. LinkedIn).
d) A recording (video and audio) of the interview (if it is made and the candidate does not refuse to be recorded).
The legal basis for processing the above data is the implementation of measures prior to entering into the employment contract. Another legal title for such processing is also the Data Controller’s legitimate interest to know about your relevant characteristics - as a job applicant. The personal data will be processed for the necessary time - i.e. until we inform you that you have possibly not been accepted for job in question. If you are successful in your application, we will further process your personal data under the legal title of the employment contract.
2.2 If you are not accepted for the position but agree to be contacted even after this recruitment process has ended in the case of a similar process in the future, you may grant us your consent to process your personal data indicated in 2.1 of this document for a period of 2 years from the end of the recruitment process. This time limit may be prolonged in case of your re-approval. You have the right to withdraw his consent at any time.
To whom can we provide your personal information?
Based on a consent, we may pass your personal data on to other CSOB Group companies or to KBC Group of which CSOB Group is a member (a list of ČSOB Group members is available in Annex hereto; a current list is always available at www.csob.cz/skupina; For more information on the KBC Group, see KBC Group
Companies List at https://www.kbc.com/en/our-structure) however, adequate protection of the personal data processed is always ensured (by means of appropriate technical and organizational measures).
2.3 In the event that you successfully complete the hiring procedure, and you are accepted, we only collect and process such data so that we can function properly as your employer, resp. the company for which you are acting or cooperating. You can find a more detailed definition of the data we process on data subjects below.
Basic data on employees
Identification data
name, surname, academic degrees, permanent residence, nationality, date and place of birth, passport number and name of issuing authority (for Aliens), personal photograph or appearance from camera recordings, signature of an authorised person on a power of attorney, personal data required for authentications and authorisations. digital signatures of employees.
Private contact details
contact address, e-mail, phone number
Basic data on employment
type of employment contract, whether full-time or (and what) part-time and all data listed in the employment contract and closely related to the employment relationship with the employer, in particular the following: type of work, workload, position, job description, place of work, date of commencement, position with organizational unit, etc.
Data on benefits
personal data required to maintain your profile in the current scheme of employee benefits (e.g. Cafeteria Benefit Plus, e-meal vouchers Naše stravenka, Multisport card).
Data necessary for compliance with the obligations regarding taxes, health insurance, social security, life insurance and supplementary pension insurance
all previous surnames, birth number, number of health insurance company, name and address of foreign insurance provider and foreign insurance policy number, registration number of social security (for Aliens), data on your pension, registration records at the employment bureau, data on spouses and children, data on wage deductions, data on trade licenses (where applicable) and secondary jobs.
Data on external activities
in certain cases, data on other employments, businesses and similar activities including memberships in bodies and ownerships and legal or other relations to the employer, the ČSOB Group / KBC Group or third parties, data on eligibility and credibility
Information on integrity
information on integrity or (where applicable) criminal records, for mandated persons - for the purposes of preventing conflicts of interest and incompatibility of mandates, data on past criminal, administrative and similar decisions
Information on records in the insolvency register
information on records in the insolvency register of natural persons and legal entities
Basic HR data
Financial data
salary, bonuses and other remunerations paid by the employer to the employee, data listed in the statement of minor expenses, personal bank account number, ID card purchase data, personal data processed for the purpose of buying group insurance (management insurance, liability insurance and life insurance) and information on whether the employee has such insurance
Health information
information on the capacity for work, data on health-related handicaps
Work contact information
e-mail address, phone number, mailing address at work
Technical profile
login information for employer’s ICT systems, access permissions, data on assets assigned
Physical profile
access permissions, data from employee’s ID card (in particular number of ID card and identification data present on the card)
HR personal administration and special services
Basic HR agenda
we process your basic personal data to be able to carry out the basic activities required by labour law. These include activities such as registering new and terminated employment contracts.We collect the basic data from you by using questionnaires and add more information coming from external sources. As part of some of our other obligations, we may also process your confidential information: for instance, to meet the obligation of calculating the mandatory proportion of persons with a disability in the total number of employees, we must process the data on your disability. We retain the data for this agenda in your employee’s dossier.
Physical security
Physical identification and authentication
At the beginning of our cooperation, ČSOB/KBC creates an ID card for you, which may contain your identification data including your photograph and which you will use to accede to our premises.
Camera records
We monitor many parts of our premises with CCTV, which may record your appearance. It may then be processed as part of the activities associated with the protection of property and the security of persons.
Catering
ČSOB processes your data so that it can record and account for expenses for food, beverages and other purchases. Personal data is passed to an external partner for billing the e-meal voucher.
Health services and prevention
Health services
We provide, by means of a provider of occupational medical services, initial medical examinations of incoming employees and the mandatory periodical or specific medical examinations of current employees. We only process the information provided by the physician whether and to what extent you are fit for work.
Information and communication technologies
Electronic identification and authentication
We use login data and access permissions for you to be able to use all tools necessary for your work and so that we can administer and check your access to them. We process your data in the access databases.
3. What rights do you, as the Data Subject, hold in connection with the processing?
As a Data Subject, you have the following rights in relation to personal data processing: the right of access, the right to rectification/erasure/restriction of processing of personal data, the right to data portability, the right to object to processing or to file a complaint with the Supervisory Authority.
If you have agreed to processing, you have done so voluntarily and you maintain your right to withdraw your consent at any time, in a very simple way in the settings of your profile in our SuccessFactors HR system.
You can exercise all of your rights in the following manners:
• by request sent as a letter wherein your signature will be officially certified, to the Data Controller’s registered officeaddress;
• by request sent to the above e-mail with your electronic signature; or
• by request sent via databox.
4. Methods and means of processing
We collect your personal information directly from you, for example when you fill in the online form, upload your CV to SuccessFactors, or provide information during a phone call or personal meeting. We may also obtain some information from your references, employment agencies, publicly accessible registers (such as the Trade Register) or, as the case may be, from professional social networks.
Personal data is processed in the electronic form by automated methods. Personal information is stored in our information systems, and may be backed up on the backup server/information carriers as needed.
The personal data is under our permanent physical, electronic and procedural control, we employ modern control, technical and security mechanisms to ensure maximum protection of the data we process from unauthorized access or transmission, loss or destruction, and other possible misuse.
All persons coming into contact with your personal data as part of their job descriptions or contract obligations are bound by a legal or contractual non-disclosure obligation that even survives the termination of their employment or contractual relationship with us.
5. What happens if changes in processing occur?
We may modify the information contained herein as needed based on the current situation. In that case, we will inform you as the Data Subjects of such a change in a timely manner. However, we recommend that you regularly check the current version of this document in our SuccessFactors HR system.
ANNEX
List of ČSOB/KBC Group members - Data Controllers and contacts for the Data Protection Officers:
A list of members of the ČSOB Group - personal data controllers and contacts of the personal data fiduciaries can be found under the link About us - who is the ČSOB Group https://www.csob.cz/portal/csob/ochrana-osobnich-udaju.
The e-mail and telephone contact in relation to personal data issues is identical for all of the companies: 800 023 003 and osobni-data@csob.cz.