Privacy Policy for the Processing of Job Applicants' Personal Data

Version 260904, effective September 4, 2026

1. Who processes the data?

The controller of your personal data is Hotel na klíč s.r.o., ID No. 14278707, Tax ID No.: CZ142787, with its registered office at Rubešova 72/9, 12000 Prague 2, Czech Republic, registered in the Commercial Register. We operate the TurnKey brand.

For matters related to personal data protection, please contact us at aja@turnkey.cz. We have not appointed a Data Protection Officer because we are not subject to this obligation under Article 37 of the GDPR.

2. What Data Do We Process?

We process only the data that you provide to us or that is generated during the selection process:

– identification and contact information: name, email, phone number

– information about your education and work experience from your resume

– a portfolio and samples of your work that you send to us or make available via a link

– the content of our communication with each other

– comments and evaluations from the selection process

We do not require a social security number, date of birth, photograph, marital status, health information, or other special categories of personal data as defined in Article 9 of the GDPR. If you include this information in your resume, we will not use it in the selection process.

3. Why and on what basis

We process your data for three reasons. The evaluation of your application and the selection process itself are measures taken prior to entering into a contract at your request, pursuant to Article 6(1)(b) of the GDPR. We retain the documentation after the process has ended to defend against potential claims, i.e., based on our legitimate interest pursuant to Article 6(1)(f) of the GDPR. We include you in our candidate database and contact you with future job offers only with your consent, in accordance with Article 6(1)(a) of the GDPR.

Consent is voluntary. If you do not give your consent, it will not affect your participation in the current selection process in any way. You may withdraw your consent at any time by sending an email to the address listed above—just as easily as you gave it. Withdrawal does not affect the lawfulness of processing that took place prior to the withdrawal.

4. How Long We Retain Data

– Unsuccessful applicants: 6 months from the end of the selection process. This period covers the selected candidate’s probationary period and allows time to defend against any potential claims. After that, we delete the data.

– With your consent for the applicant database: 2 years from the date consent is granted, or until it is revoked, whichever comes first.

– Selected candidate: The information will be transferred to the employee’s personnel file and is subject to the deadlines set forth in labor and tax regulations. We will notify you of this separately.

5. Who Will Receive the Data

We disclose data only to those involved in the collection process and to our processors:

– Microsoft 365, a provider of email and cloud services

– operators of job portals through which you applied—LinkedIn, Jobs.cz, and university career portals

Operators of job portals and social networks are also independent data controllers with respect to their users' accounts; the processing of such data is governed by their own policies.

We do not transfer data outside the European Economic Area. If such a transfer were to occur with a particular service provider, it would be based on standard contractual clauses approved by the European Commission.

6. Automated Decision-Making and AI

We do not use automated decision-making or profiling with legal effects on you within the meaning of Article 22 of the GDPR. A human always decides whether you advance to the next round and what the outcome will be. If we were to use a tool with artificial intelligence features to pre-screen responses, its output would serve only as a basis for consideration and would never result in your disqualification without human review.

7. Your Rights

You have the right to access your data, to have it corrected, deleted, or its processing restricted, to data portability, and to object to processing based on a legitimate interest. Simply send your request to aja@turnkey.cz. We will process your request within one month at the latest.

If you disagree with our procedures, you have the right to file a complaint with the Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, www.uoou.gov.cz.

8. Where We Get Our Data From

We obtain this information directly from you. If you applied through a job portal, we receive it from the portal’s operator to the extent that you provided it to them.