Privacy Notice for Job Applicants

Controller:

Brightpick s. r. o. (hereinafter referred to as „Brightpick“ or „we“)
Contact: Plynarenska 6, Bratislava 821 09, ID No. (IČO): 47 353 309, registered with the Commercial Registry of Municipal Court Bratislava III, Section: Sro, Insert No.: 91452/B, gdrp@brightpick.ai

1. Purpose of Processing

We process your personal data for the purposes of:

conducting and managing recruitment procedures for employment with Brightpick,
assessing your suitability for the advertised position,
communication regarding the recruitment process,
keeping records of the recruitment process and defending potential legal claims,
based on your consent, informing you about other suitable vacancies at Brightpick.

2. Categories of Personal Data Processed

In connection with your application, Brightpick may process the following personal data:

first name and surname,
date of birth,
permanent residence and contact address,
contact details (telephone number, e-mail),
information on the applied job,
confirmation of interview attendance (time, place),
reasons for refusal,
data contained in your CV,
any other data you provide during the interview,
any notes or assessments added by Brightpick.

3. Legal Basis of Processing

Performance of a contract / pre-contractual measures (Art. 6(1)(b) GDPR) – processing your application in the recruitment process.
Legitimate interest (Art. 6(1)(f) GDPR) – protecting Brightpick’s rights in case of legal claims arising from the recruitment process.
Consent (Art. 6(1)(a) GDPR) – if you agree to be contacted for future job opportunities at Brightpick.

4. Source of Data

We receive your personal data directly from you (CV, application form, interview), from recruitment portals (e.g. Profesia.sk), or internally via our recruitment system Teamio.

5. Recipients of Personal Data

Your personal data is accessible only to:

authorized HR employees and managers of Brightpick,
Alma Career Czechia s.r.o. / Alma Career Slovakia s.r.o. as our data processor providing the Teamio recruitment system,
other processors contractually bound by Brightpick (e.g. IT service providers or HR platform provider – Hi Bob (NL) B.V.),
public authorities where required by law.

6. Transfer to Third Countries

We do not intend to transfer your personal data outside the EU/EEA. If such transfer is necessary, it will only take place under the safeguards provided by Articles 44–49 GDPR.

7. Retention Period

For the duration of the recruitment process and up to six (6) months after its completion for the purpose of defending legal claims.
If you provide consent for inclusion in our candidate database, we process your data for up to three (3) years or until you withdraw your consent.

8. Your Rights

As a data subject, you have the following rights under GDPR:

right of access to your personal data,
right to rectification or completion of inaccurate data,
right to erasure („right to be forgotten“),
right to restriction of processing,
right to data portability,
right to object to processing,
right to withdraw consent at any time (without affecting lawfulness of processing before withdrawal),
right to lodge a complaint with the national Data Protection Authority.

9. Contact for Exercising Rights

If you have questions about the processing of your personal data or wish to exercise your rights, please contact us using the contact details provided above.

If you are not satisfied with the way your request is handled, you may lodge a complaint with the Office for Personal Data Protection of the Slovak Republic (https://dataprotection.gov.sk/uoou/).