VALID UNTIL 31 DECEMBER 2025

JobTiger Ltd., IDN 130175259, with registered office at: Sofia 1000, 13 Vesletz Str., registered under the VAT Act, e-mail: [email protected] is a personal data processor under the GDPR.

On behalf of the provider Profesia, spol. s r.o JobTiger Ltd. processes personal data including sensitive personal data collected from the users of the website Zaplatomer.bg such as e-mail, sex, education, profession, etc. to obtain up-to-date information about the salary levels generated using the mentioned website. When the data subjects contact JobTiger Ltd. to exercise the rights provided for in Articles 12 to 22 incl. from GDPR, it will notify the controller for all requests of the data subjects without undue delay but not later than 3 days of receiving such requests. JobTiger Ltd. assists Profesia, spol. s r.o by appropriate technical and organisational measures, insofar as this is possible, to ensure the protection of the subjects' personal data. The period of the personal data processing is limited to 12 (twelve) months after the date of the data entry by the subject.

Rights of the data subjects

Right to information: 

The data subject shall have the right to obtain:

• Information as to whether personal data concerning him or her are being processed, information about the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data are disclosed;
• Communication in an intelligible form about the processed personal data, as well as any available information as to their source;

Right to rectification:

In case of processing of incomplete or inaccurate personal data, the data subject shall have the right to request:

• Erasure, rectification or blocking of personal data provided by the data subject, which have been unlawfully processed;
• Communicating any erasure, rectification or blocking to third parties to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort.

The requests for access to or rectification of information shall be made by electronic form means.

JobTiger Ltd. shall notify the controller for all requests of the data subjects without undue delay and not later than 3 days of receiving such requests. Profesia, spol. s r.o shall provide information on action taken on a request within 30 days of submission of the request. That period may be extended to 90 days where necessary, taking into account the collection of all additional information necessary and the data subject shall be informed of any such extension without undue delay. The controller shall be obliged to give reasons where the controller does or does not intend to give access to the requested information.

Right to object: 

The data subject shall have the right to object, if there is a legal basis, at any time to processing of personal data concerning him or her. If the objection is reasonable, the personal data of the data subject can no longer be processed.

Right to restriction of processing: 

The data subject shall have the right to request restriction of personal data processing if:

• The accuracy of the personal data is contested by the data subject - for a period in which the accuracy of the personal data is verified; or
• The processing is unlawful, and the data subject opposes the erasure of the personal data and requests the restriction of their use instead; or
• The controller no longer needs the personal data (for the purposes of the processing), but they are required by the data subject for the establishment, exercise or defence of legal claims; or
• The data subject has objected to processing pending the verification whether the legitimate grounds of the controller are legitimate.

Right to data portability: 

The data subject shall have the right to receive from the controller the personal data concerning him or her, in an organised, ordered, structured, commonly used electronic form if:

• The processing is based on consent which can be withdrawn or is necessary for the performance of a contract;
• The processing is carried out by automated means.

Right to complaint: 

If the data subject considers that the controller (Profesia, spol. s r.o) or the processor (JobTiger Ltd.) infringes the applicable personal data protection regulation the data subject may contact the companies to clarify this matter. The data subject shall have the right to lodge a complaint with the competent supervisory authority, in Slovak Republic: Office for the Protection of Personal Data or the Commission for Personal Data Protection in Republic of Bulgaria.

Privacy Policy

1. Introductory Provisions
2. Definitions
3. Principles of Processing and the Security of Personal Data
4. Processing of Personal Data When Providing Services on the Website
5. Rights of Data Subjects

1.Introductory Provisions

Profesia, spol. s r.o. is an organisation with a long tradition of providing services to entities operating on the labour market. It is the strategic objective of Profesia, spol. s r.o. to ensure financial and economic stability, improve the quality of the services provided, develop good relationships with its partners, and enhance the company's reputation.

Implementing these objectives depends on the constant improvement of the management quality, as well as the quality and efficiency of the provided services that apply the latest IT-assisted procedures. We realise that the security and protection of personal data is an integral part of the use of information technologies.

The Security Policy of Profesia, spol. s r.o. stipulates the necessary and economically appropriate measures to protect the assets of the information system, individuals, and property, and to implement security mechanisms into the system of technologies used.

The management of Profesia, spol. s r.o. is responsible for proper risk assessment and its efficient management with respect to the protection of assets that are essential for ensuring the proper functioning of the organisation. The primary objective of managing such risks is to prevent, manage, and recover from security incidents.

To protect vital assets falling within internal security, we have, in cooperation with experts, applied security measures that are adapted to the latest knowledge and needs of the organisation. In designing them, we implemented technical and organisational measures that aim to:

• ensure the availability, integrity, and reliability of management systems through state-of-the-art information technologies,
• protect sensitive commercial and personal data from being lost, damaged, stolen, modified, or destroyed, and to maintain the confidentiality of the processed data,
• identify potential problems and sources of disruption and to prevent them.

Therefore, Profesia, spol. s r.o. has adopted appropriate technical and organisational measures to ensure the level of security in the processing of personal data (including the DPIA dossier), and has developed a security project that is regularly updated and defines the scope and method of security measures needed to eliminate and minimise threats and risks affecting our company's information systems.

Profesia, spol. s r.o. processes the personal data of the Data Subjects exclusively in accordance with Act no. 18/2018 Coll. on the protection of personal data and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC on the protection of personal data. Profesia, spol. s r.o. is an operator of personal data.

Profesia, spol. s r.o. has issued this document, which includes the basic rules for the processing of personal data in providing services through the website. Profesia, spol. s r.o. reserves the right to amend and supplement this document, while informing its business partners immediately by posting any changes on the website and specifying the date from which such changes take effect. All rights which are not explicitly provided for herein shall be governed by the General Terms and Conditions of Profesia, spol. s r.o. and by the applicable Slovak legal regulations.

This document is in accordance with the applicable provisions of:

• Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/ECon the protection of personal data (the "Regulation"),
• Act no. 18/2018 Coll. on the protection of personal data (the "Act"),
• Act no. 351/2011 Coll. on electronic communications, as amended
• Act no. 22/2004 Coll. on electronic commerce and amending Act no. 128/2002 Coll. on state control of the internal market in consumer protection matters and on the amendment of some acts, as amended by Act No. 284/2002 Coll. as amended,

The Privacy Policy is always available at the website.

2.Definitions

Personal data is any information regarding an identified or identifiable natural person ("Data Subject"); an identifiable natural person is a person who can be identified directly or indirectly, in particular by reference to an identifier such as name, identification number, location data, online identifier, or a reference to one or more elements specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person;

Data Subject means the person to whom the personal data relates.

Operator is a natural or legal person, a public authority, an agency, or other entity that, alone or jointly with others, determines the purposes and means of processing personal data; where the purposes and means of such processing are laid down in Union law or in the law of a Member State, the operator or the specific criteria for the operator's designation may be determined by Union law or by the law of a Member State.

Client is a natural or legal person who uses or plans to use the services provided on the Website.

What personal data do we request from you and why do we process it?

In order to handle your order properly and to provide good services, we need to know the Data Subject's e-mail address, as our services are rendered through electronic communication.

3.Principles of Processing and the Security of Personal Data

Personal data must be:

• processed lawfully, fairly, and transparently in relation to the Data Subject ("legality, justice, and transparency"),
• obtained for specified, explicit, and legitimate purposes, and may not be further processed in a way that is incompatible with those purposes ("purpose limitation"),
• reasonable, relevant, and limited to the extent necessary for the purposes for which it is processed ("data minimisation"),
• correct and, if necessary, updated; all necessary measures must be taken to ensure that personal data that is incorrect in respect of the purposes for which it is processed is erased, corrected, or deleted without delay ("correctness"),
• stored in a form that permits the identification of Data Subjects as long as it is necessary for the purposes for which the personal data is processed ('minimisation of storage"),
• processed in a manner that guarantees the reasonable protection of personal data, including protection against unauthorised or unlawful processing and accidental loss, destruction, or damage, through appropriate technical or organisational measures ("integrity and confidentiality").

The Operator is responsible for compliance with the above principles and must be able to demonstrate this compliance ("responsibility").

The processing of personal data is legal only if and only to the extent that at least one of the following conditions is met:

• the Data Subject has consented to the processing of his/her personal data for one or more specific purposes,
• processing is necessary for the performance of the contract to which the Data Subject is a party, or to take measures prior to the conclusion of the contract at the request of the Data Subject,
• processing is necessary to fulfil a legal obligation of the Operator,
• processing is necessary in order to protect the vital interests of the Data Subject or another natural person,
• processing is necessary to fulfil a task carried out in the public interest or in the exercise of public authority entrusted to the Operator,
• processing is necessary for the purposes of legitimate interests pursued by the Operator or a third party, except where such interests are prevailed over by the Data Subject's interests or fundamental rights and freedoms that require the protection of personal data, in particular where the Data Subject is a child.

The Operator is particularly obliged:

• to determine, prior to the commencement of personal data processing, the purpose of personal data processing, which needs to be clear and defined unequivocally and specifically, and must be in compliance with the Constitution of the Slovak Republic, the constitutional laws, as well as the laws and international treaties by which the Slovak Republic is bound,
• to determine the conditions of personal data processing so as not to limit the Data Subject's right stipulated by the law to obtain personal data exclusively for the designated or specified purpose; it is inadmissible to obtain personal data under the pretext of another purpose of processing or another activity,
• to ensure that only personal data the scope and content of which match the said purpose of processing and are required to achieve said purpose is processed,
• to ensure that personal data is processed and used solely in the manner corresponding to the purpose for which it was collected; the combining of personal data obtained for various purposes is inadmissible,
• to ensure that the collected personal data is processed in a manner enabling the identification of the Data Subjects only during a period no longer than is necessary to achieve the purpose of the processing,
• to destroy or anonymise personal data whose purpose of processing has ceased to exist; once the purpose of processing ceases to exist, personal data may only be processed to the extent necessary for historical research, scientific research and development, or for statistical purposes. When processing personal data for the purposes set forth in the previous sentence, the Operator is obliged to mark and anonymise such data.

4.Processing of Personal Data When Providing Services on the Website

Website visitors can easily compare their salaries or order a salary analysis, taking into account the job position and region specified in a short online form.

Website visitors can also enter their e-mail address when completing the online salary comparison form. Since under the Regulation and the Act an e-mail address may be considered personal data, it is essential that the Data Subject gives consent to the processing of personal data before submitting his/her e-mail.

The e-mail address of the Data Subject serves for the quarterly delivery of the salary comparison processed by the Operator. The consent can be revoked at any time, otherwise the consent will expire after 1 year from the date of its issue, and the data in the scope of the e-mail address will be deleted. Please send your request to revoke your consent to the e-mail address [email protected] or to the address of our registered office: Profesia, spol. s r.o., Pribinova 19, 811 09 Bratislava, Slovakia or to JobTiger Ltd., Sofia 1000, 13 Vesletz Str., [email protected].

What personal data do we request from you and why do we process it?

In order to handle your order properly and to provide good services, we need to know the Data Subject's e-mail address, as our services are rendered through electronic communication.

The user may also give individual consent to the use of personal data for a period longer than 1 year. Practically, this data will be used to statistically track the development of the salary of the individual who provided the e-mail address, which will not be communicated to anyone other than the user. In this case, you consent to the processing of your personal data for a period that is not expressly limited. You can still withdraw your consent to processing your personal information at any time using an e-mail message with information about your salary that we will send you.

Cookies

Cookies are small data files that are downloaded onto the device (PC, tablet, mobile phone, etc.) while using the Website. The Operator uses cookies to examine the effectiveness of the Website. Cookies generally do not contain any information intended to identify individual persons, but instead are used to identify the browser on a specific device. Cookies may be temporary or may permanently remain on the device even after closing the browser for the time specified in the cookie. These permanent cookies can be checked every time the Website is visited. The information we collect through the Website includes: browser type, the web address from which the Website was visited, the device operating system, and the IP address of the device. To display more relevant ads, some cookies are set up by a third party advertising system, such as Google Adsense. This can be disabled in the Google account. The computer can be set to refuse cookies, although in that case some of the page functionalities will not work.

5.Rights of Data Subjects

The Operator will take appropriate measures to provide the Data Subject with all the information referred to in Articles 13 and 14 of the Regulation and all communications under Articles 15 to 22 and Article 34 of the Regulation relating to processing, in a concise, transparent, comprehensible, and easily accessible form, clearly and easily formulated, especially in the case of information intended specifically for a child. Information shall be provided in writing or by other means, including where appropriate by electronic means. If the Data Subject so requests, the information may be provided orally, as long as the identity of the Data Subject has been proven in another way.

The Data Subject has the right to obtain from the Operator a confirmation if personal data concerning him/herself has been processed and, if so, he/she has the right to access this personal data and the following information:

• processing purposes;
• the categories of personal data concerned;
• the recipients or categories of recipients to whom the personal data has been or will be provided, in particular recipients in third countries or international organisations;
• where possible, the foreseeable period of retention of the personal data or, if that is not possible, the criteria for its determination;
• the existence of the right to require the Operator to correct personal data relating to the Data Subject or to erase or restrict the processing thereof, or to object to such processing;
• the right to file a complaint with a supervisory authority;
• where personal data has not been obtained from the data subject, any available information as to their source;
• the existence of automated decision making, including profiling.

The Data Subject has the right to require the Operator to correct any incorrect personal data relating to him/her without undue delay. With regard to the purposes of the processing, the Data Subject has the right to supplement incomplete personal data, including through the provision of a supplementary statement.

The Data Subject is entitled to request that Profesia, spol. s r.o. delete his/her personal data. All consent to the processing of personal data provided to Profesia, spol. s r.o. is revocable. Please send your application to the e-mail address: [email protected].

The supervisory authority is the Office for the Protection of Personal Data of the Slovak Republic. The Data Subject is entitled to file a complaint with the supervisory authority.

In case of questions, please contact the person responsible for the processing of your personal data: Mgr. Csaba Zachar, Legal Department of Profesia, spol. s r.o., e-mail: [email protected].

In Bratislava, on 24/05/2018

JobTiger.bg

VALID FROM 1 JANUARY 2026

 This Privacy Policy explains how Alma Career companies as joint controllers, as defined below, process the personal data of Users and Clients in connection with the provision of the Paylab Service ("Data Subjects"). 

The personal data of Data Subjects are processed in accordance withthe applicable and effective legal regulations, in particular General Data Protection Regulation (EU) 2016/679 (“GDPR”).  

1. ALMA CAREER 

Alma Career includes/represents companies that act as joint controllers for the purposes of the GDPR, unless otherwise specified below (see point 2 below).  

Alma Career Czechia s.r.o., registered office: Menclova 2538/2, Libeň, 180 00 Prague 8, Czech Republic, ID No: 264 41 381, registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, Insert 82484, 

Alma Career Slovakia s. r. o., registered office: Bratislava - Staré Město, Pribinova 19, ZIP code 811 09, Slovak Republic, ID No.: 35800861, registered in the Commercial Register maintained by the Bratislava III District Court, section Sro, insert 22949/B, 

Alma Career Poland Sp. z o.o., registered office: BL Astoria, Przeskok 2, 00-032 Warsaw, Republic of Poland, registered in the Commercial Register maintained by the District Court for the capital city of Warsaw in Warsaw, XII Commercial Division of the National Court Register, under entry number KRS 0000988078, NIP 5252920122, REGON: 522873400, with a share capital of 300,000 PLN, 

(hereinafter referred to as "we", "us", "our", "Joint Controllers" or "Alma Carrer"). 

Terms used in the Privacy Policy that are not specified herein shall have the meanings defined in the terms and conditions at https://www.almacareer.com/legal. 

2. POSITION IN TERMS OF GDPR 

JOINT CONTROLLERS 

All of the aforementioned Alma Career companies are so-called joint controllers of personal data as per Article 26 GDPR, unless they are in the position of a separate controller. The companies have entered into an agreement that defines the individual shares of responsibility for compliance with the obligations set out in Article 26 of the GDPR. 

INDEPENDENT CONTROLLER 

Alma Career Slovakia s.r.o. acts as an independent data controller when it processes Client data for the performance of contractual or legal obligations related to the provision of the Paylab Service.

3. HOW WE USE PERSONAL DATA - SCOPE / PURPOSE 

Personal data and information provided by the Data Subject 

• we only use them for the purpose for which they were given,   

• they are processed both manually and automatically, 

• and are not subject to automated decision-making or profiling.  

USERS 

The scope of the data corresponds to the form the User fills in on the Paylab website. This includes the following categories of data: job title, experience in the position, salary/wage and job information, and other information indicated in the form. E-mail is optional, it serves for sending salary reports based on the specified criteria and is not mandatory.  

The purpose of the data processing is to create a salary report based on the criteria entered by the User, even without providing an e-mail address.  

If the e-mail address is provided, an updated salary comparison is sent to the User every three months for a period of one year. After one year, an invitation is sent to the User to join the salary survey, however, if the User does not respond to the invitation, her/his e-mail is deleted from the Alma Career database within one week.  

If the User agrees to the use of her/his e-mail address for salary tracking, a message with the salary trend and an invitation to participate in the salary survey will be sent to the User in the following year.  

CLIENTS 

The scope of the data follows from the relevant form that the Client fills in on the Paylab website. These are the following categories of data: company name, ID number, name, referral, e-mail, phone number, target country for which the client wants to try Paylab, or other information as specified in the form.  

The purpose of the data processing is the provision of the Service, i.e. the testing of the salary tool and/or the provision of Salary Analyses in accordance with the Alma Career Product Terms and Conditions.  

4. LEGAL GROUND AND DATA PROCESSING PERIOD 

USERS 

The legal ground for the processing is consent to the processing of personal data pursuant to Article 6(1)(a) GDPR in the case of an e-mail. Salary information (anonymous data) is processed on the basis of Article 6(1)(b) for the provision of the service and Article 6(1)(f) GDPR for statistical purposes, i.e. monitoring and comparison of salary development.    

The e-mail is retained for one year for the purpose of sending salary reports.  

If the User gives consent to the use of the e-mail address for salary progress monitoring, the e-mail is stored for the period of the consent given, with the possibility of its revocation, and therefore deletion, via the link provided in the footer of the message. 

CLIENTS 

The legal basis for processing is pre-contractual and/or contractual negotiations according to Article 6(1)(b) GDPR. If the Data Subject acts on behalf of the Client as an employee, the personal data, including contact data, is processed on the basis of legitimate interest pursuant to Article 6(1)(f) GDPR. 

The data is processed for a period of one year and, in the case of ordering paid Services, for the period required by accounting and tax regulations.  

5. RECIPIENTS OF PERSONAL DATA 

The personal data of Data Subjects is only disclosed to authorized personnel of Alma Career or individual contracted processors or other recipients as separate controllers, such as public authorities.  

Most processors have only limited access to the personal data of Data Subjects. Although personal data are transmitted by the processor, this is only to a minimal extent. No processor is entitled to use the personal data provided for its own purposes (marketing or otherwise). 

We use the cloud provider Amazon Web Services for Paylab Services. Information on other potential processors is available at https://www.almacareer.com/gdpr.   

When transferring data to a processor, we fully respect the principles of personal data processing under the GDPR, in particular the principle of data minimization - we do not transfer all data, only the data that are necessary for the purpose, for example, for sending out e-mail communication, it's just e-mails. With regard to data transfers outside the EU/EEA, Alma Career undertakes that any transfer of personal data to third countries will only take place under the conditions set out in Articles 44-49 of the GDPR. If the tools for the transfer of personal data to a third country are modified, revoked or invalidated, Alma Career undertakes to take such measures as are equivalent to those required by EU law.  

In the cases provided by law, the Controller may, and sometimes must, disclose certain personal data to public authorities or law enforcement authorities in accordance with applicable law. For this reason, we are sometimes as well obliged to "comply" with the relevant public authorities. 

6. MARKETING - BUSINESS MESSAGES 

We use the contact details (e-mail, phone number) of our Clients for marketing purposes relating to our own Services. We may use this data to send marketing messages only if the Client has not opted out of receiving these messages and unless otherwise required by law (such as in Poland or Hungary). 

Anyone is entitled to unsubscribe from receiving marketing messages via the link provided in the footer of the email message or by sending a STOP message (even in advance) to  

The conditions for sending marketing messages are governed by the e-privacy directive and local regulations. We would also like to emphasize that not every message you receive from us is a marketing / commercial message. While providing a given Service, sometimes it is necessary to communicate with Clients and Users of Alma Career Services directly, and due to the large number of recipients, this cannot be handled by any other means than via bulk e-mail. Such messages are not commercial communication – an example is a notification that the general terms and conditions or product terms have changed or information about a password change or a notification of an incomplete action, e.g. when filling in information in an posting form. 

Please note that if you have consented to receive commercial communications for our other products and you wish to opt out of a particular Service, but not all of them, you you have to write this information in the e-mail, e.g. unsubscribe only from Seduo. Otherwise, we will unsubscribe you from receiving all commercial communications or from that commercial communication as indicated in the applicable e-mail footer. Unsubscribing from all commercial communication may also affect the sending of Job Advertisement as we classify them as marketing communications. 

Based on your history of use of our Services, you may receive notifications on some websites in the form of promotional communications that we would like to welcome you back on our websites. For these notifications we use the services of Google, Facebook, LinkedIn and Seznam.cz – they use the cookies stored in your browser to detect your previous visit, provided you have given your consent. 

For more information about marketing via web tools, please see the Cookie Policy.   

7. COOKIES / TAGS 

We use cookies to provide our Users and Clients with the best Services. Cookies are short text files that allow the recording of information when you visit a website and are stored on the User's device.  

Our website may also contain third-party cookies, which are used to obtain anonymous statistics about the traffic and behavior of Users on individual pages. These third parties usually do not store any personal data in relation to the use of cookies since they do not have access to the identity of the Alma Career Service User, provided that the User is not logged into the user account of such third party - e.g. Google. 

The use of cookies can be modified via the cookie bar or in browser settings.   

Detailed information on the use of cookies is available in Cookie Policy. 

8. HOW WE PROTECT DATA 

Alma Career has implemented all technical and organizational measures to ensure the protection of personal data in accordance with the GDPR and the relevant (local) data protection legislation.  

These include measures to prevent unauthorized or accidental access, alteration, destruction or loss of personal data, unauthorized transfers, other unauthorized processing and misuse of personal data. This obligation remains in force even after the processing of personal data has ceased, i.e. even after the User stops using our Services.  

Personal data is continuously monitored electronically and physically. We have implemented modern safety and security mechanisms to ensure maximum data security. To protect data from unauthorized access, we use a user access control system to manage user rights and roles. All persons who, in the course of their work or in the performance of their contractual obligations, come into contact with the personal data of Users or Clients of Alma Career Services are bound by a legal and/or contractual duty of confidentiality. 

9. DATA SUBJECT RIGHTS 

Data Subjects’ rights can be exercised in writing by sending a letter to Alma Career's registered office or by e-mail to DPO-SK@almacareer.com, DPO-CZ@almacareer.com or DPO-PL@almacareer.com. 

Please note that in the event of repeated or manifestly unfounded requests to exercise the rights, Alma Career is entitled, in accordance with Article 12(5) of the GDPR, to charge a reasonable fee for the exercise of the right in question, or to refuse to comply with such a right. Alma Career shall inform you of such steps in advance. Please direct your requests primarily to the Alma Career company whose Services you are using. We will promptly acknowledge receipt of your request and process it within the one-month time limit set by the GDPR, or we will inform you of the reasons for the extension.  

9.1 Right of access  

You have the right to be informed whether your personal data is being processed and, if so, to have access to it. 

9.2 Right to rectification  

If you consider personal data processed by Alma Career to be inaccurate, incorrect, outdated or incomplete, you have the right (and in certain cases the obligation) to request its rectification or completion. Alma Career will rectify/add the data without undue delay, taking into account technical limitations. 

9.3 Right to erasure ("right to be forgotten") 

If you request erasure of your data, we will erase your personal data if (i) they are no longer necessary for the purposes for which it was collected, (ii) you withdraw consent or object to the processing and there are no overriding legitimate grounds for processing, (iii) they were processed unlawfully, or (iv) a legal obligation must be fulfilled, or if it was collected in connection with the offer of services of the information society.  

9.4 Right to restriction of processing 

If you do not wish to delete the data, but only to temporarily restrict the processing, you can exercise your right to restrict the processing of your personal data.   

The data subject has the right to restrict processing if (i) she/he disputes the accuracy of the data - for the time necessary for the controller to verify the accuracy of the personal data, or (ii) the processing is unlawful and the data subject refuses to erase the personal data but requests instead that the use of the data be restricted, or (iii) Alma Career no longer needs the personal data for processing but the Data Subject requires it for the establishment, exercise or defense of legal claims; or (iv) the Data Subject objects to the processing - pending a determination of whether Alma Career's legitimate interests outweigh the Data Subjects' legitimate interests. 

9.5 Right to data portability 

If you wish to transfer your personal data processed based on consent or contract to another controller, you can exercise your right to data portability. If the exercise of this right could adversely affect the rights and freedoms of third parties, Alma Career will not be able to comply with such a request. 

9.6 Right to object 

You may object to the processing of personal data that is processed for the purposes of protecting the legitimate interests of Alma Career or third parties, including profiling. Unless we can prove that there are compelling legitimate grounds for the processing that override the interests or rights and freedoms of the Data Subject, we will terminatethe processing without undue delay upon objection.  

You can object to the sending of commercial communications via the link provided in the marketing message. You can object to marketing at any time before the data is provided, either by ticking the checkbox - if available - or by writing an e-mail with the subject STOP. 

9.7 Right to withdraw consent  

If personal data is processed based on consent, you can withdraw your consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent given before its withdrawal. 

9.8 Right to contact the Data Protection Authority 

You have the right to contact the relevant supervisory authority. Contact details for each supervisory authority can be found at https://www.edpb.europa.eu.  

10. DATA PROTECTION OFFICER 

You can contact the Data Protection Officer at any time at the Alma Career head office (please see point 1) or by e-mail at DPO-SK@almacareer.com, DPO-CZ@almacareer.com or DPO-PL@almacareer.com.  

The terms of processing set out in this Privacy Policy apply to any data or information you provide to us in any written or telephonic communication. 

11. FINAL PROVISIONS 

Alma Career reserves the right to modify this Privacy Policy in response to changes in the Services provided and/or if there is a change in the law that requires us to govern the relationship differently. 

Minor edits, such as formatting, correcting typos or clarifying text, can be made without changing the date of the last update. 

In accordance with the European Data Protection Board's guidelines, we will notify significant or material changes/processes that may be surprising or unexpected, via Alma Career's electronic systems. 

The Privacy Policy  

• is valid and effective from 1. 1. 2026, 

• was last updated on 1. 1. 2026, 

• is available on the relevant Paylab site.