Privacy Policy

This Privacy Policy explains how Alma Career as joint controllers and as defined below processes individuals' personal data, including the purposes for which personal data is processed and the rights of data subjects.

The personal data of the data subjects are processed in accordance with the applicable and effective legal regulations, in particular the General Data Protection Regulation (EU) 2016/679 (“GDPR”).

Alma Career includes / represents companies that act as joint controllers from a GDPR perspective. The following companies are joint controllers: LMC s.r.o., Profesia spol. s r.o., LMC Poland Sp. z o.o.

Depending on your request and the purpose of the processing – in addition to cloud or service providers – the recipient of your personal data may be any company within the Alma Career business group, a list of which, including contact details, is available here.

Every user of our services has the following rights, which we at Alma Career fully respect:

Transparency

Whenever you enter personal data within Alma Career services, we always transparently inform you of the purpose for which the entered data may be used, who uses these data, and who the controller is. This document is part of any such guidance that refers to it.

Right to access personal data

The owner of the data is authorized to receive a confirmation of whether his/her personal data are being processed, and if so, then he/she is authorized to gain access to such personal data. This means that, upon request, we provide our users with all information about the processing of those personal data where we have the position of controller of personal data (a request can be sent via e-mail to dpo@lmc.eu). If a user of our services wishes to receive information regarding the personal data they provided to a client, in this case, they should contact the client who holds the position of administrator of personal data.

Right to rectification

If an applicant discovers that some of their personalher personal data are incorrect or not being processed correctly, he/she is authorized to have the personal data corrected as soon as possible (the request can be sent by e-mail to dpo@lmc.eu).

Right to be forgotten

If personal data are being processed for a specific purpose and at some point, no longer become necessary for that purpose, we will automatically delete them. If personal data are being processed based on consent and the owner of the data withdraws his/her consent, we also delete them. Here, however, it is necessary to note that we only delete personal data for which we hold the position of controller, including for all joint controllers.. For personal data held by our clients, it is necessary to apply to the clients who are controllers of the given personal data for the right to be forgotten. Furthermore, it is necessary to specify that the right to be forgotten is not absolute, and if we have an objective obligation to maintain the data (e.g. accounting), then we will only delete the personal data that are no longer necessary for the original purposes of processing.

Requests for erasure of personal data can be sent by e-mail to dpo@lmc.eu. You acknowledge that in case the consent to personal data processing is withdrawn, such a withdrawal shall not affect the lawfulness of processing based on consent before its withdrawal.

Right to restriction of processing data

The owners of personal data have the right to limit the processing of his/her personal data (a request can be sent by filling in a contact form or by sending an e-mail to dpo@lmc.eu), if: i) the owner of the data disputes the accuracy of the data – for the period necessary for the controller to verify the accuracy of the personal data; or ii) the processing is illegal and the owner refuses the deletion of personal data but instead requests that their use be limited; or iii) the controller no longer needs the personal data for processing, but the owner requires them for legal reasons; or iv) the owner of the data makes an objection to their processing – until determining whether the justified interests of the controller supersede the justified interests of the owner of the data.

Right to portability

If you want Alma Career to transfer your personal data that it processes on the basis of consent or data that are necessary for the performance of a contract to a third party, you can exercise your right to data portability. If the exercise of this right would adversely affect the rights and freedoms of others, Alma Career will not be able to comply with your request.

Right to object

The owners of personal data have the right to raise an objection to the processing of personal data that are processed for the purposes of protecting the legitimate interests of Alma Career or third parties. If Alma Career does not prove that there are compelling legitimate grounds for the processing which take precedence over the interest or rights and freedoms of the data subject, Alma Career will terminate the processing based on the objection without undue delay.

Right to protection of privacy

If a user of Alma Career services discovers or believes that Alma Career is processing his/her personal data in a way that violates the protection of his/her personal and private life and/or illegally, especially if the personal data are inaccurate with respect to the purpose of their processing, he/she may request that Alma Career provide an explanation or request that Alma Career remedy the situation; this may especially refer to blocking, corrections, amendments, or deletion of personal data (the request may be sent by e-mail to dpo@lmc.eu).

In the event of repeated or manifestly unjustified requests to exercise the aforementioned rights, Alma Career is entitled to charge a reasonable fee for the exercise of the right in question or to refuse to exercise it. We would inform you in advance of such action.

Alma Career reserves the right to verify the identity of the applicant in a reasonable manner in accordance with Article 12(6) GDPR in relation to the rights exercised.

If Alma Career does not comply with the Alma Career service user's request as per the previous sentence, then the Alma Career service user is authorized to contact the Data Protection Authority; https://edpb.europa.eu/members.

The data subjects’ rights can be exercised in writing by a letter sent to the registered office of any joint controller or by e-mail to dpo@lmc.eu.