Candidate Privacy Notice
This notice explains how I process personal data about candidates and potential candidates in connection with recruitment, executive search and talent advisory services. It applies whether you contact me directly, are referred to me, or I identify your professional profile through a professional network or another lawful public source.
1. Who is the controller?
The data controller is Jana Affum, sole trader, Business ID (IČO) 13956248, VAT ID CZ8952264651, registered office tř. Dukelských hrdinů 3789/84, 695 01 Hodonín, Czech Republic. Email: janaaffum@gmail.com.
2. What candidate data may I process?
Depending on the role and interaction, I may process: identification and contact details; CV, employment history, education, qualifications, skills; public professional profile data including LinkedIn; role preferences and availability; interview and call notes; and references where agreed.
3. Where does the data come from?
Data may come directly from you, from a person who refers or recommends you, from professional networking platforms like LinkedIn, from company websites, or from recruitment clients involved in a hiring process.
4. Why do I process candidate data?
| Purpose | Legal basis |
|---|---|
| To contact you about a potentially relevant opportunity and assess your possible fit | My legitimate interests and those of my recruitment client in identifying and engaging suitable professional talent (Art. 6(1)(f) GDPR) |
| To discuss your application, preferences and suitability, and to take steps you request in relation to a potential role | Steps before a possible contract (Art. 6(1)(b) GDPR), where applicable, and legitimate interests (Art. 6(1)(f) GDPR) |
| To present your profile to a recruitment client and manage a hiring process | Legitimate interests (Art. 6(1)(f) GDPR); in practice, I will tell you about the client and obtain your agreement before submitting your identifiable profile |
| To comply with legal duties or respond to lawful requests | Legal obligation (Art. 6(1)(c) GDPR) |
| To retain your profile for unrelated future opportunities | Your consent (Art. 6(1)(a) GDPR), where I ask to keep you in a talent pool beyond the current process |
5. Who may receive candidate data?
Candidate data is shared with the named recruitment client only after discussing the opportunity with you and obtaining your agreement. I do not sell candidate data.
6. How long do I retain candidate data?
Data used for a specific process is kept up to 12 months after it ends. Talent pool data is kept up to 24 months with your consent or last meaningful contact.
7. Your rights & Updates
To exercise your rights or request not to be contacted again, email janaaffum@gmail.com. You may also lodge a complaint with the Czech supervisory authority (ÚOOÚ).