EBC-Slovakia s.r.o.
Vajnorská 100/A, 831 04 Bratislava – Nové Mesto
Company ID (IČO): 45867232
Tax ID (DIČ): 2023126281
VAT ID (IČ DPH): SK2023126281

Last updated: 2025.11.18

1. Introduction

This Privacy Policy explains how EBC-Slovakia s.r.o. (“we”, “us”, “our”, or the “Controller”) collects,
uses, stores, and protects personal data of users who register on our website, submit job applications,
respond to job offers, or use our services.

By creating an account, submitting your CV, or interacting with our website, you acknowledge and agree
to the processing of your personal data as described in this Privacy Policy.

We process personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of
the Council (General Data Protection Regulation, “GDPR”) and Act No. 18/2018 Coll. on Personal Data
Protection (Slovakia).

2. Data Controller

The data controller responsible for the processing of your personal data is:

EBC-Slovakia s.r.o.
Vajnorská 100/A
831 04 Bratislava – Nové Mesto
Slovakia
Email: info@ebcg.com

If you believe your rights have been violated, you may also contact the Slovak supervisory authority:

Úrad na ochranu osobných údajov Slovenskej republiky
Hraničná 12
820 07 Bratislava 7
Slovakia
Website: www.dataprotection.gov.sk

3. Personal Data We Process

We process all personal data that users provide during registration, when applying for positions,
or when using our website and services. This includes, in particular:

• first name and last name,
• address of permanent residence or correspondence address,
• date of birth,
• email address and telephone number,
• education, professional qualifications, certificates,
• previous work experience and job titles,
• languages, skills, and competencies,
• CV (curriculum vitae) and attached documents,
• profile photograph (portrait or full-length),
• personal characteristics, preferences, and career goals (if provided),
• communication history with us,
• any personal data provided voluntarily during interviews or later cooperation.

We may also collect technical data when you use our website, such as:

• IP address,
• browser type and version,
• device information,
• cookies and analytics identifiers,
• date and time of visits,
• pages viewed and interactions with the website.

4. Purpose and Legal Basis of Processing

4.1 Registration and user account

Purpose: creating and managing your user account on our website, enabling you to apply for positions
and respond to job offers.

Legal basis: Article 6(1)(b) GDPR – performance of a contract or steps taken at your request prior to
entering into a contract.

4.2 Applications, CV submission, job responses

Purpose: assessing your application, evaluating your suitability for positions, communicating with you,
and matching your profile with available job opportunities.

Legal basis:

• Article 6(1)(b) GDPR – performance of a contract or steps prior to entering into a contract,
• Article 6(1)(a) GDPR – your consent, where you submit data voluntarily and agree to its further processing.

4.3 Storing candidate data for future opportunities

Purpose: storing your profile and CV in our internal candidate database so that we can contact you with
future job opportunities matching your profile.

Legal basis: Article 6(1)(a) GDPR – your explicit consent.

4.4 Exporting data to external recruitment systems

For efficient recruitment and candidate management, we may export your data to external systems, in particular:

• RecruHR (recruhr.com)

Purpose: managing applications, matching candidate profiles with job offers, communication, and workflow management.

Legal basis: Article 6(1)(a) GDPR – your consent.

4.5 Security, hosting, and backups

Purpose: ensuring secure operation of our website, hosting, system maintenance, and data backups.

Legal basis: Article 6(1)(f) GDPR – our legitimate interest in maintaining the security and stability of our services.

4.6 Marketing and analytics

We use analytics and marketing tools to understand how users interact with our website, to improve our services,
and to measure the effectiveness of our marketing activities. The tools we use include:

• Google Analytics 4 (GA4),
• Google Tag Manager,
• Google Ads,
• Meta Pixel (Facebook),
• Mailchimp (email marketing, newsletters).

Legal basis:

• for non-essential cookies and tracking – Article 6(1)(a) GDPR (your consent),
• for essential cookies required for basic site functionality – Article 6(1)(f) GDPR (legitimate interest),
• for sending newsletters and marketing emails – Article 6(1)(a) GDPR (your explicit consent).

5. Cookies

Our website uses cookies and similar technologies to ensure proper functionality, analyze traffic, and
support marketing activities.

5.1 Types of cookies we use

• Essential cookies: required for the proper functioning of the website,
  login sessions, and security features. These cookies cannot be disabled in our systems.
• Analytics cookies: used by Google Analytics 4 and Google Tag Manager to measure traffic,
  usage patterns, and to help us improve the website and user experience.
• Marketing cookies: used by Google Ads and Meta Pixel to deliver personalized ads
  and measure ad campaign performance.
• Email tracking cookies: used by Mailchimp to analyze the performance of email campaigns
  (e.g., opens and clicks).

5.2 Managing cookies

You can manage or disable cookies through your browser settings. You may also be able to adjust your preferences
through our cookie consent banner, where applicable. Please note that disabling certain cookies may affect the
functionality of the website.

6. Data Storage and Transfers

6.1 Where we store your data

Personal data is stored:

• on secure hosting servers located in the European Union,
• in our internal systems,
• in trusted third-party systems such as RecruHR and Mailchimp.

All service providers are carefully selected and are contractually bound to comply with applicable data
protection laws, including GDPR.

6.2 Sharing data with third parties

Your personal data is not publicly accessible and is shared only where necessary, including:

• hosting and IT service providers,
• providers of recruitment software (e.g., RecruHR),
• providers of analytics and marketing tools (Google, Meta),
• providers of email marketing services (Mailchimp).

We do not sell your personal data to any third parties.

6.3 Transfers to third countries

Some service providers (such as Google, Meta, and Mailchimp) may process data outside the European Economic Area
(e.g., in the United States). In such cases, we ensure that appropriate safeguards are in place, such as
Standard Contractual Clauses (SCC) and other measures required by GDPR.

7. Duration of Processing

We process your personal data until you withdraw your consent.

Once you withdraw your consent, we will delete your personal data, retaining only the minimum necessary
information required to demonstrate compliance with GDPR and to defend potential legal claims before
a supervisory authority or a court.

8. Your Rights Under GDPR

As a data subject, you have the following rights under GDPR:

• Right of access: to obtain confirmation whether we process your personal data and, if so, a copy of such data.
• Right to rectification: to have inaccurate or incomplete personal data corrected.
• Right to erasure (“right to be forgotten”): to request deletion of your personal data in certain cases.
• Right to restriction of processing: to request limitation of processing under specific conditions.
• Right to data portability: to receive your personal data in a structured, commonly used and machine-readable format and to transmit it to another controller.
• Right to object: to object to processing based on our legitimate interests or for direct marketing.
• Right to withdraw consent: where processing is based on your consent, you may withdraw it at any time.

To exercise any of your rights, please contact us at:
info@ebcg.com.

If you believe that your rights have been violated, you also have the right to lodge a complaint with the
supervisory authority:

Úrad na ochranu osobných údajov Slovenskej republiky
Hraničná 12
820 07 Bratislava 7
Slovakia
Website: www.dataprotection.gov.sk

9. Security Measures

We implement appropriate technical and organizational measures to protect your personal data against accidental
or unlawful destruction, loss, alteration, unauthorized disclosure, or access. These measures include, in
particular:

• encrypted data transfer (HTTPS/SSL),
• restricted access to databases based on roles and authorizations,
• use of firewalls and security monitoring,
• regular backups of data,
• confidentiality obligations for persons who have access to personal data.

10. Automated Decision-Making

We do not use automated decision-making, including profiling, that would produce legal effects concerning you
or similarly significantly affect you.

11. Amendments to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legislation, technology, or our
internal processes. Updated versions will always be published on this website and will be effective from the
date of publication.

12. Contact

If you have any questions regarding this Privacy Policy or the processing of your personal data, or if you wish
to exercise your rights, please contact us at:

Email: info@ebcg.com
Address: EBC-Slovakia s.r.o., Vajnorská 100/A, 831 04 Bratislava – Nové Mesto, Slovakia