4P&P spol. s r.o., Za Kovárnou 422/23, 109 00 Prague 10, IČO: 25618768 (hereinafter referred to as "4P&P" or "Data Controller") processes all personal data in accordance with applicable personal data protection legislation.
This Personal Data Processing Policy ("Policy") applies to
The Controller processes the following personal data on the basis of the legal titles listed below and for the period set below
| Categories of data | Title | Processing time |
|---|---|---|
| Name and surname, contact details, including phone and email | Performance of the contract pursuant to Art. 6 para. 1 point. b) GDPR | For the duration of the business relationship and for 10 years thereafter |
| Email or telephone number for the purpose of sending commercial messages to customers and potential customers | Performance of the contract pursuant to Art. 6 para. 1 point. b) GDPR and the legitimate interest consisting in the development of business relationships (marketing) pursuant to Art. 6 para. 1 point. f) and recital 47 of the GDPR | For the duration of the commercial relationship, or negotiations on the establishment of a contract and 1 year thereafter |
| Account number (IBAN, BIC), Identification No., VAT No. | Performance of the contract pursuant to Art. 6 para. 1 point. b) GDPR | For the duration of the business relationship and for 10 years thereafter |
| Photographs, Video recording, other data provided in case of participation in an event organized by 4P&P | Consent pursuant to Art. 6 para. 1 point. a) GDPR and the legitimate interest pursuant to Article 6 (1) (f) GDPR consisting in the documentation of the event and marketing | 5 years from the duration of the event or until the consent is withdrawn |
At the same time, in order to develop the business relationship, the controller sends commercial communications to its business partners in accordance with Article 7(3) of Act No. 480/2004 on the information society. Communications may relate to news regarding the Controller's services, invitations to events organised by the Controller or other essential information relating to the Controller's activities and services. If you do not wish to receive such notifications, please email us at the gdpr@4pap.cz with the subject Opt-out or submit your request via DSR center.
The controller processes all personal data in the EEA, in particular in the Czech Republic and Great Britain. 4P&P, as a member of the AdvantageSmollan Group, has a data sharing agreement with its parent company, based in the UK, including standard contractual clauses.
See. below section Rights of data subjects
The Controller processes the following personal data on the basis of the legal titles listed below and for the period set below
| Categories of data | Title | Processing time |
|---|---|---|
| Name and surname, contact details, including phone and email | Consent pursuant to Article 6(1)(b) a) GDPR | For the duration of the consent to receive |
| Applicant/candidate data sent in CV, motivation letter, or obtained during interviews | Consent pursuant to Art. 6 para. 1 point. a) GDPR | For the duration of the selection procedure or consent |
| Information from publicly available sources – public registers, social networks, etc. | The legitimate interest of the Controller consisting in the verification of references pursuant to Article 6 para. 1 point. f) GDPR | For the duration of the selection procedure |
| Copies of documents submitted before taking up employment | Performance of the contract pursuant to Article 6(1)(a) b) GDPR | For the duration of the employment contract |
| Confirmation from the medical examination of the ability or limitations for employment | Performance of the contract pursuant to Article 6(1)(a) b) GDPR | For the duration of the employment contract |
We do not process any special category of personal data about you, i.e. sensitive data, e.g. about health.
In the case of consent, the Data Controller may, for the duration of the consent, which is granted for a maximum length of 3 years, address applicants, those interested in cooperation with an offer of suitable positions corresponding to the profile of the applicant / candidate for cooperation. You can revoke your consent at any time by sending an e-mail to the gdpr@4pap.cz with the subject of the opt-out subject.
4P&P processes all personal data of applicants and those interested in cooperation in the Czech Republic.
See. below section Rights of data subjects
4P&P premises are monitored to protect property and ensure occupational safety. Recording from CCTV is stored locally on the company's servers. The Controller has taken the necessary technical and organisational measures to ensure the security of the CCTV footage. Camera surveillance of the premises does not have a major impact on the rights of natural persons – employees or visitors, because it is limited to entrance areas and corridors. Camera recordings may, in justified cases, be shared with third parties, e.g. Police of the Czech Republic or insurance companies.
The record is kept for 14 days, after which it is erased.
See. below section Rights of data subjects
The Controller processes the following personal data on the basis of the legal titles listed below and for the period set below
| Categories of data | Title | Processing time |
|---|---|---|
| IP address, pages visited, length of visit | Legitimate interest consisting in ensuring the functionality of the website and appropriate content pursuant to Art. 6 para. 1 point. f) GDPR | According to the settings of individual cookies, if consent has been given |
The controller processes all personal data in the EEA, in particular in the Czech Republic and Great Britain. 4P&P, as a member of the AdvantageSmollan Group, has a data sharing agreement with its parent company, based in the UK, including standard contractual clauses.
See. below section Rights of data subjects
Cookies are small text files containing a unique identifier that are stored on your computer or mobile device so that your device can be recognized when you use a particular website or mobile application. They can only be used for the duration of your visit or can be used to measure how you interact with the Services and Content over time. Cookies help to provide important features and functionality on our websites and mobile applications, and help to improve your customer experience.
Cookies can be divided based on several criteria. Depending on who creates and processes cookies, cookies can be divided into two categories: (i) A first party cookie creates websites or scripts on the same domain. Most often they are used to ensure the basic functionality of the website. (ii) Third party cookies are created by other websites. These sites own some content, such as ads, images, or videos, on the webpage you're visiting.
Cookies can also be divided according to their durability into: (i) Session cookies are temporary. They are stored on your device only until you finish working with the Internet browser and are deleted when you close it. These cookies are necessary for the proper functioning of the website or associated applications. (ii) We may use persistent cookies to make your navigation on our website easier and more convenient (for example, easier and faster navigation). These cookies remain in your browser for a longer period of time or until you manually delete them. The length of this period depends on the selected Internet browser settings. Permanent cookies allow information to be transferred to a web server each time you visit the website.
According to the purpose of use, cookies can be divided into: (i) Strictly necessary (essential) cookies that are required to operate the website. They include, for example, cookies that allow you to log in to secure areas of our website. These cookies do not collect information about users that could be used for marketing purposes or to remember what pages users have visited on the Internet. (ii) We use performance cookies to improve the functioning of the website. These cookies collect information about how visitors use the website, e.g. which pages visitors go to most often and whether they receive error messages from the website. They also allow us to record and count the number of visitors to the website, which allows us to track how visitors use the website. These cookies do not collect information that would allow the user to be personally identified. The information collected using these cookies is aggregated and anonymous. (iii) Functional cookies make it easier to use and improve the functionality of the website. They are used to activate specific website features (e.g. playing videos) and to set them according to your choices (e.g. language) in order to improve your experience on the website. At the same time, functional cookies are used to remember your preferences the next time you visit the website. However, they do not collect information that can identify you. (iv) Targeting and advertising (profiling) cookies are used to track preferences that you discover through your use of the website and to send advertising messages in accordance with these preferences.
As a data subject, you have the following rights that arise for you from legal regulations and that you can exercise at any time:
To apply for the rights you can via this link or using the GDPR link on the bottom of page Contact us.
The company has appointed a DPO that may be contacted at:
4P&P
Za Kovarnou 422/23
109 00 Prague 10
gdpr@4pap.cz
Phone: +420 257 318 953
These Personal Data Processing Principles are effective from 25 May 2018, date of last revision – April 2024.