If you are reading this, you’re applying or have applied for Kiwi.com event.
A. Who Are We?
We, as the Data Controller, are the company Kiwi.com s.r.o., with a registered office at Rohanské nábřeží 678/25, 186 00, Prague 8-Karlín, Czech Republic, Company ID No.: 29352886, registered in the Commercial Register maintained by the Municipal Court in Prague, File No. C 387231, Tax ID No. CZ29352886.
Personal Data: any information relating to a directly or indirectly identified or identifiable natural person. That means that if we possess means to identify you, any information that we can connect to you will be treated as Personal Data.
Data Processor: a third party that only helps to achieve the purposes determined by the Data Controller. For example, we as a Data Controller use many third-party services to which we outsource some parts of our activities that we don’t do ourselves for various reasons such as cost efficiency. A Data Processor is only allowed to process your Personal Data according to our documented instructions, and the GDPR obliges us to have a strict formal contractual relationship that ensures a truly sufficient protection of your privacy.
C. Where we obtain data?
We collect your Personal Data through the application form which you submit to us.
Aside from that, we may collect your Personal Data (identification, contact, and professional information – the kind of information that you would include in your CV) from your social media, such as LinkedIn or GitHub.
D. For what purposes do we use your personal data?
Administering the event registration process and organising the event: We will use your Personal Data (which you provided us with through the application form) for the purpose of administering the event registration process, including contacting you with any additional requests and information related to the event and your participation in it, and organising of the event. This processing shall be done based on our legitimate interest to organise the event to improve our product and services and to promote our product and services and to promote Kiwi.com as a potential employer.
If you provide us with information on your food allergies, we will process your Personal Data concerning health for the purpose of organising the event (providing catering in the event). We will process your health data as necessary for the provision of the catering in the event. In the application form, you will be asked to give your explicit consent with the processing of this Personal Data. You can always withdraw your consent through this form: kiwi.com/privacy/rights. However, please note that if you withdraw the consent with the processing of your Personal Data for the purpose of organising the event, we won’t be able to reflect provided information on your food allergies within catering.
Kiwi.com Community: No matter the outcome of the event registration process, we want to stay in touch with people who are interested in Kiwi.com. Therefore, to keep in touch, we invite all of our applicants to the Kiwi.com Community.
For this purpose we will process Personal Data which you provided us with through the application form and we may collect your Personal Data (identification, contact, and professional information – the kind of information that you would include in your CV) also from your social media, such as LinkedIn or GitHub.
We will add you to our mailing list and LinkedIn database and process your Personal Data for a purpose of informing you of future Kiwi.com events, possible job offers tailored to your interests and skills, sending newsletters and other messages. This processing shall be done based on your consent.
We will keep and use your Personal Data for the purpose of sending you newsletters and other messages via email until you unsubscribe and for the purpose of keeping you in our LinkedIn database and contacting you with invitations to future Kiwi.com events or job offers for 3 years.
You will periodically get emails from us, and in every email, there will be a clear and easy way to unsubscribe and therefore object to this type of processing. You can always withdraw your consent also through this form: kiwi.com/privacy/rights.
Establishment and exercise of legal claims and defense against them: To be able to defend ourselves against legal claims raised by you, we will store your Personal Data for the duration of statutory limitation period, which is generally 3 years, plus an additional 1 year because of the time reserve necessary for delayed deliveries of notices and our additional actions.
E. Who do we share your personal data with and why?
We don’t share your Personal Data with other Data Controllers.
In order to do our work in the most effective way, we use many tools and apps which help us. The providers of such tools are third-party entities so technically, the Personal Data is sent to other companies and we need to inform you about such transfers. However, in such cases, these third parties are acting on our behalf as our Data Processors and we always stay in control of your Personal Data. That means that even though the Data Processors are in possession of your data, they can only process it for our purposes and we are always in charge of it. They cannot under any circumstances use the data for their own purposes or use the data in a way that would go against our agreement.
Furthermore, we only use partners that have given us sufficient guarantees that they comply with the GDPR requirements and that your data will always be kept safe.
For sending messages to members of our Kiwi.com community, we use the services of an external technology provider: The Rocket Science Group LLC (MailChimp).
For the administration of the database of members of our Kiwi.com community we use services of LinkedIn Ireland Unlimited Company (LinkedIn Projects).
In limited circumstances and to the necessary extent, we might temporarily process your personal data internally within the Google Workspace apps operated by the company Google Ireland Limited.
F. How long do we store your personal data for?
G. Transferring your data outside of the European Union
H. How to access and control your personal data?
We want you to always be in control of your Personal Data. To this end, you have certain rights that allow for it. Under certain conditions, you may:
a) Gain access to all your data that we use or processing, and even get a copy of all of it;
b) Ask us to delete your data;
c) Correct the data that we are processing if you think that there are mistakes;
d) Restrict the processing of your data;
e) Receive your Personal Data in a commonly used and machine-readable format or to have this data transmitted to a different provider;
f) Submit an objection against the processing of your personal data.
You can exercise your rights by sending us an email with your request through this form: kiwi.com/privacy/rights.
I. Data protection officer
With regard to all issues related to processing of your Personal Data and to the exercise of your rights under the GDPR (Regulation No. 2016/679, the General Data Protection Regulation), you may always contact our Data Protection Officer.
Data Protection Officer of Kiwi.com
J. Complaint with the supervisory authority
If you feel that we mishandled your Personal Data, please turn to us first and we promise that we will try our best to resolve the situation. You can always approach us with any privacy or data protection related issue through this form: kiwi.com/privacy/questions.
Nevertheless, at any time, you have the right to lodge a complaint with a supervisory authority. If you are from the EU, you can lodge a complaint at the authority in the member state of your residence, in the member state where you work or in the member state of the alleged infringement.
Generally, the complaints will be handled by the Czech Office for Personal Data Protection. You can learn more at http://www.uoou.cz.