Privacy Policy of Kiwi.com

Welcome to the Privacy Policy for the applicants to Kiwi.com event.

If you are reading this, you’re applying or have applied for Kiwi.com event.

In this Privacy Policy, we explain exactly why and how we process your personal data and provide you with other important information which you need so that you always remain in control of your privacy.

A. Who Are We?

We, as the Data Controller, are the company Kiwi.com s.r.o., with a registered office at Rohanské nábřeží 678/25, 186 00, Prague 8-Karlín, Czech Republic, Company ID No.: 29352886, registered in the Commercial Register maintained by the Municipal Court in Prague, File No. C 387231, Tax ID No. CZ29352886.

B. Some terms that we use in this Privacy Policy

Personal Data: any information relating to a directly or indirectly identified or identifiable natural person. That means that if we possess means to identify you, any information that we can connect to you will be treated as Personal Data.

Data Controller: someone that determines the purposes and means of processing Personal Data. For example, we are a Data Controller when we process your Personal Data for the purposes stated in this Privacy Policy. Each Data Controller (to whom the GDPR or similar legal regime applies) should have a Privacy Policy such as this one where you can learn about how your Personal Data is processed.

Data Processor: a third party that only helps to achieve the purposes determined by the Data Controller. For example, we as a Data Controller use many third-party services to which we outsource some parts of our activities that we don’t do ourselves for various reasons such as cost efficiency. A Data Processor is only allowed to process your Personal Data according to our documented instructions, and the GDPR obliges us to have a strict formal contractual relationship that ensures a truly sufficient protection of your privacy.

C. Where we obtain data?

We collect your Personal Data through the application form which you submit to us.

Aside from that, we may collect your Personal Data (identification, contact, and professional information – the kind of information that you would include in your CV) from your social media, such as LinkedIn or GitHub.

D. For what purposes do we use your personal data?

Administering the event registration process and organising the event: We will use your Personal Data (which you provided us with through the application form) for the purpose of administering the event registration process, including contacting you with any additional requests and information related to the event and your participation in it, and organising of the event. This processing shall be done based on our legitimate interest to organise the event to improve our product and services and to promote our product and services and to promote Kiwi.com as a potential employer.

If you provide us with information on your food allergies, we will process your Personal Data concerning health for the purpose of organising the event (providing catering in the event). We will process your health data as necessary for the provision of the catering in the event. In the application form, you will be asked to give your explicit consent with the processing of this Personal Data. You can always withdraw your consent through this form: kiwi.com/privacy/rights. However, please note that if you withdraw the consent with the processing of your Personal Data for the purpose of organising the event, we won’t be able to reflect provided information on your food allergies within catering.

Kiwi.com Community: No matter the outcome of the event registration process, we want to stay in touch with people who are interested in Kiwi.com. Therefore, to keep in touch, we invite all of our applicants to the Kiwi.com Community.

For this purpose we will process Personal Data which you provided us with through the application form and we may collect your Personal Data (identification, contact, and professional information – the kind of information that you would include in your CV) also from your social media, such as LinkedIn or GitHub.

We will add you to our mailing list and LinkedIn database and process your Personal Data for a purpose of informing you of future Kiwi.com events, possible job offers tailored to your interests and skills, sending newsletters and other messages. This processing shall be done based on your consent.

We will keep and use your Personal Data for the purpose of sending you newsletters and other messages via email until you unsubscribe and for the purpose of keeping you in our LinkedIn database and contacting you with invitations to future Kiwi.com events or job offers for 3 years.

You will periodically get emails from us, and in every email, there will be a clear and easy way to unsubscribe and therefore object to this type of processing. You can always withdraw your consent also through this form: kiwi.com/privacy/rights.

Establishment and exercise of legal claims and defense against them: To be able to defend ourselves against legal claims raised by you, we will store your Personal Data for the duration of statutory limitation period, which is generally 3 years, plus an additional 1 year because of the time reserve necessary for delayed deliveries of notices and our additional actions.

E. Who do we share your personal data with and why?

We don’t share your Personal Data with other Data Controllers.

In order to do our work in the most effective way, we use many tools and apps which help us. The providers of such tools are third-party entities so technically, the Personal Data is sent to other companies and we need to inform you about such transfers. However, in such cases, these third parties are acting on our behalf as our Data Processors and we always stay in control of your Personal Data. That means that even though the Data Processors are in possession of your data, they can only process it for our purposes and we are always in charge of it. They cannot under any circumstances use the data for their own purposes or use the data in a way that would go against our agreement.

Furthermore, we only use partners that have given us sufficient guarantees that they comply with the GDPR requirements and that your data will always be kept safe.

• For sending messages to members of our Kiwi.com community, we use the services of an external technology provider: The Rocket Science Group LLC (MailChimp).

• For the administration of the database of members of our Kiwi.com community we use services of LinkedIn Ireland Unlimited Company (LinkedIn Projects).

• In limited circumstances and to the necessary extent, we might temporarily process your personal data internally within the Google Workspace apps operated by the company Google Ireland Limited.

F. How long do we store your personal data for?

In general, we will process your Personal Data until we won’t need it for any of these purposes defined in this Privacy Policy. The maximum length of processing is 3 years from the end of processing for other purposes, plus an additional 1 year because of the time reserve necessary for delayed deliveries of notices and our additional actions.

G. Transferring your data outside of the European Union

We will only transfer your Personal Data to Third Countries in cases where it is necessary given the residency of our Data Processor and the Data Controllers which are listed in this Privacy Policy. When transferring to countries without adequate regulations according to the Art. 45 GDPR, we will only do so after we obtain the necessary safeguards, specifically the Standard Contractual Clauses or Binding Corporate Rules.

H. How to access and control your personal data?

We want you to always be in control of your Personal Data. To this end, you have certain rights that allow for it. Under certain conditions, you may:

a) Gain access to all your data that we use or processing, and even get a copy of all of it;
b) Ask us to delete your data;
c) Correct the data that we are processing if you think that there are mistakes;
d) Restrict the processing of your data;
e) Receive your Personal Data in a commonly used and machine-readable format or to have this data transmitted to a different provider;
f) Submit an objection against the processing of your personal data.

You can exercise your rights by sending us an email with your request through this form: kiwi.com/privacy/rights.

I. Data protection officer

With regard to all issues related to processing of your Personal Data and to the exercise of your rights under the GDPR (Regulation No. 2016/679, the General Data Protection Regulation), you may always contact our Data Protection Officer.

Oliver Švolík
Data Protection Officer of Kiwi.com
[email protected]

J. Complaint with the supervisory authority

If you feel that we mishandled your Personal Data, please turn to us first and we promise that we will try our best to resolve the situation. You can always approach us with any privacy or data protection related issue through this form: kiwi.com/privacy/questions.

Nevertheless, at any time, you have the right to lodge a complaint with a supervisory authority. If you are from the EU, you can lodge a complaint at the authority in the member state of your residence, in the member state where you work or in the member state of the alleged infringement.

Generally, the complaints will be handled by the Czech Office for Personal Data Protection. You can learn more at http://www.uoou.cz.

K. Changes to this Privacy Policy

We reserve the right to make amendments to this Privacy Policy. It is recommended that you consult this Privacy Policy regularly in order to be aware of any changes. In addition, we will actively inform you wherever possible.