PRIVACY POLICY – PRACOŠ.SK

Last updated: 6 October 2026

This Privacy Policy explains how the Pracoš.sk online job portal processes personal data of users, job applicants, employers, advertisers, contact persons and other persons who use our services or contact us (hereinafter referred to as the “Data Subject”).

We process personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (“GDPR”), Act No. 18/2018 Coll. on Personal Data Protection of the Slovak Republic, and other applicable legislation.

1. DATA CONTROLLER

The operator of the Pracoš.sk portal is:

Webian s.r.o.
Dubová 426/5A
080 05 Teriakovce
Slovak Republic

Company ID (IČO): 52 975 380
registered in the Commercial Register of the District Court Prešov
Section: Sro, Insert No.: 53615/P

E-mail for personal data protection matters: [ADD E-MAIL]

hereinafter referred to as “Webian”, “Pracoš.sk”, “Controller”, “we”, “us” or “our”.

2. PRACOŠ.SK SERVICES

Pracoš.sk is an online job portal whose main purpose is to enable employers to publish job offers and job applicants to search for employment opportunities and respond to specific job offers.

The Portal provides, in particular:

• creation and use of user accounts,
• registration and login of employers and advertisers,
• publication and management of job offers,
• searching and viewing job offers,
• submission of applications for job offers,
• sending CVs and other attachments to employers,
• communication between applicants and employers through the Portal,
• provision of paid services to employers,
• sending operational and service-related messages,
• customer support.

Pracoš.sk does not operate a public or employer-searchable CV database. CVs are processed only in connection with an applicant’s response to a specific job offer.

3. ROLE OF PRACOŠ.SK UNDER THE GDPR

The role of Webian s.r.o. depends on the specific purpose of processing.

3.1 Pracoš.sk as Controller

Webian s.r.o. acts as a Controller particularly in relation to:

• registration and administration of user accounts,
• registration and administration of employer accounts,
• publication and administration of job advertisements,
• invoicing and payment records,
• customer support communications,
• Portal security,
• prevention of fraud and abuse,
• technical and security logs,
• compliance with legal obligations,
• our own marketing,
• analytics and cookies where Webian determines the purposes and means of processing.

3.2 Responses to job offers

When an applicant responds to a specific job offer, the personal data contained in the application are intended for the employer who published that job offer.

For the purposes of the recruitment process, the relevant employer is the Controller of the applicant’s personal data.

Pracoš.sk provides the technical receipt, storage, administration and disclosure of the application to the relevant employer. To the extent that Webian processes such data on the employer’s instructions for the purposes of the employer’s recruitment process, Webian acts as a Processor.

Webian may simultaneously process necessary operational and security data relating to the use of the Portal in its own capacity as Controller, particularly for the purposes of providing and securing the service, preventing abuse and protecting its legal claims.

The employer is responsible for any further processing of the applicant’s personal data for the purposes of its recruitment process.

4. PERSONAL DATA WE PROCESS

The scope of personal data processed depends on how you use Pracoš.sk.

4.1 User account

When registering and using an account, we may process in particular:

• first and last name,
• e-mail address,
• telephone number,
• login and authentication data,
• user account settings,
• history of relevant account activities,
• date of account creation and last use.

Passwords are stored only in a technically secured form intended for user authentication.

4.2 Employers and advertisers

When an employer registers and uses our services, we may process in particular:

• first and last name of the contact person,
• position or role of the contact person,
• e-mail address,
• telephone number,
• employer’s name or business name,
• Company ID, Tax ID and VAT ID,
• registered office or place of business,
• billing information,
• information about ordered services and payments,
• content of job offers,
• logo and other information provided by the employer.

Information relating solely to a legal entity is not in itself personal data. However, the GDPR applies to information concerning identifiable natural persons, such as contact persons, company directors or sole traders.

4.3 Applications for job offers

When responding to a specific job offer, we process in particular:

• first name,
• last name,
• telephone number,
• e-mail address,
• CV/résumé,
• documents and attachments included with the application,
• message or text intended for the employer,
• identification of the job offer to which the applicant responded,
• date and time of the application,
• technical data necessary for the delivery and security of the application.

A CV may also contain additional information voluntarily provided by the applicant, such as a photograph, date of birth, education, work experience, qualifications, language skills, certificates or personal interests.

4.4 Information we do not request from applicants

We recommend that applicants do not include information in their CV, message or attachments that is not necessary for the recruitment process, particularly:

• national identification number,
• identity card or passport number,
• copies of identity documents,
• bank account details,
• passwords or access credentials,
• other information that is not necessary for assessing the applicant.

Applicants should always consider the scope of information they provide to an employer.

4.5 Special categories of personal data

We do not normally request special categories of personal data within the meaning of Article 9 GDPR, particularly information concerning health, racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic or biometric data, or information concerning a person’s sex life or sexual orientation.

If an applicant voluntarily includes such information in a CV or attachment, the applicant should do so only where providing such information is necessary for the relevant purpose and an appropriate legal basis exists.

4.6 Technical and security data

When using the Portal, we may process:

• IP address,
• date and time of access,
• browser type and version,
• operating system,
• device type,
• URLs and server request information,
• session identifiers,
• login information,
• security logs,
• information necessary to detect fraud, attacks or misuse of the service,
• cookies and similar identifiers.

5. PURPOSES AND LEGAL BASES FOR PROCESSING

We do not process all personal data on the basis of a single, general consent.

The applicable legal basis depends on the particular processing activity.

Provision of services and user accounts

Information required for registration, login, account administration and provision of ordered services is processed primarily under Article 6(1)(b) GDPR – performance of a contract or taking steps at the request of the Data Subject prior to entering into a contract.

Operation of job advertising services

We process information relating to employers and their contact persons for the purposes of publishing and managing job offers, communication and provision of ordered services.

Depending on the circumstances, the legal basis is performance of a contract or legitimate interests.

Applications for job offers

Personal data contained in an applicant’s response are processed for the purpose of enabling the applicant to respond to a specific job offer and enabling the employer to conduct a recruitment process.

The relevant employer, as Controller, is responsible for determining the legal basis for its own processing.

Security and prevention of abuse

We may process information for the purposes of:

• protecting the Portal and user accounts,
• preventing fraud,
• detecting fake accounts and advertisements,
• protecting against automated attacks and spam,
• investigating security incidents,
• establishing, exercising or defending legal claims.

The legal basis is primarily legitimate interests under Article 6(1)(f) GDPR.

Legal obligations

We process accounting, tax and other information where processing or retention is required by law.

The legal basis is Article 6(1)(c) GDPR.

Marketing

We may use contact details to send information concerning our own Pracoš.sk services to the extent permitted by applicable law.

Where consent is required for a particular marketing activity, processing will take place only after such consent has been obtained.

You may object to direct marketing at any time. Where processing is based on consent, consent may be withdrawn at any time.

Service communications concerning an account, security, payment, application, changes to terms or the operation of an ordered service are not marketing communications.

6. APPLICATIONS AND CVs

Pracoš.sk does not operate a CV database intended to be searched by employers.

A CV is processed only in connection with a specific application submitted by an applicant for a job offer.

By submitting an application, the applicant requests that the information entered by them, their CV, attachments and message be made available to the employer who published the relevant job offer.

The applicant decides which job offer to respond to and what additional information to provide to the employer.

An employer may not arbitrarily use information obtained through Pracoš.sk for purposes incompatible with the purpose for which the information was obtained and is responsible for compliance with its obligations under the GDPR.

Where the advertiser is a recruitment agency or another entity recruiting on behalf of a third party, the relevant Controller is responsible for transparently informing applicants about any further recipients of their personal data.

7. RETENTION PERIODS

We retain personal data only for as long as necessary to fulfil the purpose of processing or for the period required by applicable legislation.

Applications for job offers

An applicant’s response, including first and last name, telephone number, e-mail address, CV, attachments and message, is stored within the Pracoš.sk system for 24 months from the date on which the application is submitted.

After 24 months, personal data contained in the application will be deleted or anonymised.

CVs and attached documents will be deleted after this period.

Identification and contact information contained in the application will be deleted or irreversibly anonymised.

Messages written by applicants will be deleted unless their reliable anonymisation can be ensured.

Following anonymisation, we may retain non-personal statistical information, such as:

• number of applications for a job offer,
• date of application,
• job category,
• location,
• type of employment,
• other aggregated or anonymised information.

Anonymisation must be performed in such a way that the individual can no longer be identified, directly or indirectly.

The GDPR does not apply to genuinely anonymised information.

This retention period concerns applications stored within the Pracoš.sk system. An employer may have its own retention period for personal data for which it is responsible as an independent Controller.

Other information

User account information is retained for the duration of the account and subsequently for a reasonable period necessary to protect legal claims and comply with legal obligations.

Information relating to job advertisements may be retained for a reasonable period after publication ends, particularly for service administration, complaints handling, security and protection of legal claims.

Accounting, invoicing and tax information is retained for the periods required by applicable legislation.

Security and technical logs are retained for a period proportionate to their purpose unless longer retention is necessary to investigate a security incident or protect legal claims.

8. RECIPIENTS AND SERVICE PROVIDERS

We use external service providers to operate Pracoš.sk.

Depending on the nature of the particular service, these entities may act as our Processors, independent Controllers or in another role under the GDPR.

Our service providers include in particular:

Contabo – server and hosting infrastructure on which user information, databases, applications, CVs and attachments may be stored; server and e-mail services.

Google – analytics, technical and advertising services, particularly to the extent that individual Google services are actually deployed on Pracoš.sk.

Meta / Facebook – marketing, advertising and analytics tools where deployed on the Portal, such as Meta Pixel.

BudgetSMS – provision of SMS services; it may process in particular telephone numbers, message content and technical information necessary to deliver SMS messages.

GoPay – payment gateway provider. When providing payment services, GoPay may process personal data as an independent Controller on the basis of its own legal and regulatory obligations.

POHODA / STORMWARE – accounting and business software used to maintain commercial and accounting records. The extent to which STORMWARE has access to personal data depends on the particular services and configuration used.

Personal data may also be disclosed, where necessary, to accountants, legal or IT advisers and public authorities where we are legally required to do so.

A current and more detailed overview may be published in a separate Recipients of Personal Data and Service Providers of Pracoš.sk document.

9. TRANSFERS OF PERSONAL DATA OUTSIDE THE EU/EEA

The use of certain service providers may involve the processing or transfer of personal data outside the European Union or European Economic Area.

Where such a transfer occurs, it will take place only under the conditions laid down by the GDPR, in particular on the basis of an adequacy decision of the European Commission, Standard Contractual Clauses or another permissible transfer mechanism under Articles 44–49 GDPR.

When selecting providers and determining the scope of transferred information, we apply the principle of data minimisation.

10. PAYMENTS

Paid Pracoš.sk services may be paid for using the GoPay payment gateway.

Information necessary to complete a payment may be provided directly to the payment service provider.

Pracoš.sk does not need to, and generally does not, store complete payment card details where those details are entered directly into the secure environment of the payment service provider.

The payment service provider also processes certain personal and transaction information on the basis of its own statutory and regulatory obligations.

11. COOKIES AND ANALYTICS

Pracoš.sk uses cookies and similar technologies.

Necessary cookies are used to ensure the basic operation of the Portal, login functionality, security and user sessions.

Analytics, advertising and marketing cookies are used in accordance with applicable law and, where required, only after the user has given prior consent.

Users may change their preferences through the cookie settings interface.

Detailed information concerning individual cookies, providers, purposes and retention periods is provided in the separate Pracoš.sk Cookie Policy.

12. MARKETING AND COMMUNICATION

A distinction must be made between service communications and marketing communications.

Service communications may include, for example:

• registration confirmation,
• password reset messages,
• security alerts,
• order or payment confirmations,
• information concerning a job advertisement,
• notifications necessary for providing the service,
• information concerning significant changes to applicable terms.

Marketing communications may contain information concerning Pracoš.sk offers, products or services.

Recipients may object to direct marketing at any time and may unsubscribe from marketing e-mails using the method specified in the relevant message.

13. SECURITY

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, destruction, misuse or unauthorised disclosure.

Such measures include, in particular:

• management of access permissions,
• user authentication,
• secure network transmission,
• server security,
• backups,
• monitoring and logging of security events,
• software updates,
• restricting access to personal data according to need.

Users are responsible for protecting their login credentials and should not disclose their password to other persons.

14. PERSONS UNDER THE AGE OF 18

Subject to the conditions and restrictions laid down by employment legislation, persons under the age of 18 may also use job offers.

This Privacy Policy therefore also applies to the processing of their personal data.

We recommend that younger users exercise particular care regarding the information they include in their CV and the persons to whom they submit it through the Portal.

Pracoš.sk does not use knowledge of a user’s status as a minor for advertising targeted on the basis of profiling.

15. AUTOMATED DECISION-MAKING AND PROFILING

Pracoš.sk does not carry out automated individual decision-making within the meaning of Article 22 GDPR that produces legal effects concerning a user or similarly significantly affects them, unless expressly stated otherwise in relation to a particular service.

Ordinary filtering or ranking of job offers according to criteria selected by the user does not in itself mean that Pracoš.sk makes a decision concerning whether an applicant will or will not be hired.

The relevant employer decides which applicant to select.

16. DATA SUBJECT RIGHTS

Subject to the conditions laid down by the GDPR, you have the following rights:

Right of access – you may obtain confirmation as to whether personal data concerning you are being processed and, subject to applicable conditions, obtain access to those data.

Right to rectification – you may request correction of inaccurate personal data or completion of incomplete information.

Right to erasure – you may request deletion of your personal data where the conditions laid down by the GDPR are met.

Right to restriction of processing – in circumstances specified by the GDPR, you may request restriction of the use of your personal data.

Right to data portability – where processing is based on consent or a contract and carried out by automated means, you may, subject to the statutory conditions, obtain your personal data in a structured, commonly used and machine-readable format.

Right to object – you may object to processing, particularly where processing is based on legitimate interests.

Right to object to direct marketing at any time.

Right to withdraw consent – where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

Right to lodge a complaint with the competent supervisory authority.

Right to an effective judicial remedy, subject to applicable law.

The right to erasure is not absolute. For example, we may be required or permitted to retain certain information where retention is required by law or necessary for the establishment, exercise or defence of legal claims.

17. RIGHTS RELATING TO JOB APPLICATIONS

Where your request concerns personal data processed by a particular employer as part of its recruitment process, you may exercise your rights directly with that employer.

Where your request concerns processing carried out by Webian s.r.o. in its capacity as Controller, you may contact us directly.

Where you contact us concerning processing in which we act as Processor for a particular employer, we will proceed in accordance with the GDPR and the relevant contractual relationship with that employer.

18. HOW TO EXERCISE YOUR RIGHTS

You may submit your request:

by e-mail: [ADD E-MAIL]

or in writing to:

Webian s.r.o.
Dubová 426/5A
080 05 Teriakovce
Slovak Republic

Where we have reasonable doubts concerning the identity of the person submitting a request, we may request additional information necessary to verify their identity.

We will respond without undue delay and, in any event, within one month of receipt of the request.

Where permitted by the GDPR due to the complexity or number of requests, this period may be extended by a further two months. We will inform the applicant of any such extension and the reasons for it within the initial one-month period.

Exercising your rights is generally free of charge. Where requests are manifestly unfounded or excessive, in particular because of their repetitive character, we may, subject to Article 12 GDPR, charge a reasonable fee or refuse to act on the request.

19. SUPERVISORY AUTHORITY

If you believe that the processing of your personal data infringes the GDPR or other applicable data protection legislation, you have the right to contact:

Office for Personal Data Protection of the Slovak Republic
Galvaniho Business Centrum II
Galvaniho 7/B
821 04 Bratislava
Slovak Republic

Current contact details are available on the website of the Office for Personal Data Protection of the Slovak Republic.

20. SOCIAL NETWORKS AND THIRD-PARTY SERVICES

Pracoš.sk may use third-party services, particularly services provided by Google and Meta/Facebook.

Where a user interacts with third-party content, advertising, social plugins or other third-party tools, personal data may also be processed in accordance with the terms and privacy policies of the relevant provider.

The scope of processing depends on the specific tools deployed on the Portal and the user’s cookie consent preferences.

Pracoš.sk will not load analytics or marketing tools requiring consent before such consent has been given where applicable law requires it.

21. ANONYMISED AND STATISTICAL DATA

We may use anonymised or aggregated information to improve the Portal, evaluate its use, produce statistics and conduct business analysis.

Such information may include, for example:

• number of job offers,
• number of applications,
• average number of applications per job offer,
• number of job offers by region or category,
• trends in interest in individual occupations.

When anonymising information, we remove or modify identifiers so that a particular individual cannot be identified or reasonably re-identified using available means.

Information that is genuinely anonymous does not constitute personal data under the GDPR.

22. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy, particularly due to:

• changes to the functionality of Pracoš.sk,
• introduction of new services,
• changes to service providers,
• changes in the way personal data are processed,
• changes in legislation or the decision-making practice of competent authorities.

The current version will always be available on Pracoš.sk.

Where significant changes may materially affect the way users’ personal data are processed, we may notify users in an appropriate manner.

This Privacy Policy was last updated on 6 October 2026.