primehammer | Data Privacy & GDPR

Data Privacy & GDPR

Personal Data Processing Policy

Introduction

PrimeHammer (“we,” “us,” “our”) is committed to protecting the data of our candidates, clients, and website visitors. This Privacy Policy outlines how we collect, use, store, and protect personal data in compliance with the General Data Protection Regulation (GDPR).

Data Controller

PrimeHammer s.r.o., located at Lidická 700/19, Veveří, 602 00 Brno, Reg. No. 040 02 873, is the data controller responsible for your personal data. We have not appointed a data protection officer.

Personal Data We Collect

We may collect and process personal data such as your name, contact details (email address, phone number), and professional information including CVs, employment history, and qualifications. Data is collected directly from candidates through submitted applications or communication with our team.

Purpose and Legal Basis for Processing

We process personal data exclusively for recruitment purposes, with strict controls to protect candidate privacy and confidentiality. Our processing activities are based on performance of contract or in order to enter into contract with you (for the duration of recruitment process), on the legitimate interests pursued by us, or on your explicit consent, which you provide by completing our GDPR consent form.

These purposes allow us to:

Store your information securely in our database.
Review your profile for potential opportunities.
Contact you about relevant positions.
Process data necessary for contractual obligations.
Comply with legal and regulatory requirements.

We maintain a strict policy regarding the sharing of your information with potential clients as end customers:

We will never share your CV or personal information without obtaining your specific consent for each opportunity.
Before forwarding your application to any company, we will contact you to discuss the specific position and obtain your explicit permission.
You maintain control over which companies can access your information.
Each sharing instance requires separate, explicit consent from you.

We do not engage in automated decision-making or profiling in our recruitment processes. All candidate evaluations are conducted by human recruiters who carefully review each application. Your information remains strictly confidential within PrimeHammer until you provide specific consent for sharing with selected company.

Our processing is limited to recruitment activities and essential business operations. We never:

Share your information without your specific consent.
Forward your CV to companies without your knowledge.
Use your data for purposes other than recruitment.
Sell or trade your personal information to third parties.

This approach ensures transparent, consent-based processing while maintaining the highest standards of data protection throughout our recruitment activities.

Photography and Video Recording

During company events or activities, we may take photographs or video recordings where individuals may be identifiable. Such media is considered personal data under GDPR.
We process these photographs and recordings based on your explicit consent, which is obtained prior to the event or at the time of media capture.
You have the right to withdraw your consent at any time. If you do not wish to be photographed or recorded, please inform the event organizer in advance or at the event.
Photographs and recordings are used only for purposes explicitly stated at the time of consent, such as internal communication, company website, or social media posts.
We do not use photographs or recordings for any purposes other than those agreed upon without obtaining new consent.

Data Sharing

We share your personal data only with:

Our clients for recruitment purposes. Personal data is shared only when necessary and relevant to a specific role.
Legal authorities when required to comply with applicable laws.

We do not obtain or share data with third-party recruitment agencies.

Data Retention

We retain personal data only as long as necessary for recruitment purposes, for duration of your consent or as required by law. Data that is no longer needed is securely deleted or anonymized.

Data Subject Rights

Under GDPR, you have the right to:

Access your personal data and request a copy.
Request correction of inaccurate or incomplete data.
Request deletion of your data when it is no longer necessary for the purposes collected.
Restrict or object to the processing of your data.
Withdraw your consent at any time.

You have the right to lodge a complaint with your local data protection authority if you believe that we have not complied with applicable data protection laws. The main supervisory authority for PrimeHammer is the Czech Data Protection Authority (Úřad pro ochranu osobních údajů, Pplk. Sochora 27, 170 00 Praha 7, email: posta@uoou.gov.cz).

To exercise these rights or to withdraw your consent, please email us at sara@primehammer.com.

Data Security

We implement appropriate technical and organizational measures to protect personal data from unauthorized access, alteration, disclosure, or destruction.

International Data Transfers

If we need to transfer your personal data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place in accordance with GDPR requirements as well as relevant legal title for doing so.

Photography and Video Recording

During company events or activities, we may take photographs or video recordings where individuals may be identifiable. Such media is considered personal data under GDPR. By participating in the event, you acknowledge that you may appear in photographs or recordings. We process these photographs and recordings based on your explicit consent. If you do not wish to be photographed or recorded, please, take care to avoid entering the areas being filmed or photographed and please inform the event organizer in advance or at the event. Photographs and recordings are used for purposes, such as internal communication, company website, social media posts, etc.