Privacy Policy (GDPR)
Last updated: 1 August 2026
This document provides information about the processing of personal data pursuant to Article 13 of Regulation (EU) 2016/679 (GDPR).
1. Data controllers (joint controllers)
Your personal data is processed jointly by two controllers within the meaning of Article 26 GDPR:
G5 Plus, s.r.o.
- Company ID (IČO): 27251837, VAT ID (DIČ): CZ27251837
- Registered office: Senovážné náměstí 978/23, 110 00 Prague 1, Czech Republic
- Registration: Commercial Register kept by the Municipal Court in Prague, file No. C 107737
G5 Plus HR Solutions, s.r.o.
- Company ID (IČO): 19165862, VAT ID (DIČ): CZ19165862
- Registered office: Senovážné náměstí 978/23, 110 00 Prague 1, Czech Republic
- Data box ID: 7kdvuuq
- Registration: Commercial Register kept by the Municipal Court in Prague, file No. C 382421
- Employment agency licensed by the Czech Ministry of Labour and Social Affairs (MPSV) for job placement
Joint contact point for exercising your rights:
Email: osobniudaje@g5plushr.cz
In writing: to the registered office of either controller
In person: at the controller’s branch office
2. What data we process
- Identification and contact details: name (as in passport), email, phone/WhatsApp number, country of residence, address in the Philippines
- Documents and their copies: passport (biometric page), residence/employment cards (TRC), European visas
- Data on EU residence: entry dates and card validity
- Name of the person who referred you (referral)
- Marketing preferences (if you grant marketing consent)
- Contact-form data: name, email, phone and message content
3. Purpose and legal basis of processing
Purpose | Legal basis (GDPR) |
Assessment and handling of your work-visa application and job placement | Consent — Art. 6(1)(a); alternatively Art. 6(1)(b) for steps taken prior to entering into a contract |
Handling an enquiry sent via the contact form (name, email, phone, message content) | Legitimate interest — Art. 6(1)(f) (responding to your enquiry) |
Registration and record-keeping in the candidate register, profiling to match suitable positions | Consent — Art. 6(1)(a) |
Compliance with legal obligations (immigration, tax, employment-agency records) | Legal obligation — Art. 6(1)(c) |
Sending job offers, updates and commercial communications (marketing) | Consent — Art. 6(1)(a) |
4. Recipients of the data
We share data only with recipients necessary for the given purpose:
- both joint controllers (G5 Plus, s.r.o. and G5 Plus HR Solutions, s.r.o.)
- translators and document verifiers
- relevant authorities of the Czech Republic (MPSV, immigration authorities, etc.)
- the Consulate General / diplomatic mission in Dresden
- the future employer
- the provider of hosting and the IT system of the registration form (processor)
5. Transfers outside the EEA
As candidates often reside outside the European Economic Area (e.g. in the Philippines), data may be transferred outside the EEA. We carry out such transfers only where appropriate safeguards under Chapter V GDPR are in place (e.g. standard contractual clauses) or on the basis of your explicit consent.
6. Retention period
- Documents and data related to the work-visa application: for the duration of processing the application and thereafter for no longer than 5 years, unless legal regulations require a different (longer) period.
- Candidate register records and profiling: for 5 years from the date consent is granted, unless you withdraw it sooner.
- Marketing data: until consent is withdrawn.
- Contact-form data: for as long as necessary to handle your enquiry and any follow-up communication, after which we delete it.
7. Your rights
As a data subject, you have the right to:
- access your data (Art. 15)
- rectification (Art. 16)
- erasure — the „right to be forgotten“ (Art. 17)
- restriction of processing (Art. 18)
- data portability (Art. 20)
- object to processing (Art. 21)
- withdraw consent at any time, without affecting the lawfulness of processing carried out beforehand (Art. 7(3))
Withdrawing consent, or declining to give it, has no negative consequences for you. You cannot be excluded from a selection procedure merely because you did not give consent. You may exercise your rights using the contacts in Section 1.
8. Right to lodge a complaint
If you believe that the processing of your data infringes the GDPR, you have the right to lodge a complaint with the supervisory authority:
Office for Personal Data Protection (Úřad pro ochranu osobních údajů, ÚOOÚ)
Pplk. Sochora 27, 170 00 Prague 7, Czech Republic
www.uoou.gov.cz
9. Security
We store data securely, the registration form is transmitted over an encrypted connection (HTTPS), and uploaded documents are not publicly accessible.
10. Changes
We may update this policy. The current version is always available on this page.