Personal data processing policy

1. Controller of personal data

The controller of personal data is DRAXTON BRNO s.r.o., Company ID (IČO): 46962913, registered office at Vodařská 108/15, 619 00 Brno-Horní Heršpice (hereinafter the “controller”). On matters of personal data protection the controller can be reached at the email address jobs.brno@draxton.com.

2. Purposes of processing and legal basis

a) Recruitment. When handling job applications we process the applicant's first name, surname, email, telephone, message and CV. The legal basis for the processing is Article 6(1)(b) GDPR, steps taken at the request of the data subject prior to entering into a contract (employment).

b) Contact form. When handling an enquiry sent through the contact form we process the name, email, telephone, subject and message. The legal basis for the processing is the controller's legitimate interest under Article 6(1)(f) GDPR, namely handling and answering the enquiry.

3. Retention period

We keep job applicants' data for 6 months from the end of the relevant recruitment process. During that period an applicant may also be contacted about another suitable position. Longer retention is possible only with the applicant's explicit consent.

Messages sent through the contact form are kept for as long as is necessary to handle them, and for no more than 12 months from delivery.

4. Processors and recipients of the data

Personal data may be made available to the following processors: the operator of the content management system (CMS Directus) run on our own server in the European Union, and the email service Resend, which sends the confirmation messages. Personal data is not transferred outside the European Union beyond the services listed in this paragraph.

5. Website traffic measurement

The website uses no cookies and no third-party advertising or tracking tools. We measure traffic with our own Umami instance, run on the controller's server in the European Union. The data collected is aggregate (pages viewed, device type, approximate location by country, source of the visit, form submission) and does not serve to identify a particular person.

To make the website easier to follow, we record an anonymous trace of the interaction with the page (scrolling, clicks, cursor movement) and aggregate click maps for a small sample of visits. The contents of completed form fields and the name of an uploaded CV are not recorded; they are masked automatically. The recordings are stored for no more than 30 days and are then deleted automatically.

The legal basis is the controller's legitimate interest under Article 6(1)(f) GDPR, namely measuring and improving the careers pages. You may object to this processing at any time at the email address jobs.brno@draxton.com.

6. Rights of the data subject

In connection with the processing of personal data you have the right of access to the personal data, the right to its rectification or erasure, the right to restriction of processing, the right to object to the processing and the right to data portability. If you believe that the processing of your personal data breaches the law, you have the right to lodge a complaint with the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, uoou.gov.cz).

7. Effective date

This policy is effective from 10 August 2026.