We are The Workly s.r.o., a limited liability company incorporated in the Czech Republic, registered with the Municipal Court in Prague under file no. C 372547, Company ID (IČO): 17511461.
Registered office: Kodaňská 61/43, 101 00 Praha – Vršovice, Czech Republic
Email: info@theworkly.eu

We collect and process the following types of personal data:

- Candidates: name, email, phone, address, CV/resume, work history, education, nationality, certifications, other application materials

- Clients: company name, contact persons, uploaded documents (invoices, timesheets), communication logs

- All users: technical data such as IP address, browser type, operating system, and access logs

We process personal data under the following legal grounds:

- Contract performance: for service delivery and communication with clients and candidates
‍
- Consent: when you voluntarily provide us your data (e.g., submitting a CV)

- Legal obligation: to meet accounting, tax, and employment regulations

- Legitimate interest: to operate and improve our services and secure our systems

We use your data to:

- Match candidates with open roles and clients’ requirementsManage time tracking, invoicing, and project delivery

- Communicate with you regarding opportunities, services, and account status

- Maintain legal and financial records

- Monitor and secure our platform infrastructure

We retain personal data only as long as necessary:

- CVs and candidate profiles: up to 2 years from last interaction or consent withdrawal

- Invoices and timesheets: 10 years in accordance with Czech accounting laws

- Technical logs: up to 12 months for diagnostics and security

We do not sell personal data. We may share data with:

- Authorized staff and subcontractors of The Workly s.r.o.

- Clients, in the context of recruitment or project delivery (with candidate consent)

- Trusted service providers (e.g., cloud hosting, legal/accounting providers) under Data Processing Agreements (DPAs)

- Public authorities, when required by law

We use cloud infrastructure providers such as Google Cloud, which may involve processing of data outside the European Economic Area (EEA), including the United States.We ensure that such transfers are made under appropriate safeguards, including Standard Contractual Clauses (SCCs) approved by the European Commission, to maintain GDPR compliance.If you would like more information about these safeguards, please contact us at info@theworkly.euprivacy@theworkly.e

As a data subject, you have the right to:

- Request access to your personal data

- Request correction or deletion of your data

- Withdraw consent at any time

- Object to or restrict processing in certain cases

- Receive a copy of your data in a structured, machine-readable format (data portability)

- File a complaint with the Czech Data Protection Authority (Úřad pro ochranu osobních údajů ) 

To exercise any of these rights, contact us at info@Theworkly.eu

We take appropriate technical and organizational measures to protect your personal data, including:

- TLS/SSL encryption for data transmission

- Secure password hashing and role-based access controls

- Logging and monitoring for unauthorized access

- Regular reviews of our security practices

Our website and client portal use cookies for essential functionality and basic analytics.

Types of cookies used:

- Essential: to allow platform login and secure session management

- Analytics: to understand how users navigate the platform and improve the experience

You can manage or disable cookies via your browser settings. We display a cookie consent banner to inform and obtain your preferences when you first visit our site.

We may update this Privacy Policy from time to time. Material changes will be posted on this page, and where appropriate, notified by email.