Privacy Policy

This policy describes how HTH Solutions s.r.o. processes the personal data of website visitors and individuals who contact us through our forms. Processing is carried out in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Act No. 110/2019 Coll., on the processing of personal data.

1. Data Controller

The controller has not appointed a Data Protection Officer (DPO). For questions regarding the processing of personal data, you may contact us at the e-mail address above.

2. Contact for Exercising Your Rights

Requests for access to data, rectification, erasure, restriction of processing, data portability, objection, or withdrawal of consent should be sent to info@hth-solutions.cz. In your request, please specify which form or communication it relates to, and provide information enabling your identification (typically your name and e-mail address). We will respond without undue delay and no later than one month from receipt of your request.

3. Personal Data We Process

We obtain personal data only from you, through the forms on this website:

Recruitment questionnaire (Careers)

Contact form (Contact)

When a form is submitted, we also store technical data necessary for security (e.g. time of submission, session identifier for protection against form abuse). We do not request special categories of personal data; please do not include them in the forms.

4. Purposes and Legal Bases for Processing

• Recruitment questionnaire: assessment of your interest in employment and possible communication regarding employment cooperation. Legal basis: Article 6(1)(b) GDPR (steps prior to entering into an employment contract at the data subject’s request) and Article 6(1)(a) GDPR (your consent given by checking the box before submission).
• Contact form: handling of your enquiry, business communication, and possible subsequent cooperation. Legal basis: Article 6(1)(b) GDPR (negotiations prior to entering into a contract) and Article 6(1)(f) GDPR (legitimate interest of the controller in responding to a business enquiry), or Article 6(1)(a) GDPR (consent via checkbox).
• Website security: protection of forms against abuse (CSRF token, submission rate limiting). Legal basis: Article 6(1)(f) GDPR (legitimate interest in securing the website).

5. Data Retention Period

• Data from the recruitment questionnaire is retained for a maximum of 24 months from the last communication with the applicant, unless the law requires a longer period (e.g. after conclusion of an employment contract under labour law regulations).
• Data from the contact form is retained for a maximum of 12 months from resolution of the enquiry, unless another legal regulation prescribes a longer period (e.g. accounting documents).
• Data on consent given (including the version of this policy) for the duration of retention of related personal data.

After the relevant period expires, we delete or anonymise the data.

6. Recipients and Place of Processing

Personal data from forms is stored in the internal CRM system of HTH Solutions s.r.o. Access to the data is granted only to authorised employees of the controller to the extent necessary for the performance of their duties.

For website operation, we use hosting services whose provider may act as a processor of personal data on our behalf on the basis of a processing agreement. We process data primarily in the Czech Republic / European Union and do not transfer it to third countries outside the EU/EEA, unless this is necessary and expressly stated.

7. Cookies and Similar Technologies

This website does not use marketing or analytics cookies. For secure form submission, we use only the essential technical session cookie HTH_WEB, which serves to protect against abuse (CSRF token) and to temporarily limit the number of submissions. The session cookie is typically deleted when the browser session ends.

External links to social networks (Facebook, Instagram) on the Contact page lead to third-party websites; once you navigate to those sites, the privacy policies of the respective operators apply.

8. Your Rights

In accordance with the GDPR, you have the following rights:

• right of access to the personal data we process about you;
• right to rectification of inaccurate or incomplete data;
• right to erasure (“right to be forgotten”), where there is no longer a legal basis for processing;
• right to restriction of processing under the conditions set out in the GDPR;
• right to data portability, where processing is based on consent or contract and carried out by automated means;
• right to object to processing based on legitimate interest;
• right to withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal;
• right to lodge a complaint with a supervisory authority: Office for Personal Data Protection, www.uoou.cz, Pplk. Sochora 27, 170 00 Prague 7, Czech Republic.

You may request erasure of data at any time by e-mail to info@hth-solutions.cz. We will process your request unless a legal basis for processing still exists or another obstacle prescribed by law applies.

9. Security of Personal Data

We implement appropriate technical and organisational measures to protect personal data, in particular transmission over encrypted connections (HTTPS), protection of forms against abuse (CSRF, honeypot, rate limiting), restricted access to the CRM to authorised persons only, and regular updates of the systems used.

10. Changes to This Policy

We may update this policy from time to time, particularly when the scope of processing, forms used, or legal requirements change. The current version is always published on this page with the effective date and document version indicated. In the event of a material change, we may inform you by e-mail or notice on the website if active communication is ongoing.