Privacy Policy for Job Applicants
Last updated: February 2026
This policy explains how EAG Group processes the personal data you provide when applying for a position. We collect only what is necessary, keep it only as long as needed, and never sell it to third parties.
1. Who is the data controller?
EAG Group s.r.o. ("EAG", "we", "us"), headquartered in Prague, Czech Republic, is the controller of your personal data for the purposes described in this policy. You can contact us at talent@eag.group for any data-related requests.
2. What data we collect
When you submit an application, we collect:
- Full name
- Email address
- Phone number
- CV / résumé (uploaded file)
- Cover message or notes you provide
- The role you are applying for
- Date and time of submission
We do not collect sensitive personal data (health, ethnicity, religion, etc.) and ask you not to include such information in your application.
3. Legal basis for processing
We process your data on the basis of:
- Your consent — given explicitly when you tick the consent checkbox and submit the application form (Article 6(1)(a) GDPR)
- Pre-contractual measures — taking steps at your request prior to entering into an employment contract (Article 6(1)(b) GDPR)
You may withdraw consent at any time by emailing talent@eag.group. Withdrawal does not affect the lawfulness of processing before withdrawal.
4. How we use your data
- Evaluating your application for the role you applied for
- Communicating with you about the hiring process
- Considering your profile for other open roles (only with your explicit consent)
5. Who has access to your data
Your application data is accessible to:
- EAG recruiting team members involved in the hiring process
- Hiring managers for the role you applied for
We do not share your data with third-party recruiters, advertising platforms, or data brokers. We may use sub-processors (e.g. email infrastructure) that process data on our behalf under appropriate data processing agreements.
6. Retention period
If your application is unsuccessful, we retain your data for 6 months from the date of our decision, after which it is permanently deleted. If you are hired, your data is transferred to your employee record and governed by our employee privacy policy.
You may request earlier deletion at any time (see section 8).
7. Data security
Application data is transmitted over HTTPS and stored on servers located within the European Union. Access is restricted to authorised personnel only. We apply appropriate technical and organisational measures to protect your data against unauthorised access, loss, or disclosure.
8. Your rights
Under GDPR, you have the right to:
- Access — request a copy of the data we hold about you
- Rectification — ask us to correct inaccurate data
- Erasure — request deletion of your data ("right to be forgotten")
- Restriction — ask us to limit processing of your data
- Portability — receive your data in a structured, machine-readable format
- Objection — object to processing based on legitimate interests
- Withdraw consent — at any time, without affecting prior processing
To exercise any of these rights, email talent@eag.group with your request. We will respond within 30 days.
9. Complaints
If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Czech data protection authority:
- Úřad pro ochranu osobních údajů (UOOU)
- Website: www.uoou.cz
- Email: posta@uoou.cz
10. Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top reflects the most recent revision. Material changes will be communicated to active applicants by email.
Contact
For any privacy-related questions:
talent@eag.group
EAG Group s.r.o., Prague, Czech Republic