Privacy Policy

I. Basic Provisions

The data controller pursuant to Article 4(7) of Regulation (EU) 2016/679 of the European Parliament and of the Council (hereinafter "GDPR") is Jan Příborský, Business ID: 04969031, with registered office at Nesovice 252, 683 33, conducting business under a trade license registered with the Municipal Office Bučovice (hereinafter the "controller").

Contact details of the controller:
Jan Příborský
Nesovice 252, 683 33
📧 info@expatexpert.cz
📞 +420 724 761 006

Personal data means any information relating to an identified or identifiable natural person. An identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identifier (e.g. name, identification number, location data, network identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person).

The controller has not appointed a Data Protection Officer.

II. Sources and Categories of Processed Personal Data

The controller processes personal data:

• that you provide directly (e.g. when requesting services, communicating, registering on our website, or signing a contract),
• obtained during the provision of services (e.g. representing you before authorities, completing visa applications, or assistance with job placement),
• from public or legally available sources (e.g. public registers or databases).

The processed personal data includes:

• identification data (name, surname, date of birth, nationality, gender),
• contact data (email, telephone number, residential and mailing address),
• professional and employment data (e.g. CV, qualifications, education, work experience, language skills),
• administrative data (e.g. data required for relocation, residence, applications for employee cards, long-term visas, health insurance, etc.),
• copies of identity documents (e.g. passport, ID card) if necessary to provide the service – these are not considered special categories of personal data, unless they contain sensitive information,
• other data provided by the client depending on the context of the service.

III. Legal Basis and Purpose of Data Processing

We process personal data for the following purposes:

• provision of relocation, visa, residence and related administrative services,
• preparation and translation of professional documents (e.g. CVs, cover letters),
• communication with employers and authorities based on a power of attorney,
• fulfilment of legal obligations (e.g. accounting, archiving, client identification),
• performance of contractual obligations and management of business relationships,
• protection of legal claims (e.g. debt collection),
• informing clients about important changes, updates or services (if prior consent has been given).

The legal basis for processing is:

• Article 6(1)(b) GDPR – performance of a contract for the provision of services,
• Article 6(1)(c) GDPR – compliance with a legal obligation,
• Article 6(1)(f) GDPR – legitimate interest of the controller (e.g. service operation, records, claims protection),
• Article 6(1)(a) GDPR – the data subject’s consent (in specific situations).

The controller does not engage in automated decision-making or profiling. Language corrections or formatting of documents (e.g. CVs) may involve the use of AI tools, but always in anonymised form, without identifiable personal data.

Processing of special categories of data under Article 9 GDPR (e.g. health, biometrics) does not occur unless we have your explicit consent or another legal ground.

IV. Retention Period

The controller retains personal data:

• for the duration of the contractual relationship,
• for 10 years after termination of the contract (e.g. for tax, accounting, or legal compliance),
• or for the time necessary to fulfil legal obligations,
• and in the case of data no longer required (e.g. ID document copies), no longer than 90 days after the end of service, unless another legal reason applies.

After the expiry of the retention period, personal data is securely deleted or anonymised.

V. Recipients of Personal Data (Processors)

Personal data may be shared with:

• contractual partners (e.g. accountants, legal advisers, translators, relocation specialists),
• IT and communication service providers (e.g. email, cloud storage, CRM),
• public authorities (e.g. Ministry of the Interior, Foreign Police, Labour Offices, health insurance companies) – only to the extent necessary for service fulfilment.

Processing by such processors is subject to a data processing agreement in accordance with Article 28 GDPR.

In the event of transfer to third countries (outside the EU/EEA), only services providing appropriate safeguards (e.g. Standard Contractual Clauses under Article 46 GDPR) are used.

VI. Your Rights

Under the GDPR, you have the following rights:

• the right to access your personal data (Art. 15),
• the right to rectify or complete data (Art. 16),
• the right to erasure of personal data (Art. 17),
• the right to restriction of processing (Art. 18),
• the right to object to processing (Art. 21),
• the right to data portability (Art. 20),
• the right to withdraw consent, if processing is based on consent (Art. 7(3)).

You also have the right to lodge a complaint with a supervisory authority:
The Office for Personal Data Protection
Pplk. Sochora 27, 170 00 Prague 7
🌐 www.uoou.cz

Providing personal data is usually voluntary, but may be necessary to provide the requested services. Without the required data, the services may not be delivered.

VII. Data Security

The controller has implemented appropriate technical and organisational measures to secure personal data, including:

• encryption of electronic communication,
• access control (e.g. passwords, role-based access),
• secure data backup and physical protection of documents,
• regular security reviews.

VIII. Final Provisions

By using the controller’s services or establishing cooperation, you confirm that you have read and agree to this Privacy Policy.

The controller reserves the right to amend this Policy. The updated version will be published on our website and may be sent to clients by email.

This Policy is effective from 3 August 2025.