Skip to main content

INTERSTAFF

SK EN DE

INTERSTAFF

Privacy policy

This information explains which personal data is processed when you use the INTERSTAFF website, send an enquiry or CV, or subscribe to job alerts.

1. Who processes your data

The operator of interstaffjobs.com is responsible for processing personal data:

2. What data we collect and why

Contact form

When you send an enquiry, we receive your name, email address and message. Providing a phone number and preferred country is optional. This data is used to handle your enquiry and follow-up communication.

For ordinary questions and enquiries, the legal basis is Article 6(1)(f) GDPR: the controller's legitimate interest in answering enquiries, conducting related correspondence and handling the request of the person who contacted it.

If the communication concerns steps at your request before entering into a contract directly with INTERSTAFF Holding s. r. o., the legal basis is Article 6(1)(b) GDPR. Ordinary enquiries are not processed on the basis of consent. Record retention is described in section 5.

CV for future vacancies

In the 'Haven't found the right job?' form, you provide your name, profession, contact details, preferred country, CV and an optional message. The purpose is to assess your work preferences and contact you about a suitable opportunity. The data may include education and work experience listed in your CV.

The legal basis is your consent under Article 6(1)(a) GDPR to include your personal data and CV in the candidate database so that we can contact you about suitable future job opportunities. You may withdraw consent at any time using the contact email in section 1.

Once consent is withdrawn or the purpose ends, the data will no longer be used for that purpose and the record will be closed or deleted under the relevant retention procedure. Automatic deletion of closed records in the website database follows the current setting in section 5. This period does not extend permission to use a CV after consent is withdrawn.

Applying for a specific vacancy

When you apply, we receive your name, email, phone number, CV, any message and details of the vacancy you are applying for. This data is used to handle your application and communicate about that opportunity. Applying does not subscribe you to the newsletter.

Data is processed to handle an application for a specific vacancy and facilitate the job opportunity. The legal basis is Article 6(1)(f) GDPR: the legitimate interest of INTERSTAFF and the relevant potential employer in handling a voluntarily submitted application and filling the vacancy.

Your CV and other data may be shared, to the extent necessary, only with the potential employer or partner whose specific job opportunity relates to your application. Data is not automatically shared with all business partners. You have the right to object to processing based on legitimate interests under Article 21 GDPR. Retention follows section 5.

Job alert subscription

Your email address and subscription status are used to send alerts. A new subscription is activated only after email verification and explicit confirmation on the website. A technical record of confirmation and sending is also kept. You can unsubscribe using the link in a new vacancy notification.

The legal basis is separate consent under Article 6(1)(a) GDPR. A new subscription is activated only after the email address is verified and the subscription is expressly confirmed. Consent can be withdrawn at any time through the unsubscribe link. Active subscriber data is processed for the duration of the subscription; rules for unconfirmed and ended subscriptions are in section 5.

Website operation and protection

The legal basis is Article 6(1)(f) GDPR: the legitimate interest in operating a secure and reliable website, protecting forms and user accounts, preventing abuse and handling security and technical incidents.

Where necessary, processing may include the IP address, request time, technical connection and browser data, and time-limited derived identifiers used for security and request-rate limits. They are retained only as long as needed for these purposes. Hosting operation logs may follow the provider's own appropriate retention rules.

3. What you need to provide

Required fields are marked with an asterisk. The form cannot be submitted without the information needed to handle it. Other information is optional. Do not include passwords, payment card numbers or other data unnecessary for your request in messages or CVs.

Depending on the purpose, each form uses either an acknowledgement of the privacy information or separate consent. The acknowledgement for an enquiry or a specific vacancy is not consent as a legal basis. Consent to retain a CV for future opportunities and consent to the newsletter are separate and can be withdrawn independently. Refusing these consents does not prevent an ordinary enquiry or an application for a specific vacancy.

Do not include special categories of personal data in your CV or messages, such as health, racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic or biometric data, or data concerning sex life or sexual orientation, unless processing is necessary for a particular employment situation and has a specific legal basis.

If such data appears in a CV without being necessary for recruitment, INTERSTAFF will not deliberately use it to assess the applicant. Receiving unsolicited sensitive data does not itself create a legal basis for processing it.

Do not send information about criminal convictions, offences or criminal-record clearance unless INTERSTAFF expressly and lawfully requests it for a particular position.

4. Who has access to your data

Submitted forms are stored in the website administration and sent to designated contact email addresses. For forms with a CV, the email may include it as an attachment. Deleting a website record therefore does not itself remove copies in emails or backups.

Records and CVs in the website administration are accessible to authorised portal staff. Applicants do not have their own account for viewing stored CVs.

  • Hosting and outgoing email: Websupport s. r. o., company registration number 36421928, Karadžičova 12, 821 08 Bratislava. The website and its database are hosted by Websupport; notifications are sent through its SMTP service. More information: Websupport privacy information.
  • Email communication: Delivery to Gmail mailboxes and communication through the listed Gmail contact address use Google's service. Copies of messages and attachments may be stored in the relevant mailbox.
  • Optional map: Google Maps loads only after the visitor permits it. Google's policies are linked in the cookies section below.

Authorised personnel of the controller and technical service providers supporting hosting, email, administration, maintenance, security or backups of information systems may have access to personal data to the extent necessary, where such services are used. Access is limited according to need and the legal or contractual role of the person or provider concerned.

The controller does not disclose personal data to third parties for their own marketing purposes without a separate legal basis. Only necessary data related to the relevant job opportunity is shared with a potential employer or partner, not automatically with all business partners.

International transfers

Before transferring data to a recipient outside the European Economic Area, INTERSTAFF must ensure a mechanism required by the GDPR, such as an applicable adequacy decision or appropriate safeguards. Where necessary, information about safeguards and how to obtain a copy will be provided via the contact email in section 1.

Gmail and Google Maps may involve processing outside the EEA, including in the USA. Google describes using adequacy decisions, including the EU-U.S. Data Privacy Framework for certified entities, and standard contractual clauses where required. The applicable mechanism depends on the service and transfer; using Gmail does not itself establish a Google Workspace agreement.

Details of these mechanisms and how to obtain a copy of the clauses are provided by Google in its international transfer information. You can also request information about your data from INTERSTAFF using the contact in section 1.

5. How long we keep data

Closed contact enquiries, candidate profiles and job applications, including stored CVs, are deleted from the website database after 360 days from receipt during the scheduled daily cleanup.

The period runs from receipt, not from closing the record. Closing an older record may therefore make it eligible for the next cleanup. Up to 100 records are deleted per daily run; notifications currently being sent are completed before deletion.

New, contacted and in-progress records are not deleted by this automatic rule. They are retained only while the purpose continues, particularly during active communication, handling an application or the relevant recruitment process. When the purpose ends, the record must be closed or deleted without undue delay. Leaving a record open is not a reason for indefinite retention.

This rule covers the website database, not email copies, backups or the separate newsletter records. Changing the automatic deletion setting does not itself change consent already given or create a new legal basis.

Setting 0 disables automatic cleanup, not the obligation to delete data when its purpose ends. A statutory right to erasure or withdrawal of consent is not postponed merely to wait for automatic cleanup. A necessary separate record may be retained where a legal obligation or a reason to protect legal claims continues to apply.

Newsletter

Active subscriber data is retained for the duration of the subscription. After unsubscribing, a minimal technical record may remain to demonstrate the unsubscribe request, respect the request not to send further messages or protect legal claims. Confirmation and delivery records are retained only to the extent and for as long as necessary to evidence the subscription, resolve delivery issues or handle legal claims; when these purposes end, they must be deleted or anonymised.

The scheduled daily newsletter cleanup removes unconfirmed requests that have not been updated for more than 30 days. This rule does not determine how long active subscriptions, job applications or CVs are retained.

Operation logs, emails and backups

Operation logs are retained only as long as necessary for website security, incident handling and technical operation, or under the service provider's appropriate retention cycle. Email copies of messages and attachments are retained for the purpose of the communication and afterwards only as needed to fulfil legal obligations or protect legal claims.

Backup retention is determined by an appropriate rotation cycle of the relevant system or backup provider; backups must be overwritten or removed when that cycle ends. Backups are not used as routine working records. Completed deletion and unsubscribe requests must be reapplied after a restore. The web application does not itself remove copies from mailboxes or external backups.

6. How we protect data

Managing forms requires authentication and permission checks. CVs stored in the website database are encrypted and are not exposed through the public media library. These measures cover the web application; email accounts and backups need their own access and retention rules.

7. Cookies and Google Maps

The website uses necessary storage for settings and login cookies when you sign in. Your choice of optional services is remembered by the cookie interstaff_consent for up to 182 days. This period concerns cookie settings, not CV retention.

Google Maps loads only with your permission. Google then receives connection data, including your IP address, and may use its own cookies. More information is provided by Google in its Privacy Policy.

You can change your choice via Cookies in the footer or disable the map on the Contact page. If your browser blocks the consent manager, the map button allows a one-off load for that page visit only. Disabling the map does not delete data already received by Google or cookies on its domain.

Overview of known storage mechanisms and services used by this website:

  • interstaff_consent: An INTERSTAFF cookie that remembers acceptance or rejection of optional services for up to 182 days. It is not used for advertising profiling.
  • WordPress login cookies: These authenticate the signed-in sessions of authorised administration users. Their validity depends on session settings and the option to remember the login.
  • Google Maps: The external service is blocked until permission is given. The names, lifetimes and processing of Google's own cookies depend on the provider and browser settings and are also governed by Google's policies.

At the last update, the public website uses the technical storage described above, WordPress login cookies for authorised users and optional Google Maps. The check of active public integrations found no analytics or advertising tracking service. Google Maps does not load before consent; the legal basis for optional processing is Article 6(1)(a) GDPR.

Before any additional optional service or technology storing or reading information on a visitor's device is activated, this overview and the consent mechanism must be updated. Information about international transfers through Google services is in section 4.

8. Your rights and withdrawing consent

Under the conditions of the GDPR, you may request access to your data, correction, erasure or restriction of processing. In the cases provided for by the GDPR, you also have the right to data portability and to object to processing.

Right to object: You may object at any time, on grounds relating to your particular situation, to processing based on legitimate interests. Processing must then stop unless the controller demonstrates compelling legitimate grounds overriding your rights or grounds for establishing or defending legal claims. You may object to direct marketing at any time, and the data must no longer be used for that purpose.

Under the conditions of the GDPR, portability applies to data you provided that is processed automatically on the basis of consent or a contract. Erasure is not an absolute right, particularly where retention is necessary for a legal obligation or legal claims.

Where processing is based on consent, you may withdraw it. Withdrawal does not affect the lawfulness of earlier processing. Unsubscribing from the newsletter does not automatically delete a separate job application.

Send requests and questions to: interstaffholding@gmail.com. Depending on the request, proportionate identity verification may be needed to prevent disclosure to an unauthorised person.

You may also send your request by post to the registered address in the first section. State which form or processing activity it concerns and which right you wish to exercise. Do not send passwords or login credentials.

Requests are handled without undue delay and within one month of receipt. For complex or multiple requests, this may be extended by a further two months; you must be informed of the extension and reasons within the first month. Exercising your rights is generally free of charge; the GDPR provides exceptions for manifestly unfounded or excessive requests.

You have the right to lodge a complaint with a supervisory authority, particularly in the country of your habitual residence, workplace or the alleged infringement. In Slovakia, this is the Office for Personal Data Protection of the Slovak Republic. This does not affect your right to a judicial remedy.

9. Automated decision-making

Within this website, INTERSTAFF does not use automated individual decision-making or profiling that produces legal effects concerning an applicant or similarly significantly affects them. Forms, automatic notifications and job alerts do not decide whether applicants are accepted, rejected or ranked. The web application itself does not perform automated applicant assessments.

10. Validity and updates

Last updated: 5 October 2026.

Effective date: 5 October 2026.

The current notice is available on this page. Information will be updated as appropriate when processing purposes or conditions change; where new consent is required, changing this document alone does not replace it.