Information on the processing of personal data for student interested in the scholarship programme in the VINCI Construction CS Group

In accordance with the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation; hereinafter referred to as the “Regulation” or “GDPR”), we are providing to you the following information in relation to the personal data we obtained from you on the basis of your interest in participation in the scholarship programme at the VINCI Construction CS Group:

1.a) Purposes for which personal data is processed and the legal basis for processing:

The controller of your personal data for the purposes of employee recruitment within the VINCI Construction CS Group, including fulfilment of the rights and obligations arising therefrom, is the company: VINCI Construction CS a.s., Identification no.: 140 80 672, with its registered office at U Michelského lesa 1581/2, Michle, 140 00 Prague, ref. no.: B 27244 administrated by the municipal court in Prague (hereinafter referred to as “VINCI Construction CS a.s.”). 

1.b) Identification and contact data of the controller and, as the case may be, its representative:

The purpose of processing your personal data is: i) implementation, organisation and evaluation of student´s participation in the scholarship programme (recruitment of student[s] in accordance with the requirements and criteria specified by the potential employer) in the VINCI Construction CS Group or, as the case may be, any company that is part of the VINCI Construction CS Group or any of its subsidiaries, and ii), fulfilment of the rights and obligations associated with the process prior to the potential establishment of an employment relationship with the employer, and iii) use for the purposes of any further selection processes in case the student is interested to receive a job within the VINCI Construction CS Group, and iv) administration of the database of candidates for participation in the scholarship programme within the VINCI Construction CS Group, v) inclusion and administration of such candidates in the database of candidates for participation in the scholarship programme within the VINCI Construction CS Group. The legal basis for the processing of the personal data that you have provided is: (i) implementation of measures that must be adopted prior to the inclusion of the student into the scholarship programme within the VINCI Construction CS Group and prior to conclusion of an employment relationship on the basis of your application (based on your request or as a reply to our recruitment search) pursuant to Article 6 (1) (b) of the Regulation, and (ii) fulfilment of the legal obligation that relates to the controller pursuant to Article 6 (1) (c) of the Regulation, particularly arising from Act No. 262/2006 Coll., the Labour Code, as amended, and Act No. 435/2004 Coll., on Employment, as amended, and (iii) the legitimate interest of the relevant controller pursuant to Article 6 (1) (f) of the Regulation.

1.c) Legitimate interests of the controller or a third party in the case that processing is carried out on the basis of Article 6 (1) (f) of the Regulation:

The legitimate interest of the controller for processing for the purposes pursuant to item 1.b) (iii), (iv) and (v) primarily consists in the selection of the qualified scholars active within the VINCI Construction CS Group, preservation of competitiveness, protection of administrator’s reputation and saving of administrative costs, and protection of the rights and other legitimate interests of the controller.

1.d) Potential recipients and categories of recipients of personal data:

Potential recipients of the personal data provided by you are VINCI Construction CS a.s. and any other company that is part of the VINCI Construction CS Group and that has access to the ATS, particularly in the scope of the positions listed on the website. Any of the companies within the VINCI Group, of which the VINCI Construction CS Group is a part, and relevant personal-data processors may also be recipients. Potential recipients of personal data may also include the relevant employees in the area of human resources at the above-mentioned companies. A provider of occupational medical services may also be a potential recipient of your personal data. Public authorities that may obtain personal data in the context of a special investigation in accordance with Czech law are not considered to be recipients.

1.e) The categories of processed personal data and the source of such personal data:

The categories of processed personal data primarily include personal data that we have obtained directly from you. Furthermore, the categories of processed personal data also include data that we have obtained from employment or recruitment agencies or from your previous employer or from your school and, as the case may be, from social networks or other publicly available sources. Depending on the nature of the personal data obtained, the category of processed personal data includes, in particular: name, surname, date of birth, permanent residential address or correspondence address, signature, nationality, gender, e-mail address, telephone number and, as the case may be, other personal data provided in your CV or cover letter, if they have been provided to us.

1.f) In relation to the controller’s intention to transfer personal data to a third country or to an international organisation (if any such intention arises) and the existence or non-existence of a Commission decision on appropriate protection or, in cases of transfer set forth in Article 46 of the Regulation or Article 47 or the second sub-paragraph of Article 49 (1) of the Regulation, a link to the appropriate guarantees and means of obtaining a copy of the given data or information on where the data has been made accessible shall be provided.

The controller has no intention to transfer your personal data to a third country or international organisation. 

We are further providing to you the following information: 

2.a) The period for which the personal data will be retained or, if it is not possible to determine such period, the criteria for specifying such period: 

Your personal data will be retained for the duration of your participation, organization and evaluation in the scholarship programme within the VINCI Construction CS Group and, as the case may be, for the duration of the selection process for the position for which you have applied or for another suitable position, though no longer than is necessary for the purposes for which the data is processed. If an employment relationship is established on the basis of the result of an evaluation of your participation in the scholarship programme within the VINCI Construction CS Group, your personal data will be retained at least for the period specified by the relevant legal regulations (e.g. Act No. 582/1991 Coll., on the Organisation and Implementation of Social Security, as amended).

2.b) The existence of the right to request from the controller access to personal data pertaining to the data subject, the correction or deletion of such data and the restriction of processing of such data, as well as the right to raise objections to processing and the right to data portability:

As a data subject, you have  the following rights in particular: a) the right to request from the controller access to your personal data pursuant to Article 15 of the Regulation, and b) the right to correction consisting in the correction of inaccurate personal data and/or the supplementation of incomplete personal data pursuant to Article 16 of the Regulation, and c) the right to deletion of personal data pertaining to you as a data subject pursuant to Article 17 of the Regulation, and d) the right to demand that the controller restrict processing pursuant to Article 18 of the Regulation. You also have the right to raise objections to the processing of your personal data under the conditions pursuant to Article 21 of the Regulation. You also have the right to portability of your personal data under the conditions pursuant to Article 20 of the Regulation.

You can exercise the above-mentioned individual rights by writing to VINCI Construction CS a.s. at the company's correspondence address at U Michelského lesa 1581, 140 00 Prague 4, or by e-mail at the address osobni.udaje@eurovia.cz.

All of the information contained in this informational document and all communications and all actions pursuant to Articles 15 to 22 and Article 34 of the Regulation are provided to you free of charge by the controller. There is also no charge associated with the exercise of individual rights or fulfilment of obligations. If your demands are obviously unfounded or excessive, especially due to their repetitiveness, the controller may either: a) impose a proportionate fee taking into account the administrative costs associated with providing the requested information or communication or with carrying out the requested actions, or b) refuse to comply with the request. Pursuant to Articles 15 to 22 of the Regulation, the provider shall provide to you, in each case and without undue delay, information on the adopted measures within one month of receiving the given measure. If necessary and with respect to the complexity and number of requests, it is possible to extend this period by an additional two months. 

We also inform you that if it is probable that a particular case involving a breach of the security of your personal data will lead to a heightened risk to the rights and freedoms of natural persons, the controller will notify you of such breach without undue delay pursuant to the conditions of Article 34 of the Regulation.

2.c) If processing is carried out on the basis of Article 6 (1) (a) or Article 9 (2) (a) of the Regulation, the existence of the right to withdraw consent at any time, without affecting the legality of processing based on consent granted prior to its withdrawal: 

Processing of your personal data is not based on Article 6 (1) (a) or on Article 9 (2) (a) (consent to processing) of the Regulation. 

2.d) Existence of the right to file a complaint with the supervisory authority:

You have the right to file a complaint with the supervisory authority, which is the Office for Personal Data Protection, Identification no.:  70837627, with its registered office at Pplk. Sochora 27, 170 00 Prague 7, website: www.uoou.cz.

2.e) The fact of whether the provision of personal data is a legal or contractual requirement, or a requirement that must be included in a contract, and whether the data subject is obligated to provide personal data and with respect to possible consequences of not providing such data:

The personal data that you provide is a legal requirement necessary for the exercise of the rights and obligations of your potential employer based on the law. It is also necessary to provide your personal data in any contract on stipend during your studies that also establishes an employment relationship between you and your employer. If you do not provide your personal data, it will not be possible to fulfil the purpose for which we process the personal data you have provided; in particular, you will not be able, as an applicant for the scholarship program within the VINCI Construction CS Group to apply for the participation in the scholarship program and no possible employment re   

2.f) The fact of whether automated decision-making, including profiling, specified in Article 22 (1) and (4) of the Regulation occurs at least in cases involving meaningful information pertaining to the utilised process, as well as to the significance and anticipated consequences of such processing for the data subject. 

Neither the personal data that you provide nor you as a person are the subject of automated decision-making or profiling as specified in Article 22 (1) and (4) of the Regulation. 

Prague, 1 September 2022