instaview

Legal

Information on Personal Data Processing

Effective date: 14.08.2026

Operator: Instaview s.r.o., Kaprova 42/14, Staré Město, 110 00 Praha, Czech Republic, e-mail: info@instaview.sk, web: instaview.sk

Purposes of Personal Data Processing

Instaview s.r.o. processes personal data for the following purposes:

For companies using the InstaView tool:

  • Contact details of authorized company representatives (name, email, phone, address, Company ID, Tax ID, VAT ID) designated by the company for communication purposes for fulfilling the agreement on using the InstaView tool.
  • InstaView tool usage data (log-ins, log-outs, features used) for tool improvement and optimization purposes and for internal statistical purposes (data is aggregated and serves only for statistical purposes).

For candidates of companies using the InstaView tool:

  • Candidates' personal data (to the extent that companies have consent for processing) for maintaining records of job applicants.
  • CV photograph (if included in CV and candidate consents) for maintaining records of job applicants (processed only for the duration of consent).
  • Data and recordings from online and telephone interviews with candidates (based on candidate consent) for candidate evaluation and service improvement purposes.
  • AI analysis and evaluation of interview data and recordings for candidate evaluation and service improvement purposes.
  • Retention of data and recordings in the database until the candidate's consent is withdrawn by the company, and in any event no longer than two (2) years from the date the data was first entered into the platform.

Responsibility of Companies for Candidates' Consent

Companies using the InstaView tool are required to ensure they have valid consent from candidates for processing their personal data in compliance with GDPR. Instaview s.r.o. does not verify such consent and bears no responsibility for it. Companies are required to provide candidates with all necessary information about processing their data and ensure that this consent is given freely, informedly, and unambiguously.

If a company does not have valid candidate consent, it must not process that candidate's data through the InstaView tool. The candidate is informed about personal data processing through a checkbox during online interviews and during telephone interviews through the question: Do you agree that the interview will be recorded for recruitment purposes?

Legal Bases for Processing Personal Data

  • Article 6(1)(f) GDPR (legitimate interest) - for processing contact details of authorized company representatives designated by the company for communication purposes for fulfilling the agreement on using the InstaView tool. The legitimate interest of the controller is ensuring effective communication with companies to which it provides services.
  • Article 6(1)(f) GDPR (legitimate interest) - for processing InstaView tool usage data for tool improvement and optimization purposes and for internal statistical purposes. The legitimate interest of the controller is ensuring quality and user-friendly services.
  • Article 6(1)(a) GDPR (consent of the data subject) - for processing candidates' personal data (to the extent that companies have consent for processing) and for processing CV photographs (if included in CV and candidate consents).
  • Article 6(1)(a) GDPR (consent of the data subject) - for data and recordings from online and telephone interviews with candidates (based on candidate consent) for candidate evaluation and service improvement purposes.
  • Article 6(1)(a) GDPR (consent of the data subject) - for AI analysis and evaluation of interview data and recordings for candidate evaluation and service improvement purposes.

Recipients of Personal Data

  • Tax Office
  • State administration and public authority bodies (e.g., labor inspectorate)
  • Courts and criminal prosecution authorities
  • Lawyer, executor
  • Postal service provider
  • Certified data center operator
  • IT management and software solution and cloud database provider
  • Website support and operation provider
  • Audit services provider
  • Programming work providers

Transfer of Personal Data to Third Countries

Instaview s.r.o. may transfer candidate personal data to third countries, including the USA, for processing data related to interviews and CVs. This data transfer is carried out through various data processing systems. Instaview s.r.o. has concluded standard contractual clauses with providers of these systems that ensure an adequate level of personal data protection in accordance with GDPR rules.

Automated Individual Decision-Making and Profiling

Instaview s.r.o. uses automated individual decision-making including profiling for candidate evaluation and service improvement purposes. For this purpose, the following categories of personal data are processed: CV data, interview data. The logic of automated decision-making and profiling is based on comparing data with position requirements and evaluating candidate responses. The result of this process is a recommendation that helps the company decide on further steps with the candidate. The final decision on accepting/rejecting a candidate is always within the company's competence. Data subjects have the right to object to automated decision-making and profiling and the right to human intervention from Instaview s.r.o.

Personal Data Retention Period

  • Authorized company representatives' contact details: for the duration of the contractual relationship and subsequently for the period necessary to fulfill legal obligations (e.g., accounting and tax purposes).
  • InstaView tool usage data: for 1 year (aggregated data).
  • Candidates' personal data: for the period that the company has consent for processing this data from the candidate, and in any event no longer than two (2) years from the date the data was first entered into the platform.
  • CV photograph: for the duration of candidate consent.
  • Interview data and recordings: for the period that the company has consent for processing this data from the candidate, and in any event no longer than two (2) years from the date the data was first entered into the platform.

Rights of Data Subjects

Data subjects have:

  • Right of access to personal data under Article 15 GDPR.
  • Right to rectification of inaccurate personal data under Article 16 GDPR.
  • Right to erasure of personal data ("right to be forgotten") under Article 17 GDPR.
  • Right to restriction of personal data processing under Article 18 GDPR.
  • Right to data portability under Article 20 GDPR.
  • Right to object to personal data processing under Article 21 GDPR.
  • Right to lodge a complaint with the Office for Personal Data Protection, Hraničná 12, 820 07 Bratislava 27, Slovak Republic, tel.: +421 2 3231 3220, e-mail: statny.dozor@pdp.gov.sk, web: www.dataprotection.gov.sk.

Security Measures

Instaview s.r.o. has implemented technical and organizational measures to ensure personal data protection, particularly limiting access to personal data only to authorized persons.

Personal Data Security Breach

Instaview s.r.o. undertakes to immediately inform the Office for Personal Data Protection and data subjects of any personal data security breach that could lead to high risk to the rights and freedoms of natural persons.

Contact Details

In case of questions or requests regarding personal data processing, you can contact us at e-mail address: info@instaview.sk.

Update

This information on personal data processing is regularly updated.