About company

Controller information

The protection of your personal data is important to us. This privacy statement explains which personal data CN Group CZ a.s. collects from you and how we use this data. All the principles are adherent to Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of individuals with regard to processing personal (also referred to as "GDPR").

Controller of your personal data is company:

CN Group CZ a.s.

Ve Smečkách 20/591
110 00 Praha 1
Czech Republic
IČ: 07885041

Company web

Rules for processing

We respect the highest standards of personal data protection while processing your personal data, and we follow all necessary rules, in particular:

a) We always process your personal information for a clear and comprehensible purpose, in the prescribed manner, and only for such time as it is necessary for the purposes of their processing.

b) We only process accurate personal data and ensure that its processing conforms to the intended purposes and is necessary to fulfill these purposes.

c) We process your personal data in a way that ensures the highest possible security of this data and which prevents us from doing so any unauthorized or accidental access to personal data, alteration, destruction or loss thereof, unauthorized transmissions, to their other unauthorized processing, as well as to other misuse.

d) We always keep you informed about the processing of your personal information and your claims for accurate and complete information about the circumstances of this processing, as well as your other related rights.

e) We comply with appropriate technical and organizational measures to ensure a level of security appropriate to all possible risks;

f) any person who comes into contact with your personal data is under an obligation to observe the confidentiality of the information obtained in relation to the processing of such data.

Rules for processing

Processing information

Right to Revoke (withdraw) Consent

Right to Revoke (withdraw) Consent

You have the right at any time to revoke your consent to the processing of your personal information for the offer of a business or services. To do so, you can use the form listed in the Requests section. Revocation of your consent is without prejudice to the processing of personal data before his appeal.

Your rights

Right to Correction

You have the right to correct imprecise personal data concerning you without undue delay. Taking into account the purposes of the processing, you also have the right to complete incomplete personal data, including by providing an additional statement.

Right to raise objection to direct marketing

If your personal data is processed for direct marketing purposes, you have the right at any time to object to this processing, including profiling, insofar as it relates to direct marketing, when it comes to initial or next processing.

Right to access personal data

You have the right to receive from us a confirmation that your personal data is processed or not. If your personal information is processed, you have the additional right to access your information along with the following information:
- The purposes of processing,
- the personal data concerned or their categories,
- recipients or categories of recipients to whom personal data has been or will be made available,
- the planned time period for which personal data will be stored or, if it is not possible to determine, the criteria used to determine that time,
- Existence of the right to request from us the repair or deletion of personal data, the limitation of their processing, or the right to object to such processing,
- the right to file a complaint with the Supervisory Authority,
- any available information on the source of personal data,
- whether automated decision-making, including profiling, on the procedure followed, as well as the meaning and implications of such processing, are made.

We will provide you with a copy of the processed personal data. After the second and every subsequent copy we are entitled to charge a reasonable fee based on administrative costs.

Right to erase

You have the right to delete all personal data concerning you without undue delay if one of the following reasons is true:
- Personal data are no longer required for purposes for which they were collected or otherwise processed,
- You have withdrawn the consent under which the data were processed and there is no other legal reason for processing,
- Personal data were processed unlawfully,
- Personal data must be deleted to meet legal obligations,
- Personal data were gathered in connection with the provision of information society services.

The right of cancellation does not apply if a legal exception is given, in particular because the processing of personal data is necessary for:
- fulfillment of a legal obligation which requires processing under European Union or Member State law applicable to the trustee,
- for the determination, exercise or defense of legal claims.

Right to raise objection against processing

You have the right at any time to object to the processing of your personal data, which relate to your situation in cases of lawful processing, where such processing is necessary for the fulfilling tasks carried out in the public interest or in the exercise of public authority to which we are entrusted or due to our legitimate interests or a third party. We are obliged to prove, that our serious legitimate interests prevail over your interests or your fundamental rights and freedoms.

Right to raise a complaint

You have the right to raise a complaint to our activities as a controller in the form specified in the Requests section. It must be clear from the application who is the person and what is its subject. If this is not the case, or if it is necessary to do so, we will ask you to add it within the specified time. If the complaint is not completed, it can not be resolved. The deadline for processing a complaint is 30 calendar days and begins to run the first working day after delivery or addition. Complaints are handled without undue delay.

Right to restrict processing

You have the right to restrict the processing of personal data in any of the following cases:
- You deny the accuracy of the processed personal data, processing will be limited to the time it takes to verify the accuracy of your personal data,
- processing is illegal and you refuse to delete personal information and request instead restrictions on their use,
- We no longer need your personal data for processing purposes, but you are required to identify, exercise or defend legal claims.

If the processing has been restricted, personal data, except for its storage, may be processed only with your consent or due to determination, enforcement or defense of legal claims or the protection of the rights of another natural or legal person or of reasons of major public interest The European Union or a Member State.

Right to transfer data

You have the right to submit your personal data processed automatically to us for another controller in a structured, commonly used and machine-readable format. In exercising your right to data portability, to ensure that personal data is transmitted directly by one controller to another if it is technically feasible.


You may use your personal data processing rights as a data subject at any time by contacting one of the following defined ways. We handle requests in writing in electronic or paper form. If you contact us electronically, the request will also be processed electronically, if you do not request a different settlement. Your requests will be processed free of charge. In cases where your application is clearly unreasonable or inappropriate, especially as we repeat, we are authorized to impose a reasonable fee for you, taking into account the administrative costs associated with providing the required information or communication, or to take the requested action, or to reject the request.

Written form

Send the application along with an officially signed signature to the address of the company (see above).

Data box (datová schránka)

Send the application to company data box, ID pv6dfkt.


Send the application to e-mail dpo (at) cngroup.dk. In such case we are justified to ask for additional identification.


The application can be submitted personally to any HR department employee.

Contact person responsible for protection of personal data

In case of questions concering protection of personal data or in case of request processing use e-mail address dpo (at) cngroup.dk or call +420 602 771 327.

Document history

- 10.8.2018 Slovak version added.
- 27.7.2018 Romanian version added.
- 6.7.2018 Change and adding purposes. Revision of processing periods.Separation of information for candidates and employees.
- 5.7.2018 Bugs correction. Right to withdraw consent separated. Formal changes. Adding history.
- 31.5.2018 Initial version.