PRIVACY
POLICY.

1. Introduction

GLENT s.r.o. ("GLENT," "we," "us," or "our") is firmly committed to the protection of your personal data and to the scrupulous observance of your privacy rights. This Privacy Policy sets out, with the precision the subject demands, how we collect, use, disclose, and safeguard your information when you visit our website and engage with our specialist recruitment services.

This policy has been drafted to comply fully with the General Data Protection Regulation (GDPR) (EU) 2016/679 and all other applicable data protection legislation in force within the Slovak Republic and the broader European Union.

2. Data Controller Information

Data Controller: GLENT s. r. o.
Identification Number (IČO): 54 763 622
Registered Office: Gogoľova 18, Bratislava - mestská časť Petržalka, 851 01, Slovak Republic
Email: connect@glent.eu

3. Personal Data We Collect

3.1 Information You Provide Directly

For Engineering Specialists:

• Personal identification: full name, date of birth, nationality
• Contact information: electronic mail address, telephone number, postal address
• Professional information: curriculum vitae, employment history, educational qualifications, professional certifications, technical competencies, and professional references
• Career preferences: desired positions, remuneration expectations, and geographic preferences
• Right-to-work documentation and identity verification documents, where legally required

For Company Representatives:

• Contact information: full name, electronic mail address, telephone number, and professional title
• Organisational information: company name, registered address, industry sector, and headcount
• Recruitment requirements and detailed position specifications
• Communication preferences

Website Visitors:

• Contact form submissions: name, electronic mail address, telephone number, and message content
• Newsletter subscriptions: electronic mail address and name (optional)
• Account credentials: username and password (stored in encrypted form)

3.2 Information Collected Automatically

• Technical data: IP address, browser type and version, time zone configuration, and operating system and platform details
• Usage data: pages visited, time spent on each page, hyperlinks followed, and referring website
• Device information: device type and unique device identifiers
• Cookies and analogous tracking technologies (see Section 8)

3.3 Special Categories of Personal Data

We process special categories of personal data only with your explicit and informed consent, or where such processing is expressly permitted by applicable law, including:

• Health information, where necessary to make reasonable adjustments during the recruitment process
• Information relating to criminal convictions, where legally required for specific positions

4. Legal Basis for Processing

We process your personal data exclusively on the following lawful grounds, as established under GDPR Article 6:

4.1 Consent (Article 6(1)(a))

Where you have provided explicit and freely given consent for us to process your personal data for specified purposes — such as marketing communications or the transmission of your curriculum vitae to prospective employers — we rely upon that consent as our legal basis.

4.2 Contract Performance (Article 6(1)(b))

Processing that is necessary for the performance of our recruitment services contract with you, or for the taking of steps at your request prior to entering into such a contract.

4.3 Legal Obligation (Article 6(1)(c))

Processing required in order to discharge our legal obligations, including those arising under taxation law, employment law, and anti-discrimination legislation.

4.4 Legitimate Interests (Article 6(1)(f))

Processing that is necessary for the pursuit of our legitimate business interests — including the improvement of our services, fraud prevention, network security, and direct marketing to existing clients — provided always that your fundamental rights and freedoms do not override those interests.

4.5 Special Category Data (Article 9)

In respect of special categories of personal data, we rely upon explicit consent pursuant to Article 9(2)(a), or upon processing that is necessary for employment purposes pursuant to Article 9(2)(b).

5. How We Use Your Personal Data

We employ your personal data solely for the following well-defined purposes:

5.1 Recruitment Services

• Matching engineering specialists with suitable career opportunities of genuine relevance
• Presenting candidate profiles to prospective employers with appropriate discretion
• Facilitating interviews and communications between all parties to the recruitment process
• Conducting reference checks and professional background verification
• Negotiating employment terms and conditions on behalf of our candidates
• Providing substantive career guidance and professional consultation

5.2 Service Improvement and Communication

• Responding to enquiries and providing a high standard of client support
• Issuing service-related notifications and material updates
• Improving the functionality and user experience of our website
• Conducting market research and analytical work to inform our service development
• Developing new services and capabilities in response to the evolving needs of our clients

5.3 Marketing and Business Development

• Distributing promotional materials concerning our services, subject always to your consent
• Sharing industry insights and engineering labour market intelligence
• Extending invitations to professional events and networking opportunities of potential value

5.4 Legal and Security

• Complying with all applicable legal and regulatory requirements
• Protecting against fraud and security threats of every description
• Enforcing our terms and conditions with appropriate rigour
• Resolving disputes and responding to legal claims as required

6. Data Sharing and Disclosure

6.1 With Your Consent

We share specialist profiles and curricula vitae with prospective employers exclusively upon receipt of your explicit consent. You retain full control over which organisations receive your information at all times.

6.2 Service Providers

We may share data with carefully selected and trusted third-party service providers who assist us in the conduct of our operations, including:

• IT infrastructure and hosting services
• Electronic mail delivery and communication platforms
• Background check and professional verification services
• Analytics and website optimisation tools
• Payment processing services (for client companies)

All such service providers are bound by contractual obligations of confidentiality and are prohibited from using your data for any purpose beyond those expressly specified.

6.3 Legal Requirements

We may disclose your information where required to do so by law, regulation, legal process, or binding governmental request, and only to the extent strictly necessary.

6.4 Business Transfers

In the event of a merger, acquisition, or disposal of assets, your personal data may be transferred to the acquiring entity, subject in all cases to the same standard of privacy protection set out in this policy.

6.5 We Do Not Sell Your Data

GLENT does not, under any circumstances, sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes.

7. International Data Transfers

Your personal data is processed primarily within the European Economic Area (EEA). Where it becomes necessary to transfer data outside the EEA, we ensure that appropriate and legally recognised safeguards are in place at all times, including:

• Standard Contractual Clauses approved by the European Commission
• Transfers to countries in respect of which an adequacy decision has been issued
• Binding Corporate Rules
• Your explicit consent in respect of the specific transfer in question

8. Cookies and Tracking Technologies

8.1 What Are Cookies

Cookies are small text files placed upon your device when you visit our website. They enable us to provide an enhanced browsing experience and to develop a more precise understanding of how our website is utilised by its visitors.

8.2 Types of Cookies We Use

Essential Cookies: Strictly necessary for the functionality, security, and navigation of the website. These cookies cannot be disabled without materially impairing your ability to use the site.

Performance Cookies: Collect anonymised information regarding visitor behaviour to assist us in improving the functionality and performance of our website.

Functional Cookies: Retain your stated preferences and choices in order to provide an enhanced and more personalised browsing experience.

Marketing Cookies: Monitor browsing activity for the purpose of delivering content of genuine relevance to your professional interests. These are employed only with your explicit consent.

8.3 Managing Cookies

You may exercise control over your cookie preferences at any time through our cookie consent interface and through the settings of your chosen browser. Please note that the disabling of certain cookies may affect the functionality of the website.

9. Data Retention

We retain your personal data only for as long as is strictly necessary for the purposes set out in this policy:

• Active candidates: Retained throughout the period during which we are actively seeking opportunities on your behalf, and for up to two years following your last interaction with us
• Placed candidates: Placement records retained for six years in order to satisfy legal and contractual obligations
• Unsuccessful applications: Retained for twelve months in the event that comparable opportunities arise within that period
• Client company data: Retained for the duration of the business relationship, plus six years thereafter for the purposes of legal compliance
• Marketing data: Retained until such time as you withdraw your consent or formally request deletion

Upon the expiry of the applicable retention period, we securely delete or irreversibly anonymise your data. You may request earlier deletion at any time (see Section 10).

10. Your Rights Under GDPR

As a data subject under the GDPR, you are entitled to exercise the following rights in respect of your personal data:

10.1 Right of Access (Article 15)

You may request confirmation as to whether we process your personal data and obtain a copy of all such data held by us.

10.2 Right to Rectification (Article 16)

You may request the correction of any inaccurate or incomplete personal data that we hold concerning you.

10.3 Right to Erasure / "Right to be Forgotten" (Article 17)

You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw your consent, or where you object to its processing.

10.4 Right to Restriction of Processing (Article 18)

You may request that we restrict the manner in which we use your personal data in certain defined circumstances.

10.5 Right to Data Portability (Article 20)

You may receive your personal data in a structured, commonly used, and machine-readable format, and transmit it to another data controller of your choosing.

10.6 Right to Object (Article 21)

You may object at any time to the processing of your personal data where that processing is based upon legitimate interests or is conducted for the purposes of direct marketing.

10.7 Rights Related to Automated Decision-Making (Article 22)

You have the right not to be subject to decisions based solely upon automated processing where such decisions produce legal effects or otherwise significantly affect you. GLENT does not employ fully automated decision-making in any aspect of its recruitment process.

10.8 Right to Withdraw Consent

Where processing is predicated upon your consent, you may withdraw that consent at any time without prejudice to the lawfulness of processing carried out prior to such withdrawal.

10.9 How to Exercise Your Rights

To exercise any of the rights set out above, please direct your request to us at:
Email: connect@glent.eu

We shall respond to your request within one calendar month. In cases of particular complexity, we may extend this period by a further two months and shall inform you of any such extension without delay.

11. Right to Lodge a Complaint

Should you consider that we have not handled your personal data in a manner consistent with applicable law, you have the right to lodge a formal complaint with the competent supervisory authority:

Slovak Data Protection Authority (Úrad na ochranu osobných údajov)
Hraničná 12
820 07 Bratislava 27
Slovak Republic
Website: dataprotection.gov.sk
Email: statny.dozor@pdp.gov.sk

12. Data Security

We implement appropriate and proportionate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure:

• Encryption of data in transit and at rest using industry-standard protocols (SSL/TLS)
• Regular security assessments and penetration testing conducted by qualified professionals
• Rigorous access controls and multi-factor authentication mechanisms
• Comprehensive employee training on data protection obligations and confidentiality
• Secure backup procedures and tested disaster recovery protocols
• Incident response procedures and timely breach notification in accordance with legal requirements

Whilst we apply every reasonable measure to protect your data, no method of transmission over the internet can be guaranteed to be entirely secure. We are unable to warrant absolute security, but we are committed to acting promptly and transparently in the event of any incident.

13. Children's Privacy

Our services are directed exclusively to individuals of eighteen years of age or above. We do not knowingly collect personal data from minors. Should you become aware that a child has provided us with personal data without appropriate parental consent, we ask that you contact us immediately so that we may take the necessary steps.

14. Changes to This Privacy Policy

We may revise this Privacy Policy periodically to reflect material changes in our practices, applicable technology, legal requirements, or other relevant factors. We shall notify you of any significant changes by:

• Publishing the revised policy on our website with an updated "Last updated" date
• Issuing electronic mail notifications to registered users
• Displaying prominent notices on our website for a reasonable period following any revision

Your continued use of our services following the entry into force of any revised policy shall constitute your acceptance of the updated terms.

15. Contact Us

Should you have any questions, concerns, or requests regarding this Privacy Policy or our data protection practices, we invite you to contact us directly:

GLENT s. r. o.
Gogoľova 18
Bratislava - mestská časť Petržalka
851 01, Slovak Republic

Email: connect@glent.eu

16. Data Protection Officer

For all data protection enquiries, please direct your correspondence to us at the contact details provided above. We shall ensure that your enquiry receives the prompt and considered attention it deserves.