Privacy policy

Who the controller is

The controller of your personal data is BackHouse Solutions s.r.o., registered office at Perucka 2587/12, 120 00 Praha 2, Czech Republic, company no. 21883637.

You can write to us at [email protected] or call +420 776 345 099.

We are a direct employer. We are not an employment agency, we do not place people in jobs, and we charge applicants nothing.

What we collect when you apply

In the form you fill in your name, your phone number, the position you are interested in, and the language we should speak to you in. The note is optional — write it only if you want to.

The form reaches us as an e-mail in the [email protected] inbox. Sending is handled by Amazon SES in the eu-central-1 region, that is, on servers in Frankfurt in the European Union.

We ask for nothing else in the form.

On what basis we process the data

We process the data so that we can contact you and agree the work with you. The legal basis is steps taken at your request before entering into a contract, under Article 6(1)(b) GDPR. In addition, you tick the consent to processing in the form.

Consent is voluntary and you can withdraw it at any time — just write to [email protected]. Withdrawal does not affect processing that took place before it.

Without a name and a phone number we have no way to contact you. But you do not have to fill in the form: you can also call us directly on +420 776 345 099.

We do not make automated decisions about anyone. A person reads your application and a person gets back to you.

Traffic measurement

To measure traffic we use PostHog, which runs on European infrastructure in Frankfurt. It starts only after you give consent in the banner on the site. The legal basis is your consent under Article 6(1)(a) GDPR.

Until you consent, your browser does not download the PostHog library at all and opens no connection to it. This is not just measurement switched off — nothing is sent. Once you consent, the measurement goes through our own address robotacz.cz/ph and on to PostHog in Frankfurt.

With your consent we record which pages you viewed, where you clicked, how far down the page you scrolled, where you came to the site from — including which advert you arrived from — how fast the page loaded, which clicks led nowhere, and errors your browser ran into. We also store which browser and device you use, and your approximate location: country, region, city, postal code and approximate coordinates for the area. That is worked out from your IP address, which PostHog does not store: there is no IP address in the stored data, and the coordinates identify an area rather than your device. This includes a session recording: we can replay your visit later as movement around the page.

Nothing you type gets into the recording. Every value in every field is masked right in your browser, before anything is sent. So your name, phone number and note leave your device only when you send the form yourself.

Advertising measurement

We advertise these vacancies on Google, and on Facebook and Instagram. To know which of those ads actually bring applicants, the site reports two things to Google Ads and to Meta: that an application form was sent, and that someone tapped a phone number. The legal basis is your consent under Article 6(1)(a) GDPR.

Google and Meta are told nothing else. Not your name, not your number, not a word of what you wrote — only that it happened, and which ad click it followed. Enhanced conversions on Google and Advanced Matching on Meta, the features that would upload a hashed e-mail address and phone number, are switched off in both accounts and are not configured in the site.

Until you consent, your browser downloads neither tag and opens no connection to Google or to Meta. Once you consent, Google sets its own cookies, named _gcl_*, and Meta sets _fbp and _fbc, which tie the visit to the ad click that started it.

Who receives the data

We do not sell the data and we do not pass it to anyone for their own purposes. We use it for nothing other than filling the position you are applying for.

The message from the form is delivered to our inbox by Amazon Web Services (Amazon SES), region eu-central-1 (Frankfurt). Traffic is measured by PostHog, hosted in the European Union (Frankfurt), which starts only with your consent. The site is run and delivered for us by Cloudflare — the submitted form passes through it, as does the measurement on its way to PostHog, so it sees the data from your application too.

Amazon SES and PostHog process data in the European Union. Cloudflare is a network with servers around the world, and it will serve you the page from whichever one is closest to you. Amazon, Cloudflare and PostHog are US-incorporated companies, so access from there cannot be ruled out. Where it happens, it is covered by the European Commission's standard contractual clauses under Art. 46(2)(c) GDPR, agreed in our processing agreement with each of them.

Google and Meta are the further recipients, and only if you consent to the advertising measurement: your counterparties in Europe are Google Ireland Limited and Meta Platforms Ireland Limited. Processing also happens in the United States, covered by the European Commission's standard contractual clauses and by the EU-US Data Privacy Framework, in which both companies are certified.

How long we keep the data

We keep the data from your application for 2 years from our last contact about it. Then we delete it. We hire by season, and two years is how long we might come back to you about another position — longer than that we could not justify.

If you want it deleted sooner, write to us at [email protected]. We will delete it promptly, unless we are required to keep it on another legal ground.

If your application leads to a job, it stops being application data. Retention is then governed by the employment contract and by payroll, accounting and tax rules, which set their own periods and are not ours to shorten.

Traffic measurement data is not part of your application and has its own periods: session recordings are deleted after 30 days, and PostHog keeps the rest of the measured data for no more than 7 years.

Your rights

You have the right to access your data, to have it corrected and erased, to restrict processing, to data portability, and the right to object to processing.

Using them is simple: write to [email protected] or call +420 776 345 099. You pay nothing for this.

If you believe we handle your data badly, you can lodge a complaint with the supervisory authority. It is the Czech data protection authority (Úřad pro ochranu osobních údajů), uoou.gov.cz.