Privacy Policy

(hereinafter referred to as the "Privacy Policy")

This Privacy Policy is effective as of January 1, 2026. We care about the protection of your privacy. Therefore, please read this Privacy Policy carefully.

This Privacy Policy describes in detail how we collect, use, store, and potentially disclose your personal data in connection with the various activities carried out by our company during the operation of the SURIKADO platform or activities related to our operations. If you have any questions, inquiries, or requests regarding the protection of your privacy, please contact us at Privacy@surikado.com or by phone at +421 048 447 003.

If the terms "Anvil", "we", "us", etc., are used in this Privacy Policy, it refers to Anvil SW Ireland Limited, with its registered office at: 5th Floor Rear, Connaught House, 1 Burlington Road, D04 C5Y6 Dublin 4, Ireland, identification number: 780985, registered with the Companies Registration Office, incorporated in Ireland.

Definitions

For the purposes of this Privacy Policy, the following terms shall have the following meanings:

"Personal Data" means any personal data relating to an identified or identifiable living natural person who can be identified, directly or indirectly, by that data, which we process for one of the purposes set forth in this Privacy Policy.
"Controller" means the specific entity that determines the purposes and means of processing Personal Data, which is our company in accordance with this Privacy Policy.
"General Terms and Conditions" means our General Terms and Conditions on the Platform.
"Pseudonymized Data" means information and data about all data subjects or individual categories and groups of data subjects that have been anonymized and processed in a form that no longer allows direct identification of a natural person without the use of additional information.
"Processor" means a natural or legal person, public authority, agency or other body, other than the Controller, which processes personal data on behalf of the Controller.
"GDPR" means Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.
"Platform" means the SURIKADO platform used for providing the Service, available in a web browser version, and potentially a Mobile device version (if enabled by the Controller), operated by Anvil.
"Personal Data Protection Act" means Act No. 18/2018 Coll. on the Protection of Personal Data and on Amendments and Supplements to Certain Acts.

Terms not defined in this Privacy Policy shall have the meaning assigned to them in the General Terms and Conditions.

We process your Personal Data in accordance with the GDPR and the Personal Data Protection Act.

As Controller, we will process the following Personal Data about you

First and Last Name - We collect your first and last name as part of user registration on the Platform, as part of an Order, when subscribing to newsletters, and in mutual communication. The purpose of processing is primarily to identify you and provide the Service you are interested in. We also collect your first and last name if you directly provide us with your CV so that it can be included in our database.

Business Name - If you identify yourself as a sole proprietor when registering your User Account or filling out an Order, we will also require your business name for the purpose of processing your registration request or fulfilling the Order.

Username - If you have a User Account, you can register a username on the Platform, which serves to identify you.

Account ID - We collect your User Account identification number if you create a User Account. This number is generated automatically and is assigned to your User Account.

Business or Residence Address - We collect your business or residence address as part of user account registration or an Order. The purpose of processing is primarily to provide the Service you have ordered, to identify you, and to fulfill tax and accounting obligations.

Mailing Address - We collect your mailing address as part of user account registration or an Order (especially if the address is not the same as the business address).

Email Address - We collect your email address as part of user account registration, as part of an Order, when subscribing to newsletters, and in mutual communication.

Phone Number - We collect your phone number as part of user account registration, as part of an Order, and in mutual telephone communication.

IČO, DIČ, IČ DPH - If you identify yourself as a sole proprietor when filling out the User Account registration or an Order, we will request this information from you as an identifier of the entrepreneur.

Bank Account - If you identify yourself as a sole proprietor during a bank money transaction, we will also obtain your bank account details.

Gender - We collect information about your gender only if you voluntarily provide it to us (it is not a mandatory field).

Image from Photo - We collect your image from a photo only if you voluntarily provide it to us.

Date of Birth / Age - We collect information about your date of birth or age if you directly provide us with your CV containing this information.

Information about Your Qualifications, Education - We collect information about your qualifications, education (including degrees), and previous job positions if you directly provide us with your CV.

Data from Your Platform Usage - Log data: Your device's IP address, information about your device (hardware and software), time of access to the Platform, number of clicks, pages you view or their order, and the time you spend on the pages.

Transaction Information, History of Personal Data Protection Settings Changes - In addition to data from cookies, we also obtain data from Platform log files.

Cookies - Data about your use of the Platform; preferred services, and other Pseudonymized Data.

Personal Data You Provide to Us - If you choose to contact us, we will process the Personal Data necessary for communication with you.

For the avoidance of doubt, when a CV is provided by a Recruiter or Employer, we act not as the Controller but as the Processor, and we process personal data only according to the instructions of the Recruiter or Employer.

Method of Processing Your Personal Data and Legal Basis for Processing

As the Controller, we process your Personal Data to the extent and in accordance with this Privacy Policy, and for the purposes specified below.

User Account Registration on the Platform

Purpose of Processing: We process your Personal Data provided during the creation of a User Account for the purpose of identifying you as a party to the contract established by creating the User Account.

Method of Processing: We store your Personal Data, including first and last name, business name, account ID, username, business address, mailing address, IČO, DIČ, IČ DPH, email address, and phone number, bank account number, in our information system.

Legal Basis: Performance of a contract (Article 6(1)(b) GDPR).

Processing Period: For as long as you do not cancel your User Account or until we proceed with its cancellation. If your account is inactive for 2 years, your Personal Data will be deleted.

Sale of Platform Services and Fulfillment of Obligations Arising from the Concluded Contract

Purpose of Processing: We process your Personal Data provided during an Order for the purpose of identifying you as a contractual party to the contract established by ordering the Services.

Method of Processing: We store your Personal Data, including first and last name, business name, residence or business address, mailing address, IČO, DIČ, IČ DPH, email address, phone number, and bank account number, in our information system.

Legal Basis: Performance of a contract (Article 6(1)(b) GDPR).

Processing Period: 4 years from the creation of the Order. Data on issued invoices are kept for up to 10 years.

Uploading Your CV to Our Database

Purpose of Processing: Your Personal Data contained in your CV will be used for the purpose of including you in our CV database and linking you with other Users.

Method of Processing: We store your Personal Data, including first and last name, residence address, mailing address, email address, phone number, date of birth, age, information about qualifications and experience, gender, and image, in our information system.

Legal Basis: Performance of a contract (Article 6(1)(b) GDPR) or your explicit consent (Article 6(1)(a) GDPR).

Processing Period: 6 months from the upload of the CV or from the date consent was given. If you have a User Account, for the duration of your registration.

Provision and Improvement of the Service (including the use and enhancement of AI)

Purpose of Processing: Providing the Platform Service requires the processing of User Personal Data. Each use of the Service also contributes to the development of the Service and artificial intelligence.

Legal Basis: Performance of a contract (Article 6(1)(b) GDPR) or your explicit consent (Article 6(1)(a) GDPR).

Processing Period: For the period necessary to provide the Service, a maximum of 6 months.

Operation of the Platform and Access to its Additional Features

Purpose of Processing: Certain Personal Data obtained from your use of the Platform are necessary for displaying Platform content and using its features.

Legal Basis: Necessity for the purposes of accessing the Platform (Article 6(1)(b) GDPR).

Processing Period: For the duration of your access to the Platform and subsequently as pseudonymized data.

Sending Marketing Communications (Newsletter)

Purpose of Processing: We also process your Personal Data for the purpose of sending marketing communications (newsletters) to your email address.

Legal Basis: Your consent (Article 6(1)(a) GDPR) or legitimate interest (Article 6(1)(f) GDPR).

Processing Period: For as long as you do not unsubscribe or for 1 year from subscribing.

Provision, Improvement, and Optimization of Platform Operation

Purpose of Processing: We use your data to improve and optimize the operation of the Platform, for analytical and statistical evaluation, profiling, and to prevent misuse of the Platform.

Legal Basis: Legitimate interest (Article 6(1)(f) GDPR).

Processing Period: A maximum of 3 years from your last visit to the Platform.

Responding to Questions, Requests, and Inquiries

Purpose of Processing: We process your Personal Data for the purpose of contacting you and fulfilling your question, request, or inquiry.

Legal Basis: Legitimate interest (Article 6(1)(f) GDPR).

Processing Period: For the time necessary to provide a response, no longer than 1 year.

Handling Requests Related to the Exercise of Data Subject Rights under GDPR

Purpose of Processing: We process your Personal Data for the purpose of reviewing, assessing, and fulfilling your request related to the exercise of certain rights under Articles 16 to 22 of the GDPR.

Legal Basis: Compliance with a legal obligation (Article 6(1)(c) GDPR).

Processing Period: During the processing of your request and subsequently for 10 years from the date of its fulfillment.

To Whom We Disclose Your Personal Data

We will disclose your Personal Data to third parties in the following cases:

if such an obligation arises from applicable legal regulations, especially at the request of law enforcement agencies, courts, other public authorities, or other authorized persons;
if it is necessary for the fulfillment of our obligations and for the protection of our legitimate interests, especially to our lawyers, consultants, auditors, IT service providers, etc.;
if it is necessary for the fulfillment of our obligations under the concluded contract, for example, when providing the Service or other interactions with Platform users.

In accordance with the GDPR, we enter into data processing agreements with entities that have the status of a Processor, and Processors always process Personal Data based on the instructions and on behalf of Anvil.

Transfer of Personal Data Outside the EU

We do not transfer your Personal Data outside the European Economic Area. If this should happen in the future, we will ensure that this transfer takes place under the conditions and at the standard set by the GDPR and the Personal Data Protection Act.

Your Rights Regarding the Protection of Personal Data

Right to Withdraw Consent - In cases where we process your Personal Data based on your consent, you have the right to withdraw that consent at any time. You can withdraw your consent electronically by contacting Privacy@surikado.com.
Right of Access - You have the right to obtain a copy of the Personal Data we hold about you.
Right to Rectification - We take reasonable steps to ensure that the information we hold about you is accurate, complete, and up-to-date.
Right to Erasure (Right to be Forgotten) - You have the right to request that we erase your Personal Data.
Right to Restriction of Processing - Under certain circumstances, you are entitled to request that we stop using your Personal Data.
Right to Data Portability - Under certain circumstances, you have the right to request that we transfer your Personal Data to another third party.
Right to Object - You have the right to object to the processing of Personal Data that is based on our legitimate interests.
Right to Lodge a Complaint with a Supervisory Authority - If you believe that your Personal Data is being processed unfairly or unlawfully, you can lodge a complaint with the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27; Tel.: +421 /2/ 3231 3214; Email: statny.dozor@pdp.gov.sk.

Final Provisions

Security

All Personal Data that we collect and process are protected by appropriate technical means and security measures to prevent unauthorized access or misuse of this Personal Data.

Changes to the Policy

We are entitled to change or amend this Privacy Policy at any time. If we make any changes, we will post the new Privacy Policy on the Platform and, if necessary, we will also inform you of the changes via email.

Contact Us

If you have any questions, inquiries, or requests regarding this Privacy Policy, wish to withdraw your consent, or exercise your rights, please contact us via email at: Privacy@surikado.com.