Kardi-AI Technologies    

Privacy Notice

Introduction

This Privacy Notice is intended to comply with our obligations to provide you with information about the processing of your personal information in connection with the use of our website - https://www.kardi-ai.com/ (“Website”) and the services we offer.It is set out below in more detail what information we collect about you, how we use and safeguard that information, with whom we may share it and your rights as a data subject.We may update this Privacy Notice from time to time and will post on the Website any changes we made. Please check out our Privacy Notice regularly. This Privacy Notice was last updated on 29.07.2022


Who is the data controller?

The data controller is KARDI AI Technologies, sro, registered at the Commercial Register of Ostrava, Czech Republic, having its business seat at 28 Rijna 11 Olomouc, Czech Republic 779 00.  Any reference to "we", "us", "our", KARDI AI”, KARDI-AI” and “Kardi AI” is to KARDI AI Technologies.

Who is the data subject?

A data subject is any person whose personal data is being collected, held, or processed (e.g. visitors on the Website, job applicants, clients, suppliers, and partners).

What does personal data mean?

“Personal data” or “personal information” means any information relating to an identified or identifiable natural person (“data subject”), such as name, address, age, contact details, an identification number, location data, an online identifier, etc.

Does Kardi AI process children’s personal data?

Our services are not aimed at children under 14 years old. We do not deliberately collect, use, provide, or process any other form of children’s personal information under age 14. We therefore also ask you, if you are under 14 years old, please do not send us your personal information. If you are under 14 years old and you nevertheless wish to ask a question or use our Website or services in any way which requires you to submit your personal information, please get your parent or guardian to do so on your behalf.

How does Kardi AI collect data?

Kardi AI collects personal information from various sources, but mainly directly from you – the data subjects. You may provide such information directly to Kardi AI, send it via email or enter it into the contact form or job application form on our Website.

What personal data is Kardi AI processing and why? How long does Kardi AI keep my data?

Website visitors

As a visitor, you do not have to submit any personal data to use our Website. However, if you fill the contact form or the job application form, our Website will collect standard internet log information including:

  • your IP address
  • browser type
  • country, region, and city
  • access times and referring website addresses

If you decide to contact us, including by filling the contact form on our Website, we will collect certain personal information about you, such as:

  • names
  • e-mail or/and phone number
  • any other information that you decide to share with us

Please conceal or delete any personal data in your inquiry that is not relevant or do not want to share with us. We will use this data only to answer your inquiry and will not process it for other purposes.

Job applicants

If you apply for any vacancy at Kardi AI, including filling the job application form on our Website, we will process the following categories of personal data provided by you or your referee (if applicable), such as:

  • names
  • contact data (e.g., phone number, address, e-mail)
  • professional experience
  • education
  • qualifications
  • any other data you decide to share with us

We will process this data only for recruitment purposes and keep the data provided by you for a six months term as of the end of the recruitment procedure. Kardi AI will keep the assessment data (tests, interview protocols, etc.) for three years as of the recruitment procedure’s end.

Clients and contractors

If you are our client, supplier, or partner, we may collect the following information:

  • names
  • identification number (personal identification number or other identifier used as VAT number for the invoice issued for a natural person)
  • ID card or passport data
  • contact data (address, e-mail, phone number)
  • registration data (country of registration, registration number)
  • bank account

The processing of your personal data is necessary to perform the contract between you and Kardi AI and for compliance with legal obligations to which Kardi AI is subject.

We will retain your personal information for no longer than 5 (five) years after the contract’s termination.

In all cases described above, our policy is to retain your personal information for the length of time required for the specific purpose or purposes for which it was collected. However, we may be obliged to store some personal information for a longer time, considering factors including:

  • legal obligations under applicable law to retain data for a certain period
  • (potential) disputes
  • guidelines issued by relevant data protection authorities

While we continue to process your personal information, we will ensure that it is treated following this Privacy Policy. Otherwise, we securely erase your information once this is no longer needed.

Do we share your personal data with third parties?

Your personal information will only be shared where necessary with third parties, e.g. service providers (cloud service providers, insurers, bankers, lawyers, auditors, investors, consultants, and other professional advisors and other service providers) and affiliate companies.

Where these third parties act as a "data processor", they carry out their tasks on our behalf and upon our instruction for the purposes mentioned above. In these cases, your personal information will only be disclosed to these third parties to the extent necessary to provide the required services.

Where is my data transferred?

Your personal information is processed within the European Economic Area (EEA). However, if our service providers are located or use servers located outside the EEA and it is essential, we may transfer your data outside the EEA. In these cases, we will ensure that adequate measures for protecting your personal data are in place and that the requirements of the GDPR and all other applicable data protection laws are met before such transfer is executed.

Data subject rights

What are my data-subject rights and how can I use them?

As a data subject, you have lots of control over the information that we hold on you; these rights and how to use them are explained below. If you have any questions, need more information or guidance, please contact info@kardiai.com.

Access to my data

You can request access to the information we hold about you and we will also tell you:

  • what data about you are we processing
  • why are we processing it
  • lawful basis for processing
  • who are we sharing it with and if any information is transferred to a country not deemed to have adequate protections in place for personal data
  • how long will we be keeping your data
  • the source of the information if it was not collected directly from you
  • if we are using your data for automated decision making or profiling

Rectifying inaccuracies

If you feel the information we hold about you is inaccurate, you can ask us to correct or update it.

Right to be forgotten

You can also request that we erase your information. However, that might not always be possible if doing so means we cannot perform our contract with you, or we have a legal obligation or legitimate interest to keep the data. We will explain the consequences of erasing your data.

Restrict the processing

If you feel we are processing your information unlawfully or with inaccurate data, you can ask us to restrict processing. Where personal data is subject to restriction in this way, we will only process it with your consent or for the establishment, exercise, or defence of legal claims or for the protection of the rights of another natural or legal person or reasons of substantial public interest. If the processing is restricted, we will continue to store the data.

Object to the processing

If you disagree with any legitimate interest or the public interest we have relied upon to process your data, you can object to the processing. We will then stop processing the data unless we can demonstrate a compelling legitimate ground that overrides your rights or the processing is required to establish, exercise, or defend a legal claim.

Data Portability

Where we are relying upon your consent or the fact that the processing is necessary for the performance of a contract to which you are party as the legal basis for processing, and that personal data is processed by automatic means, you have the right to receive all such personal data which you have provided to Kardi AI in a structured, commonly used and machine‑readable format, and also to require us to transmit it to another controller where this is technically feasible.

Make a complaint

We are committed to protecting your data and upholding your rights, but if you feel we have not done that, please contact us via info@kardiai.com. Additionally, you have the right to complain to the relevant supervisory authority of the Czech Republic at https://www.uoou.cz/en/