This Privacy Notice is intended to comply with our obligations to provide you with information about the processing of your personal information in connection with the use of our website - https://www.kardi-ai.com/ (“Website”) and the services we offer.It is set out below in more detail what information we collect about you, how we use and safeguard that information, with whom we may share it and your rights as a data subject.We may update this Privacy Notice from time to time and will post on the Website any changes we made. Please check out our Privacy Notice regularly. This Privacy Notice was last updated on 29.07.2022
The data controller is KARDI AI Technologies, sro, registered at the Commercial Register of Ostrava, Czech Republic, having its business seat at 28 Rijna 11 Olomouc, Czech Republic 779 00. Any reference to "we", "us", "our", KARDI AI”, KARDI-AI” and “Kardi AI” is to KARDI AI Technologies.
A data subject is any person whose personal data is being collected, held, or processed (e.g. visitors on the Website, job applicants, clients, suppliers, and partners).
“Personal data” or “personal information” means any information relating to an identified or identifiable natural person (“data subject”), such as name, address, age, contact details, an identification number, location data, an online identifier, etc.
Our services are not aimed at children under 14 years old. We do not deliberately collect, use, provide, or process any other form of children’s personal information under age 14. We therefore also ask you, if you are under 14 years old, please do not send us your personal information. If you are under 14 years old and you nevertheless wish to ask a question or use our Website or services in any way which requires you to submit your personal information, please get your parent or guardian to do so on your behalf.
Kardi AI collects personal information from various sources, but mainly directly from you – the data subjects. You may provide such information directly to Kardi AI, send it via email or enter it into the contact form or job application form on our Website.
Website visitors
As a visitor, you do not have to submit any personal data to use our Website. However, if you fill the contact form or the job application form, our Website will collect standard internet log information including:
If you decide to contact us, including by filling the contact form on our Website, we will collect certain personal information about you, such as:
Please conceal or delete any personal data in your inquiry that is not relevant or do not want to share with us. We will use this data only to answer your inquiry and will not process it for other purposes.
Job applicants
If you apply for any vacancy at Kardi AI, including filling the job application form on our Website, we will process the following categories of personal data provided by you or your referee (if applicable), such as:
We will process this data only for recruitment purposes and keep the data provided by you for a six months term as of the end of the recruitment procedure. Kardi AI will keep the assessment data (tests, interview protocols, etc.) for three years as of the recruitment procedure’s end.
Clients and contractors
If you are our client, supplier, or partner, we may collect the following information:
The processing of your personal data is necessary to perform the contract between you and Kardi AI and for compliance with legal obligations to which Kardi AI is subject.
We will retain your personal information for no longer than 5 (five) years after the contract’s termination.
In all cases described above, our policy is to retain your personal information for the length of time required for the specific purpose or purposes for which it was collected. However, we may be obliged to store some personal information for a longer time, considering factors including:
While we continue to process your personal information, we will ensure that it is treated following this Privacy Policy. Otherwise, we securely erase your information once this is no longer needed.
Your personal information will only be shared where necessary with third parties, e.g. service providers (cloud service providers, insurers, bankers, lawyers, auditors, investors, consultants, and other professional advisors and other service providers) and affiliate companies.
Where these third parties act as a "data processor", they carry out their tasks on our behalf and upon our instruction for the purposes mentioned above. In these cases, your personal information will only be disclosed to these third parties to the extent necessary to provide the required services.
Your personal information is processed within the European Economic Area (EEA). However, if our service providers are located or use servers located outside the EEA and it is essential, we may transfer your data outside the EEA. In these cases, we will ensure that adequate measures for protecting your personal data are in place and that the requirements of the GDPR and all other applicable data protection laws are met before such transfer is executed.
What are my data-subject rights and how can I use them?
As a data subject, you have lots of control over the information that we hold on you; these rights and how to use them are explained below. If you have any questions, need more information or guidance, please contact info@kardiai.com.
Access to my data
You can request access to the information we hold about you and we will also tell you:
Rectifying inaccuracies
If you feel the information we hold about you is inaccurate, you can ask us to correct or update it.
Right to be forgotten
You can also request that we erase your information. However, that might not always be possible if doing so means we cannot perform our contract with you, or we have a legal obligation or legitimate interest to keep the data. We will explain the consequences of erasing your data.
Restrict the processing
If you feel we are processing your information unlawfully or with inaccurate data, you can ask us to restrict processing. Where personal data is subject to restriction in this way, we will only process it with your consent or for the establishment, exercise, or defence of legal claims or for the protection of the rights of another natural or legal person or reasons of substantial public interest. If the processing is restricted, we will continue to store the data.
Object to the processing
If you disagree with any legitimate interest or the public interest we have relied upon to process your data, you can object to the processing. We will then stop processing the data unless we can demonstrate a compelling legitimate ground that overrides your rights or the processing is required to establish, exercise, or defend a legal claim.
Data Portability
Where we are relying upon your consent or the fact that the processing is necessary for the performance of a contract to which you are party as the legal basis for processing, and that personal data is processed by automatic means, you have the right to receive all such personal data which you have provided to Kardi AI in a structured, commonly used and machine‑readable format, and also to require us to transmit it to another controller where this is technically feasible.
Make a complaint
We are committed to protecting your data and upholding your rights, but if you feel we have not done that, please contact us via info@kardiai.com. Additionally, you have the right to complain to the relevant supervisory authority of the Czech Republic at https://www.uoou.cz/en/
