Privacy Notice

This privacy notice is effective as of May 24, 2024. Please note that this privacy notice will regularly be updated to reflect any changes in the way we handle your personal data or any changes in applicable laws.

IBA Group a.s. and its affiliated companies (collectively referred to as “IBA Group”) (hereinafter “Company”, “we”, “our” or “us“) have created this Privacy Notice in accordance with applicable data protection laws in order to explain how IBA Group collect, use and share your personal data, when you use our websites, applications, services and tools, and the Company is acting as a data controller (or any local equivalent). More information on the different IBA Group entities can be found here.

Compliance

If you do not agree to the terms of this Privacy Notice, please do not access or use IBA Group websites.

What data do we collect?

We collect personal data of potential clients, business contacts, and website users. If the data we collect are not listed in this privacy notice, we will give individuals (when required by law) appropriate notice of which other data will be collected and how they will be used.

Our Company collects the following categories of data:

Personal identification information (such as your First Name, Last Name, email address, phone, company name, title, country).

We receive this data:

- from you when you voluntarily provide them to us for the purpose of accessing various downloads, viewing specific content, subscribing to Company’s newsletters, registering for events and indicating your preferences in receiving marketing from IBA Group;
- from your employer when you act as a contact person in business interactions between your employer and IBA Group;
- from publicly available sources such as social media, registers which according to Union or Member State law are intended to provide information to the public, marketing platforms or from events, you attended.
Analytical and technical information we receive from analytics providers, advertising networks, search information provider about your use of Company’s websites and advertising materials: browser type, ISP, referring/exit pages, platform type, date/time stamp, number of clicks, domain name and country/state of all visitors, information about your mobile device including (where available) type of device.
Audiovisual materials: photograph, and images/audio/footage captured/recorded when visiting our office or captured in the course of recruitment events or video recruitment interviews or during any other virtual and live events (including recordings during virtual workshops or similar events). These personal data are not collected for the purpose of identification, therefore they do not belong to special categories of data.

IBA Group websites do not collect any special categories of personal information about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data). IBA Group do not collect any information about criminal convictions and offences.

How do we collect your data?

The above-mentioned categories of personal data come to us either directly from you or indirectly from certain third parties such as our website’s technology, our affiliates, public authorities, public websites and social media, suppliers, customers and vendors.

You directly provide our Company with most of the data we collect, when you:

Register online or place an order for any of our solutions, products or services.
Sign up for a newsletter.
Register to leave a comment on website.
Voluntarily complete a customer survey or provide feedback on any of our message boards or via email.

How will we use your data?

IBA Group uses your personal data only where required for specific purposes. Please view the table below for (i) a list of the purposes for which IBA Group uses your personal data and (ii) an overview of the legal basis for each such purpose.

Purpose	Legal basis	Category of Personal Data
Monitoring your use of our websites.	Justified on the basis of our legitimate interests of avoiding non-compliance and protecting our reputation, improving the security and functionality of our website, and information	Analytical and Technical Information
Provision of our products and services to our clients and their employees/contractors and their customers Collecting data of our clients and their employees/contractors and their customers as part of surveys or marketing research.	Justified on the basis of our legitimate interests for ensuring the proper functioning of our business operations. Based on informed consent received in advance	Personal identification information
For audio/video captured during live/recorded events (including virtual events/webinars): to inform interested stakeholders about the content of such events/recordings (including online publication of such recordings for marketing purposes).	Based on your informed consent obtained prior to the event.	Audiovisual materials

How do we protect the personal data?

As a global organization with offices and operations throughout the world, personal data we collect may be transferred or be accessible internationally throughout IBA Group’s global business and between its entities and affiliates. IBA Group securely stores your data at Company’s CRM Systems in our Data Centers in the EEA.

Any such transfers throughout IBA Group’s global business take place in accordance with the applicable data privacy laws.

We maintain organizational, physical and technical security arrangements for all the personal data we hold. We have protocols, controls and relevant policies, procedures and guidance to maintain these arrangements taking into account the risks associated with the categories of personal data and the processing we undertake.

How long will your personal data be retained by us?

We will retain your personal data only for as long as is necessary to fulfil the purposes we collected it for.We maintain specific records management and retention policies and procedures, so that personal data are deleted after a reasonable time according to the following retention criteria:

We keep your data for as long as it is necessary to ensure our legitimate interests (for example, network improvement, fraud prevention, record-keeping, promoting safety, security and integrity, enforcing our legal rights) if this does not create a high risk of harm for your rights and freedoms.
We retain your data within 1 year from the date of our last interaction.
We will only keep the data for as long as needed to provide services to you.

Will we share your personal data with third parties?

We may transfer or provide access to personal data to our affiliates service providers, professional advisors, regulators, tax, audit, marketing agencies, or other authorities. Such third parties may be located in other countries. Before we do so, we shall take the necessary steps to ensure that your personal data will be given adequate protection as required by relevant data privacy laws and IBA Group’s internal policies.

Any transfers of your personal data from within the European Economic Area (EEA) to third parties outside the EEA will take place in accordance with the appropriate international data transfer mechanisms and standards. If the consent of the subject is required for such transfer of personal data in accordance with the law, we will take care in advance to obtain such consent.

Marketing

IBA Group would like to send you information about products and services of ours that we think you might like. Our targeted e-mail messages typically include web beacons, cookies, and similar technologies that allow us to know whether you open, read, or delete the message, and links you may click.

You will receive marketing communications from IBA Group if you have requested such information from us and if you have purchased services/products from IBA Group then we may only send you marketing communications about services/products similar to those purchased until you cancel this marketing communications.

If you have agreed to receive marketing or you receive them automatically as a purchaser of our services/products, you may always opt out later. If you wish to stop receiving IBA Group marketing materials then please click on the Unsubscribe button within the marketing email you have received from us or contact digital@ibagroup.eu

What are your data protection rights?

This Privacy Notice is a general guide on how IBA Group processes your personal data. As such, you should be aware that data protection and privacy laws can vary in different jurisdictions where IBA Group operates.

IBA Group’ policy is to comply with applicable laws, including requirements in certain countries that IBA Group notify individuals in that country of its personal data practices, and in some cases, obtain consent to those practices.

Where applicable laws are stricter than the practices described in this Privacy Notice, IBA Group has adopted specific privacy practices in those locations to satisfy those stricter requirements.

If your personal information is protected by the EU data protection law, you have the following data protection rights which you may be able to exercise by contacting IBA Group using the contact details provided under the “How to contact us and our Data Protection Officer” heading below:

right of access by the user: you shall have the right to receive information from us regarding the processing of your personal data by contacting IBA Group;
right to rectification: you shall have the right to demand that we correct your personal data which are incorrect and/or incomplete;
right to restriction of processing: you shall have the right to demand the restriction of the processing of your data if the requirements specified in Art. 18 of the GDPR have been fulfilled. You can object to processing of your personal information, ask IBA Group to restrict processing of your personal information or request portability of your personal information by contacting IBA Group;
right to erasure: you shall have the right, in the event that the requirements specified in Art. 17 of the GDPR have been met, to demand the deletion of your data. In accordance with Art. 17 you may demand the deletion of your data insofar as these data are no longer required for the purposes for which they were collected. You may demand the deletion of these data if IBA Group processes your data based upon the consent which you have granted and you then withdraw this consent;
right to object: if the processing is based upon an overriding interest or your data are used for the purposes of direct advertising, you shall have the right to object to the processing of your data by IBA Group;
right to data portability: insofar as the data processing is undertaken based upon a consent or a fulfilment of a contractual agreement and this is also undertaken while using an automated processing system, you shall have the right to receive your data in a structured, commonplace and machine-readable format and to transfer these data to another data processing service provider;
right of revocation: if the data processing is undertaken based upon a consent, you shall have the right to withdraw your consent for your personal data processing at any time, with effectiveness for the future and upon a free-of-charge basis, by using the following address: dpo@ibagroup.eu. Withdrawing your consent will not affect the lawfulness of any processing IBA Group conducted prior to your withdrawal, nor will it affect processing of your personal data conducted in reliance on lawful processing grounds other than consent;
right to complain: you shall have the right to complain to a data protection authority about IBA Group’s collection and use of your personal information. For more information, please contact your local data protection authority (a current list of the supervisory authorities in EU);
right to complain to a data protection authority about Company’s collection and use of your personal information. For more information, please contact your local data protection authority (see the section “How to contact the appropriate authority” below).

If you make a request, we have one month to respond to you. If you would like to exercise any of these rights, please contact us dpo@ibagroup.eu.

Cookies

Cookies are text files placed on your computer to collect standard Internet log information and visitor behavior information. When you visit our websites, we may collect information from you automatically through cookies or similar technology.

How do we use cookies?

IBA Group uses cookies in a range of ways to improve your experience on our website including understanding how you use them. For more information about the cookies that IBA Group uses and manages, please read our Cookies Policy.

Privacy policies of other websites

The IBA Group website contains links to other websites. Our Privacy Notice applies only to our website, so if you click on a link to another website or application, you should read their privacy policy.

Changes to our privacy notice

IBA Group keeps its Privacy Notice under regular review and places any updates on this web page. This Privacy Notice was last updated on May 24, 2024.

How to contact us and our data protection officer

If you have any questions about IBA Group’s Privacy Notice, the data we hold on you, or you would like to exercise one of your data protection rights, please do not hesitate to contact us.

Email us at: dpo@ibagroup.eu
Call us: +420 251 116 211
Or write to us at: 2583/13 Petrzilkova St., Prague 5, 158 00, Czech Republic

If you would like to stop receiving IBA Group marketing materials, or if you have any questions or suggestions regarding the functioning of our websites, applications, services, and tools, please contact us at digital@ibagroup.eu.

How to contact the appropriate supervisory authority

If you wish to complain because you feel that our Company has not addressed your concern in a satisfactory manner, you may contact our supervisory authority. You can find a list of the European supervisory authorities here.

The European Commission provides a platform for Online Dispute Resolution (OS), which you can access via the provided hyperlink https://ec.europa.eu/consumers/odr/main/index.cfm?event=main.home2.show&lng=EN .