DE/ EN/ CZ
/ PRIVACY

Protecting your data.

Privacy policy pursuant to Art. 13/14 GDPR · Act No. 110/2019 Coll. · BDSG

/01 — CONTROLLER

Who is responsible for data processing?

The controller pursuant to Art. 4(7) GDPR for the processing of personal data on this website is:

Company1st Group SE
Legal FormSocietas Europaea (European Public Limited Company)
Register CourtPrague Municipal Court, Section H, File 2543
IČO17082722
AddressDlouhá 730/35, Staré Město, 110 00 Praha 1, Czech Republic
Emailhello@1st.group
Phone / Fax+49 32 229990173 (Hotline) · +49 32 229990174 (Fax)+420 226 211 344 (Hotline) · +420 226 211 345 (Fax)

Data Protection Officer: 1st Group SE is not required to appoint a data protection officer (Art. 37 GDPR, Section 38 BDSG). For any data protection questions, please contact us directly at the email address above.

/02 — PRINCIPLES

Principles of Data Processing

This website is operated by 1st Group SE. Protecting your personal data is important to us. We process data solely on the basis of applicable law, in particular Regulation (EU) 2016/679 (GDPR), Czech Act No. 110/2019 Coll., and the German Federal Data Protection Act (BDSG).

Personal data is only collected where technically necessary or where you provide it voluntarily. It is only disclosed to third parties where required by law.

No tracking, no third parties: This website uses no cookies, no analytics or tracking tools and no social media plugins. Everything — including fonts and the document list on the transparency page — is delivered from our own server.
/03 — HOSTING & SERVER LOGS

Hosting and Server Log Files

This website runs on 1st Group SE's own servers in a data centre in Prague (Czech Republic). The data centre operator only provides space, power and network connectivity and has no access to the stored data. When you access the website, our web server automatically stores information transmitted by your browser in server log files. This is technically necessary for secure and stable operation.

Data Processed
PurposeSecurity, error diagnosis, abuse detection, technical operation
Legal BasisArt. 6(1)(f) GDPR — legitimate interest (secure operation)
RetentionUp to 30 days, then automatic deletion
SharingNone — processed exclusively by us on our own servers
/04 — CONTACT

Contact via Email

When you contact us by email, the data you provide is processed for handling your enquiry.

Data Processed
PurposeProcessing and responding to your enquiry
Legal BasisArt. 6(1)(f) GDPR — legitimate interest (communication); Art. 6(1)(b) if pre-contractual
RetentionUntil your enquiry has been fully handled, then up to 3 years (limitation period); statutory retention obligations, e.g. for business correspondence, remain unaffected
SharingNo third-party sharing; handled internally by relevant staff
/05 — APPLICATIONS

Job Applications

If you apply to us — for an advertised position or speculatively by email — we process the data you send us solely for the application process.

Data Processed
PurposeCarrying out the application process and deciding on an employment relationship
Legal BasisArt. 6(1)(b) GDPR (steps prior to entering into an employment relationship); keeping your application in our talent pool: Art. 6(1)(a) GDPR (consent)
RetentionIf unsuccessful, deleted no later than 6 months after the process ends (defence against legal claims, Art. 6(1)(f) GDPR); in the talent pool for up to 12 months if you have consented
SharingOnly to the people at 1st Group SE involved in the process; no disclosure to third parties
Note: You can withdraw your consent to being kept in the talent pool at any time by emailing hello@1st.group; your documents will then be deleted. Please do not send us special categories of personal data (e.g. health data or religious beliefs) unless they are required for the position.
/06 — BROWSER STORAGE

Local Storage (localStorage) — No Cookies

This website does not use cookies. If you actively select a language, we store this choice in your browser's local storage (localStorage) so that the website appears in that language on your next visit. Nothing is stored unless you make a selection.

Key1st-lang
Valuede, en or cs (language code)
PurposeShowing the website in the language you selected on future visits
Personal DataNo direct personal data — contains only a language code
Legal BasisSection 25(2) no. 2 TDDDG and Section 89(3) of Czech Act No. 127/2005 Coll. (strictly necessary for the function you requested); Art. 6(1)(f) GDPR insofar as any personal reference exists
DeletionCan be deleted anytime via browser settings → “Clear site data”
/07 — DATA SHARING

Sharing of Personal Data

Your personal data is never sold or disclosed to third parties for advertising purposes. It is only disclosed where we are legally obliged to do so — for example on the basis of court orders or official requests.

No data is transferred to countries outside the EU/EEA. If you follow links to external websites (e.g. 1st-cloud.net or or.justice.cz), the privacy policy of the respective provider applies there.

/08 — YOUR RIGHTS

Data Subject Rights

Under the GDPR, you have the following rights as a data subject. To exercise your rights, contact hello@1st.group:

Art. 15 GDPR
Right of Access

You have the right to know whether and which personal data we process about you.

Art. 16 GDPR
Right to Rectification

You may request correction of inaccurate or completion of incomplete data.

Art. 17 GDPR
Right to Erasure

You may request deletion of your personal data, unless legal retention obligations apply.

Art. 18 GDPR
Right to Restriction

Under certain conditions, you may request restriction of the processing of your data.

Art. 20 GDPR
Right to Data Portability

You have the right to receive your data in a structured, machine-readable format.

Art. 21 GDPR
Right to Object

You may object at any time, on grounds relating to your particular situation, to processing based on legitimate interests.

We will respond to your request within 30 days (Art. 12(3) GDPR). In case of doubts about identity, we may request appropriate proof.

You can withdraw any consent you have given at any time with effect for the future (Art. 7(3) GDPR). There is no automated decision-making, including profiling (Art. 22 GDPR).

/09 — SUPERVISORY AUTHORITIES

Right to Lodge a Complaint

Under Art. 77 GDPR you have the right to lodge a complaint with a data protection supervisory authority. The lead authority is the Czech data protection authority at the company's registered office; for our branch in Bavaria, the Bavarian Data Protection Authority is responsible.

Czech Republic (lead authority)
AuthorityÚřad pro ochranu osobních údajů (ÚOOÚ)
Addresspplk. Sochora 27, 170 00 Praha 7, Czech Republic
Websitewww.uoou.cz ↗
Emailposta@uoou.cz
Germany (Neutraubling branch, Bavaria)
AuthorityBayerisches Landesamt für Datenschutzaufsicht (BayLDA)
AddressPromenade 18, 91522 Ansbach, Germany
Websitewww.lda.bayern.de ↗
Emailpoststelle@lda.bayern.de

Alternatively, you may contact the data protection authority of the EU member state where you habitually reside or work.

/10 — CURRENCY

Currency and Updates to this Privacy Policy

We update this privacy policy whenever the technology we use or the legal requirements change. The version published on this page at the time of your visit applies.

Last updated: October 2026