TCC online s.r.o. (Company ID 241 41 089, registered office at Vlkova 46, 130 00 Prague 3, Czech Republic, “TCC online”) processes personal data in accordance with Regulation (EU) 2016/679 (GDPR) and Czech Act No. 110/2019 Coll., on the Processing of Personal Data. For any questions regarding personal data protection, please contact us at info@tcconline.cz (contact person: Petr Šik).
Our role in protecting your data
If you complete a questionnaire or test with us as an employee or candidate at the request of your organisation, we act as a processor in this relationship – we process the data on behalf of and on the instructions of your organisation, which is the controller and your main point of contact for exercising your rights and for information about the purpose and legal basis of the processing. The consent to the processing of outputs and basic information on data security were presented to you directly when completing the questionnaire.
If you are our client, business partner, website visitor or are applying for a job directly with TCC online, we are the controller of your personal data in this relationship.
What data we process and why (where we are the controller)
- Contact and billing details of clients – for concluding and performing the contract (legal basis: contract; for accounting documents, compliance with a legal obligation).
- Contact details of prospective clients – for handling enquiries and business communication (legal basis: pre-contractual steps and our legitimate interest; clients may opt out of receiving news at any time).
- Data of job applicants at TCC online – for the recruitment process (legal basis: steps prior to entering into an employment contract; longer retention only with your consent).
What data we process where we are the processor (on behalf of your organisation)
This includes name, surname, e-mail address and, where applicable, other identification and contact details, as well as answers or outputs from the questionnaires, tests and diagnostic tools made available within the service. We process these data solely on the instructions of your organisation as the controller and on the basis of our contract with it – see above for details on our role as processor.
Who we share data with
We share data only to the extent necessary with verified suppliers (sub-processors) who process them for us under a contract: our hosting and backup provider (WEDOS a.s., Czech Republic), our provider of e-mail, office and communication tools (Google Workspace), our CRM provider (HubSpot; data are stored in a data centre in Frankfurt, Germany), our accounting service provider (data from invoices and contracts to the extent necessary for bookkeeping) and providers of artificial intelligence tools (see below) – and with public authorities where required by law. A list of the suppliers who process the data of evaluated persons is set out in Annex No. 1 to the Data Processing Agreement. Should data be transferred outside the European Economic Area (in particular to the USA) when using these suppliers’ services, such a transfer is safeguarded by a European Commission adequacy decision (EU-US Data Privacy Framework) or by standard contractual clauses. If you sign in to the system via a Google or Microsoft account, we receive your name and e-mail address from these providers in order to log you in.
How long we keep data
For the duration of the contractual relationship and thereafter for the period required by law (e.g. accounting and tax regulations). We process the data of evaluated persons for the period set out in the contract with the relevant organisation. After the contract with the organisation ends, we erase or irreversibly anonymise these data so that they can no longer be attributed to a specific person (if the organisation so requests, we return the data to it beforehand). Data anonymised in this way are no longer personal data and we may continue to use them for statistical purposes, for developing comparative norms and for developing our services.
We process the data of job applicants at TCC online for the duration of the recruitment process and erase them without undue delay after it ends, unless the applicant consents to their retention for future recruitment.
Security
- encrypted data transmission (SSL/TLS),
- hosting in a data centre certified to ISO 9001, ISO 14001 and ISO 27001 (TÜV SÜD),
- regular backups,
- access to data by authorised persons only.
Use of artificial intelligence
In some of our products (e.g. when preparing summaries or recommendations), we use selected artificial intelligence tools from reputable providers, the current list of which is set out in Annex No. 1 to the Data Processing Agreement. We pass on to these tools only text and summary results processed within the service and, in the case of evaluated persons, only after removing direct identifiers (in particular name and e-mail address), although personal data that respondents themselves include in free-text answers may not be removed. We deploy them exclusively via secure, paid business interfaces: the data are not used to train models and are not permanently stored after processing. The final output or recommendation is always reviewed and approved by a human.
Your rights
You have the right of access to your personal data, to rectification or erasure, to restriction of processing, to data portability and to object, as well as the right to lodge a complaint with the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, Pplk. Sochora 27, 170 00 Prague 7, Czech Republic, www.uoou.cz). If you are an evaluated person in your organisation’s project, please contact your organisation first as the data controller.
Cookies
Our website uses cookies:
- Strictly necessary cookies – technically required for the website to function; we use them without requiring your consent.
- Other cookies (e.g. analytics, marketing) – we use them only with your prior consent, which you may withdraw at any time in the cookie settings.
Updates to this page
We may update this page from time to time.
Last updated: 8 October 2026.
