Applicant Privacy Policy (Privacy Policy)
Last updated: 16.01.2026
This Applicant Privacy Policy (the Policy) explains how Mancala Gaming s.r.o. (the Company, we, us) processes personal data in connection with recruitment activities on the career landing page at https://survey.mancalagaming.com/ (the Site) for Mancala Gaming. The Site is intended only to receive job applications. It does not sell goods or services, does not accept payments, and does not require account registration.
This Policy is written to support compliance with the EU General Data Protection Regulation (GDPR). Separate optional sections address UK GDPR and California law, where relevant.
1. Data controller and contact details
Controller: Mancala Gaming s.r.o.
Registration number: VAT: CZ14428521
Registered address: Tyršova 1832/7120 00, Prague 2 Czech Republic
General contact: info@mancalagaming.com
Privacy contact: info@mancalagaming.com
2. Personal data we collect
We may process the following categories of personal data:
2.1. Application form data
first name, surname
email address, phone number
specialization or department, seniority level
comment
2.2. Application materials
CV and other files you choose to upload (JPG, PNG, PDF up to 50 MB)
information contained in those materials (for example, work history, education, skills)
2.3. Communications
messages you send to us and our responses (email or other channels)
2.4. Technical data and security logs
device and browser information, identifiers, IP address, timestamps, error logs, and data used to maintain security and prevent abuse
2.5. Cookies and similar technologies (if used)
data collected through cookies or similar technologies depending on Google Analytics
2.6. Special category data
We do not request special category data (such as health data or data revealing racial or ethnic origin). Please do not provide such data unless it is necessary and you have a lawful basis to do so. If special category data is provided, we will handle it in accordance with GDPR requirements and only where permitted.
3. Sources of personal data
We obtain personal data:
directly from you when you submit the application form or upload materials
4. Purposes of processing
We process personal data for the following purposes:
receiving and reviewing your application and assessing suitability for roles
communicating with you and arranging recruitment steps
complying with legal obligations and protecting the Company’s rights
ensuring Site security, preventing fraud, spam, and misuse
operating, maintaining, and improving the Site, including analytics, where Google Analytics
5. Background checks
Yes, for selected roles only and only after a conditional offer (offer). Where permitted by law, we may carry out role-relevant checks (for example, identity and/or right-to-work verification, qualifications and employment history verification, and reference checks). We may use a third-party provider. Where required by law, we will obtain your separate consent.
6. GDPR legal bases for processing
Under GDPR, we rely on one or more of the following legal bases, depending on the specific processing activity:
Article 6(1)(b) steps prior to entering into a contract: processing necessary to take steps at your request in relation to potential employment or engagement (for example, reviewing your application and communicating with you).
Article 6(1)(f) legitimate interests: processing necessary for our legitimate interests, such as managing recruitment, ensuring Site security, preventing abuse, and improving the Site. We balance these interests against your rights and interests.
Article 6(1)(c) legal obligation: processing necessary to comply with applicable legal obligations.
Article 6(1)(a) consent: where we ask for your consent, for example for certain cookies or for specific recruitment-related processing where consent is appropriate. You can withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
If special category data is processed, an additional Article 9 condition will be used where required and permitted.
7. Recipients and processors
We may share personal data with:
authorized Company personnel involved in recruitment
service providers supporting Site operation and recruitment processing
professional advisers (for example, legal or audit) as needed
public authorities or regulators where required by law or to protect legal rights
8. International transfers
We do not intend to transfer Personal Data outside the European Economic Area (EEA). If, notwithstanding the foregoing, any transfer of Personal Data to a country outside the EEA occurs, including via the engagement of sub-processors or remote support, such transfer shall be subject to appropriate safeguards in accordance with Chapter V of the GDPR, including the Standard Contractual Clauses adopted by the European Commission under Implementing Decision (EU) 2021/914, and, where necessary, supplementary measures consistent with the recommendations of the European Data Protection Board.
9. Retention and deletion
We retain personal data for 12 months after the end of the recruitment process for unsuccessful applicants. Where we maintain a talent pool, we retain applicant data for up to 24 months from the last contact, after which it is deleted or anonymized unless retention is renewed or otherwise justified. Data of successful applicants is transferred to the personnel file and retained in accordance with our employee retention schedule and applicable law. We may retain personal data for longer where required by law or necessary to establish, exercise, or defend legal claims. After the applicable retention period, data is deleted or anonymized.
10. Your GDPR rights
Subject to conditions and exemptions under GDPR, you have the right to:
access your personal data and obtain a copy
rectify inaccurate or incomplete data
request erasure in certain circumstances
restrict processing in certain circumstances
data portability where applicable
object to processing based on legitimate interests
withdraw consent at any time where processing is based on consent
To exercise your rights, contact us at info@mancalagaming.com. We may request information to verify your identity.
11. Complaints
If you believe our processing infringes GDPR, you have the right to lodge a complaint with a competent supervisory authority in the EEA, in particular in the country where you reside, work, or where the alleged infringement occurred.
12. Cookies and analytics
12.1. How we use cookies. The Site may use cookies and similar technologies for essential operation and security. If Google Analytics are used, analytics cookies may also be used.
12.3. If analytics are not used. If Google Analytics are not used, this section applies only to essential cookies and security-related technologies, where applicable.
13. Security
We implement reasonable technical and organizational measures designed to protect personal data against unauthorized access, loss, alteration, or disclosure. No system is completely secure, and we cannot guarantee absolute security.
14. Children and minimum age
The Site is intended for individuals under the minimum age policy: 18.If you believe a person who does not meet this requirement has provided personal data, contact us at info@mancalagaming.com
15. Updates to this Policy
We may update this Policy by posting a revised version on the Site and changing the “Last updated” date.
Conditional section: UK GDPR
If UK GDPR applies, your rights are broadly similar to those described in section 10, and you may also have the right to lodge a complaint with the UK supervisory authority.