Skip to main content

Deloitte Central Europe Privacy Statement applicable to a provision of a service by Deloitte Central Europe entities as data controllers

Applicable to the following services: Audit, Tax Advisory, Global Employment Services, Legal, Risk Advisory, Financial Advisory, Consulting.

What personal data we process
As controller, we process the personal data that you provide to us, including the personal data on your family members and dependents if needed given the nature of service provided, or the data that we obtain from your employer or contractual partner, advisor or third party, under the condition that such data were collected lawfully.

Depending on the given type of services this personal data may include:

  • your name, surname and gender, date of birth, your ID or passport details, tax ID number, social security and national insurance number,
  • your occupation (job position) and general contact details (work or home address, personal or work e-mail address and telephone number, education certificates),
  • other data necessary for the provision of the certain type of service to your contractor or employer (marital status, number of children, information about your family members, their names, surnames, dates of birth, as appropriate),
  • financial data (including bank account details, credit history, employment income and personal investment income/gains),
  • data related to your relationship with our client (purchased goods or services).

Purposes of your data processing (“Purposes”)
Provision of services to you personally or to our clients (being your employer or your contractual partner) as agreed in the respective contract

Processing tools
For some type of services, the special tools are utilized for personal data processing

Legal basis for your data processing

  • the performance of the contract to which you are a party, or if you are not a party to the contract, then
  • our legitimate interest in providing the services based on the contract to your employer or contractual partner, or
  • compliance with legal obligations which Deloitte is subject to when providing the services to you or to your employer/contractual partner (i.e. the applicable laws (if any) regulating the provided services explicitly determine that while providing the service we process your personal data as a personal data controller).

The provision and processing of your personal data (including use of certain tools for data processing as indicated here-above) is necessary for the Purposes.

Retention of your personal data
Your personal data shall be retained by us for a period of 10 years following the provision of services to you or to our clients or as required by the applicable laws or relevant regulations or for Deloitte legitimate interest.

Sharing and transferring your personal data
Your personal data may be disclosed/transferred to and processed by the following recipients for the Purposes:

Recipients
Deloitte group of entities listed here. If applicable, your personal data will be processed only to the extent allowed for the Purposes and in accordance with the Data Protection Legislation. Each of the recipient(s) shall be responsible for ensuring the appropriate protection of your data, providing information on your data processing and obtaining additional consents if required. In case your data is transferred across country borders (including the territories outside of the European Union), then such transfers will take place only in the case that the obligations as stipulated by the Data Protection Legislation for such transfers are fulfilled.

Processors
Our subcontractors (approved by the client in the contract or otherwise) and our approved administrative and IT service suppliers:

EU based

con4PAS, s.r.o., Novodvorská 1010/14, 142 01 Prague 4 – Lhotka, Czech Republic
Deloitte Advisory & Management Consulting Private Limited Company, Dózsa Gy út 84.C., 1068 Budapest, Hungary
Deloitte CE Business Service Sp. z o.o., Al. Jana Pawla II 22, 00-133 Warsaw, Poland
Deloitte Central Europe Service Centre s.r.o., Italská 2581/67, 120 00, Prague 2 - Vinohrady, Czech Republic
Deloitte CZ Services s.r.o., Italská 2581/67, 120 00, Prague 2 – Vinohrady, Czech Republic
Digital Resources a.s., Poděbradská 520/24, 190 00 Prague 9, Czech Republic
Uniwise s.r.o., Studentská 6202/17, 708 00, Ostrava-Poruba, Czech Republic

Audit Services: Deloitte Group Support Centre BV, a private limited liability company established in The Netherlands, Gustav Mahlerlaan, 2970 Amsterdam, The Netherlands

In order to procure proper administrative, technical and operational support, we may also contract local service providers (in the countries that we operate in) that will process your personal data as personal data processors. Such local service providers are our entrusted partners providing mainly local archiving, currier, translation, IT support or reprographic services. Any such local services provider, prior to the provision of the services, concludes a data processing agreement in line with requirement of Data Protection Legislation. You can obtain full list of such local personal data processor directly upon your request to us.

Non-EU based data processors that fall under EU Adequacy Decision

Deloitte Global Services Limited, Hill House, 1 Little New Street, EC4A 3TR London, United Kingdom
Microsoft Corporation, One Microsoft Way, Redmond, WA 98052, USA

Tax/Global Employment Services:
Deloitte Tax LLP, 30 Rockefeller Plaza, New York, 10112 – 0015, USA
Deloitte Touche Tohmatsu Services, Inc., 30 Rockefeller Plaza, New York, 10112 – 0015, USA

Non-EU based
Since the processing of Personal Data may include transfer of personal data outside of the European Union (EU), all of the below entities have concluded the EU approved Standard Contractual Clauses with Deloitte entity providing the services under the Engagement to ensure an adequate level of Personal Data protection as required by the Data Protection Legislation.

Deloitte Support Services India Private Limited, RMZ Futura, Block B, 2nd Floor, Plot No. 14 & 15, Road No. 2, Hi-Tec City Layout, Madhapur, Hyderabad – 500 081, Telangana, India

Their access rights are strictly limited to the extent that it is only for necessary technical, administrative and help desk support services.

Processing tools
For some type of services you may be asked to access dedicated tool or application and upload your personal data. Information on processing of personal data is displayed directly in the tool prior personal data is collected.

Security of processing
Deloitte and its data processors established technological, physical, administrative and procedural safeguards all in line with the industry accepted standards in order to protect and ensure the confidentiality, integrity or accessibility of all personal data processed; prevent the unauthorized use of or unauthorized access to the personal data or prevent a personal data breach.

Your rights
Please refer to the Deloitte Central Europe Privacy Statement.