Privacy policy

Last updated: 12 November 2026

Who are we?

As a controller and processor of personal data, we use the following legal identification details: Tribe.xyz Czech s.r.o., Narodni 135/14, Prague 1, 110 00, Czechia. Registration number: 24121657.

To whom do the Principles apply?

These Principles relating to Personal Data Processing and Protection (the "Principles") apply to the processing of your personal data when you communicate with us or use our website.

As a controller and processor of your personal data, we treat all data as confidential and handle it in line with the personal data protection laws in force. Protecting your personal data is a primary principle in how we do business.

Controller contact details: Martin Bernard, email: martin@tribe.xyz

Website data

We collect personal data on https://tribexyz.com only when you give it to us or when you accept cookies.

  • Contact form. When you fill in the contact form, we collect your first name, last name, company name, email address, the services you're interested in and your message. We use this to reply to your enquiry and to follow up about the services you asked about.
  • Email updates. If you tick the box to receive communications or sign up for our blog updates, we use your email address to send them. Every email has an unsubscribe link, and you can withdraw consent at any time.
  • Job applications. Our careers page lists open roles from our applicant tracking system, Ashby. When you apply, Ashby collects the details you enter on the application form on our behalf.
  • Cookies. With your consent, we use HubSpot and Google Analytics cookies to understand how visitors use the website. You can read which cookies we use and change your choice at any time in our Cookie Policy.

We keep website enquiries for as long as we need them to reply to you and manage our relationship with you. You can ask us to delete them at any time.

What data do we collect and process?

Based on the purpose of data processing and under the conditions stated in these Principles, we collect, control and process the following personal data related to you:

  • identification information, in particular name and surname, and, for job applicants, other information stated in the applicant's CV or in other documents needed to provide job offers to the applicant,
  • contact details, in particular phone number, email address and contact address,
  • other information, which we only ever process when you're clearly informed about it, at the time of processing at the latest.

Why do we process data and how do we use it?

We can process some of your data without your consent:

  • identification information you gave us for electronic communication (especially email), for our legitimate interest in processing that data to keep up communication with you,
  • contact details you gave us, for our legitimate interest in contacting potential job applicants,
  • your identification information, contact details or, where needed, other personal data to the essential extent, if you act for one of our business partners (especially representatives of our customers and other business partners). We use this to identify you clearly when we carry out a contract or take steps before a contract (such as requests, offers and contract drafts), to protect our rights and legal interests (for example, in a dispute about a contract), and to manage our database of customers and their contact people,
  • your data to the extent the law requires, to meet our legal obligations (especially the identification information and contact details we need to issue, record and archive contracts, orders and receipts for bookkeeping).

If you apply for a job we advertise, we need your consent to process certain types of personal data for certain purposes. The consent you give always states the types of data and the purposes. We need your consent to:

  • manage a database of job applicants,
  • pass your personal data to people who may be interested in your services,
  • tell you about current job offers from people who may be interested in your services,
  • carry out other activities that we would tell you about before processing the data.

How do we obtain data?

We obtain personal data when you give it to us voluntarily, through the website, by email or in connection with a contract. To keep personal data accurate and up to date, we can collect or update it from you, from third parties or from public sources (the internet, public registers and similar).

How do we process data?

We process and store the data you give us electronically. We don't print applicants' CVs, and we don't extract or profile their content.

We only process personal data in printed form in exceptional cases (for example, signed contracts).

We use the following tools to process personal data:

  • Google Workspace (including Gmail and Google Drive) for email and documents,
  • HubSpot for our website, website forms, email updates and our customer database,
  • Ashby to manage job applications and our database of job applicants,
  • Google Analytics to measure website visits, only when you accept analytics cookies.

To access these systems we use secure connections and access rights tied to the unique passwords of authorised users. These are standard products, and their providers commit to process data in line with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation, "GDPR").

How do we protect data?

Technical and organisational procedures keep your personal data under constant electronic and procedural control. Anyone who handles your personal data as part of their professional or contractual duties is bound by law or contract to keep it confidential.

Your right to personal data protection is granted by the GDPR and by Czech Act No. 110/2019 Coll., on personal data processing.

We test our technical procedures for security regularly, at least once a year, and we review our organisational procedures continuously.

If we pass job applicants' personal data to people who may be interested in their services, we do so securely, by secured electronic communication (email).

How long do we store and process data?

We process personal data for as long as we have a legal reason to, or until processing ends for another legal reason. Where you've given consent, we process the data until you withdraw it, unless we have another legal reason to continue.

If you gave consent for us to process your personal data to offer you jobs, we process it for a maximum of 5 years, unless you agree to extend that period.

When the processing period ends (no legal reason for processing applies any more), we permanently destroy or anonymise your personal data.

With whom do we share data?

We share personal data with:

  • public authorities and other bodies with legal obligations, such as supervisory bodies and state administration bodies,
  • people who may be interested in your services, if you're a job applicant and you give us your consent,
  • external companies that process data for us under a data processing contract signed with us,
  • providers of applications and systems who don't process data themselves but can access it under the conditions of a contract, and only to the extent needed for their service,
  • others, if you give us your consent.

We always limit the personal data we share or give access to so that it covers only what a given purpose needs, and we share it only where we have a legal reason to.

Data processed outside the EU

Some of the providers we work with (Google, HubSpot and Ashby) are based in the United States or have staff and systems outside the European Economic Area. We have a data processing agreement with each of them that meets the requirements of the GDPR, including its rules for transfers of personal data outside the EU.

These providers process your personal data only on our instructions, and only when they need to in order to handle your request, such as replying to your enquiry, sending you the emails you signed up for or processing your job application. They can't use your data for their own purposes.

These agreements include the European Commission's standard contractual clauses. Where a provider is certified under the EU-US Data Privacy Framework, we also rely on that framework for transfers to the United States.

What rights do you have?

You have the right to:

  • access your personal data,
  • have your data corrected,
  • have your data deleted,
  • restrict how we process your data,
  • data portability,
  • object to the processing,
  • withdraw your consent at any time.

How can you exercise your rights?

When you send us a request, we'll act on it to the extent the law requires. Please send any requests, objections, changes to your data or other questions to martin@tribe.xyz.

If a request is clearly unfounded or excessive, especially because it repeats an earlier request, we can charge a reasonable fee or refuse it.

You also have the right to file a complaint with the Office for Personal Data Protection (Úřad pro ochranu osobních údajů).