This notice applies to Workastra Hub at portal.workastra.sk. Free-service terms and privacy information are separated below. Accepting the terms is not consent to every kind of data processing. Profile, contact and CV sharing have separate choices.
These notices are available in Slovak and English. Contact us before registration if you need an explanation in another language.
A. Terms of use
A1. Operator and contact
Workastra s. r. o., Stred 60/55, 017 01 Považská Bystrica, Slovak Republic. Company ID: 56714700. Commercial Register of the District Court Trenčín, section Sro, entry 56706/R. We are not a VAT payer.
Email: office@workastra.sk. Telephone: +421 903 993 391. Use these contacts for support, service complaints, content reports and data-protection requests. We communicate in writing in Slovak and English, with translation support for other languages. Calls and visits are normally conducted in Slovak.
Electronic-commerce supervision: Slovak Trade Inspection, Inspectorate for the Trenčín Region, Hurbanova 59, 911 01 Trenčín, Slovakia. The separate privacy section identifies the data-protection authority.
Enable the optional email digest of unread communication and CV reminders under Notifications, and turn it off there at any time. This preference is separate from profile-sharing choices and marketing. We send at most one digest per day; mail-service limits may defer delivery. Emails contain no message text, other people’s contact details or CV attachments. We record the version and time of your choice and delivery-attempt status to operate the service and prevent duplicates. Successful and cancelled dispatch records are cleared after 90 days; an administrator reviews open errors and uncertain delivery. Verification, password-reset and account-approval emails are separate system messages.
The portal is for jobseekers aged 18 or over and authorised representatives of employers and staffing, employment or recruitment agencies. Select your actual role, provide accurate information and act for an organisation only with authority. Organisations must provide details allowing us to verify their existence and authority to operate.
You can correct entries before submitting registration. Submitting requests a free account under these terms; account creation establishes the account-service agreement. You then verify your email and complete your profile. Network access and access to other people’s records require manual Workastra approval. Registration and approval do not certify a licence to perform regulated activities.
The terms are available in Slovak and English and can be saved or printed. We record the version accepted at registration and provide a copy of that record on request. Edit details in your profile; contact support to change a sign-in email or correct a detail you cannot edit yourself.
Keep credentials secure and contact us about suspected misuse. Administrators must use two-factor authentication. Do not use accounts to bypass approval or access restrictions.
A3. Free core service and ASTRA Boost
Basic profiles, search, matching, contact invitations and internal chat remain free within each role’s permissions. Buying Boost will not be a condition of using that core service. Jobseekers pay no employment-placement or temporary-assignment fee.
ASTRA Boost is an optional business service for employers, businesses and agencies acting in a business capacity. Start costs €99 as the final price, with no VAT added; Workastra is not a VAT payer. It includes agreed initial outreach to one organisation, up to three contact attempts, a maximum of 120 minutes of combined team work and a short written outcome with recommended next steps. The limit is not 120 minutes per team member.
Start excludes full recruitment, personal visits, travel, interpreting and regulated legal or permit work. Telephone outreach is in Slovak; written outreach can be in another agreed language with translation support. Foreign-language calls or interpreting require a separate agreement.
Advanced, Pro and Custom are individually quoted against a specific scope and deliverable. An enquiry or expression of interest in the portal is not a paid order. Before work starts, we agree in writing the deliverable, scope, final price, deadline, payment terms, cancellation and remedy if the agreed scope is not delivered. Payment becomes binding only when a specific offer is accepted. There is no automatic subscription. Card payments are not enabled yet.
Before placement or temporary assignment we separately verify legal conditions and our own and partners’ authorisations. Registration does not replace any separately required placement or assignment agreement.
A4. Profiles, offers and contact
Jobseekers manage their own profiles and can search vacancies. They cannot browse other candidates or the organisation directory. Approved employers and agencies use the network according to their roles and authorised disclosure scope.
A jobseeker’s own name and professional profile are shared with approved organisations according to the jobseeker’s separate choice. Phone, email and CV have additional sharing choices. For agency-supplied candidates, other organisations receive a limited professional summary with an identifier and source agency; contact is routed through that agency. Such a summary can still be personal data and is not automatically anonymous.
Organisations outside the European Economic Area (EU, Iceland, Liechtenstein and Norway) currently cannot access other parties’ candidate data. They can manage their own records and use other permitted functions. Any expansion requires a separate assessment of data protection and international-transfer conditions.
Keep availability current and pause outdated offers. Publish only content you are entitled to use. Public vacancies also come from external sources, may expire and do not imply an employer’s partnership with Workastra. Aggregate counts do not represent our own partners or guaranteed available jobs.
A5. Content rules, reports and remedies
Fraud, unlawfully discriminatory offers, harassment, spam, malicious files, unauthorised third-party data and use unrelated to the agreed recruitment purpose are prohibited. Do not offer unlawful working conditions. Database resale, bulk extraction of other people’s profiles and circumvention of access rules are prohibited. This does not restrict a person’s statutory right to obtain their own data.
Do not upload passports, national identifiers, unnecessary identity documents, health information, criminal records or other particularly sensitive information. A CV does not need a photo, date of birth or full home address. Supported formats are PDF, DOCX and TXT up to 5 MB. Format and risky-content checks are not a full antivirus service.
Report unlawful or problematic content to office@workastra.sk. Include its link or record identifier, reasons, supporting information and a contact email, and confirm that to the best of your knowledge the report is accurate. Identity is not required where a statutory exception applies. We assess received reports and notify the reporter of the outcome when contact details are available. We do not disclose reporter details without a reason.
After human assessment, Workastra may request correction, restrict specific content or suspend an account according to the severity, repetition and impact of a violation. An immediate security threat or legal duty may require immediate action. We explain the reason and scope to the affected user unless the law prevents it. Request a review at our contact email. Statutory remedies remain available.
A6. Pausing, ending use and responsibility
“Pause my profile and offers” hides your profile and offers from others and stops new invitations. Sign-in, editing, existing conversations and authorised administrator access remain. Reactivation restores only records that were previously active and authorised for sharing; individually paused offers remain paused. Pausing is not erasure and does not renew CV retention.
The separate “Suspend access — administrator required to restore” action in the guide restricts the account and removes its CV. An administrator restores access. To end the free account agreement or request full erasure, contact us from the account email. We distinguish ending access from data we must lawfully retain and explain the scope.
Neither the portal nor Boost guarantees a job contract, a response from an organisation, a number of applicants, candidate acceptance or a permit. We commit to performing the specifically agreed service scope. Employment and immigration conditions require individual checks; nationality or registration alone creates no right to work or temporary assignment.
Maintenance or failures may affect availability. We remain responsible for our obligations under applicable law and do not exclude liability that cannot lawfully be excluded. Content providers are also responsible for the accuracy of their content. Report errors so we can address them.
A7. Service complaints, consumer rights and changes
Send a service complaint to office@workastra.sk, describing the issue, account or order and requested remedy. Paid Boost services are currently ordered only for business purposes; the portal does not conclude paid consumer orders. Mandatory consumer rights in a free service, including any withdrawal right where its legal conditions apply, remain unaffected.
If you are a consumer and we reject a request for remedy or do not answer it within 30 days, you may, subject to statutory conditions, approach a competent alternative consumer dispute-resolution body, such as the Slovak Trade Inspection. Court proceedings also remain available. This prior-request condition does not apply to your separate right to complain about data protection.
Slovak law applies without depriving consumers of mandatory protection under the law that would apply without this choice. These terms do not impose exclusively Slovak courts to the detriment of statutory consumer rights.
We notify material changes in the portal before they apply, with their date and explanation. Where a changed purpose or scope needs new consent, silence or continued use is not consent. We do not overwrite earlier acceptance records. This revision clarifies existing rules and does not change the free core service or your sharing choices.
Workastra s. r. o., identified in the Operator and contact section, is the controller for Workastra Hub data. Contact office@workastra.sk about privacy and rights. This information is provided under the GDPR and Slovak Act No. 18/2018 Coll.
Data comes from you during registration and use, an agency representing you, participants in recruitment conversations and technical operation records. We may check organisation identity and authority in public registers. For agency-supplied information, we explain the specific source and scope on request.
We process identity and contact details, role, country, language, organisation registration details, professional information and CVs, availability, offers, enquiries, messages and their handling status. We also record consents and withdrawals, accepted terms versions, security events, IP and browser information on sign-in. Passwords are stored in protected rather than readable form.
Fields marked required are needed for the account or selected function. Without an email and verification we cannot provide a usable account; without organisation details we cannot approve the organisation. Phone, CV and additional descriptions are optional. Core functions remain available without them, though less information may reduce matching accuracy.
B2. Purposes and legal bases
An individual account, storing your own professional profile and optional CV, searching, invitations, messages and requested enquiries: performance of the agreement or steps you request before an agreement, Article 6(1)(b) GDPR. For employees or representatives of organisations, we process business contact details and actions in our legitimate interest in communicating with the organisation and providing its service, Article 6(1)(f).
Sharing your own candidate profile, contact details and CV with approved organisations: your separate consent choices under Article 6(1)(a). Refusing them does not prevent an account or vacancy searches. A specific enquiry or message is processed to handle that request; it does not authorise general publication of all your information.
Security, organisation verification, fraud and spam prevention, operational records, support, report handling and legal claims: legitimate interests in a safe, trustworthy recruitment service and protecting people, Article 6(1)(f). We use proportionate data with restricted access. You can object to this processing.
A specific legal duty, such as accounting records for a purchased service under Slovak Act No. 431/2002 Coll., handling GDPR rights or a lawful authority request: Article 6(1)(c). This is not a blanket justification for retaining all candidate profiles.
For agency-supplied candidates, processing is limited to the documented lawful basis for the specific recruitment and disclosure. Where consent is relied upon, it must cover Workastra, the purpose and recipients and be demonstrable. Any other basis requires separate assessment; an agreement between businesses alone does not replace the candidate’s rights.
B3. Information supplied by an agency or another person
The supplying organisation must give the person understandable information about Workastra, purposes, recipients, retention and rights, verify accuracy and keep evidence of authority. Having received a CV previously is not enough to presume consent. Do not send sensitive documents or unnecessary data.
Workastra also has its own information duty for indirectly collected data. We ensure Article 14 information is provided within one month at the latest, or at the first earlier communication, or before the first earlier disclosure, as applicable. We may use demonstrable delivery through the source agency, without transferring our responsibility. Any exception requires individual assessment and documented conditions.
Identifiable profiles should not be shared with other organisations until the legal basis and information duty are resolved. Initial cooperation can use aggregate headcounts and occupations without identifying individuals. Importing a candidate does not automatically publish the profile. A checkbox or internal reference alone does not prove valid consent.
B4. Who can see data and conversations
Authorised Workastra staff and technical providers access data needed for their tasks. Approved employers and agencies receive data within the permitted scope when you share a profile or send data in a specific conversation. The public and other jobseekers cannot browse candidates.
Authorised Workastra staff can also read internal conversations for support, recruitment coordination and abuse handling. Chats are not private only to their participants. Administrator access is recorded. Include only information needed for recruitment.
A receiving employer or agency is generally an independent controller for its own recruitment and must meet its own information and other duties. Data cannot be resold or automatically reused for an unrelated purpose. Downloaded files cannot technically be recalled. A recipient must independently assess continued retention, consent withdrawal and erasure requests; prior access is not permission to keep data forever.
Public authorities receive information where there is a lawful reason. Advisers or legal representatives may receive only information needed for a specific obligation or claim, subject to appropriate confidentiality.
B5. Providers and transfers outside the EEA
Cloudflare supplies the application, database, private CV storage and system email. Database and storage use EU jurisdiction; the global network, support and some services may involve processing in other countries. Workastra business mailboxes, including when you email support, are hosted through Websupport.
An EU database location alone does not exclude international transfers. For relevant transfers, Cloudflare provides contractual mechanisms including European Commission standard contractual clauses under Decision 2021/914. Contact office@workastra.sk for information about safeguards and a copy or access to them. Public provider terms and subprocessors are linked below.
Candidate disclosure to separate organisations outside the EEA needs its own assessment and remains restricted. Consent to submit a profile is not automatic permission to transfer it to every country.
Workastra AI uses the OpenAI API (GPT-6 Luna) for portal guidance, draft text, translation and optional CV extraction. The assistant receives your submitted text, language, role and counts of your own records, not other profile contents. A message or CV is sent only when you explicitly start the relevant AI action and confirm submission. Uploading a profile CV does not automatically start AI. Do not submit passwords, identity documents, sensitive data or other people’s information without authority. Core portal use remains available without AI. Stripe is not connected.
Public vacancies are translated in the selected language for up to ten displayed titles; details are translated only when opened. OpenAI receives selected public advertisement fields, not your profile or CV. Public translations are shared in a cache for up to seven days. Automatic translation can contain errors; verify employment conditions and language requirements. AI does not send messages, place orders or decide who is hired.
For AI assistance requested by a user, we process the necessary input to provide that optional service: Article 6(1)(b) GDPR for individuals and Article 6(1)(f) for business use by organisation representatives. Confirming submission instructs a specific action; it is not general consent to publication or a substitute for an agency’s authority to process another person’s CV. We keep a limited operational action record without automatically storing the full assistant conversation in the database. CV drafts follow temporary-import retention and require human review.
OpenAI acts as a processor under its data-processing terms; OpenAI Ireland Ltd. is the contracting entity for EEA customers. The project uses global processing, which may include transfers outside the EEA, including the USA. The DPA provides transfer mechanisms including standard contractual clauses or an applicable adequacy decision. Contact office@workastra.sk for safeguards information and access. Processing exclusively within the EU is not guaranteed.
API data is not used to train models by default. Requests disable response storage (store=false); this does not exclude provider security logs normally kept for up to 30 days or particular legal and security exceptions. Zero Data Retention is not enabled. Current API data rules and OpenAI subprocessors are linked below.
Service emails notify you of connection requests and acceptance, without message contents or CVs. Processing approximately every 5 minutes, up to 3 per account daily; service limits may delay delivery. These are service notifications, not marketing. Disable them under Notifications. Existing email opt-outs are respected.
B7. Retention periods
CVs: new uploads are kept for six calendar months. In your profile, you can explicitly confirm accuracy and request another six months from confirmation. Renewal is recorded and does not alter sharing choices. Signing in, reactivation or inactivity does not renew retention. A notice appears in the signed-in portal during the last seven days. If you explicitly enable email reminders under Notifications, we may also send one reminder for that expiry date during the final seven days. Renewal always requires your own choice.
Without renewal, CV access expires and daily maintenance removes the file and its metadata. The account and professional profile remain. Older CVs retain the displayed expiry until the owner explicitly renews or uploads a new file. You may delete the CV earlier. Turning off sharing stops other users’ access but is not itself a request to delete the file from your account.
Accounts, profiles, offers and recruitment conversations: while the service is used and the recruitment purpose continues. Necessity is reviewed at least every 12 months; an old sign-in does not justify indefinite retention. On closure or an erasure request, data with no remaining justification is removed. For any necessary retained record, we explain the specific purpose, category and period or criteria for determining it.
Accounting records for a purchased service are kept for the applicable statutory period; this does not cover an entire CV or ordinary profile. Evidence of consent, compliance, security incidents or legal claims is limited to the necessary scope and period according to the relevant obligation, incident or claim-limitation periods. Access is restricted.
Unverified sign-in accounts without a portal profile are removed after seven days. A prepared import is valid for 24 hours; its temporary content is cleared after processing, cancellation or subsequent workspace maintenance. A saved public-search result is valid for 30 minutes and cleared on a later search or relevant account closure. Expiry is not a promise of immediate deletion of every technical copy.
Database recovery backups may contain earlier records for up to 30 days. They are not normally accessible to users; restoration must preserve previously applied erasures and restrictions. Pausing or reactivating a profile does not change CV expiry.
B8. Your rights and response times
Subject to GDPR conditions, you have rights of access and a copy, rectification, erasure, restriction and portability. You can object to legitimate-interest processing on grounds relating to your particular situation. If data is used for direct marketing, you can object at any time.
Withdraw consent at any time through the relevant profile choice or by email. Withdrawal does not affect earlier lawful processing and does not require closing your whole account. The portal export contains selected own records; it does not replace a request for the full information required by the GDPR.
Contact office@workastra.sk. We verify identity proportionately to risk, without automatically requiring an identity-document copy. We provide information on action taken without undue delay and within one month of receipt. Where complexity or the number of requests requires an extension of up to two additional months, we explain the extension and reasons within the first month. A refusal is also explained with available remedies.
Exercising rights is normally free. A fee or refusal is possible only under GDPR conditions, such as a demonstrably manifestly unfounded or excessive request. Erasure is not absolute where specific records remain necessary for a legal duty or claim; we explain the particular exception.
B9. Right to complain to a supervisory authority
If you consider processing infringes the GDPR, you may complain to a competent supervisory authority, particularly in the Member State of your habitual residence, workplace or alleged infringement. You do not have to complain to Workastra first.
In Slovakia: Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov Slovenskej republiky), Galvaniho Business Centrum II, Galvaniho 7/B, 821 04 Bratislava. Official procedures and current contacts are linked below. Naming the authority does not imply that it approved or certified the portal.
Basic matching compares occupation, country, language and experience with requirements. The score is an aid to ranking, may be incomplete and does not determine hiring. Workastra does not use solely automated decisions with legal or similarly significant effects in the portal; people decide.
We use necessary cookies for sign-in, security and verification and local storage for your language. A sign-in session has a rolling 24-hour lifetime; signing out ends it. The language preference remains until changed or cleared in the browser. The portal currently has no advertising or analytics tracking cookies. The separate corporate website workastra.sk has its own notices.
Data will not be used for an unrelated new purpose without prior explanation and assessment of a lawful basis. We notify material privacy changes in the portal and obtain separate consent where required.