Skip to content
This page is also available in: Čeština, Українська, Slovensky

Cooperation Terms and Personal Data Protection for Workers

Effective from: August 10, 2026

I. Who We Are and What This Document Concerns

Employer and controller of personal data: FixIt App s.r.o. Company ID (IČO): 23725681 Registered office: Prague, Czech Republic Email: legal@fixit.app Phone: +420 702 140 894

This document concerns workers whom FixIt App s.r.o. employs on the basis of an agreement to complete a job (dohoda o provedení práce, DPP) or an agreement to perform work (dohoda o pracovní činnosti, DPČ) for the purpose of fulfilling jobs in the on-demand mode (REALTIME).

Important: In relation to these workers, FixIt is the employer within the meaning of Act No. 262/2006 Coll., the Labour Code – this is not an intermediation relationship. In this respect, this relationship differs from the independent providers (tradespeople/partners) operating in the MARKETPLACE PRO, MARKETPLACE QUICK, and scheduled jobs modes, who are governed by the General Terms and Conditions.

The general principles of data processing (customers, website visitors, AI, payments) can be found in the Privacy Policy. The list of processors is on the Data Processors page.

II. Formation and Course of the Cooperation

  1. Registration and identity verification – the worker registers in the app and verifies their identity via the Bank iD service.
  2. Conclusion of the agreement (DPP/DPČ) – the worker concludes the employment agreement; the document is signed electronically (see Art. VI).
  3. Accepting jobs – the worker accepts jobs in the REALTIME mode.
  4. Payroll and levy administration – as the employer, FixIt processes wages, remits statutory levies, and files reports with the ČSSZ and the Financial Administration.

III. What Personal Data We Process

A. Identification and contact data

Name, surname, date of birth, address, email, phone number.

B. The worker's birth number

We process the birth number (Czech personal identification number), which is necessary for payroll administration, levies, and statutory reports.

  • Legal basis: Article 6(1)(c) GDPR – compliance with a legal obligation (not consent), in connection with the Act on the Organization and Implementation of Social Security, the Income Tax Act, and Act No. 133/2000 Coll., on the Registration of Residents and Birth Numbers.
  • Security: The birth number is stored in encrypted form (AES-256-GCM) within the verified identity snapshot; a non-public cryptographic hash (HMAC) is used for uniqueness checks.

C. Children's birth numbers (taxpayer's declaration)

If you claim a tax benefit for children, we also process, as part of the taxpayer's declaration, the birth numbers of your children.

  • Legal basis: Article 6(1)(c) GDPR – compliance with a legal obligation (the Income Tax Act).
  • Security: Children's birth numbers are stored in encrypted form.

D. Data on health condition / disability / ZTP-P

If you claim discounts or benefits linked to disability, a ZTP/P card, or similar circumstances, we process the relevant data and the supporting documents that substantiate it. This is special category data (health condition) within the meaning of Article 9 GDPR.

  • Legal basis: Article 9(2)(b) GDPR (performance of obligations in the field of employment law and social security) in conjunction with Article 6(1)(c) GDPR.
  • Security: Supporting documents are stored in non-public storage with limited access.

E. Identity documents and professional documents

  • Data from the identity card (to the extent of verification via Bank iD, or through supporting documentation).

  • Driving licenses, certificates, and proof of qualification (document type "SKILL_PROOF") where required by legal regulations or the nature of the job.

  • Legal basis: Article 6(1)(b) and (c) GDPR.

F. Payment account (IBAN) – including data from Bank iD

To pay out wages, we process the worker's bank account number (IBAN).

  • You can enter the IBAN manually at any time.
  • If, during identity verification via Bank iD, you also provide data on payment accounts (the optional paymentAccounts scope), we will offer you these verified accounts as a pre-filled choice for the payout of your wages. Manual entry of a different account always remains available.
  • Legal basis: Article 6(1)(b) GDPR – contract performance (payment of wages).
  • Security: The IBAN is stored encrypted (AES-256-GCM); in overviews and selections it is displayed only in masked form (e.g., CZ** … 1234). The full account number does not leave the system in list responses.

G. Employment contracts and signed documents

We retain signed employment documents (agreements and their amendments) in non-public storage.

H. Records of consents and acceptance of terms

To evidence legal acts, we retain a record of the acceptance of agreements and terms (type of document, version/version hash, date, IP address, and browser/device data). This is evidence of the conclusion of a legal act.

  • Legal basis: Article 6(1)(c) and (f) GDPR.

I. Operational data on jobs and location

Data on accepted and performed jobs, communication, and the current location for the purpose of assigning jobs (see Privacy Policy, the article on location).

IV. Recipients of Data and Statutory Reports

As the employer, we pass on the legally required data to the following authorities:

A. Czech Social Security Administration (ČSSZ)

We file a monthly DPP Statement (Výkaz DPP, an electronic report), which contains, among other things, the worker's birth number, date of birth, and gross income. As of 1 April 2026, registration of the employer in the register (REGZEC) and the related reporting are also mandatory.

B. Financial Administration (tax office)

We file the annual tax settlement (vyúčtování daně) and related reports (e.g., forms of the type "tax settlement of income from dependent activity / withholding tax").

C. Processors

Providers of hosting, identity verification, and other processors, as listed on the Data Processors page.

V. Retention Period

We retain employment, payroll, and tax documents and the related reports for the period stipulated by legal regulations (the Labour Code, social security regulations, the Income Tax Act, the Accounting Act).

VI. Electronic Signing of Agreements

Employment agreements are signed electronically. Bank iD, or the qualified service Bank iD Sign, is used for signing and for evidencing identity.

VII. Updating Data from Bank iD

If your data in Bank iD changes (e.g., a change of surname or address), we may prompt you to re-verify in the app in order to keep your employment and payroll records up to date. The prompt does not contain any specific data – it serves only as an instruction to carry out a new verification. After re-verification, we will assess whether an amendment to the contract or a report is necessary (e.g., in the case of a change of name).

VIII. Your Rights

You have all the rights of a data subject under the GDPR (access, rectification, erasure, restriction, portability, objection, withdrawal of consent, complaint to the ÚOOÚ) – see Privacy Policy, Art. IX.

Special note on erasure: For the duration of an active employment relationship and for the period of statutory archiving of employment, payroll, and tax documents, a request for erasure cannot be fully granted – we are required by law to retain this data. Erasure is assessed individually and carried out to the extent that the legal ground for processing has ceased to exist.

Withdrawal of consent in Bank iD (revocation): You can withdraw the consent granted in Bank iD; the relevant identity verification snapshot will be invalidated and this fact recorded in the audit trail. Withdrawal of consent to verification does not affect the statutory obligations arising from an employment relationship that has already been formed.

IX. Contact

FixIt App s.r.o.

Office for Personal Data Protection (Úřad pro ochranu osobních údajů): www.uoou.cz, posta@uoou.cz


Last updated: July 10, 2026