Skip to content
Post a job
Home
This page is also available in: Čeština, Українська, Slovensky

Cooperation Terms and Personal Data Protection for Workers

Effective from: August 10, 2026

I. Who We Are and What This Document Concerns

Employer and controller of personal data: FixIt.app s.r.o. Company ID (IČO): 23725681 Registered office: Choratická 2734/6, Záběhlice, 141 00 Prague 4, Czech Republic Email: legal@fixit.app Phone: +420 702 140 894

This document concerns workers whom FixIt.app s.r.o. employs on the basis of an agreement to complete a job (dohoda o provedení práce, DPP) or an agreement to perform work (dohoda o pracovní činnosti, DPČ) for selected smaller jobs in the MARKETPLACE QUICK mode.

Important: In relation to these workers, FixIt is the employer within the meaning of Act No. 262/2006 Coll., the Labour Code - this is not an intermediation relationship. This differs from independent providers who supply QUICK jobs on the IČO rail and REALTIME, SCHEDULED or MARKETPLACE PRO jobs in their own name; the customer relationship is governed by the General Terms and Conditions.

The general principles of data processing (customers, website visitors, AI, payments) can be found in the Privacy Policy. The list of processors is on the Data Processors page.

II. Formation and Course of the Cooperation

  1. Registration and identity verification - the worker registers in the app and completes an available verification process, such as Bank iD or manual verification by authorized staff.
  2. Agreement (DPP/DPČ) - the individual agreement and information supplied to the worker set the employment terms, including work and remuneration. This page does not replace them.
  3. Accepting jobs - workers may accept only eligible MARKETPLACE QUICK jobs.
  4. Payroll and reporting - FixIt handles wages, contributions and statutory reporting as the employer.

III. What Personal Data We Process

A. Identification and contact data

Name, surname, date of birth, address, email, phone number.

B. The worker's birth number

We process the birth number (Czech personal identification number), which is necessary for payroll administration, levies, and statutory reports.

  • Legal basis: Article 6(1)(c) GDPR - compliance with a legal obligation (not consent), in connection with the Act on the Organization and Implementation of Social Security, the Income Tax Act, and Act No. 133/2000 Coll., on the Registration of Residents and Birth Numbers.
  • Security: The birth number is stored in encrypted form (AES-256-GCM) within the verified identity snapshot; a non-public cryptographic hash (HMAC) is used for uniqueness checks.

C. Children's birth numbers (taxpayer's declaration)

If you claim a tax benefit for children, we also process, as part of the taxpayer's declaration, the birth numbers of your children.

  • Legal basis: Article 6(1)(c) GDPR - compliance with a legal obligation (the Income Tax Act).
  • Security: Children's birth numbers are stored in encrypted form.

D. Data on health condition / disability / ZTP-P

If you claim discounts or benefits linked to disability, a ZTP/P card, or similar circumstances, we process the relevant data and the supporting documents that substantiate it. This is special category data (health condition) within the meaning of Article 9 GDPR.

  • Legal basis: Article 9(2)(b) GDPR (performance of obligations in the field of employment law and social security) in conjunction with Article 6(1)(c) GDPR.
  • Security: Supporting documents are stored in non-public storage with limited access.

E. Identity documents and professional documents

  • Data from the identity card (to the extent of verification via Bank iD, or through supporting documentation).

  • Driving licenses, certificates, and proof of qualification (document type "SKILL_PROOF") where required by legal regulations or the nature of the job.

  • Legal basis: Article 6(1)(b) and (c) GDPR.

F. Payment account (IBAN) - including data from Bank iD

To pay out wages, we process the worker's bank account number (IBAN).

  • You can enter the IBAN manually at any time.
  • If, during identity verification via Bank iD, you also provide data on payment accounts (the optional paymentAccounts scope), we will offer you these verified accounts as a pre-filled choice for the payout of your wages. Manual entry of a different account always remains available.
  • Legal basis: Article 6(1)(b) GDPR - contract performance (payment of wages).
  • Security: The IBAN is stored encrypted (AES-256-GCM); in overviews and selections it is displayed only in masked form (e.g., CZ** … 1234). The full account number does not leave the system in list responses.

G. Employment contracts and signed documents

We retain signed employment documents (agreements and their amendments) in non-public storage.

H. Records of consents and acceptance of terms

To evidence legal acts, we retain a record of the acceptance of agreements and terms (type of document, version/version hash, date, IP address, and browser/device data). This is evidence of the conclusion of a legal act.

  • Legal basis: Article 6(1)(c) and (f) GDPR.

I. Operational job and location data

We process accepted and completed jobs, communications, work progress and, when tracking a job, location history. Records include route points, time, accuracy and derived time on site; they support job progress and dispute handling. See Privacy Policy, Arts. III.C and VIII, for details and retention.

J. Training and work eligibility

We process occupational health and safety (BOZP) and other required training records, results, confirmations and qualification validity. These evidence employer obligations and eligibility for the work concerned (Article 6(1)(c) GDPR).

IV. Recipients of Data and Statutory Reports

As the employer, we pass on the legally required data to the following authorities:

A. Czech Social Security Administration (ČSSZ)

Through unified monthly employer reporting (JMHZ) and related filings, we supply data needed to record employment, income and insurance contributions. REGZEC is employee registration, not employer registration. The new system replaced the former monthly DPP Statement; see ČSSZ guidance.

B. Financial Administration (tax office)

We file the annual tax settlement (vyúčtování daně) and related reports (e.g., forms of the type "tax settlement of income from dependent activity / withholding tax").

C. Health insurer of the worker

To the health insurer the worker identifies by its code, we submit the bulk employer notification (registration and deregistration) and the monthly statement of insurance premium payments.

D. Processors

Providers of hosting, identity verification, and other processors, as listed on the Data Processors page.

V. Retention Period

Under Section 35a of Act No. 582/1991 Coll., payroll sheets and accounting records needed for pension insurance must be kept for 45 calendar years following the year concerned; the statutory period for those records relating to old-age pension recipients is 10 years. Accounting documents are kept for 5 years under Section 31 of Act No. 563/1991 Coll., on Accounting, VAT tax documents for 10 years under Section 35 of Act No. 235/2004 Coll., on Value Added Tax, and a copy of the pension insurance record sheet for 3 calendar years following the year it concerns (Section 35a of Act No. 582/1991 Coll.).

These periods do not justify retaining every worker detail for 45 years. Identity-verification materials and operational copies require their own necessity assessment. Account erasure and statutory document archiving are separate processes.

VI. Electronic Signing of Agreements

By default you sign agreements directly in the app: a handwritten signature drawn on the screen is embedded in the PDF and the document is sealed with the FixIt electronic seal and a timestamp (PAdES format); we store signing evidence (time, IP address, device, document version). Minor workers and workers verified on an online call always sign this way. Adult workers verified through Bank iD may be offered Bank iD SIGN (an advanced electronic signature with a Bank iD seal) for a specific agreement. Bank iD identity verification is not itself a document signature; we do not use Bank iD QSIGN (qualified signature). The method used is always stated in the signing process of the given agreement.

VII. Updating Data from Bank iD

If your data in Bank iD changes (e.g., a change of surname or address), we may prompt you to re-verify in the app in order to keep your employment and payroll records up to date. The prompt does not contain any specific data - it serves only as an instruction to carry out a new verification. After re-verification, we will assess whether an amendment to the contract or a report is necessary (e.g., in the case of a change of name).

VIII. Your Rights

You have all the rights of a data subject under the GDPR (access, rectification, erasure, restriction, portability, objection, withdrawal of consent, complaint to the ÚOOÚ) - see Privacy Policy, Art. IX.

Special note on erasure: For the duration of an active employment relationship and for the period of statutory archiving of employment, payroll, and tax documents, a request for erasure cannot be fully granted - we are required by law to retain this data. Erasure is assessed individually and carried out to the extent that the legal ground for processing has ceased to exist.

Withdrawal of consent in Bank iD (revocation): You can withdraw the consent granted in Bank iD; the relevant identity verification snapshot will be invalidated and this fact recorded in the audit trail. Withdrawal of consent to verification does not affect the statutory obligations arising from an employment relationship that has already been formed.

IX. Contact

FixIt.app s.r.o.

Office for Personal Data Protection (Úřad pro ochranu osobních údajů): www.uoou.cz, posta@uoou.cz

Last updated: September 20, 2026

Home