What is personal data?
Personal data (hereinafter also ‘data’) is any information that relates to an identified or identifiable person.
For example: first name, surname, date of birth, address, email address.
We process the data you provide us with during the hiring process (CV, application form, references). This data is stored on our servers and is not disclosed to any subcontractors or third parties. Your data is used exclusively for the purpose of processing your application. Only employees directly involved in the hiring process are granted access to your data. Every employee is obligated to maintain the confidentiality of your data according to Art. 6 DPA 2018 (DPA = Data Protection Act).
The processing of your data and your application is an essential part of the contract initiation and is therefore based on Art. 6 Para. 1 (b) GDPR. To ensure the protection against discrimination, your data will be stored in accordance with Art. 6 Para. 1 (f) GDPR for a period of 6 months after your application process has been completed.
On expiry of the 6-month period your name, email address and the outcome of the application process will be stored for a further 3 years. We have a justified interest in retaining this data to help us avoid cases of repeat applications. Other data and documents will be deleted.
When you register for a training event, you provide us with the data contained in the registration form. This data is stored on our servers and is not disclosed to any subcontractors or third parties. It is used exclusively for the purpose of processing your training registration (Art. 6 Para. 1 (b) GDPR). On completion of the training event all of the data from the contractual relationship will be stored until the expiry of the mandatory retention period according to the applicable tax law provisions (7 years).
We process the data you provide us with to handle your enquiries about our products. If your enquiry concerns our partners’ products, your data may be forwarded to our partners for the purpose of handling your enquiry. In this case, processing is based on Art. 6 Para. 1 (b) GDPR as it serves the purpose of initiating a contract with us. Your data will be deleted after your query has been answered.
Server log files
In order to guarantee the security and functionality of our websites, we need to store and evaluate access data (the visited website, date and time of access, browser, operating system, IP address). This data is used in the event of a security incident to determine and eliminate its cause. The log files are stored for 12 months in accordance with Art. 6 Para. 1 (f) GDPR for this purpose.
We use functions of the web analysis service Google Analytics provided by Google Inc. based in the USA to evaluate and improve our website. Your IP address is sent to Google as part of the analysis and shall be retained for a period of 26 months. Google processes this data exclusively on our behalf and will not associate it with other data. This data processing is based on Art. 6 Para. 1 (f) GDPR as we have a justified interest in the evaluation of our website according to the current data protection legislation.
Transferring data to the USA is in compliance with current legislation on account of the European Commission’s adequacy decision (EU-US Privacy Shield).
Our website uses so-called cookies. Cookies are small text files that are stored on your end device with the help of your browser. They do not cause damage, but rather enable you to use the full functionality of our web pages.
If you do not want this to happen, you can adjust your browser’s settings so that you are informed of when a cookie will be set and can decide to allow it from case to case if you wish.
Deactivating cookies can restrict the functionality of our website.
What are my rights?
According to applicable European and Austrian legislation, you have the following rights under specific preconditions: the right to information, correction, deletion, restriction, data portability, withdrawal and objection.
You can also address your concerns to our data protection officer by emailing firstname.lastname@example.org
If you believe that the way your data is processed is in violation of data protection laws or that your data protection rights have otherwise not been observed, you can contact the Austrian data protection authority (Wickenburggasse 8, 1080 Vienna, telephone: +43 1 52 152-0, email: email@example.com).