Privacy Policy

For the use of our website

For the use of our website

Privacy policy Trenkwalder Personaldienste GmbH

 

Status: 18.12.2023

 

1. Personal data collected by us

 

We collect and use our users' personal data only to the extent necessary to provide a functional website and our content and services. The collection and use of our users' personal data only takes place regularly with the user's consent. An exception applies in cases where prior consent cannot be obtained for factual reasons and the processing of the data is permitted by law.

 

We collect personal data in various ways, e.g. via our website and social media channels, in job applications and in connection with face-to-face interviews, via telephone and email, at events organized by us and during interactions with customers and suppliers.

 

Depending on the nature of the business relationship, we may also collect the following personal data in particular:

 

·        Contact information (e.g. name, postal address, e-mail address and telephone number);

·        username and password when you register on our websites or in [our] apps

·        contact details of persons you want us to contact on your behalf (we assume that these persons have given their prior consent for this transmission), and

·        other information that you provide to us.

 

In addition, we collect, process and store the personal data provided by you as an applicant, employee or freelancer in accordance with the provisions of the GDPR and the Data Protection Act (DSG). In addition, when you apply, we may collect these types of personal data to the extent permitted by national law:

·        Professional background and educational background,

·        Project listing;

·        Language skills and other job-related skills;

·        Social security number, national identifier or other identification numbers issued by the authorities;

·        Date of birth;

·        Gender;

·        Account information;

·        Nationality and work permit status;

·        information on social benefits;

·        tax information;

 

·        Information from references and information contained in your resume, as well as information you provide to us about your professional interests and other information about your professional qualifications.

 

As well as, where required by law, your express consent:

 

·        Disability and health-related information;

·        Results of drug tests, criminal record checks and other background checks.

 

In addition, we may collect information that you provide to us about other people, such as emergency contact details.

 

If an employment or service contract is concluded with you, we will collect, process and store personal data in accordance with the provisions of the GDPR that you have provided to us as an employee or independent contractor (freelancer) or that arise during your employment or service relationship, insofar as this is necessary to fulfill our contractual and/or legal obligations.

 

Please also note our data protection policy for applicants.

 

2. Purposes of data processing and legal basis

 

The personal data you provide will be processed in accordance with the provisions of the European Data Protection Regulation (GDPR) and the Data Protection Act (DSG). Depending on the individual case, personal data is processed based on these legal bases:

 

·        Based on the establishment of the employment relationship:

First and foremost, data processing serves to establish the employment relationship. The primary legal basis for this is Art. 88 para. 1 GDPR.

 

 

·        On the basis of consent (pursuant to Art. 6 para. 1 lit. a GDPR)

The purposes of the processing of personal data result from the granting of consent. You can withdraw your consent at any time with effect for the future. Consent given before the GDPR came into force (May 25, 2018) can also be withdrawn. Processing that took place before the revocation remains unaffected by the revocation.

 

In addition, European anti-terrorism regulations 2580/2001 and 881/2002 require us to check your data against the so-called "EU terror lists" to ensure that no funds or other economic resources are made available for terrorist purposes.

The data controller collects and uses the data collected for the following purposes:

a. Provision of staffing solutions and employment services;

b. Creation and management of online accounts;

c. Processing of payments;

d. Managing our customer and supplier relationships;

e. to the extent permitted by law and in accordance with the Data Controller's Cookie and Advertising Notice, to send promotional material, notices of available positions and other communications;

f. to the extent permitted by law, to communicate about and administer special events, promotions, programs, offers, surveys, contests and market research

g. Answering individual inquiries;

h. Operating, evaluating and improving our business (including developing, improving, analyzing and enhancing our services; managing our communications; performing data analysis; performing accounting, auditing and other internal functions);

i. Protecting against fraud and other unlawful acts, claims and other liabilities; and

j. complying with and enforcing applicable legal requirements, relevant industry standards, contractual obligations and our policies.

 

In summary, the processing of personal data is based on these legal bases, depending on the individual case:

 

a. Consent or explicit consent of the data subject where required by applicable law;

b. to ensure that we comply with a legal or contractual obligation or an obligation necessary to enter into a contract (for example, processing your personal data to ensure that your wages and taxes are paid);

c. where the processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject (for example, to enable the user to access the website in order to be provided with the services offered).

 

If you are an employee or an applicant or freelancer and you apply, we will also use the data described, to the extent permitted by law, to:

 

a. Provide you with job offers and projects and offer you work;

b. Provide you with HR services, including the implementation of benefit plans, payroll, performance management and disciplinary action;

c. Provide you with additional services such as training and development, career counseling, and career transition assistance;

d. To determine your suitability as an applicant or freelancer and your job-related skills; and

e. to perform data analytics, such as (i) analyzing our database of applicants and employees; (ii) assessing individual performance, individual and job-related skills, (iii) identifying skills shortages; (iv) using information to identify potential opportunities for individuals; and (v) analyzing trends in hiring practices.

 

We may also use the data for other purposes, which we will inform you of separately at the time of data collection or beforehand.

If you are an applicant or employee, we process your personal data in compliance with the provisions of the EU General Data Protection Regulation (GDPR), the Data Protection Act (DSG) and all other relevant laws (e.g. ArbVG, BeinstG, GlBG, etc.).

 

The primary purpose of data collection and processing is to handle the application process. The primary legal basis for this is Art. 6 para. 1 lit. b GDPR.

 

If necessary, we also process your data on the basis of Art. 6 para. 1 lit. f GDPR in order to protect our legitimate interests or those of third parties (e.g. authorities). This applies in particular to the investigation of criminal offenses (legal basis § 4 para. DSG) or for the purposes of group management, internal communication and other administrative purposes.

 

3. Legitimate interest

 

The data controller may process personal data for certain legitimate business purposes (so-called legitimate interest, Art. 6 para. 1 lit. f GDPR), including in particular the following:

·        to improve, modify or personalize our services and communication with our customers, applicants and employees;

·        to detect and prevent fraud;

·        to improve the security of our network and information systems

·        to better understand how people interact with our websites

·        for direct marketing purposes;

·        to send you communications that we think may be of interest to you;

·        to determine the effectiveness of promotional campaigns and advertising.

 

When we process data for these purposes, we ensure that we consider and respect your rights. You have the right to object to such processing. Before objecting, please note that this may affect our ability to provide the requested service.

 

4. Processing and protection of personal data

 

We process personal data (including automated processing) for the stated purposes and for a specified period of time in accordance with our internal retention policy to ensure that the personal data is not stored for longer than necessary.

We maintain administrative, technical and physical (stationary) security measures to protect the personal data you provide against accidental, unlawful or unauthorized destruction, loss, alteration, access, disclosure or use. To ensure the appropriate security and confidential treatment of personal data, we use the following security measures:

 

·        Encryption of data during transmission;

·        strict user identification controls;

·        protected network infrastructure;

·        network monitoring solutions.

 

5. Storage and retention of data

 

We store the personal data relating to you in our systems in such a way that you cannot be identified for longer than necessary. We determine this period by taking into account

 

·        the need to continue to store the personal data collected in order to provide services set up with the user;

·        the need to protect the legitimate / legitimate interest of the data controller as described in the purposes;

·        the existence of specific legal (national) obligations that make the processing and associated storage necessary for certain periods of time.

·         

With regard to the storage of applicant data, the following also applies:

 

·        If we or a customer conclude an employment contract with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions.

·        If no employment contract is concluded with the applicant or if the applicant is not placed, the application documents will be deleted at the earliest seven months after notification of the rejection decision, provided that no other legitimate interests of the controller stand in the way of deletion. Other legitimate interest in this sense is, for example, a burden of proof in proceedings under the Equal Treatment Act (GlBG).

·        In order to be able to submit further job or project offers matching the applicant's qualifications and skills even after the end of the first application phase, in which the applicant could not be placed, the applicant's consent to longer storage is obtained. After completion of the first application phase and in the event of a suitable offer, we will of course contact the applicant beforehand and obtain their consent. If consent is given for longer storage, the data will not be deleted until this period has expired, unless the applicant gives us renewed consent for further storage.

 

6. Disclosure of the data

 

Personal data will only be passed on in accordance with this data protection declaration or, with regard to certain activities, in accordance with separate data protection notices. We share personal data with providers who provide services on our behalf in accordance with our instructions. We allow these providers to use or disclose the data only to the extent necessary to provide the services on our behalf or to comply with legal requirements. We disclose your personal data as follows:

·        if you are an applicant or freelancer, to clients who have vacancies or projects or who are interested in hiring our applicants or freelancers; and

·        to other persons, such as subcontractors, with whom we work to find you a job or project-related position.

·        Within the company to subsidiaries and companies affiliated with us;

 

In addition, we may disclose your personal data

 

·        if we are required to do so by law or regulation;

·        to law enforcement authorities or government officials based on a lawful disclosure request; and

·        if we believe disclosure is necessary or appropriate to prevent physical harm or financial loss, or in connection with an investigation of suspected or actual fraudulent or illegal activity.

 

We also reserve the right to transfer personal data if we sell or transfer all or part of our business or assets (including in the event of a reorganization, dissolution or liquidation).

 

7. Data transfer

 

In individual cases, personal data may also be transferred to recipients in countries other than the original country of data collection, namely Austria. The same data protection laws may not apply in these countries as in Austria.

Should your data be transferred to other countries in individual cases, we will protect this data as described in this privacy policy. All data transfers are subject to the applicable data protection law.

Countries to which we may transfer personal data may be inside or outside the European Union. The GDPR guarantees an equally high level of data protection within the European Union. When selecting our service providers, we therefore rely on European partners wherever possible if your personal data is to be processed. Only in exceptional cases will we have data processed outside the European Union as part of the use of third-party services. We will only allow your data to be processed in a third country if the special requirements of Art. 44 et seq. GDPR are fulfilled. This means that your data may then only be processed on the basis of special guarantees, such as the EU Commission's officially recognized determination of a level of data protection corresponding to the EU or compliance with officially recognized special contractual obligations, the so-called standard data protection clauses.

 

8. Your rights as a data subject

 

Data subjects may exercise the following specific rights in accordance with Articles 15 to 22 GDPR:

 

a. The right to information: Data subjects have the right to request information on the categories of data processed, processing purposes, any recipients of the data, the planned storage period (Art. 15 GDPR)

b. The right to rectification: Data subjects have the right to request the rectification of inaccurate or incomplete data stored about them in order to protect the accuracy of this information and to adapt it to the data processing.

c. The right to erasure: Data subjects have the right to request that the data controller erases information about them and no longer processes this data, unless erasure cannot take place for reasons such as a legal obligation to retain it.

d. The right to restriction of processing: Data subjects have the right to request that the data controller restricts the processing of their data.

e. The right to data portability: Data subjects have the right to request data portability, which means that the data subject may receive the personal data originally provided in a structured and commonly used format or that the data subject may request the transfer of the data to another data controller.

f. The right to object: Data subjects who provide personal data to a data controller have the right to object to data processing at any time for a number of reasons as set out in the General Data Protection Regulation, without having to justify the decision.

g. The right not to be subject to automated individual decision-making: Data subjects have the right not to be subject to a decision based solely on automated processing, including profiling, where that profiling produces legal effects concerning the data subjects or similarly significantly affects them.

h. The right to lodge a complaint with a supervisory authority: Data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or place of the alleged infringement if the data subjects consider that the processing of their personal data infringes the GDPR.

i. If the processing is based on consent pursuant to Art. 7 GDPR, data subjects may withdraw their consent at any time.

 

If you require further information about the processing of your personal data, you can contact us at any time.

 

9. Use of our website, general information

 

Each time our website is accessed, our system automatically collects data and information from the user's computer system. Information is collected about:

 

1. the IP address of the user;

2. the browser type and version used

3. the user's operating system;

3. the user's internet service provider;

5. date and time of access;

6. websites from which the user's system accesses our website

7. websites that are accessed by the user's system via our website;

 

The data described is stored in the log files of our system. This data is not stored together with other personal data of the user.

The temporary storage of the IP address by our system is necessary to enable delivery of the website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session.

The data is stored in log files to ensure the functionality of the website. We also use the data to optimize the website and to ensure the security of our information technology systems.

The data is not analyzed for marketing purposes in this context.

 

The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f GDPR.

 

The collection of your personal data for the provision of our website and the storage of the data in log files are absolutely necessary for the operation of the website. The user therefore has no option to object.

 

Your data will be deleted as soon as it is no longer required for the purpose for which it was collected. If your data is collected to ensure the provision of the website, the data will be deleted when the respective session has ended.

 

10. General information on the use of cookies

 

We use cookies on our website. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. When you access a website, a cookie may be stored on your operating system. This contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again.

 

Legal basis for the storage of cookies:

European ePrivacy Directive in conjunction with § 165 para. 3 TKG 2021:

The legal basis for the storage of cookies, device identifiers and similar tracking technologies or for the storage of information in the end user's terminal equipment and access to this information is the European ePrivacy Directive in conjunction with the Telecommunications Act 2021 (TKG 2021).

 

We would like to point out that the legal basis for the processing of the personal data collected in this context results from the GDPR (Art. 6 para. 1 sentence 1 GDPR). The relevant legal basis for the processing of personal data in each specific case can be found below on the respective cookie or on the respective processing itself. 

 

The primary legal basis for the storage of information in the end user's terminal equipment - i.e. in particular for the storage of cookies - is your consent. Consent is given when you visit our website - although of course it does not have to be given - and can be revoked at any time in the cookie settings.  Consent is not required if the storage of information in the end user's terminal equipment or access to information already stored in the end user's terminal equipment is absolutely necessary so that the provider of a telemedia service can provide a telemedia service expressly requested by the user. You can find out which cookies are classified as absolutely necessary (often also referred to as "technically necessary cookies") in the cookie settings.

 

Cookies are also used to make our website more user-friendly. Some elements of our website require that the browser can be identified even after a page change. The following data is stored and transmitted:

1. language settings

2. log-in information

The legal basis for the processing of personal data using cookies results from Art. 6 para. 1 lit. f GDPR. The purpose of using technically necessary cookies is to simplify the use of our website.

We would like to point out that individual functions of our website can only be offered using cookies. These are the following applications:

1. registration

2. remembering search terms

We do not use user data collected by technically necessary cookies to create user profiles. Cookies are stored on the user's computer and transmitted by it to our website. As a user, you therefore have control over the use of cookies. You can restrict or deactivate the transmission of cookies by making changes in the settings of your Internet browser. Stored cookies can also be deleted there. Please note that you may no longer be able to use all the functions of our website if you deactivate cookies.

 

11. Cookies

 

Our website uses cookies. Cookies are text files that are stored on your device, e.g. to make the use of a website more convenient or to recognize the user's device and save settings or similar. Inputs and settings on a website can be saved in cookies so that you do not have to enter them again each time you visit a website. Cookies contain a so-called cookie ID, which makes it possible to assign the device in which the cookie was stored. We use the following cookies in particular:

Cookies that contain a randomly generated, specific identification number that makes you or your device identifiable during your visit to our website. These cookies are automatically deleted at the end of your visit.

Cookies that contain a randomly generated, specific identification number that makes you or your device identifiable on our website. These cookies are automatically deleted after one year.

 

We use cookies to enable our online tools to interact with the web browser software on your computer or mobile device. This is to improve our service and user experience. We use cookies to store session information between your browser and our online tools and to retrieve it when you visit our website again. We use cookies to track your navigation and use of the website.

 

The processing of your data for the purposes mentioned here is partly based on the legitimate interest pursuant to Art. 6 para. 1 lit. f) GDPR, but in some cases we also require your consent pursuant to Art. 6 para. 1 lit. a GDPR and § 165 para. 3 TKG 2021.

 

You have the right to withdraw your consent or to object.

In your browser settings, you can restrict or completely prevent the setting of cookies.

You can also arrange for cookies to be deleted automatically when you close the browser window. The provision of personal data is not required by law or contract and is not necessary for the conclusion of a contract. You are also not obliged to provide the personal data.

 

However, failure to provide it may mean that you will not be able to use our website or will not be able to use it to its full extent. Other services we use also use cookies. We will inform you separately about the use of cookies in the individual services.

 

12. Google Tag Manager

 

We use the Google Tag Manager service from Google. Google is a group of companies and consists of the companies Google Ireland Ltd (provider of the service), Gordon House, Barrow Street, Dublin 4, Ireland and Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA and other affiliated companies of Google LLC. Google Tag Manager is an auxiliary service and processes personal data itself only for technically necessary purposes. Google Tag Manager ensures that other components are loaded, which in turn may collect data. Google Tag Manager does not access this data. It only collects data on how the individual tags are used.

 

The legal basis for the processing of your personal data is the consent given by you in accordance with Art. 6 para. 1 lit. a GDPR and § 165 para. 3 TKG 2021, insofar as the consent includes the storage of cookies or access to information on the user's terminal device within the meaning of the TKG 2021. The personal data may be transferred to the United States. The transfer is subject to appropriate safeguards in accordance with Art. 46 GDPR. For this purpose, appropriate safeguards within the meaning of Art. 46 para. 2 GDPR are agreed with the data importer, insofar as this is necessary. The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected.

 

You have the right to withdraw your consent at any time, see Art. 7 para. 3 sentence 1 GDPR. The withdrawal of consent is effective for the future and does not affect the lawfulness of the processing carried out until the withdrawal. You can withdraw your consent to data processing and third country transfer at any time by accessing the "Cookie settings" via the footer at the bottom of the website and unchecking the box under "Performance cookies". The legality of the processing remains unaffected until the revocation is exercised.

Further information on the handling of user data can be found in Google Tag Manager's privacy policy at: https://policies.google.com/privacy?hl=en-US#intro

 

13. Google Analytics

 

We use Google Analytics on our website (service provider: Google Ireland Limited, Gordon House, Barrow Street Dublin 4 Ireland), a web analytics service that provides statistics and basic analysis tools for search engine optimization (SEO) and marketing purposes. Google Analytics collects user data from each website visitor by using page tags that run on each visitor's web browser to collect data and send it to one of Google's data collection servers.

The legal basis for processing your personal data is Art. 6 para. 1 lit. a GDPR. The recipient of your personal data is Google Ireland Limited, Gordon House, Barrow Street Dublin 4 Ireland. In Google Analytics 4, the anonymization of IP addresses is activated by default. Due to IP anonymization, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. According to Google, the shortened IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. During your visit to the website, your user behavior is recorded in the form of "events". Events can be

·        Page views

·        First visit to the website

·        Start of the session

·        Interaction with the website

·        Clicks on external links

·        Internal search queries

·        Interaction with videos

·        Downloads

·        Viewed / clicked ads

·        Scrolling behavior.

 

Also recorded:

·        Your approximate location (region)

·        Technical information about your browser and the end devices you use (e.g. language setting, screen resolution)

·        The referrer URL (via which website/advertising medium you came to this website).

 

We are aware of our responsibility and take measures to protect personal data. The IP addresses are further processed in abbreviated form so that they cannot be traced back to individuals. If the data collected about you is personally identifiable, it is immediately excluded and the personal data is deleted immediately. We only use Google Analytics if you agree to the performance cookies. We use Google Analytics to analyze and regularly improve the use of our website. We can use the statistics obtained to improve our offer and make it more interesting for you as a user. The legal basis for the use of Google Analytics is your consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR.

 

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. You have the right to object to the processing of your personal data at any time in accordance with Art. 21 para. 2 GDPR. If you exercise your right, processing for this purpose will no longer take place. You can also prevent the storage of cookies from the outset by setting your browser software accordingly. However, if you configure your browser to reject all cookies, this may limit the functionality of this and other websites. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by: a. Not giving your consent to the setting of cookies or b. Downloading and installing the browser add-on to deactivate Google Analytics HERE.

Further information on the handling of user data can be found in the Google Analytics privacy policy at: https://policies.google.com/privacy?hl=en-US#intro

 

14. Google ReCaptcha

 

We also use the Google reCaptcha service on our website to determine whether a human or a computer is making a certain entry in our contact or newsletter form. Google uses the following data to check whether you are a human or a computer IP address of the end device used, the website that you visit on our site and on which the captcha is integrated, the date and duration of the visit, the identification data of the browser and operating system type used, Google account if you are logged in to Google, mouse movements on the reCaptcha areas and tasks in which you have to identify images.

 

The legal basis for the aforementioned data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest in this data processing is to ensure the security of our website and to protect against automated input (attacks).

 

Further information about the provider Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland can be found at https://www.google.com/policies/privacy/

Opt-out: https://adssettings.google.com/authenticated

 

15. Google Maps

 

We use Google Maps (from Google Ireland Limited, Gordon House, Barrow Street Dublin 4 Ireland) on our website to display geographical information visually. By using Google Maps, information about the use of our website, including your IP address, may be transmitted to Google in the USA. When you access a page on our website that contains Google Maps, your browser establishes a direct connection with Google's servers. The map content is transmitted by Google directly to your browser, which integrates it into the website. We therefore have no influence on the scope of the data collected by Google in this way. To the best of our knowledge, this is at least the following data

 

·        Date and time of the visit to the website in question,

·        Internet address or URL of the website accessed,

·        IP address, (start) address entered as part of route planning.

 

We have no influence on the further processing and use of the data by Google and can therefore accept no responsibility for this.

If you do not want Google to collect, process or use data about you via our website, you can deactivate JavaScript in your browser settings. In this case, however, you will not be able to use the map display.

The purpose and scope of the data collection and the further processing and use of the data by Google as well as your rights in this regard and setting options to protect your privacy can be found in Google's data protection information (https://policies.google.com/privacy?hl=de).

By using our website, you consent to the processing of data about you by Google Maps Route Planner in the manner and for the purposes set out above.

 

16. Google Web Fonts

 

In order to display our content correctly and graphically appealing across browsers, we use script libraries and font libraries such as Google Web Fonts (https://www.google.com/webfonts/) on this website.

 

Google web fonts are transferred to the cache of your browser to avoid multiple loading. If the browser does not support Google web fonts or prevents access, content is displayed in a standard font. Calling up script libraries or font libraries automatically triggers a connection to the library operator. It is theoretically possible - although it is currently unclear whether and, if so, for what purposes - that operators of such libraries collect data.

The legal basis for the use of script libraries is our legitimate interest pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR.

 

The privacy policy of the library operator Google can be found here:

https://www.google.com/policies/privacy

 

17. Newsletter

 

We use our free newsletter to inform you about our company's development and current interesting offers.

We collect the following data on the basis of your consent: Surname, first name, e-mail address, IP address of the accessing computer, date and time of registration. Your data will not be passed on in connection with the data processing for sending newsletters. The data is used exclusively for sending the newsletter via Brevo (formerly sendinblue).

 

Registration for our newsletter takes place in a so-called double opt-in procedure. After registering, you will receive an e-mail asking you to confirm your registration. This confirmation is necessary so that no-one can register with other people's e-mail addresses. Subscriptions to the newsletter are logged in order to be able to prove the registration process in accordance with legal requirements. This includes storing the time of registration and confirmation as well as the IP address.

 

The legal basis for the processing of the data is Art. 6 para. 1 lit. a GDPR if the user has given consent.  The purpose of collecting the user's email address is to send the newsletter. Your data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. Your email address will therefore be stored for as long as the subscription to the newsletter is active. You can unsubscribe from the newsletter at any time by revoking your consent.

There is a corresponding link for this purpose in every newsletter.

 

We would also like to point out that you can object to the future processing of your personal data at any time in accordance with the legal requirements pursuant to Art. 21 GDPR.

In particular, you may object to processing for direct marketing purposes.

 

The newsletter is sent via Brevo (formerly sendinbliue). Brevo processes personal usage data exclusively on systems located in Germany. The contact details are: Sendinblue GmbH

Köpenicker Straße 126, 10179 Berlin, email: datenschutz@brevo.com. Brevo processes the personal data described above on our behalf. Furthermore, according to its own information, Brevo may use this data to optimize or improve its own services, e.g. for the technical optimization of the dispatch and presentation of the newsletter or for economic purposes in order to determine from which countries the recipients come. However, the service provider does not use the data of our newsletter recipients to write to them itself or pass it on to third parties. We trust in the reliability and IT and data security of Brevo. We have concluded an "order processing contract" with the service provider. This is a contract in which Brevo undertakes to protect the data of our users, to process it on our behalf in accordance with its data protection provisions and, in particular, not to pass it on to third parties.

 

You can view Brevo's privacy policy here: https://www.brevo.com/de/legal/privacypolicy/

 

18. Whitepapers, events

 

On our websites, you occasionally have the option of registering for an event or downloading a white paper. For this purpose, the personal data provided by the data subject is used, which is generally the following data: Surname, first name, e-mail address, telephone number, company, activity.

 

Registration for an event or the download of white papers is generally free of charge. The prerequisite for participation and/or downloading the whitepaper is the granting of advertising consent, which can be revoked at any time, as the services offered are financed through the placement of advertising. Otherwise, participation and/or downloading the white paper is not subject to any further conditions or costs. The legal basis for data processing in this context is Art. 6 para. 1 sentence 1 lit. a GDPR (consent). The data will not be passed on to third parties. This does not apply to agencies or other service providers that we commission as part of order processing, e.g. to organize the event or send the white paper. We use the advertising consent to inform the data subject about our products and services by email.  The data subject has the right to withdraw their advertising consent at any time without of reasons. Withdrawal of consent does not result in any disadvantages.

 

19. Electronic contact

 

If you contact us, a form is available on our homepage which you can use to contact us electronically. The data entered in the input mask will be transmitted to us and stored. These data are Name, e-mail address, telephone number, postal code.

 

 

At the time the message is sent, the following data is also stored:1. the user's IP address; 2. the date and time of registration

It is also possible to contact us via the e-mail address provided. In this case, the user's personal data transmitted with the e-mail will be stored. Your data will not be passed on to third parties in this context; the data will be used exclusively for processing the communication. The legal basis for the processing of the data is Art. 6 para. 1 lit. a GDPR if the user has given consent. The legal basis for the processing of data transmitted in the course of sending an email is Art. 6 para. 1 lit. f GDPR. If the e-mail contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.

 

In this context, the processing of personal data serves solely to process the contact. If contact is made by email, this also constitutes the necessary legitimate interest in processing the data.

If further personal data is processed during the sending process, this is only used to prevent misuse of the contact form and to ensure the security of our information technology systems.

 

Your data will be deleted as soon as it is no longer required for the purpose for which it was collected. For the personal data from the input screen of the contact form and those sent by email, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified. The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.

You have the option of withdrawing your consent to the processing of personal data at any time. You can also object to the storage of your personal data at any time when contacting us by e-mail. However, we would like to point out that in such a case the conversation cannot be continued. All personal data stored in the course of contacting us will be deleted in this case.

 

20. Registration

 

You can register on our website in order to use additional functions on the site. We use the data entered for this purpose only for the purpose of using the respective offer or service for which you have registered. The mandatory information requested during registration must be provided in full. In the event of important changes or technically necessary changes, we will use the e-mail address provided during registration to inform you in this way.

The data collected during registration will be stored by us for as long as you are registered on this website and will then be deleted. Statutory retention periods remain unaffected. The data will not be passed on to third parties.

 

The following data is collected as part of the registration process: Name, e-mail address and cell phone number. Please note that the cell phone number is collected for two-factor authentication in order to offer you a high level of data security.

 

As part of the registration process, you set the password for your profile yourself.

Once you have registered, you can enter and save additional data and information in your profile. This includes, for example: Interests, qualifications, education, professional background. There is no obligation to enter this data.

 

During the registration process, we obtain your consent to the processing of this data, whereby the legal basis for the processing of your data is Art. 6 para. 1 sentence 1 lit. a GDPR. You have the option to cancel your registration at any time. You can also have your stored data amended or deleted at any time. If you wish to withdraw your consent and/or request the deletion of your data, please contact us by email.

 

21. Social media presence

 

We maintain fan pages within various social networks and platforms with the aim of communicating with the applicants, customers, interested parties and users active there and informing them about our services. We would like to point out that your personal data may be processed outside the European Union, which may result in considerable data protection risks for you. Please note that some US providers are certified under the EU-US Data Privacy Framework and have therefore undertaken to comply with EU data protection standards.

 

Usually, user data is processed for market research and advertising purposes. For example, usage profiles can be created from the usage behavior and the resulting interests of the users. These user profiles can in turn be used, for example, to place advertisements within and outside the platforms that presumably correspond to the interests of the users. For these purposes, cookies are generally stored on the user's computer, in which the user's usage behavior and interests are stored. Furthermore, data can also be stored in the user profiles independently of the devices used by the users (especially if the users are members of the respective platforms and are logged in to them). In the application forms, it is possible to transfer basic data such as first name, surname, email, telephone and photo from the social media user profiles.

The processing of users' personal data is based on our legitimate interests in effectively informing users and communicating with users in accordance with Art. 6 para. 1 lit. f. GDPR. If users are asked by the respective providers to consent to data processing (i.e. to give their consent, e.g. by ticking a checkbox or confirming a button), the legal basis for processing is Art. 6 para. 1 lit. a., Art. 7 GDPR.

 

Further information on the processing of your personal data and your options to object can be found under the links of the respective provider listed below. We are of course available to answer any questions you may have and will support you if you need help.

 

The following providers:

1. Facebook

Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

Privacy policy: https://www.facebook.com/privacy/policy/

Opt-out: https://www.facebook.com/settings?tab=ads

and http://www.youronlinechoices.com

2. Instagram

Instagram Inc, 1601 Willow Road, Menlo Park, CA, 94025, USA

Privacy Policy/ Opt-Out: http://instagram.com/about/legal/privacy/

3. Tik Tok

TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland.

Privacy policy: https://www.tiktok.com/legal/page/eea/privacy-policy/de-DE

4. Google/YouTube

Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA)

Privacy policy: https://policies.google.com/privacy

Opt-Out: https://adssettings.google.com/authenticated

5. LinkedIn

LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland

Privacy policy https://www.linkedin.com/legal/privacy-policy

Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

6. Xing

XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany

Privacy policy/ Opt-Out:

https://privacy.xing.com/de/datenschutzerklaerung.

 

22. YouTube-Videos

 

We have integrated YouTube videos into our online offering, which are stored on http://www.youtube.com and can be played directly from our website. These are all integrated in "extended data protection mode", i.e. no data about you as a user is transferred to YouTube if you do not play the videos. Only when you play the videos will the data mentioned in paragraph 2 be transmitted. We have no influence on this data transfer.

 

When you visit the website, YouTube receives the information that you have accessed the corresponding subpage of our website. This occurs regardless of whether YouTube provides a user account that you are logged into or whether no user account exists.

 

If you are logged in to Google, your data will be assigned directly to your account. If you do not wish your data to be associated with your YouTube profile, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right.

Further information on the purpose and scope of data collection and its processing by YouTube can be found in the privacy policy. There you will also find further information on your rights and setting options to protect your privacy: https://www.google.de/intl/de/policies/privacy.

 

23. Chatbot

 

A chatbot is an application that uses artificial intelligence to converse with people in natural language. Users can ask questions to which the system responds in natural language. It can support text input, audio input or both.

 

Our chatbot offers you the opportunity to enter into a dialog with us. It answers your general questions automatically using pre-formulated answers. Access to the chatbot does not require prior registration or any other provision of personal data. When you use the chatbot, we collect and process the information that is automatically transmitted to us by technical means or that you transmit to us voluntarily.

 

A randomly generated registration ID is assigned each time the chatbot is accessed. No connection can be established between this registration ID and your website identification (e.g. IP address) or personal data.

 

It is generally not possible to draw conclusions about you from the chat history, unless you enter personal data yourself (e.g. name for the purpose of assigning the request or for feedback).

 

We use cookies or similar technologies to operate the chatbot. This allows you to return to your conversation with the chatbot at any time while you are surfing on the website in which the chatbot is integrated or on other websites. You can prevent cookies from being saved by changing your browser settings accordingly. Stored cookies can also be deleted by you via your browser. However, preventing or deleting cookies may mean that certain functions of the chatbot cannot be used.

The registration ID and all entries made by you in the chatbot are automatically deleted after 7 days. Anonymized metadata that is necessary for statistical purposes is retained.

The processing of personal data is based on our legitimate interests in effective user information and communication with users in accordance with Art. 6 para. 1 lit. f. GDPR. GDPR. If you give your consent, the legal basis for processing is Art. 6 para. 1 lit. a., Art. 7 GDPR. You have the right to information, correction and deletion of the data you have entered. If you wish to revoke your consent and/or request the deletion of your data, please contact us by e-mail.

 

24. WhatsApp (PitchYou)

 

At the request of candidates, we offer the option of applying via WhatsApp as part of the recruitment process. For this purpose, the service PitchYou GmbH in Germany (Campusallee 9, D-51379 Leverkusen) is used, which enables a connection and transfers the information provided to our applicant management system and guarantees the protection of applicant data. An order processing contract has been concluded with the provider in accordance with Art. 28 GDPR.

 

PitchYou provides for a multi-stage deletion concept to protect the rights of the data subject.

 

We have no influence on data processing by WhatsApp. Processing is subject to WhatsApp's privacy policy, which you must agree to in advance. We would like to point out that the information you provide will be stored and processed in the USA.  WhatsApp LLC participates in the EU-US Data Privacy Framework (DPF).

 

The legal basis for the processing is the voluntary consent granted within the meaning of Art. 6 para. 1 sentence 1 lit. a GDPR in conjunction with § 26 BDSG for the execution of the application process.

Applicants can revoke the consent expressly given above at any time with effect for the future by sending us a message via WhatsApp. The legality of the processing carried out on the basis of the consent until the revocation is not affected by the revocation.

 

Information on data protection at WhatsApp:

https://www.whatsapp.com/legal?eea=0#privacy-policy

 

Further information on PitchYou's data protection can be found at:

https://www.pitchyou.de/datenschutz and

https://www.pitchyou.de/pitchyou-dsgvo

 

Information on consent to the use of WhatsApp can be found at: https://www.pitchyou.de/datenschutz-whatsapp

 

25. Updates to our privacy policy

 

This Privacy Policy (including any amendments) may be updated periodically to reflect changes in our handling of personal data and to comply with legal updates. We will notify you of any material changes by posting an easily recognizable notice on our websites. The date of the last update will be indicated at the beginning of the policy.

 

26. Contact details / responsible body

 

Depending on which company of our Group you are in contact with and which of the corresponding homepages you visit, the responsible body is one of the bodies listed below. If you have any uncertainties or questions regarding the controller, you can also contact our data protection officer. The data protection officer is responsible for all the controllers listed below and can be contacted at

 

datenschutzAT@trenkwalder.com

 

Postal address:

Trenkwalder Personaldienste GmbH

Rennweg 97-99, Kern 8/6th floor

1030 Vienna

Internet: https://at.trenkwalder.com

Managing Director: Mark Pollok

Data subject requests:

You can address your data subject rights under the GDPR to the Data Protection Officer.