DATA PRIVACY STATEMENT
A. Data privacy statement for visitors to our website www.uniqueconnexxxion.at
B. Data privacy statement for online applications
A. Data privacy statement for visitors to our website www.uniqueconnexxxion.at
Declaration on the obligation to provide information – privacy statement
in accordance with the General Data Protection Regulation (“GDPR”).
As of: 19 May 2018
Protecting your personal data is a particular concern for us. We process your data exclusively on the basis of legal provisions (GDPR, Telecommunications Act 2003 (TKG)). In this data privacy statement, we shall inform you about the most important aspects of data processing associated with our website.
We would like to draw your attention to the fact that online data transfers (e.g. e-mail communication) can have security gaps. Complete protection of data from access by third parties is not possible.
If you visit our website or if you contact us via the website or by e-mail, we will process some of your personal data in connection with this visit.
1. Categories of processed data and purpose of data processing
During your visit to this website, we will automatically collect the following personal data about you:
- The date and time you visit a page on our website.
- Your IP Address.
- Name and version of your web browser.
- The website (URL) you visited before visiting this website.
- Certain cookies (see section 6 below).
We will also ask you to enter certain personal details on our website, such as your name, e-mail address and telephone number, so we can provide you with certain services.
There is no obligation to actually declare the data we ask for on our website. However, if you do not do so, it will not be possible for you to use all of the functions on the website or to communicate with us via this website.
2. We process your data for the following purposes
- To answer your queries.
- To be able to compile user statistics.
- To provide you with this website and in order to continually improve and develop this website.
- To display personalised page suggestions.
- To be able to detect, prevent and investigate attacks on our website.
3. Legal foundation of processing
We process your personal data on the foundation of:
- Legal provisions from Article 96 (3) of the Telecommunications Act, as well as
- The need to take precontractual measures at the request of the data subject, in accordance with Article 6 (1) (b) of the GDPR
- The need to fulfil legal obligations, in accordance with Article 6 (1) (c) of the GDPR
- Our prevailing legitimate interest in accordance with Article 6 (1) (f) of the GDPR, which consists of designing our website in a user-friendly way and protecting our website from attacks.
4. Transfer of your personal data
Insofar as is necessary for the aforementioned purposes, we shall transfer your personal data to the following recipients:
- External IT service providers, including Google Analytics (see Section 7 below).
5. Storage periods
We shall store your data for a basic period of two months. An extended storage period shall be maintained only if this is necessary in order to investigate attacks detected on our website and also only until the end of relevant statutory period of limitation, legal retention periods or any legal disputes in which the data is required as evidence.
If you do not want these, you can set your browser to notify you when cookies are placed and to give you the option of allowing cookies only in specific circumstances.
If you deactivate cookies, the full range of functions on our website may be limited.
7. Google Analytics
The information generated by cookies about your website usage (including your IP address and the URLs of websites you have visited as well as features of the website) are transferred to Google’s servers in the USA and stored there. We do not store any of your data collected in connection with Google Analytics.
Our website uses the option of IP anonymisation, which is provided by Google Analytics. As such, your IP address is shortened/anonymised by Google as soon as Google receives it. Google will use this information on our behalf to evaluate your use of our website, to compile reports on website activity and to provide us with other services related to website and internet use. Google will not merge the IP address transmitted from your browser by Google Analytics with other data.
You can also prevent Google Analytics from collecting your data on this website by following the link below. This will place an “opt out” cookie that prevents future collection of your data when you visit this website: Deactivate Google Analytics
8. International data transfers
Some of the aforementioned recipients may be located outside Austria and may process your personal data at their location. It is possible that the standards of data privacy in other countries do not correspond to those of Austria. However, we transfer your personal data only to countries in which the data protection level has been deemed appropriate by the EU Commission.
9. Your rights in connection with your personal data
In accordance with currently applicable law, you have a number of rights including (under the conditions specified in the applicable law):
- to check if we have stored personal data about you, and if so, what data we have, and to obtain copies of this data
- to demand the rectification, completion or erasure of your personal data if it is incorrect or has been processed illegitimately
- to demand that we restrict the processing of your personal data
- under certain circumstances, to object to the processing of your personal data or to withdraw any consent you have already given for the processing of your personal data, although this withdrawal shall not affect the processing that occurred prior to withdrawal
- to demand data portability
- to find out the identity of third parties to whom your personal data is transferred
- to file a complaint with the Data Protection Authority in Austria.
10. Our contact details
If you have questions about the processing of your personal data or concerns regarding the implementation of your rights, please contact us by e-mail:
Data protection coordinator: Ms Evelyn Zezula, MBA
E-Mail: office [at] uniqueconnexxxion.at
We are keen to process your request as soon as possible and in a timely manner.
Note: When making use of your rights, it is necessary for us to check your identity.
B. Data privacy statement for online applications
We are happy to receive your application documents. In the following document, we explain how we will process your personal data within the context of an application and we can provide further relevant information on this subject, should you require it.
Gender-specific terms shall apply equally to people of all genders
UNIQUE CONNEXXXION undertakes to comply with the provisions of the GDPR and the Telecommunications Act in their applicable versions when processing, using and transferring the data stored about applicants and is also committed to complying with data confidentiality.
1. General information about applications
The transfer of application documents does not constitute a contractual relationship between applicants and UNIQUE CONNEXXXION. This service is free for the applicant. UNIQUE CONNEXXXION shall not assume any costs for travel or accommodation that may arise.
UNIQUE CONNEXXXION also reserves the right to delete some or all data at any time (after the end of the legal retention period) without consultation and without providing reasons. UNIQUE CONNEXXXION is not required to include applicants’ data as part of the searching and selection process and there is no legal claim to the use of applicants’ data by UNIQUE CONNEXXXION. UNIQUE CONNEXXXION shall not bear any liability to applicants, as long as this is legally permitted.
a. Application process: PO box advertisements
If the client specifically requests it, we also enable “PO box advertisements”. This involves clients commissioning us to display anonymous advertisements in the layout of UNIQUE CONNEXXXION. In this case, you can find the following information in the text displayed: “By transferring your application documents, you declare your consent for the documents to be passed on to our client immediately after they have been checked for restriction notes. Please cite the restriction note if you do not want to be passed on to certain companies.”
b. Application process: UNIQUE CONNEXXXION
Applications for advertisements or direct contact (headhunting) with potential candidates by UNIQUE CONNEXXXION:
Application documents are always checked for restriction notes. After a successful interview and after disclosure of the employer, the candidate’s personal data shall be transferred to the client in the form of a “candidate dossier”, provided the candidate is still interested after finding out the identity of the employer. This will be clarified during a personal discussion. If the applicant has voluntarily provided sensitive information in the personal documents transferred (e.g. religion, parental information, etc.) this data will be stored automatically by UNIQUE CONNEXXXION when storing the CV. UNIQUE CONNEXXXION shall NOT consult this sensitive information for the purposes of initial selection, in accordance with the Equal Treatment Act.
2. Who is responsible for processing your personal data?
UNIQUECONNEXXXION Consulting OG, Westbahnstraße 28/13, 1070 Vienna, Austria (hereinafter referred to as “we/us”) is the data controller as defined by the EU General Data Protection Regulation (“GDPR”).
3. Data protection coordinator
For all questions relating to the processing of your personal data and to exercising your rights in accordance with the GDPR, please contact our data protection coordinator Evelyn Zezula, who you can reach using the following details: phone: 01/522 15 13-0; e-mail: office [at] uniqueconnexxxion.at.
4. For what purposes and on what legal foundation do we process personal data?
We process your personal data for the purposes of your application to facilitate a working relationship with clients, to evaluate specialist and personal capabilities, to give career advice and to consult on training and development opportunities. Legal foundation: Article 6 (1) (a) of the GDPR and Article 6 (1) (b) of the GDPR.
In addition, we can process personal data pertaining to you if this is necessary to protect ourselves from legal claims brought against us from the application process. The legal foundation of this is thus Article 6 (1) (f) of the GDPR. The legitimate interest may be an obligation to provide evidence during a trial relating to the General Equal Treatment Act (AGG), for example.
5. What categories of personal data do we process?
We process data relating to your application. This could be general data about your identity (e.g. name, address and contact details), information about your professional qualifications and school education, details about professional training or any other information that you send us in connection with your application. We can also process information related to your career that you have made public, such as your profile on social media networks.
6. Where does the personal data that is not provided by you come from?
If we do not collect the data directly from you and you have an active profile on social media networks or you make us aware of an inactive or partially active profile during your application process, we can collect personal data from these profiles.
7. What categories of data recipient are there?
We can transfer your personal data to companies associated with us, provided this is permitted for the purposes and legal foundations specified in Section 4. Personal data is also processed on our behalf based on contracts in line with Article 28 of the GDPR.
8. Existence of automated decision-making
As a responsible company, we do not use any automated decision-making in our application process.
9. International data transfer
Some of the aforementioned recipients may be located outside Austria and may process your personal data at their location. It is possible that the standards of data privacy in other countries do not correspond to those of Austria. However, we transfer your personal data only to countries in which the data protection level has been deemed appropriate by the EU Commission or we implement measures to ensure that all recipients have an appropriate data protection level. For example, we conclude standard contractual clauses (2010/87/EC and/or 2004/915/EC). If applicable, the agreements concluded can be provided on request (see Section 4 below).
10. For how long is your data stored?
We store your personal data for as long as it is required to make a decision about your application. If no employment relationship comes about between you and our client, we can continue to store your data provided that this is necessary to defend ourselves from possible legal claims. As such, the application documents shall be erased eight months after the rejection is received, provided that continued retention is not required as a result of legal disputes. With your express permission, we can store your personal data until you withdraw your consent in order to include you in possible future application processes.
11. What rights do you have?
As an applicant with us, you have the following data privacy rights, depending on your individual circumstances. In order to exercise these rights, you can contact us or our data protection coordinator at any time using the contact details provided in Sections 1 and 2.
You have the right to receive information about your personal data processed by us and to demand access to your personal data and/or copies of this data. This includes information about the purposes of use, the category of data used, recipients of and people entitled to access the data and, if possible, the expected duration of data storage or, if this is not possible, the criteria for determining this duration.
b. Rectification, erasure or restriction of processing
You have the right to demand that we rectify inaccurate personal data pertaining to you immediately. Depending on the purposes of the processing, you also have the right to demand the completion of incomplete personal data – also by means of a supplementary declaration.
c. Right to object
If the processing of personal data pertaining to you takes place based on Article 6 (1) (f) of the GDPR, you have the right to file an objection to the processing of this data at any time, for reasons resulting from your particular situation. Following this, we shall no longer process the personal data concerning you unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms or that serve the assertion, exercise or defence of legal claims.
d. Right to withdraw
If the processing is based on consent, you have the right to withdraw the consent at any time, without affecting the legitimacy of processing conducted prior to the withdrawal of consent. For this purpose, you can contact us or our data protection coordinator at any time, using the contact details given above.
e. Right to erasure
You have the right to demand that we erase personal data pertaining to you immediately and we have an obligation to erase this personal data immediately provided that one of the following grounds applies:
- The personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed.
- You raise an objection to the processing pursuant to Section 11. (c) above and there are no overriding legitimate grounds for processing.
- The personal data was being processed illegally.
- The personal data concerning you has to be erased in order to comply with a legal obligation in EU or Member State laws to which we are subject.
This shall not apply where processing is required for the following purposes:
- To fulfil a legal obligation that requires processing by EU or Member State laws to which we are subject.
- To assert, exercise or defend legal claims.
f. Right to restriction of processing
You have the right to demand that we restrict processing if one of the following conditions exists:
- You dispute the accuracy of the personal data pertaining to you and do so for a period that allows us to verify the accuracy of the personal data
- The processing is unlawful and you reject the option to erase the personal data and request the restriction of its use instead
- We no longer need the personal data for the purposes of the processing, but you require it for asserting, exercising or defending legal claims, or
- You have filed an objection to the processing in accordance with Section 11. c above, unless it is clear that our legitimate grounds override yours.
If the processing has been restricted, this personal data, with the exception of its storage, shall be processed only with your consent or for the assertion, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the EU or of a Member State. If you have obtained a restriction of processing, we will inform you before this restriction is lifted.
g. Right to complain
You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or the location at which the suspected breach occurred, if you consider that your rights under the GDPR have been violated by the processing of personal data relating to you, regardless of any other regulatory or statutory appeal. In Austria, this supervisory authority is the Austrian Data Protection Authority.
12. Requirement to provide personal data
The provision of personal data is neither legally nor contractually stipulated, nor are you required to provide personal data. However, the provision of personal data is necessary to submit your application documents to us. As such, if you do not provide us with personal data within your application, we will not be able to consider you for any application processes.
13. No automated decision-making
There shall be no automated decision-making for individual cases, as defined by Article 22 of the GDPR. This means that the decision about your application shall never be based solely on automated processing.