In accordance with the requirements of Articles 13, 14 and 21 of the General Data Protection Regulation (GDPR), we hereby inform you about the processing of the personal data you provide as part of the application process, as well as any personal data we may collect, and about your related rights. To ensure that you are fully informed about the processing of your personal data in the context of the application process, please take note of the information below. Purposes and legal bases of data processing We process your personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG), insofar as this is necessary for the decision on establishing an employment relationship with our clients. The legal basis is Article 88 GDPR for the purposes of personnel placement, insofar as this is necessary for the decision on establishing an employment relationship. Furthermore, we may process your personal data if this is necessary to comply with legal obligations (Article 6(1)(c) GDPR) or to assert, exercise or defend legal claims. The legal basis in this case is Article 6(1)(f) GDPR. The legitimate interest is, for example, an obligation to provide evidence in proceedings under the Equal Treatment Act. If you give us your explicit consent to process personal data for specific purposes, the lawfulness of such processing is based on your consent pursuant to Article 6(1)(a) GDPR. Any consent given may be withdrawn at any time with effect for the future (see Section 9 of this data protection notice). Categories of personal data We only process data that is related to your application. This may include general data about your person (name, address, contact details, etc.), information about your professional qualifications and schooling, information about professional training and development, and, where applicable, other data that you submit to us in connection with your application. Sources of the data We process personal data that we receive from you in the course of contacting you and/or your application via our online form or by email, or that you provide to us verbally or in writing during a selection process. Recipients of the data Within our company, we only disclose your personal data to those persons who need this data to fulfill contractual and statutory obligations or to implement our legitimate interest. We transfer your personal data to companies that are in a client relationship with us only with your implicit or explicit consent, insofar as this is permitted within the purposes and legal bases set out in this privacy notice. Your personal data is processed on our behalf on the basis of data processing agreements pursuant to Article 28 GDPR. In these cases, we ensure that the processing of personal data is carried out in accordance with the provisions of the GDPR. In this context, the categories of recipients include internet service providers and providers of applicant management systems and software. Otherwise, data will only be disclosed to recipients outside the company insofar as legal provisions permit or require this, disclosure is necessary to fulfill legal obligations, or your consent has been obtained. Transfer to third countries A transfer to a third country is not intended. Duration of data storage We store your personal data for as long as it is necessary for the decision regarding your application. Your personal data and/or application documents will be deleted no later than six months after completion of the application procedure (e.g., notification of the rejection decision), unless longer storage is legally required or permitted. Beyond this, we store your personal data only insofar as this is required by law or, in the specific case, to assert, exercise or defend legal claims. If you have consented to longer storage of your personal data, we store it in accordance with your declaration of consent. After the application process, you may receive an invitation to join our fortalent pool. This enables us to consider you in the future for suitable vacancies during our candidate selection. If we have received your corresponding consent, we will store your application data in our talent pool in accordance with your consent and/or any future consents. Your rights Every data subject has the right of access pursuant to Article 15 GDPR, the right to rectification pursuant to Article 16 GDPR, the right to erasure pursuant to Article 17 GDPR, the right to restriction of processing pursuant to Article 18 GDPR, the right to be informed pursuant to Article 19 GDPR, and the right to data portability pursuant to Article 20 GDPR. In addition, you have the right to lodge a complaint with a data protection supervisory authority pursuant to Article 77 GDPR if you believe that the processing of your personal data is not lawful. This right to lodge a complaint exists without prejudice to any other administrative or judicial remedy. Where data processing is based on your consent, you are entitled under Article 7 GDPR to withdraw your consent to the use of your personal data at any time. Please note that the withdrawal only takes effect for the future; processing carried out prior to the withdrawal is not affected. Please also note that we may be required to retain certain data for a specific period of time in order to comply with legal requirements. Right to object If the processing of your personal data is carried out on the basis of Article 6(1)(f) GDPR to safeguard legitimate interests, you have the right under Article 21 GDPR to object to the processing of such data at any time for reasons arising from your particular situation. We will then no longer process this personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims. To exercise your rights, you may contact us using the contact details provided above. Necessity of providing personal data Providing your personal data as part of application processes is voluntary. However, we can only make a decision on establishing an employment relationship if you provide such personal data as is necessary to carry out the application process. Automated decision-making The decision on your application is not based solely on automated processing. Therefore, no automated decision is made on an individual basis within the meaning of Article 22 GDPR.