Who is responsible for processing your personal data?

staff24 Personalservice GmbH, Europaplatz 6, 3100 St. Pölten (hereinafter referred to as “we”) is the controller within the meaning of the EU General Data Protection Regulation (“GDPR”).

The protection of your personal data is of particular concern to us. Therefore, we strictly adhere to all legal requirements when collecting and processing your personal data, in particular the EU General Data Protection Regulation (hereinafter referred to as “GDPR”) and the Austrian Data Protection Act as amended.

In the following, we would like to explain the most important aspects and inform you about the scope and purpose of our data processing and your rights as a data subject:

For what purposes and on what legal basis do we process personal data?

1) Visit the website

We are responsible for data protection on our website and can be contacted at http://www.staff24.com.

We store the following data every time you visit and use our website:

• IP address
• Date and time of the request
• accessed subpage on our website
• Browser type and version
• Operating system
• Referrer URL

The purpose of this data processing is to maintain our website, in particular to localize and rectify errors more quickly, to monitor capacity utilization and, if necessary, to make adjustments or improvements.

If there is any personal reference at all, the data security to be guaranteed and the maintenance of the online presentation represent our legitimate interests within the meaning of Art. 6 para. 1 lit. f GDPR and thus the legal basis.

We also try to dispel data protection concerns by assuring you that the data (with the exception of the IP address) will only be stored for a limited period of time and that it is not possible to establish a personal reference from this data because the associated IP address is deleted or at least anonymized.

The IP address of your computer is also only stored for the time you use the website and then deleted or anonymized by shortening it. Longer storage may only be necessary in the event of hacking attacks or similar in order to ensure the functionality and security of our website.

Your data will not be transmitted to third parties.

2) Cookies

Our website uses so-called cookies. These are small text files that are stored on your end device with the help of the browser. They do not cause any damage. We use cookies to make our website more user-friendly. Some cookies remain stored on your device until you delete them. They enable us to recognize your browser on your next visit. The use and design of cookies is also in accordance with European and Austrian legislation (Art. 5 Para. 3 E-Privacy Directive; § 96 Para. 3 TKG 2003).

If you do not want this, you can set up your browser so that it informs you about the setting of cookies and you only allow this in individual cases. If you deactivate cookies, the functionality of our website may be restricted.

For third-party cookies (such as analysis tools) you will find instructions for the following browsers linked: Internet Explorer, Firefox, Chrome. Apple Safari blocks third-party cookies by default.

This website uses Google Analytics, a web analysis service of Google Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA (“Google”) on the legal basis of overriding legitimate interest (analysis of website use). We have concluded a data processing agreement with Google for this purpose. When our website is accessed, a connection to Google’s servers is established via software and data is transmitted to Google servers, some of which are located in the USA. Google Analytics also uses cookies to store information about the website user and to analyze the use of the website by website users. This website uses the function “Activation of IP anonymization”. As a result, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. According to Google, Google will use the data collected to evaluate the use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. Detailed information on the handling of user data by Google Analytics can be found in the privacy policy of Google or Google Analytics.

Deactivate Google Analytics

• You can generally prevent the collection of your user data by Google Analytics on all websites by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de
• You can prevent the collection of your user data by Google Analytics on this website only by clicking on the following link. An opt-out cookie will be set to prevent your data from being collected on future visits to this websiteClick here to be excluded from Google Analytics measurement. .

3) Applications

We process personal data about you for the purpose of your application for an employment relationship, insofar as this is necessary for the decision on the establishment of an employment relationship with us.

The provision of personal data is neither legally nor contractually required, nor are you obliged to provide personal data. However, the provision of personal data is necessary for the conclusion of a contract of employment with us. This means that if you do not provide us with any personal data when applying, we will not enter into an employment relationship with you.

If there is an employment relationship between you and us, you will receive more detailed information in a separate privacy policy for employees.

4) Unsuccessful applications

We look forward to receiving every application we receive. We process the following data from potential employees as part of the application management process:

• Master data (salutation, title, first name, surname)
• Date of birth
• Contact details (address, e-mail address, telephone number)
• Nationality, religion (if disclosed)
• Education, desired position, possible start of work
• Other information provided in the application (CV, certificates, photo, desired salary, etc.)

We process the application data for the purpose of inviting you to interviews, conducting an admission procedure and sending you an acceptance or rejection letter.

As a legal basis, we may rely on the implementation of pre-contractual measures pursuant to Art. 6 para. 1 lit. b GDPR as well as consent required for special category data (Art. 9 para. 2 lit. a GDPR) and our legitimate interests within the meaning of Art. 6 para. 1 lit. f GDPR.

We delete application documents of applicants with whom no employment relationship is established after 6 months from the date of notification of rejection. Any further retention of records requires your consent, which we will be happy to obtain if necessary.

You can revoke your consent at any time and without stating a reason by sending an e-mail to datenschutz(at)staff24.com. Where the processing is based solely on your consent and we are not legally obliged to retain the data, the relevant data will then be irrevocably deleted.

Application documents from applications that result in an employment relationship are placed in the personnel file. Further information on the subject of employee data protection is provided as part of the employment relationship

5) Data processing within business relationships

Insofar as we have to process data in the context of exercising our rights and obligations arising from a business relationship with you, these are usually

• Name, company, other business name
• Address and contact details (telephone, e-mail, fax, website)
• Contact persons and their contact details (telephone, e-mail)
• Correspondence (e-mails, meeting minutes, faxes, letters)
• Payment and bank details (for processing payments, etc.)
• Data from the fulfillment of our contractual obligations (e.g. delivery addresses, invoice data)
• Data on your online behavior and preferences (e.g. IP addresses, identification features of mobile devices, data on visits to our websites and apps);
• Advertising and sales data (e.g. information on consents granted or revoked).

If we have not received this data from you, it will be transmitted to us by your legal representatives, your legal expenses insurance, the court or other parties to the proceedings.

In addition, we process data that we legitimately receive from publicly accessible sources (e.g. company register, land register, register of associations, etc.). It is also conceivable that we may receive your data from contractual partners in order to fulfill our obligations to you. In this way, we may receive your data from our contractual partner who has previously collected it directly from you.

We only use the personal data you provide to the extent that your data is required to fulfill the respective purpose. The purpose of data processing is to establish contact on the one hand and to exercise or fulfill the rights and obligations arising from the business relationship, their fulfillment and administration and the handling of your requests on the other.

As a legal basis, we may refer to the implementation of pre-contractual measures and the necessity for contract fulfillment pursuant to Art. 6 para. 1 lit. b GDPR, our legal obligations and – if applicable – your consent and our legitimate interests within the meaning of Art. 6 para. 1 lit. f GDPR.

If necessary for the fulfillment of the contract, you can find further details on the data processing purposes in the relevant contract documents and terms and conditions.

We delete personal data that is processed for the execution of a contract after the contract has been fully executed and after the expiry of the statutory retention obligations that apply to us or after the expiry of the warranty and limitation periods or the duration of any legal disputes that may persist beyond this.

With regard to the statutory retention obligations, reference should be made in particular to:

• 7-year tax retention obligation according to BAO
• 3-year limitation period according to ABGB

(in individual cases where there are indications, 30 years in accordance with § 1489 ABGB)

We do not transfer your personal data to third parties, except

• We are legally obliged to do so,
• we are otherwise commissioned by you to do so or
• or the disclosure corresponds to the purpose of the data processing

In particular, it may be necessary to transmit data to public authorities, e.g. tax authorities, judicial and law enforcement authorities (e.g. police, public prosecutors, courts), lawyers and notaries as well as auditors.

Processors used by us may also receive data. These are, for example, companies in the categories of postal and printing service providers, IT service providers, sales partners, web service providers, credit agencies, debt collection service providers and other processors that we use in the context of order processing.

Internally, employees who are bound to confidentiality may process the data insofar as this is necessary to fulfill their contractual obligations and corresponds to the purpose of the data processing.

Any recipients are and will be obliged by us to comply with the provisions of data protection law.

Personal data is not transferred to third countries or international organizations.

The data is stored and backed up on our servers within the EEA.

Your data will not be used for automated decision-making.

6) Sending newsletters

If you have given us your e-mail address for this purpose, you will receive our regular newsletter. We only use your e-mail address for this purpose and only inform you about the latest news within our company and our own events. You can unsubscribe from a newsletter subscription and refuse to receive further newsletters by e-mail at any time in person or by sending a message to info(at)staff24.at.

We also use your data to send you information about new developments at our company or invitations to events.

These purposes have their legal basis on the one hand in your consent and on the other hand in our legitimate interest in a proper customer relationship within the meaning of Art. 6 para. 1 lit. f GDPR.

You can revoke your consent at any time and without stating a reason by sending an e-mail to datenschutz(at)staff24.com. Where the processing is based solely on your consent and we are not legally obliged to retain the data, the relevant data will then be irrevocably deleted, unless we are subject to statutory retention obligations or limitation periods are open or legal disputes are pending.

The data will not be transmitted to third parties.

7) Making contact

If you contact us using the form on the website or by e-mail, the data you provide will be stored by us for six months for the purpose of processing the inquiry and in the event of follow-up questions. We will not pass on this data without your consent.

What rights do you have?

As a data subject with us, you have the following data protection rights, depending on the individual situation, which you can exercise at any time by contacting us or our data protection officer using the details provided:

a) Information

You have the right to obtain information about your personal data processed by us and to request access to your personal data and/or copies of this data. This includes information about the purpose of use, the category of data used, its recipients and authorized persons and, if possible, the planned duration of data storage or, if this is not possible, the criteria for determining this duration;

b) Rectification, erasure or restriction of processing

You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

c) Right of objection

If your personal data is processed on the basis of Article 6(1)(f) GDPR, you have the right to object to the processing of this data at any time on grounds relating to your particular situation. We will then no longer process this personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.

d) Right of withdrawal

If the processing is based on consent, you have the right to withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. To do so, you can contact us or our data protection officer at any time using the details provided above.

e) Right to erasure

You have the right to obtain from us the erasure of personal data concerning you without undue delay and we are obliged to erase personal data without undue delay where one of the following grounds applies:

• The personal data are no longer necessary for the purposes for which they were collected or otherwise processed
• You object to the processing in accordance with point 8.c above and there are no overriding legitimate grounds for the processing.
• The personal data was processed unlawfully.
• The deletion of personal data is necessary to fulfill a legal obligation under Union law or the law of the Member States to which we are subject

This does not apply if the processing is necessary:

• for compliance with a legal obligation which requires processing by Union or Member State law to which we are subject.
• for the assertion, exercise or defense of legal claims.

f) Right to restriction of processing

You have the right to obtain from us restriction of processing where one of the following applies:

• the accuracy of the personal data is contested by you, for a period enabling us to verify the accuracy of the personal data,
• the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;
• we no longer need the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defense of legal claims, or
• have objected to processing pursuant to point 8.c above pending the verification whether our legitimate grounds override yours.

Where processing has been restricted under this point (e), such personal data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

If you have obtained a restriction of processing, we will inform you before the restriction is lifted.

g) Right of appeal

Furthermore, if you suspect violations of data protection regulations, in particular your rights as a data subject, you have the right to lodge a complaint with the Austrian Data Protection Authority, Wickenburggasse 8, 1080 Vienna, telephone: +43 1 521 52-25 69, e-mail: dsb(at)dsb.gv.at as the competent supervisory authority.

Identification

We would like to point out that we are obliged – irrespective of the processing of your applications – to establish your identity in order to prevent any data protection violations (e.g. incorrect information being provided to the wrong person). For this reason, we must go through an identity verification procedure with you for each application.

You can reach us using the following contact details:

staff24 Personalservice GmbH

Europaplatz 6, 3100 St. Pölten

E-mail: datenschutz(at)staff24.com
Phone: +43 2742 307 08 – 0

Data Protection Officer

For all questions relating to the processing of your personal data and the exercise of your rights under the GDPR, please consult our data protection officer, who can be reached at +43 2742 307 08 – 0 or datenschutz(at)staff24.com.