Data protection

Data protection information according to Art 13 and Art 14 General Data Protection Regulation (GDPR)

We are pleased that you would like to apply for a job at CANCOM Austria AG or one of the CANCOM Group companies. Transparency and trustworthy handling of your personal data is an important basis for good cooperation. Therefore, we attach great importance to the transparent processing of your personal data and would like to inform you in this privacy policy about our handling of your data and your rights in this context.

CANCOM Austria AG has implemented the career page for your application. On this platform, you have the option of entering your application data using the eRecruiter GmbH tool. By application we mean your application for a position at CANCOM Austria AG or one of the group companies of the CANCOM Group. CANCOM Austria AG is entrusted with the management of incoming applications and the organization of the application process via this platform centrally for the CANCOM Group. The respective application will then be handled in detail by the company for which you have applied.

1. Name and address of the controller

The persons responsible for processing your personal data for the CANCOM Group are CANCOM Austria AG and the respective group company of the CANCOM Group (if you have applied to a specific company).

The contact details of the data protection officer or contact person for data protection issues for the respective companies are

CANCOM Austria AG
c/o Data Protection Officer
Wienerbergstraße 53, 1120 Vienna, Austria
T +43 50 822 0
F +43 50 822 9995
datenschutz@cancom.com

CANCOM Converged Services GmbH
c/o Data Privacy Manager
Wolfganggasse 58-60, 1120 Vienna, Austria
ccs.privacy@cancom.com

K-Businesscom GmbH
c/o Data Protection Officer
Sperberweg 8, 41468 Neuss (Düsseldorf), Germany
T + +49 2131 9526 0
datenschutz-kbc-de@k-business.com

2. Personal data

"Personal data" means any information relating to natural persons, either directly or indirectly.

3. Data processing "Application process" - Creating the applicant profile

3.1. scope of the processing of personal data

You can enter the following data when creating an applicant profile:

Salutation, title, first name, surname, e-mail address, telephone number, date of birth, address (street, house number, zip code, city, country), nationality

There is also a free field in the applicant profile where you can upload various documents (CV, photo, additional documents).

You are free to decide which data you enter in the fields provided in the applicant profile and which documents you upload. In addition, you alone are responsible for managing the data and therefore for updating and/or deleting it.

CANCOM Austria AG will only store and host this data on your behalf in its own IT infrastructure.

3.2 Legal basis for the processing of personal data

The legal basis for the processing of applicant data is Art. 6 para. 1 lit. b GDPR and therefore the processing for the fulfillment of a contract or for the implementation of pre-contractual measures. When you registered via https://jobs.kapsch.net/ and created an applicant profile, you placed a corresponding order with us to process your applicant data in our IT infrastructure.

The temporary storage of technical login information is necessary to ensure the security and availability of the IT infrastructure and therefore to be able to fulfill the order accordingly, which is why the legal basis for the processing is our legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

3.3 Purpose of the processing of personal data

The data that you enter in the applicant profile after your registration will be stored by us on our server within our IT infrastructure. The data entered in your applicant profile will be processed by CANCOM Austria AG exclusively for the provision of the commissioned storage and hosting services. CANCOM Austria AG will not process this data for any other purpose or in its own interest and, in particular, will not view or correct it or delete it before the retention period expires.

As part of the contract, we will ensure that you can access and manage your data as long as you do not revoke the contract with us. You can manage the data in the applicant profile yourself and therefore, for example, update or delete it.

We collect the technical information and log data in order to ensure the functionality and IT security of the applicant platform.

3.4 Duration of storage

As soon as you request the deletion of your applicant profile, the data you have uploaded there will also be deleted. You also have the option of deleting or updating all data and documents uploaded there individually.

We store the technical information and log data for a period of 3 weeks.

3.5 Recipients of data

4. Data processing "application process" - handling

4.1 Scope of the processing of personal data

Certain personal data that we require for the creation of the applicant profile and the further processing of your application, namely Title, first name(s), last name(s), e-mail address, telephone number, address (street, house number, postal code, city, country), nationality, and password, are mandatory fields.

The provision of this data by you is voluntary; however, if you do not provide this data marked as mandatory, we may not be able to process your application, as certain personal details are required to assess your suitability for a position.

All other details that are not marked as mandatory fields, namely title (first and last), date of birth, additional documents (e.g. photo) and profile data from LinkedIn can be completed voluntarily and/or you can upload corresponding documents. We and the respective Group company for which you have applied will then also treat any particularly sensitive data provided by you (e.g. religious confession within the CV) and all data provided voluntarily by you for the same purpose as the mandatory information.

We automatically process information about the login to your user account and log data (device, program, browser, IP address, date, time, session ID) as well as information about the applicant source.

The scope of data collection may need to be assessed according to the position to be filled. If, for example, the position you are seeking is associated with the assumption of increased personnel and/or financial responsibility, additional data may be collected (sending/conducting a test for the purpose of creating an analysis and, if necessary, a personality profile). In these cases, an application outside the eRecruiter is used (Metis products from Master Human Resources Consulting GmbH).

4.2 Legal basis for the processing of personal data

The legal basis for the processing of applicant data is Art. 6 para. 1 lit. b GDPR and therefore the processing for the fulfillment of a contract or for the implementation of pre-contractual measures. By applying, you make a corresponding request to us to process your applicant data as part of the application, which requires the data processing described.

As far as the processing of the voluntarily provided (also particularly sensitive) data is concerned, we base the processing on your express consent within the meaning of Art. 6 para. 1 lit. a in conjunction with Art. 9 para. 2 lit. a GDPR, which you have given in the course of the online form.

In the case of an unsolicited application and therefore without reference to a specific advertised position, we will also only process your data with your consent (Art. 6 para. 1 lit. a GDPR).

You can revoke your consent at any time with effect for the future and without giving reasons verbally, in writing or electronically to CANCOM Austria AG or the respective Group company. The lawfulness of the processing of your data up to the time of revocation remains unaffected.

4.3 Purpose of the processing of personal data

The support and organization of the platform is carried out by CANCOM Austria AG. The further handling of the data in the application process is divided between the respective group company to which you have applied and CANCOM Austria AG as a service provider in personnel matters in the CANCOM Group.

The data entered in your applicant profile via the platform will be used by CANCOM Austria AG exclusively in the event of your application for a position for the purpose of assignment to the respective Group company and forwarding to it. If you upload your data in the applicant profile without applying for a job at the same time, we will only organize the storage of the data in the applicant profile for you, but will not process the data otherwise.

If you apply to CANCOM Austria AG or another CANCOM Group company, your applicant data will be processed by the respective company to handle your application and consider it in the application process and to decide whether to fill the position for which you have applied (for details, see point 5.).

In the case of an unsolicited application, CANCOM Austria AG will store your applicant data in an applicant pool for a period of 6 or 24 months in accordance with your consent and pass it on to the respective Group company if a position becomes vacant.

4.4 Duration of storage

Once we have responded to your application, we will process your data for the duration of the application process. If the application process ends with your recruitment by a Group company, by rejection of our recruitment offer, by withdrawal of your application or by rejection on our part, we will store your applicant data for 6 or 24 months in accordance with your consent after the end of the month in which the application process ends for one of the aforementioned reasons. After this period has expired, we will irretrievably delete your data. The period of six months results from the defense against any claims under the Equal Treatment Act. If you have given your consent to the processing of certain data, we will delete your data earlier if necessary upon revocation of your consent.

In connection with the sending/execution of a test for the purpose of creating an analysis and, if applicable, a personality profile, your data will be stored for a period of 36 months in accordance with your consent. This is due to the intended non-repeatability and may facilitate a possible future application for similar positions. After this period has expired, we will irretrievably delete your data. The data will be deleted earlier if you withdraw your consent.

If the application process results in your recruitment, we will transfer your relevant applicant data to your personnel file.

You can revoke your consent at any time with effect for the future and without giving reasons verbally, in writing or electronically to CANCOM Austria AG or the respective group company.

As far as the data managed by you in the applicant profile without you having sent us a specific application is concerned, we do not store this separately. As soon as you request the deletion of your applicant profile, the data you have uploaded there will also be deleted. You also have the option of deleting or updating all data and documents uploaded there individually.

4.5 Recipients of data

The applicant platform is operated by CANCOM Austria AG. In the course of this, CANCOM Austria AG uses eRecruiter GmbH as a processor for IT services, which may therefore also have access to the applicants' data in order to be able to provide the IT services. CANCOM Austria AG also uses products from Master Human Resources Consulting GmbH (MHRC) via Metis. This means that responsible specialists as well as technically and organizationally qualified and authorized employees of MHRC's technical service providers have access to your data in order to be able to provide their services.

Your data will only be passed on by CANCOM Austria AG to the respective group company to which you have applied. Your application will only be made available to other Group companies with your consent.

As far as the transfer of your applicant data to a group company outside the EU/EEA is concerned, we would like to draw your attention to the fact that no data is currently transferred to third countries.

The respective group company has commissioned CANCOM Austria AG with the provision of personnel services and therefore also with advice on recruiting. CANCOM Austria AG therefore uses the applicant data according to the order and instructions of the respective Group company that has advertised a position, or in the case of an unsolicited application on behalf of CANCOM Austria AG. The place of data storage and hosting of the data is Vienna.

5. Data processing "application process" - applicant pool

5.1 Scope of the processing of personal data

We store your applicant data (see point 3.1.) in an applicant pool (eRecruiter), in which CANCOM Austria AG can search for suitable applications in the event of a vacancy within one of the CANCOM Group companies.

5.2 Legal basis for the processing of personal data

The legal basis for processing in this case is Art. 6 para. 1 lit. a GDPR and therefore your consent.

5.3 Purpose of the processing of personal data

If you separately consent to your applicant data being kept on record in the applicant pool, it is necessary to store your applicant data in order to be able to inform you about a suitable vacancy in one of the Group companies at a later date.

CANCOM Austria AG will forward your applicant data to the respective group company where a suitable position has been found, which will then contact you.

5.4 Duration of storage

We store your data in an applicant pool for a period of 6 or 24 months in accordance with your consent, unless you revoke your consent at an earlier date.

You can revoke this consent at any time with effect for the future and without giving reasons verbally, in writing or electronically to CANCOM Austria AG.

5.5 Recipients of data

We will pass on your applicant data to the respective Group company if a vacancy arises with your consent. Otherwise your data will not be passed on.

As far as the transfer of your applicant data to a Group company outside the EU/EEA is concerned, we would like to draw your attention to the fact that no data is currently transferred to third countries.

6. Your rights

6.1 Right to information

In accordance with Art. 15 GDPR, you have the right to obtain information from us about all data concerning you that is processed by us. Specifically, you can request the following information from us

The purposes for which the personal data is processed;
The categories of personal data that are processed;
The recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed;
The planned duration of the storage of the personal data concerning you or, if specific information on this is not possible, criteria for determining the storage period;
The existence of a right to rectification or erasure of personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing
The existence of a right to lodge a complaint with a supervisory authority;
All available information about the origin of the data if the personal data is not collected from the data subject
The existence of automated decision-making, including profiling, referred to in Art. 22 (1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

You have the right to request information as to whether the personal data concerning you is transferred to a third country or to an international organization. In this context, you may request to be informed of the appropriate safeguards pursuant to Art. 46 GDPR in connection with the transfer.

6.2 Right to rectification and right to restriction of processing

If we process data about you that is incorrect or incomplete, you have the right to rectification and the right to restriction of processing in accordance with Art. 16 GDPR. Under certain circumstances, for example, if the accuracy of data is disputed until the accuracy has been verified, you may request that the processing of data be restricted so that it may only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest.

6.3 Right to data portability

You may request that CANCOM Austria AG send you - or, if technically feasible, a third party designated by you - a copy of your data in a structured, commonly used and machine-readable format. You also have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where

the processing is based on consent pursuant to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR or on a contract pursuant to Art. 6 para. 1 lit. b GDPR, and
the processing is carried out by automated means.

in exercising this right, you also have the right to obtain that the personal data concerning you be transferred directly by us to another controller, insofar as this is technically feasible. The freedoms and rights of other persons must not be affected by this.

6.4 Right to erasure

You have the right to erasure of data under certain circumstances, for example if it is not processed in accordance with data protection requirements. The so-called "right to be forgotten" does not apply to you because CANCOM Austria AG does not make your personal data public under any circumstances.

If you have asserted the right to rectification, erasure or restriction of processing against CANCOM Austria AG, we are obliged to notify all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort.

6.5 Right to object

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) GDPR.

In this case, CANCOM Austria AG will no longer process the personal data concerning you unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.

6.6 Right to revoke the declaration of consent under data protection law

You have the right to withdraw your declaration of consent under data protection law at any time without giving reasons. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

7. Supervisory authority

Notwithstanding the possibility of a complaint to the regional court pursuant to Section 29 (2) of the Data Protection Act 2018 and any other legal remedies, you have the right to lodge a complaint with the national supervisory authority of your place of residence if unlawful processing of personal data is assumed. In Austria, the data protection authority is responsible.

8. Updating and amendment

Parts of this privacy policy may be changed or updated by us for technical or legal reasons without prior notification. Please always check the current privacy policy to ensure that you are up to date with any changes or updates.