Data Protection Policy

PRIVACY POLICY FOR CANDIDATES

 

1. PURPOSE AND DEFINITION

This data protection policy for the candidates of TTTech Computertechnik AG (“We”) is intended to describe the way in which the personal data of our candidates (“You”) is collected, processed, and protected.

Personal Data is any information that relates to an identified or identifiable natural person. This can include direct ‘identifiers’ such as a name, or pieces of information which, when combined with other pieces of information (such as an IP-address) can lead to the identification of an individual.

 

2. COLLECTION OF PERSONAL DATA BY THE COMPANY

We collect Your personal data through different sources:

1. Personal Data provided by You:

• Master-, address-, and contact data: name, surname, date of birth, place of birth, gender, family status, dependents; postal address, email address, (mobile) telephone number;
• Identification data: personal identification (such as an ID-card, driver’s licence, and passport), social security number and/or private insurance number, photograph, bank details;
• Personal-, academic-, and professional characteristics, employment details, details on work life;
• Data on the work/immigration permit (nationality, residence data or work permit, as well as other documentation necessary for visa management).

2.  Data which We may collect from other sources:

• Results of skill tests, job performance or references, professional qualifications, information obtained from social networks.

3. Export Control Checks performed by us:

• We are obliged to observe certain national-, EU-, and international regulations and statutes with regards to export control. These regulations require us to regularly perform standard security checks by matching the candidate‘s personal data (name, nationality and birth date) with specific embargo lists and others provided by the European and US-American governmental authorities. The processing of your data for this specific purpose before any possible employment therefore represents a legal requirement for us and is furthermore justified by the company’s legitimate interests as well as by public interest.

 

3. BASIS AND SCOPE OF DATA PROCESSING

1. Because you have provided your consent (Article 6(1)(a) GDPR)

1. By applying for a position within our company, you have given your consent to let us process your personal data to evaluate your suitability for the position you applied for.
   
    
2. We will separately ask for your consent if your application is not approved but we intend to retain your application to (1) keep you informed of the different vacant positions within our organisation, and (2) share your CV with other companies within the TTTech Group (https://www.tttech.com/company/contact/) to review whether you are a suitable candidate to fill open positions within these other companies. In such an instance, we will contact you via your listed email address, and specifically ask for your consent to process your personal data for the purposes mentioned above. You can give your consent by replying to this email.

2. Because processing is necessary in order to take steps at your request prior to entering into a contract (Article 6(1)(b) GDPR)

If you are selected for a position, we will process your personal data for the (pre-contractual) preparation of an employment contract.

3. Because processing is necessary to comply with legal obligations (Article 6(1)(c) GDPR

Likewise, if you are selected for a position, we process your personal data in order to be able to comply several obligations resulting from, inter alia, labour-, social security-, and tax law.

4. Because processing is necessary to both fulfil our legitimate interest, and to comply with legal obligations (Article 6(1)(f) GDPR and Article 6(1)(c) GDPR)

Lastly, we perform standard security checks by matching Your personal data (name, nationality, and birth date) with specific embargo lists and others provided by the European and US-American governmental authorities, to comply with Export Control Regulations, and to fulfil our legitimate (security) interests.

 

4. EMPLOYEES RIGHTS REGARDING PERSONAL DATA

You may exercise the following rights:

1. Right of Access (Article 15 GDPR): You have the right to obtain confirmation as to whether or not personal data are being processed, and, where that is the case, access to the information listed in the provision.
2. Right to Rectification (Article 16 GDPR): You have the right to rectification of any inaccurate personal data concerning you, as well as to have incomplete personal data completed.
3. Right to Erasure (Article 17 GDPR): You have the right to have your personal data erased when, among other reasons (as listed in the provision), it is no longer needed for the purpose for which it was collected.
4. Right to restriction of processing (Article 18 GDPR): You have the right to obtain from us restriction of processing if one of the grounds, listed in the provision, applies.
5. Right to data portability (Article 20 GDPR): You have right to receive the personal data in a structured, commonly used and machine-readable format, as well as to have that personal data transmitted to another controller without hindrance from us, in the cases listed in the provision.
6. Right to object (Article 21 GDPR): You have the right to object to the processing of your personal data if we base this processing because it is necessary to fulfil our legitimate interest, or to fulfil a public interest. We shall no longer process your personal data unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defense of legal claims.
7. Right not to be subject to a decision based solely on automated processing (Article 22 GDPR): We don’t base decisions solely on automatic processing and/or profiling.

You may exercise your rights by contacting us via datenschutz@tttech.com.

Lastly, you may launch a complaint with your local data protection authority if you consider that we have violated the GDPR. We are governed by the Austrian data protection authority (“Datenschutzbehörde”, or “DSB”) You can contact the authority at dsb@dsb.gv.at.  

 

5. DISCLOSURES TO THIRD PARTIES

We may disclose your personal data to third parties in accordance with the applicability of the legal bases mentioned in section 3 to the following third parties:

• Other companies within the TTTech Group (https://www.tttech.com/company/contact/)
• Our human resources suppliers. Among other reasons, we may use some suppliers to evaluate your skills and to support us in our interviewing and contractual processes. These companies have entered into data protection agreements as data processors, warranting that the personal data will be processed only for the purposes listed in Section 3, and in accordance with the applicable legislation.
• To entities and organizations for the management of the employment relationship: Financial entities (Banks, Tax Administration, etc.), Insurance Entities, Social Security Organizations, and any relevant Public Administration.
• To any judicial authorities when necessary.

 

6. INTERNATIONAL DATA TRANSFERS

We may transfer your personal data to third countries which may not provide an adequate level of protection of personal data under European Union law, for the fulfilment of our processing purposes. For such transfers, we have implemented the European Commission’s Standard Contractual Clauses (2021/914) as an appropriate safeguard pursuant to Article 46(2(c) GDPR to ensure an adequate level of protection.

 

7. PERSONAL DATA RETENTION

• If you are selected for the position you applied for: your personal data will be stored for the duration of your employment contract, plus seven (7) years to comply with several legal obligations resulting from tax- (§ 132 (1) BAO), social security- (§ 68 ASVG), and accounting law (§ 212 UGB). Lastly, some personal data will be stored for a period of 30 years in order to be able to issue a reference pursuant to § 1163, in conjunction with § 1478 ABGB.
• If you are not selected for the position you applied for: your personal data will be stored for up to seven (7) months for the purpose of defending any legal claims for discrimination which can follow from § 17(1) Z 1 GlBG, § 26(1) GlBG und § 29 GlBG, and, subsequently, will be deleted.
• If you are not selected for a position you applied for, but you have consented to our intention to (1) keep you informed of the different vacant positions within our organisation, and (2) share your CV with other companies within the TTTech Group, your personal data will be stored for five (5) years, unless you revoke your consent during that period.
  
   

8. AMMENDMENTS

We may amend this policy from time to time. We shall publish any changes to this Policy on this Website (https://www.tttech.com)

 

9. OTHER INFORMATION

You may contact us at any time by sending an email to datenschutz@tttech.com.