K industries Group
Data privacy statement
Supplemental information for online presence (website)
The general Data protection information is intended to provide you with an overview of how we process your personal data and the rights you have under data protection law. What data in particular are processed in the context of our “Online presence (website)” and in what manner they are used is specified additionally, more concretely and as a supplement to the general information by the following points. Moreover, when using the application portal, the data protection information “Supplemental information for applicants” is also of relevance for you.
Data controller and contact data
See the general data protection information.
What sources and data do we use?
The job page uses “cookies” to individually arrange and optimize the presentation for your online experience. A cookie is a text file which is either stored temporarily in your computer’s working memory (“session cookie”) or on your hard drive (“permanent cookie”). Cookies are not used to run programs or to load viruses to your computer. Cookies are allocated exclusively to you and your computer and can only be read by a webserver of the domain that created this specific cookie.
Our Internet provider collects data such as date, time, history of opened pages, anonymized IP address, browser, OS, etc. For this purpose, cookies are also used with your consent which enable an analysis of the use of the website by its users.
In this processing context, we collect data exclusively from directly affected persons (data subjects).
Why do we process your data (purpose of processing) and on what legal grounds?
We process personal data in compliance with the provisions of the EU General Data Protection Regulation (GDPR) in addition to the Austrian Data Protection Act and the German Federal Data Protection Act (BDSG):
a. For the fulfilment of contractual obligations (Art. 6(1) point (b) GDPR):
No special processing is planned in this context.
b. In the context of legitimate interests (Art. 6(1) point (f) GDPR):
To the extent necessary, we process your data beyond the actual fulfilment of the contract in order to safeguard our legitimate interests or those of third parties.
In particular:
- Web analysis of the visits to the website to improve our offer and our web presence,
- exercise of legal claims and defence in the case of legal disputes,
- safeguarding of information security and the company’s business operations
- the prevention and investigation of criminal acts.
c. Based on your consent (Art. 6(1) point (a) GDPR):
Cookies do not gather any personal data. You have the option of accepting or rejecting cookies at all times. Most web browsers accept cookies automatically. As a rule, however, you can change your browser settings so that all cookies are rejected, if you so wish. As an alternative to this, you can set your browser so that you are warned every time when a cookie is to be set so that you can accept or reject cookies selectively. For technical reasons, parts of the application portal can only be used if cookies are accepted. If you do not want this, you can also send us your application by email or through the post as an alternative.
Consent that has been granted can be withdrawn at any time.This also applies for the withdrawal of declarations of consent which were granted to us before the GDPR went into effect. The withdrawal of consent has an effect for the future only and does not affect the legality of the data processing which took place up to the time of the withdrawal.
d. Based on legal obligations (Art. 6(1) point (c) GDPR) or in the public interest (Art. 6(1) point (e) GDPR):
No special processing is planned in this context.
Who gets my data?
Once you have applied for a specific position, only the personnel departments within the group and the department that placed the advertisement obtain access to your data. If you have applied on your own initiative, your particulars will be made accessible to those departments in which current vacant positions clearly correspond to your applicant profile.
It is also possible that service providers we engage in the context of order-processing circumstances and vicarious agents could process data for these purposes provided that they comply with the data protection regulations. These include especially:
- Advertising agency and technical administrator
- Technical host of the online presence
- Email service provider: Microsoft (when using email links, forms and the application portal)
Further data recipients can be those offices for which you have granted us consent for the transfer of data or to which we are entitled to transfer personal data based on a legitimate interest.
Are data transferred to a third country or to an international organization?
The transfer of data to offices in countries outside of the European Union (referred to as third countries) takes place inasmuch as you have granted us your consent.
In the event that this should be required in individual cases, your personal data are transferred in compliance with the European level of data protection.
Furthermore, a transfer to offices in third countries is envisioned in the following cases:
The group uses Office 365 Cloud Services by Microsoft for its communication and collaboration services. The storage (data at rest) of personal data, e.g. in emails, Sharepoint, etc. takes place as a matter of principle within the European Union, whereby for support purposes (Azure Active Directory) and maintenance services, data can be transferred to other Microsoft locations outside of the EU. In all cases, the contracts and locations for these services are subject to the EU standard contractual clauses (as per Art. 29 Working Party) and in the case of the USA, alternatively, to the U.S.-EU Privacy Shield treaty. The information on the guarantees is available for public viewing on the Microsoft website (and is stored alternatively by the data controller). No transfer of personal data from Microsoft to other companies takes place.
With the consent of the data subject or based on legal provisions, especially for the purpose of investigation of criminal offences as well as in the context of a legitimate interest, in individual cases, personal data may be transferred subject to compliance with the data protection level of the European Union.
How long are my data stored?
We process your personal data for as long as a corresponding basis for processing exists and there is a legitimate interest in the continued processing. Once the data are no longer required, they are erased regularly.
The erasure periods for the aforementioned processing are determined as follows:
Personal data for statistics are promptly anonymized.
What data protection rights do I have?
Every data subject has a right to:
- Information according to Article 15 GDPR
- Correction according to Article 16 GDPR
- Erasure according to Article 17 GDPR
- Restriction of processing according to Article 18 GDPR
- Objection according to Article 21 GDPR
- Data portability according to Article 20 GDPR
- Make an appeal to a responsible data protection supervisory authority (Article 77 GDPR in conjunction with Par. 19 Federal Data Protection Act (BDSG) in Germany)
With regard to the rights to information and erasure, the restrictions as per pars. 34 and 35 BDSG apply for our German companies.
In the interest of protecting personal data, a data subject must prove their identity to us in a suitable manner (e.g. with a copy of a personal identity card) to exercise their rights. Moreover, in the case of obviously unfounded requests or excessively frequent repetitions, we can demand a reasonable fee or refuse to take action. (Art. 12(5) GDPR)
Consent you have granted to the processing of personal data can be withdrawn at any time.This also applies for the withdrawal of declarations of consent which were granted to us before the GDPR went into effect, meaning before 25 May 2018. Please bear in mind that the withdrawal of consent only takes effect for the future. Processing that took place before the withdrawal is not affected. (Please also see the last section.)
Am I obligated to provide data?
You can use our website anonymously without providing any personal data (exception: application portal). If you do not want this, you can also send us your application by email or through the post as an alternative.
Does profiling take place?
In this processing context, we do not conduct any automated processing of personal data to create profiles.
To what extent does automated decision making take place?
As a matter principle, we do not use any fully automated decision making processes in terms of Article 22 GDPR in this processing context.
Information concerning your right of objection according to Article 21 GDPR
Right of objection in individual cases
For reasons which arise from your special situation, you have the right to object at any time to the processing of personal data concerning you which is based on Article 6(1) point (e) GDPR (data processing in the public interest) or Article 6(1) point (f) GDPR (data processing based on a legitimate interest); this also applies for profiling in terms of Article 4(4) GDPR which is based on this provision.
If you object, we will no longer process your personal data except if we are able to adduce compulsory legitimate grounds for the processing which outweigh your interests, rights and freedoms or the processing serves the purpose of enforcing, exercising or defending legal claims.
Right of objection to processing of data for purposes of direct advertising
In individual cases, we process your personal data in order to engage in direct advertising. You have the right to object at any time to the processing of personal data concerning you for the purpose of advertising of this nature; this also applies for profiling inasmuch as it is connected with such direct advertising.
If you object to the processing for the purpose of direct advertising, we will no longer process your personal data for this purpose.
Addressee for submitting an objection
The objection can be submitted without form requirements using the subject line “Objection” and including your name, your address and your date of birth and should be addressed to:
K industries GmbH
Krestastraße 1, 9433 St. Andrä, Austria
Tel.: +43 4358 3811-0
E-Mail: info@k-industries.at