Data Protection

To cut a long story short: we treat your personal data in confidence and conform with the statutory data protection regulations.

Data Protection Declaration Talentor Austria GmbH

We would now like to give you some information regarding the personal data that we collect in the event of you visiting our website; why we require them, what we use them for, and who you can contact should you have any questions.

1. Who is this data protection declaration aimed at?

This declaration is aimed at people (hereinafter also referred to as users) who would like to use our online offering when visiting our website.

This data protection declaration explains the type, scope, and purpose of the processing of personal data within our online offer and the associated websites, functions, and content (hereinafter jointly referred to as "online offer" or "website"). The data protection declaration applies regardless of the domains, systems, platforms, and devices used (e.g., desktop or mobile) on which the online offer is operated.

For the terms used, such as "personal data" or their "processing", we refer to the definitions in Article 4 of the General Data Protection Regulation (GDPR).
The term "user" includes all categories of persons affected by data processing who use our homepage. This includes our candidates, customers, business partners, interested parties and other visitors to our online offering.

We only process the personal data of users in compliance with the relevant data protection regulations. This means that user data will only be processed if there is legal permission. I.e., in particular if data processing is necessary or required by law to provide our contractual services (e.g. order processing) and online services or if the user has consented.

2. Who are we?

We are Talentor Austria GmbH (hereafter referred to as “Talentor”) with a legal domicile in Vienna. We are an executive search company in Austria with international franchise partners. We specialize in searching for and advising executives in the top to middle management.

Talentor Austria GmbH
Managing Directors: Thomas Zembacher
Address: Seilerstätte 22/7-8, 1010 Wien / Vienna, Austria
Telefon: +43 1 523 82 07 710
E-Mail: office.austria@talentor.com

We have partners in the following locations who are themselves responsible for meeting GDPR regulations in their legal entities.

Companies that are affiliated with Talentor

Affiliated companies are the owner companies Talentor International GmbH and epunkt GmbH as well as the Talentor franchise partners. These companies are granted occasion-related access to your data for the placement of national and international executive positions.

As a candidate, you can assert your data protection rights (see Clause 9) centrally with the Talentor data protection officer at dataprotection.austria@talentor.com. All of the affiliated companies are subjected to confidentiality and adherence to the applicable data protection provisions obligation.

3. What data security measures do we take?

We take organizational, contractual, and technical security measures according to the state of the art to ensure that the provisions of the data protection laws are observed and to protect the data processed by us against accidental or intentional manipulation, loss, destruction or against access by unauthorized persons.

The security measures include in particular the encrypted transmission of data between your browser and our server.

4. To whom and on what legal basis will your data be passed on?

Data will only be passed on to third parties within the framework of legal requirements. We only pass on user data to third parties if this is necessary for contractual purposes, for example on the basis of Article 6 (1) (b) GDPR, on the basis of legitimate interests in accordance with Article 6 (1) (f) GDPR for the economical and effective operation of our business operations or on the basis of your consent according to Art. 6 (1) (a).

If we use subcontractors to provide our services, we take appropriate legal precautions and appropriate technical and organizational measures to ensure the protection of personal data in accordance with the relevant statutory provisions.

If, within the scope of this data protection declaration, content, tools or other means from other providers (hereinafter jointly referred to as "third-party providers") are used whose headquarters are in a third country, it can be assumed that data will be processed and transferred to the countries in which the third-party providers have their registered office. Third countries are countries in which the GDPR is not directly applicable law, i.e., countries outside the EU or the European Economic Area. Data is transferred to third countries either if there is an appropriate level of data protection, the user has given his or her consent or other legal permission has been granted.

Contact
When contacting us (via contact form or e-mail), the information provided by the user will be processed to handle the contact request and its processing in accordance with Article 6 (1) (b) GDPR.

Collection of access data and log files
Based on your consent to cookies, we collect data about every access to the server on which this service is located (so-called server log files). The access data includes the name of the accessed website, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address and the requesting provider. Log file information is stored on the Craft servers for 14 days for security reasons (e.g. to investigate misuse or fraud) and then deleted. Data whose further storage is required for evidence purposes are excluded from deletion until the respective incident has been finally clarified.

5. Cookies and reach measurement

Cookies are information that is transmitted from our web server or third-party web servers to the user's web browser and stored there for later retrieval. Cookies can be small files or other types of information storage.

We use "session cookies", which are only stored for the duration of the current visit to our online presence (e.g. to be able to save your login status on the candidate portal). A randomly generated unique identification number, a so-called session ID, is stored in a session cookie. A cookie also contains information about its origin and how long it is stored. These cookies cannot store any other data. Session cookies are deleted when you have finished using our online offer and e.g. log out or close your browser.

We have summarized all the cookies we use for you here:

If you do not want cookies to be stored on your computer, we ask you to deactivate the corresponding option in the system settings of your browser. Saved cookies can be deleted in the system settings of the browser. However, the exclusion of cookies can lead to functional restrictions of our online offer.

You can also object to the use of cookies, which are used to measure reach and for advertising purposes, via the deactivation page of the network advertising initiative (http://optout.networkadvertising.org/) and also the US website (http://www.aboutads.info/choices) or the European website (http://www.youronlinechoices.com/uk/your-ad-choices/).

5.1 Friendly Analytics

We use Friendly Analytics to measure the success and reach of our website. Friendly Analytics is a service of the Swiss company Friendly GmbH, which uses the free open-source software Matomo without processing or storing personal data and without cookies. Information about the type, scope and purpose of data processing can be found in the data protection declaration of Friendly Analytics.

5.2 Google Analytics

Based on your consent to cookies, we use Google Analytics, a web analysis service provided by Google Inc. ("Google"). Google uses cookies. The information generated by the cookie about the use of the online offer by the user is usually transmitted to a Google server in the USA and stored there.

Google will use this information on our behalf to evaluate the use of our online offer by users, to compile reports on the activities within this online offer and to provide us with other services related to the use of this online offer and internet usage. Pseudonymous user profiles can be created from the processed data.

We use Google Analytics to only show the ads placed as part of the advertising services of Google and its partners to those users who have shown an interest in our online offer or who have certain characteristics (e.g. interest in certain topics or products, which are determined based on the websites visited) that we transmit to Google (so-called “remarketing” or “Google Analytics audiences”). With the help of remarketing audiences, we also want to ensure that our ads match the potential interests of users and are not annoying.

We only use Google Analytics with activated IP anonymization. This means that the IP address of the user is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there.

The IP address transmitted by your browser will not be merged with other Google data. You can prevent the storage of cookies by setting your browser software accordingly; You can also prevent Google from collecting the data generated by the cookie and relating to your use of the online offer and from processing this data by Google by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

You can find more information on data use by Google, setting and objection options on the Google website: https://www.google.com/intl/de... ("Data use by Google when you use the websites of our partners or apps"), http://www.google.com/policies... ("Use of data for advertising purposes"), http://www.google.de/settings/... ("Manage information that Google uses to offer you to offer displayed advertising").

5.3 Google-Re/Marketing-Services

Based on your cookie consent, we use the marketing and remarketing services (“Google Marketing Services” for short) of Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA, (“Google”).

Google marketing services allow us to target ads for and on our website to only show you ads that potentially match your interests. For example, if you are shown ads for products you are interested in on other websites, this is referred to as "remarketing". For these purposes, when our and other websites on which Google Marketing Services are active are accessed, Google immediately executes a code and so-called (re)marketing tags (invisible graphics or codes, also known as "web beacons") are integrated into the website. With their help, an individual cookie, i.e. a small file, is stored on your device (comparable technologies can also be used instead of cookies). The cookies can be set by various domains, including google.com, doubleclick.net, invitationmedia.com, admeld.com, googlesyndication.com or googleadservices.com. This file notes which websites you have visited, what content you are interested in, and which offers you have clicked on, as well as technical information on the browser and operating system, referring websites, visiting times and other information on the use of the online offer. In addition, your IP address is recorded, whereby we inform you within the framework of Google Analytics that the IP address is shortened within member states of the European Union or in other contracting states of the Agreement on the European Economic Area and only in exceptional cases is transferred completely to Google servers in the USA and shortened there.

The IP address will not be merged with your data within other Google offers. Google may link the above information to such information from other sources. If you then visit other websites, you may be shown advertisements tailored to your interests.

Your data will be processed pseudonymously as part of Google Marketing Services. This means that Google, for example, does not store and process the name or e-mail address, but processes the relevant data in the context of cookies in the context of pseudonymous user profiles. From Google's point of view, this means that the ads are not managed and displayed for a specifically identified person, but for the cookie holder, regardless of who this cookie holder is. This does not apply if you, as a Google user, have expressly consented to the processing of the data without this pseudonymization. The information collected by Google Marketing Services about users is transmitted to Google and stored on Google's servers in the USA.

The Google marketing services we use include the online advertising program "Google Ads". In the case of Google Ads, each Google Ads customer receives a different "conversion cookie". This means that cookies cannot be tracked via the websites of Google Ads customers. The information obtained using the cookie is used to create conversion statistics for Google Ads customers who have opted for conversion tracking. Google Ads customers find out the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information with which users can be personally identified.

We can also use "Google Tag Manager" to integrate and manage Google's analysis and marketing services on our website.

For more information on how Google uses data for marketing purposes, see the overview page: https://www.google.com/policie..., Google's privacy policy can be found at: www.google.com/policies/privacy.

If you wish to object to interest-based advertising by Google Marketing Services, you can use the setting and opt-out options provided by Google: http://www.google.com/ads/preferences.

At this point we would like to point out that the USA is not a safe third country according to the ECJ. There is no adequacy decision by the EU Commission with the USA, and there is no legal data protection for EU citizens in the USA. The data is transmitted in accordance with Art. 49 GDPR.

5.4 Integration of third-party services and content

Based on your cookie consent, we use third-party content or service offerings within our online offer to integrate their content and services, such as videos or fonts (hereinafter uniformly referred to as "content").

This always presupposes that the third-party providers of this content perceive the IP address of the user, since without the IP address they could not send the content to their browser. The IP address is therefore required to display this content. We endeavor to only use content whose respective providers only use the IP address to deliver the content. Third-party providers can also use so-called pixel tags (invisible graphics, also known as "web beacons") for statistical or marketing purposes.

The pseudonymous information can also be stored in cookies on the user's device and contain, among other things, technical information about the browser and operating system, referring websites, visiting times and other information on the use of our online offer, and may be linked to such information from other sources.

The following presentation provides an overview of the third-party providers and their content as well as links to their data protection declarations, which contain further information on data processing and some of the options for objection already mentioned here (so-called opt-out):

Videos from the "YouTube" platform of the third-party provider Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Data protection: www.google.com/policies/privacy/,
Opt-Out: https://www.google.com/settings/ads/.

External code of the JavaScript framework “jQuery”, provided by the third-party jQuery Foundation, jquery.org.

6. Your rights according to GDPR

You have the right to request information about the personal data we have stored about you free of charge.

In addition, as a user, you have the right to correct incorrect data, limit the processing and, if necessary, delete your personal data, assert your rights to data portability and lodge a complaint with the responsible supervisory authority if there is suspicion of illegal data processing.

You can also revoke your consent with effect for the future.

6.1. Deletion of Data

The data stored by us will be deleted as soon as they are no longer required for their intended purpose and the deletion does not conflict with any statutory storage requirements. If the data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted. This means that the data will be blocked and not processed for other purposes. This applies, for example, to user data whose storage is required for commercial or tax reasons.

6.2 Right to Object

Under certain conditions, you can request that we restrict the processing or provision of your data within the framework of the right to data portability and, if necessary, object to the processing of your data.

In addition, you have the right to lodge a complaint with the data protection authority if you believe that your rights have been violated. The contact details of the Austrian data protection authority can be found here: https://www.dsb.gv.at/ueber-die-website/kontakt.html.

7. Who to contact if you have any questions?

If you have any questions about this data protection declaration or to exercise your rights, please contact our data protection department:

Talentor Austria GmbH
E-Mail: dataprotection.austria@talentor.com

8. Changes to the Privacy Policy

We reserve the right to change the data protection declaration in order to adapt it to changed legal situations or to changes in the provision of services and data processing. However, this only applies to declarations on data processing. If the user's consent is required or parts of the data protection declaration contain provisions of the contractual relationship with the user, the changes will only be made with the user's consent (= cookie consent).

You are asked to inform yourself regularly about the content of the data protection declaration.