Privacy Policy and Information for Candidates

To cut a long story short: we treat your personal data in confidence and conform with the statutory data protection regulations.

We would now like to give you some information regarding the personal data that we collect in the event of you visiting our website; why we require them, what we use them for, and who you can contact should you have any questions.

1. Who is this Data Protection Declaration aimed at?

This policy is addressed to individuals (hereinafter also referred to as candidates) who wish to create a free user account within our Talentor candidate portal – either as part of an application or on their own initiative – as well as candidates applying for a specific position via email or postal mail.

2. Who are we?

We are Talentor Austria GmbH (hereafter referred to as “Talentor”) with a legal domicile in Vienna. We are an executive search company in Austria with international franchise partners. We specialize in searching for and advising executives in the top to middle management.

Talentor Austria GmbH
Managing Director: Thomas Zembacher
Address: Seilerstätte 22/7-8, 1010 Vienna, Austria
Telefon: +43 1 523 82 07 710
E-Mail: office.austria@talentor.com

We have partners in the following locations who are themselves responsible for meeting GDPR regulations in their legal entities.

Companies that are affiliated with Talentor
Our group includes the parent companies Talentor International GmbH and epunkt GmbH as well as Talentor franchise partner companies, which may gain access to your data during joint (e.g. cross-border) projects.
As a candidate, you can exercise your data protection rights (see point 10) centrally with us at dataprotection.austria@talentor.com. All affiliated companies are committed to confidentiality and compliance with applicable data protection regulations.

4. For what purpose do we process your data?

We use your data for career consulting and job placement
You can create a user account through the candidate portal on our website. This gives us the opportunity to actively inform you about interesting job offers. Your user account also allows you to apply directly for a specific job opportunity. Even if you apply via email, we will enter your data into our database to process your application. If your application is active, a Talentor Austria employee will contact you by email or phone to inform you about the next steps. Relevant information from these personal interactions may also be added to your user account by your consultant. 
Unfortunately, the first application is not always successful. With your consent (see point 6), Talentor Austria may contact you again when we are commissioned to search for additional job opportunities that match your profile.

The processing of your personal data for the purpose of job placement takes place – when applying via email – on the basis of pre-contractual measures pursuant to Art. 6 para. 1 lit. b GDPR. A user account is created based on the information you provide. This is necessary for the recruitment process and is carried out at your request, i.e., in connection with your application for one or more specific job positions. You can update your data in the user account at any time (Art. 5 para. 1 lit. d GDPR).  
When you create a profile in the career portal yourself – whether or not you actively apply for a position via the portal – we process your personal data for the purpose of creating a candidate profile and recommending suitable job opportunities, exclusively based on your explicit consent (Art. 6 para. 1 lit. a GDPR).  
In addition, your data may be processed based on overriding legitimate interests (Art. 6 para. 1 lit. f GDPR) as well as for the fulfillment of legal obligations (Art. 6 para. 1 lit. c GDPR), particularly in connection with the establishment, exercise, or defense of legal claims (e.g., claims under the Equal Treatment Act). For this purpose, your data will be stored in a restricted manner, if necessary. 
You are neither legally nor contractually obliged to provide your personal data. However, without it, we cannot accept your application or, if desired, inform you about suitable job opportunities.

6. What personal data do we collect and process?

6.1 When you create a user account, the following categories of data are collected and processed

Data Category

Purpose

Legal Basis

Data Category Purpose Legal Basis IP address, registration data (login, password, acceptance of terms and privacy policy)

To uniquely identify and verify the user, and store active consent to terms and privacy policy

Legitimate interest (Art. 6 para. 1 lit. f GDPR), Legal obligation (Art. 6 para. 1 lit. c GDPR)

First and last name

To process the application and, if needed, book an interview appointment.

Consent (Art. 6 para. 1 lit. a GDPR), or pre-contractual steps (Art. 6 para. 1 lit. b GDPR)

Address

To process the application.

In the event of a successful placement, a gift may be sent to your home address.

Consent or pre-contractual steps (Art. 6 para. 1 lit. a or b GDPR), Legitimate interest (Art. 6 para. 1 lit. f GDPR)

Contact details (email, phone)

To process the application and, if applicable, book an interview appointment.

Consent or pre-contractual steps (Art. 6 para. 1 lit. a or b GDPR)

Application documents

To process the application.

Consent or pre-contractual steps (Art. 6 para. 1 lit. a or b GDPR)

Professional experience

To process the application.

Consent or pre-contractual steps (Art. 6 para. 1 lit. a or b GDPR)

Educational background

To process the application.

Consent or pre-contractual steps (Art. 6 para. 1 lit. a or b GDPR)

Job preferences

To process the application.

Consent or pre-contractual steps (Art. 6 para. 1 lit. a or b GDPR)

Skills and qualifications

To process the application.

Consent or pre-contractual steps (Art. 6 para. 1 lit. a or b GDPR)

Date and time (of registration or update)

To ensure data accuracy and for optimal career consulting

Legitimate interest (Art. 6 para. 1 lit. f GDPR)


6.2 During the further recruitment process, your data may be supplemented by a Talentor consultant:

Data Category

Purpose

Legal Basis

Interview appointments, notes and remarks on your profile

To record additional information regarding your expectations and experiences to assess job fit.

Legitimate interest (Art. 6 para. 1 lit. f GDPR)

Residence permit (only for third-country nationals)

To verify employment eligibility.

Legal obligation (Art. 6 para. 1 lit. c GDPR)

Email communication

To document communication and actions taken.

Legitimate interest (Art. 6 para. 1 lit. f GDPR)

Job positions proposed or applied for

To track which positions are in process.

Legitimate interest (Art. 6 para. 1 lit. f GDPR)

Profile tagging (candidate profile)

To improve searchability for further job opportunities.

Consent (Art. 6 para. 1 lit. a GDPR)

Salary data (upon successful placement)

For invoicing clients and statistical purposes.

Legitimate interest (Art. 6 para. 1 lit. f GDPR)

Start date (upon successful placement)

For warranty-related claims in case of early contract termination.

Legitimate interest (Art. 6 para. 1 lit. f GDPR)

Employer (upon successful placement)

Recorded for invoicing, warranty, and statistical purposes.

Legitimate interest (Art. 6 para. 1 lit. f GDPR)


Please note that health data, information about racial or ethnic origin, political, religious, trade union, or sexual orientation are considered special categories of personal data (as defined in Article 9 GDPR) and are particularly sensitive. Therefore, we kindly ask you not to provide such data to us – neither in your CV nor in any other documents or materials.

7. Is "profiling" carried out?

To efficiently suggest suitable job positions to you as a candidate, we tag your profile in our database for improved searchability – only with your prior consent. This tagging involves data from your application documents such as skills, qualifications, salary expectations, preferred location, willingness to travel, and work experience. When new job openings arise, candidate profiles are searched using these tags, and the stored data is compared to job requirements.
In our recruiting processes, there are no automated mechanisms that result in candidates being automatically excluded from the application process or automatically suggested to one of our clients. The decision as to which candidates are approached for which positions or forwarded to a client is always made by the responsible Talentor Austria consultant. Therefore, there is no automated decision-making as defined in Art. 22 GDPR.

8. Do we process personal data by AI-based systems?

As part of our services, personal data may be processed by AI-based systems, for example, to analyze application documents and generate candidate reports. Automated decision-making within the meaning of Art. 22 GDPR does not take place. The evaluation is solely for the support of our consultants.

Processing is based on your consent according to Art. 6 para. 1 lit. a GDPR. Personal data is not used to train the AI models employed and is processed exclusively for the specified purpose.

9. Are interviews and phone calls recorded?

Telephone interviews or conversations are only recorded with the explicit consent of the person concerned. The recordings serve exclusively the purpose communicated in advance (e.g., documentation of the application process) and are deleted once the purpose no longer applies or upon request of the person concerned. Consent can be revoked at any time.

10. Who receives your data?

10.1 Talentor Austria Employees
All necessary Talentor Austria employees – and if needed, affiliated companies (see Section 3) – have access to your data for the purposes outlined in Section 7.

10.2 Talentor Austria Clients
If you apply for or are suggested for a specific role, and after an interview and your express consent, your data will be forwarded to individual clients in the form of a position-specific report. This includes personal, address, and contact details, professional preferences (e.g., salary expectations, notice period), and a consultant’s assessment. Our clients are contractually bound to confidentiality and discretion.

10.3 Technical Service Providers
We use processors (e.g., software or hosting providers) for our services. These providers may access your data only for maintenance and support purposes and are bound by data processing agreements (Art. 28 GDPR). No processing occurs in third countries.

10.4 Other Recipients
To comply with legal obligations or defend legal claims, data may be disclosed to public authorities, courts, or legal representatives.

11. What are your rights?

Under the General Data Protection Regulation (Articles 15 to 22), you have the right to information, deletion, restriction, data portability, rectification, withdrawal, and objection. Below, we would like to explain some of these rights in more detail:

  • Your right to information and rectification
    You are entitled to receive information about your personal data that we store and process. If your data is no longer accurate or is incomplete, you can request its correction or completion, or make these changes yourself via the candidate portal.
  • Your right to withdraw consent and to deletion of your personal data
    You may withdraw your consent at any time and exercise your right to deletion. In this case, we are obliged to delete the personal data concerning you, unless we are legally entitled or obliged to retain all or part of your data. The withdrawal of consent does not affect the lawfulness of processing carried out based on consent before its withdrawal.
  • Your right to restriction, data portability, objection, and measures related to automated decision-making
    You may also request that we restrict the processing or provision of your data under certain conditions within the scope of the right to data portability, and, if applicable, object to the processing of your data.

Furthermore, you have the right to lodge a complaint with the data protection authority if you believe that the processing of your personal data is not in compliance with data protection regulations. The contact details of the Austrian Data Protection Authority can be found here: https://data-protection-authority.gv.at/

12. How long is your data stored?

Your personal data will generally be stored for as long as necessary to achieve the purposes mentioned above (e.g., for the defense of legal claims pursuant to §§ 15 para 1, 29 of the Equal Treatment Act). After that, your data will be deleted promptly and without the need for any request.

In the case of your consent, processing will generally take place only until you withdraw your consent.

For candidates to whom we have not been able to offer suitable job positions over an extended period despite their consent, we reserve the right to delete their profiles without prior notice. Should a suitable job opportunity arise at a later time, you may create a new user account at any time.

13. Who can you contact?

For any questions regarding this privacy policy or to exercise your rights, please contact our Data Protection Department:

Talentor Austria GmbH 
Data Protection Manager: Antonia Wild
Seilerstätte 22/7-8, A-1010 Wien
Datenschutz E-Mail: dataprotection.austria@talentor.com