HR_4.0 Beratung ZELLNER a brand of ZELLNER Personal Lösungen GmbH – hereinafter referred to as “ZELLNER Personal Lösungen” for short
1. scope of application
This privacy policy applies to ZELLNER Personal Lösungen and all affiliated companies of ZELLNER Personal Lösungen.
2. purpose of data processing
ZELLNER Personal Lösungen processes personal data of employees, partners, customers and suppliers for the purpose of performing its business activities and fulfilling the associated legal and contractual requirements.
2.1 Processing of customer, partner and supplier data
ZELLNER Personal Lösungen stores and processes the personal data provided by interested parties, customers, partners and suppliers for the preparation of offers and inquiries and for the processing of orders as well as for the fulfillment of the associated contractual and legal obligations. The data is also forwarded to authorities and public bodies in order to fulfill legal obligations.
2.2 Applicants
The contact details and application documents submitted in the course of an application are processed electronically by us for the purpose of selecting suitable candidates for an employment relationship and forwarded to our clients for the purpose of hiring or recruitment.
2.3 Website & Cookies
2.3.1 IP address
When you visit our website, information is automatically stored on the web server. This includes the browser used, the operating system used, which page brought you to our website, the IP address, the time of access and other information. From the point of view of ZELLNER Personal Lösungen, this data is pseudonymized and cannot be assigned to a specific person without additional data sources.
ZELLNER Personal Lösungen does not evaluate this data as long as there is no illegal use of the website.
2.3.2 Google Analytics
Our website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. Google will not associate your IP address with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. By using our website, you consent to the processing of data about you by Google in the manner and for the purposes set out above.
3. principles of the processing of personal data
The processing of personal data is based on strict principles that consider the protection and security of data and the rights of the data subjects to be of the utmost importance.
Legality & transparency
Data processing is carried out in a lawful manner, in good faith. The data subject is informed about the planned processing and handling of the data when the data is collected. Data subjects are informed of at least the following points:
– Person responsible for data processing
– Purpose of data processing
– Legal basis of the processing
Earmarking
The data is collected and processed for specified, clear and legitimate purposes. The data is not processed in a manner that is incompatible with these purposes.
Data minimization
Only data that is absolutely necessary for the stated purposes is collected and processed. If it is possible to achieve the purpose and the effort is reasonable, only anonymized data will be processed.
Memory limitation and deletion
Personal data is deleted as soon as the purpose for which it was originally collected no longer applies and statutory retention periods do not prevent deletion.
If there are legitimate interests in this data in individual cases, it will continue to be stored until the legitimate interest has been legally clarified.
Data security
Data secrecy applies to personal data. The data must be handled confidentially and is protected by appropriate organizational and technical measures against unauthorized access, unlawful manipulation or disclosure as well as loss and destruction.
Factual accuracy
Personal data must be kept accurate, complete and up to date. Appropriate measures are taken to correct outdated, incorrect or incomplete data.
4. commitment to data secrecy
All employees of ZELLNER Personal Lösungen and the employees of affiliated companies are contractually bound to confidentiality and are regularly instructed and trained in the secure handling of personal and other critical data.
5. data security
Protecting the confidentiality, availability and integrity of data is an essential task of ZELLNER Personal solutions. This applies equally to trade secrets, customer data, personal data and other critical information. To this end, technical and organizational security measures are established and continuously improved in accordance with the state of the art and internationally recognized best practices and security standards.
6. contact person
ZELLNER Personal Lösungen is not required to appoint a data protection officer, as Article 37, paragraph 1 of the EU GDPR does not apply.
In line with the importance of data protection, ZELLNER Personal Lösungen has decided to voluntarily appoint a contact person to deal with any queries on this topic. This person is available as a point of contact for data subjects and the data protection authority and deals with data protection issues within the group of companies.
The contact person for ZELLNER Personal Lösungen GmbH and all affiliated companies is
Andrea Berger
ZELLNER Personal Lösungen GmbH
Franz-Josefs-Kai 53/2-3, A-1010 Vienna
E-Mail:datenschutz@personal-zellner.at
7 Rights of the data subjects
Every data subject whose personal data is processed by ZELLNER Personal Lösungen has the opportunity to invoke their own rights at any time and to assert them with the data protection officer of ZELLNER Personal Lösungen.
To exercise your rights as a data subject, you can contact us at any time in writing by e-mail todatenschutz@personal-zellner.atat any time.
Information
Data subjects can request information at any time about which personal data about them is being processed and the purposes of this processing.
Correction
Data subjects have the right to demand the immediate rectification of inaccurate personal data concerning them.
Restriction
Data subjects have the right to restriction of processing if the accuracy of the data concerning them is contested, the processing is unlawful, the data are no longer required for processing or the data subjects have objected to the processing.
Revocation
Data subjects have the right to object at any time to the processing of personal data concerning them.
Transferability
Data subjects have the right to receive the personal data concerning them, which they have provided to ZELLNER Personal Lösungen, in a structured, commonly used and machine-readable format. They also have the right to request the transfer of this data to another controller, where technically feasible.
Portability only applies to personal data that is processed by automated means.
Erasure – right to be forgotten
The data subject has the right to demand the immediate erasure of personal data concerning them if the legal basis for the processing of the data is missing or ceases to exist, the data processing is objected to, the data processing is unlawful and no statutory retention periods make erasure impossible. Data security is also a high priority with regard to the rights of data subjects, which is why the assertion of data subject rights is only possible after the data subject has been identified beyond doubt.
You also have the right to lodge a complaint with the data protection authority at any time.
8. data transmission
Personal data is only transferred to recipients outside the group of companies and recipients in EU third countries in accordance with applicable laws and on a lawful basis and in compliance with the highest levels of confidentiality and data security.
Personal data is exchanged between the companies of ZELLNER Personal Lösungen as part of company-wide processing. This exchange is regulated by contracts for joint processing and by processor agreements.
ZELLNER Personal Lösungen also uses various processors for processing. All processors are contractually bound by a processor agreement to comply with the legally applicable data protection regulations.
9. continuous control and improvement
The continuous improvement of quality and processes has a very high priority at ZELLNER Personal Lösungen.
Compliance with data protection guidelines and applicable legislation and the effectiveness of data protection and data security measures are continuously measured and improved in order to ensure that data protection measures run smoothly.
Link to the Data Protection Authority of the Republic of Austria –https://www.dsb.gv.at/