Information on data protection and data processing in the
job application process

3. For what purposes and on what legal basis will my personal data be processed?

Processing for the purposes of contractual performance and for pre-contractual measures taken in response to your enquiry 

Your personal data will be processed to enable execution of the job application process. If your application is successful, your personal data will be processed to the extent necessary to set up an employment relationship. You will receive detailed information about this separately in such a case.

Processing on the grounds of a legitimate interest

A legitimate interest in the processing of data by us or a third party exists in the following cases:

• While the job application process is ongoing: in order to be able to draw your attention to other potentially interesting job openings within our organisation.
• In the event of your job application not being successful: in order to be able to document compliance with the Equal Treatment Act and the Disabled Persons Employment Act. This means that your personal data will be held for eight months from the date of rejection.
• Measures to protect the company’s employees, customers and property
• For the purposes of exercising or defending legal rights
• Prevention and combating of fraud, prevention of money laundering and the financing of terrorism
• Improving data quality
• Ensuring IT security and the company's IT operations
• If you send us a file with an electronic signature or an electronic seal, we will forward the document to a legitimate validation service - e.g. the signature checking service of Rundfunk und Telekom RegulierungsGmbH - to have the signature or seal checked. 

Processing on the grounds of consent

If you agree to this, your personal data will also be transferred to other Erste Group companies by separate consent,

• during an ongoing application process also to other Erste Group companies to be able to draw your attention to other interesting positions at these companies
• made available to employees responsible for other interesting positions within our company  inorder to be able to contact you in this regard
• processed for 18 months after unsuccessful completion of an application process to be able to draw your attention to future interesting positions or career opportunities in our company if necessary

You can withdraw your consent at any time for the future. However, if you withdraw your consent, the processing operations remain lawful up to the time of withdrawal. This means that a revocation does not apply to the past.

Processing for statistical purposes

We also process your personal data for statistical purposes as set out in section 7 of the Data Protection Act.

4. Am I obliged to make my personal data available? What happens if I don't want to?

We can only process your application if you make the associated personal data about yourself available to us. If you do not do this, the job application process cannot even be started, because there is no way of contacting you, for a start.
 

5. Is a decision-making process deployed that is based on automated data processing, including profiling?

No, there is no automatic decision-making process, including profiling, deployed in the job application process.
 

6. To whom will my personal data be passed?

Your personal data may be passed to:

• other Erste Group companies, if you have consented to this (see point 3).
• public bodies and institutions as well as persons on official business, where we are legally obliged to do this or are protecting our legitimate interests, e.g. law enforcement authorities.
• solicitors, collection agencies, tax advisors or certified public accountants, in order to fulfil our legal obligations, where necessary, or to exercise our legal rights.
• processors commissioned by us:
  • Erste Digital GmbH (where not acting as the controller itself)
  • SAP, SAP SuccessFactors
• validation services, such as e.g. Rundfunk und Telekom Regulierungs-GmbH, where it is necessary to check and electronic signature or an electronic seal sent by you.
   

7. Will my personal data be relayed to a third country?

Your data may be relayed to a third country if you have consented to it being relayed.
 

8. How long will my personal data be stored?

Your personal data will certainly be stored for the duration of the job application process, or if there is a statutory duty to store the data.

If the application process is not successfully completed, your personal data will be stored for a period of eight months from the date of rejection (see point 3).

If you consent to this, your personal data will be processed by us for 18 months, so that we would be able to draw your attention to any interesting positions arising (see point 3).
 

9. What rights do I have?

The GDPR grants you several rights in respect of your personal data. You have the right to be informed; the right to rectification, erasure, restriction and/or data portability; the right to object; and the right to decisions being made that are not based on automated processing - including profiling.

If necessary, please direct your inquiries to the contact point of the respective company mentioned in point 2.

If you do not receive a timely response to an application, or are of the view that we have failed to deal with your application in a lawful manner, or you believe your right to data protection has been violated, you can also complain to the supervisory authority responsible for this area:

Österreichische Datenschutzbehörde
Barichgasse 40-42, 1030 Vienna
Telephone: 01/52 152-0
E-Mail: dsb@dsb.gv.at
https://www.dsb.gv.at

Status: August 2024