Privacy policy for website users, internal applicants, candidates and business partners of Michael Schaumann Managementberatung GmbH
The protection of your personal data (‘data’) is of particular concern to us. In this statement, we therefore inform you in accordance with Articles 13 and 14 of the General Data Protection Regulation (‘GDPR’) about how we, as the data controller within the meaning of Article 4 (7) GDPR, process your data in connection with (1) visiting and using this website, (2) contact enquiries, (3) job applications to us, (4) our placement services for candidates and (5) business relationships with us.
1. Who is responsible for data processing and who can you contact if you have any questions?
The controller under data protection law for data processing in connection with your visit to and use of this website, your contact enquiries, job applications to us, our placement services for candidates and business relationships with us is:
Michael Schaumann Managementberatung GmbH
Thurngasse 5/7, 1090 Vienna, Austria
office@schaumannpartners.com
(‘MSM’)
2. What categories of data do we process?
In connection with our website, we process data that falls into the following categories:
- IP address and IP location
- Other access data (such as information about your browser, system data about devices and operating systems used, date and time of the server request, referrer URL)
We collect this data automatically using cookies (see point 3 for more details).
If you contact us or submit an internal application to MSM, we process data that falls into the following categories
- Name
- Contact details (email address, telephone number)
- Other disclosed data (e.g. address, CV, application documents, desired position)
- History of the application
If you are a candidate, we process the data that you provide to us or that is collected as part of the recruitment process, which falls into the following categories:
- Name
- Contact details (e-mail address, telephone number)
- Other data provided (e.g. address)
- Application data (e.g. CV, application documents, desired position, references)
- Results of online assessments and candidate reports
If you are a business partner (or its shareholder, employee or body) of MSM, we process your data that you provide to us in the context of the initiation of the contractual relationship or during the ongoing contractual relationship, such as
- Name/company
- Address
- Contact details (e-mail address, telephone number)
- Company register data
- Bank details
- UID number
- Names and contact details of contact persons in the company
- Contract texts and business correspondence
3. How do we process your data?
a) Website use
aa) Cookies
Our website uses cookies and similar technologies provided by third parties to make the website user-friendly. Cookies are small text files that are temporarily stored on your end device and/or saved by your browser. The collection of your data in connection with cookies is based on your consent in accordance with Article 6 (1) (a) GDPR (or in conjunction with Section 165 (3) TKG in the case of so-called ‘persistent’ cookies, which are stored on the user's end device).
You can reject the storage of individual categories of cookies by configuring the cookie banner. You can revoke any consent you have given to the use of cookies at any time at a later date with effect for the future by means of configuration in the cookie banner (accessible via the ‘Cookie settings’ button at the bottom left of the screen) or alternatively via your browser settings.
When cookies are set on the basis of voluntary consent, user data is sometimes transferred to recipients in third countries outside the EEA, in particular to the USA (for information on transfers to third countries, see point 6).
Cookies that are absolutely necessary for the functioning of the website (technically necessary cookies) cannot be rejected or deactivated. In these cases, data processing is based on our legitimate interest pursuant to Article 6 (1) (f) GDPR in being able to provide our website in a functional manner.
bb) External links
On our website you will find external links that lead to the profiles of our employees on websites of the social media platform LinkedIn. The external links are displayed on the website as a button with the logo of the social media service. When you visit our website, these buttons do not send any data to third parties without any action on your part.
If you click on a social media button, you will be redirected to the website of a third party (the social media service provider). After redirection, we have no influence on the use of cookies and the data collected by the third-party provider. The social media service provider uses its own cookies and processes your data in accordance with its own privacy policy. We recommend that you check the relevant privacy policy before you voluntarily pass on data to this provider (for information on the processing of your data when you visit our social media fan page, see point 3.c).
In this context, please note that clicking on the external links on our website may result in your data being transferred to and processed in third countries outside the EEA, in particular the USA (for information on transfers to third countries, see point 6).
b) Making contact
For enquiries by telephone or email, we process your data (name, email address, telephone number and other data provided) for the purpose of processing your enquiry. Depending on the enquiry, data processing is carried out on the basis of the fulfilment of (pre)contractual obligations in accordance with Article 6 (1) (b) GDPR or on the basis of our legitimate interests in accordance with Article 6 (1) (f) GDPR, such as in particular the maintenance of relationships with potential business partners and candidates and the provision of information to interested parties.
c) Social media fan page
If you visit our user account set up by MSM on social media (LinkedIn) (‘fan page’), your data will be processed in connection with this visit, regardless of whether or not you are registered or logged in to the respective social media service. This processing takes place on the one hand for the purpose of improving the advertising systems of the social media service provider, and on the other hand for the purpose of presenting our company to users of the social media service and enabling communication with visitors to the fan page. By operating the fan page, we contribute to the processing of the personal data of visitors to our fan page by the social media service provider and are therefore jointly responsible with the social media service provider within the meaning of Article 26 GDPR.
You can find detailed information on the processing of your data in connection with our social media presence and the joint controller at https://de.linkedin.com/legal/privacy-policy.
d) Internal applications
If you apply for a position at MSM, we process the data transmitted to us (e.g. application documents, name, contact details) as part of the processing of your application on the basis of the fulfilment of (pre-)contractual obligations in accordance with Article 6 (1) (b) GDPR and, if necessary, for the purpose of keeping records on the basis of your express consent in accordance with Article 6 (1) (a) GDPR.
e) Placement services for candidates
If you make use of our placement services for candidates, we process your data for the purpose of searching for potential employers for you and supporting you in the application process, including carrying out online assessments and preparing candidate reports. The processing takes place on the basis of the fulfilment of (pre-)contractual obligations in accordance with Article 6 (1) (b) GDPR.
Any sensitive data contained in your documents and the transfer of your data to potential employers outside the EEA will only be processed with your express consent on the basis of Article 6 (1) (a) in conjunction with Article 9 (2) (a) GDPR (for transfers to third countries, see also point 6).
If you give your consent to this, we will keep you in our database even after the successful completion of the placement process for the purpose of maintaining contact relationships and the professional network as well as any further use of our placement services for candidates. In this case, the processing of your data is based on Article 6 (1) (a) GDPR.
Note: Please note that the respective (potential) employer is the sole data controller under data protection law for the processing of your data in the course of the recruitment process of the (potential) employer following our placement services for candidates (e.g. in the context of job interviews, conclusion of contracts, administration of personnel data)! This privacy policy does not apply to such processing activities.
f) Relationships with business partners
If you commission us with the search for potential employees for your company or are other business partners (or their shareholders, employees or organs) of MSM, we process your data for the purpose of fulfilling our (pre)contractual obligations towards you in accordance with Article 6 (1) (b) GDPR, in particular for processing the search for candidates for your company (for transfers to third countries, see also point 6).
4. Storage period
We process your data for as long as is necessary to fulfil the purpose underlying the respective processing and in accordance with statutory documentation and retention obligations. When data processing is no longer necessary, we will delete your data.
Application data for internal applications at MSM will be stored by us for seven months from the date on which you were notified of the rejection of your application. If you give your consent, we will also store your data for longer for record-keeping purposes.
If we process your data on the basis of your consent, your data will be deleted and no longer processed if you withdraw your consent.
Cookies
Session cookies are only required for the duration of your current session and are deleted or lose their validity as soon as you leave our website or your current session expires.
Persistent cookies are stored for a maximum period of 2 years.
5. To whom will your data be passed on?
Your data will be transmitted by us to the following recipients in the course of processing for the above-mentioned purposes and, if necessary, due to legal or official obligations:
- (IT) service providers (e.g. Hogan Assessment Centre)
- Business partners (if you are a candidate)
- Candidates (if you are a business partner)
- If necessary, to legal representatives, notaries, courts and administrative authorities
- If necessary to banks and insurance companies
If your data is processed by our service providers (processors), we ensure that they only process your data within the scope of our contract and for the respective purposes mentioned above.
6. Transfer to third countries
If the above-mentioned recipients of your data are located outside the EEA and the EU Commission has not determined that the country in question has an adequate level of data protection, we will ensure that the transfer takes place on the basis of standard contractual clauses or otherwise in accordance with Articles 46, 47 or 49 GDPR.
7. What rights are you entitled to?
Right to information
If we process your data, you have the right to information about the processing purposes, the categories of data processed, the recipients of this data, the storage period, the rights to which you are entitled, the origin of the data and the existence of automated decision-making.
Rectification and erasure
You are entitled to request the rectification of incorrect or incomplete data concerning you. You are entitled to request the erasure of data concerning you, provided that the processing of the data is not lawful and there are no legal obligations on our part to prevent erasure.
Restriction of processing
You are entitled to request the restriction of the processing of your data in certain cases.
Data portability
You are entitled to request the transfer of the data you have provided to us in a structured, commonly used and machine-readable format. You have the right to have the data transmitted directly from us to a controller, insofar as this is technically feasible.
Objection
You have the right to object to the processing of data concerning you at any time on grounds relating to your particular situation. If you object, we will no longer process data concerning you unless we can prove that our reasons for processing outweigh your interests.
Revocation
You have the right to revoke the processing of your data based on your consent at any time. This does not affect the legality of the data processing carried out up to this point.
Complaint
If you believe that the processing of your data violates data protection law or your data protection rights have been violated in any other way, you can lodge a complaint with the supervisory authority. In Austria, this is the Data Protection Authority, Barichgasse 40-42, 1030 Vienna (www.dsb.gv.at).
To exercise your data subject rights in connection with your visit to our fan page, please use the form provided in the data protection information of the social media service provider linked under point 3.c) or contact us by post at the contact address provided therein.