Source: https://www.hotelcareer.com/data-privacy-statement
Timestamp: 2019-04-24 04:04:04+00:00

Document:
Thank you for visiting our jobboard. The protection and confidentiality of your personal data is of particular importance for YOURCAREERGROUP.
In this document we will inform you about the processing of personal data in connection with the services we offer at the individual jobboards HOTELCAREER, GASTROJOBS, TOURISTIKCAREER and AZUBICAREER or other websites or apps (collectively referred to as “Platforms”) that incorporate this Data Protection Policy. Personal data comprises all information that relates to an identified or identifiable natural person (Article 4 (1) GDPR). This includes information such as your name, e-mail address, postal address, or telephone number. Information that is not directly associated with your identity, e.g. the number of users of an Internet site, does not fall within this scope.
- Processing of personal data (photos) during participation in an event, whereby we process data on the basis of a legitimate interest (pursuit of our business interests).
- Processing of information about businesses and their employees , where we process data in the context of a legitimate interest or a contract or due to a legal obligation.
You have various rights related to the processing of personal data. You have (depending on the circumstances) the right to request access to the personal data (Article 15 GDPR), to rectification (Article 16 DGVO) or erasure (Article 17 GDPR), to restriction of processing (Article 18 GDPR), a right to object (Art. 21 DSGVO) and a right to data portability (Art. 20 DSGVO). If the processing is based on a consent, you canwithdraw > it at any time.
In so far as personal data are processed by recruiters, processing of personal data about Austrian recruiters is also carried out by YOURCAREERGROUP Österreich GmbH, about Swiss recruiters by YOURCAREERGROUP Schweiz GmbH and about Polish recruiters by StepStone Services Sp. Z o.o. respectively, who will then be the respective data controller. For details, see section 3.4.
When you attend an event, you should be aware that we may take photos, including of attendees. Where, given the overall impression of the image, the main focus is on a general gathering of people or, if there is no such general focus overall, the individuals who are recognisably depicted have consented at least tacitly, i.e. from the point of view of our photographer on the basis of the overall circumstances it can be assumed that the individuals have consented to the photo being taken in awareness of its purpose (e.g. by posing or smiling at the camera), we may use the photos taken for sales, advertising and informational material in physical format such as booking forms and flyers, information brochures and posters, and in electronic format such as newsletters, advertising e-mails, on our website and in our app, in social medial channels and for PR work and news reporting. In this respect, the basis in law is a legitimate interest under point f) of Article 6(1) GDPR, namely the advancement of our business interests in the form of promoting or reporting accompanied by images.
If we provide an application form on our Platforms for job advertisements that are posted on our Platforms, and you complete this without being logged in to the Applicant Center (see clause 3.2.2 below) and click the button to submit the application, we will submit the information you provide in the application form to the provider who posted the advertisement on our Platform. The legal basis here is your consent in accordance with Art. 6 (1) sentence 1 GDPR. Please note that the respective recruiter might not be based in the EU or the EEA so it may be necessary under this contract to transfer the data to a country or that your application will be accessed from a country which has a lower level of protection under data protection law than in the EU or the EEA. Please note that in the case of an application where the recruiter is not revealed, there is usually no right be informed about the recipient, since this would adversely affect the confidentiality interests of the recruiter.
If we provide a form on our platforms for establishing contact with further education or training institutes, and if you fill it out and click the button to send it, we transmit the information you have entered in the form to the respective further education or training institute. The legal basis is your consent in accordance with Art. 6 Para. 1 S. 1 GDPR. The data entered by you will not be stored by us after transmission to the institute for further education or training.
If you register for a newsletter, we use your e-mail address to send you the respective newsletter, in which we regularly inform you about interesting topics. To ensure that you are properly registered for the newsletter, that is, to prevent unauthorized subscriptions on behalf of third parties, we will use a double-opt-in process and send you a confirmation e-mail after your first newsletter subscription; this e-mail will request you to confirm the subscription. The legal basis here is your consent in accordance with Art. 6 (1) sentence 1 a GDPR. We will store your email address for sending you the newsletter until you unsubscribe or we stop sending the newsletter to you. Additionally we may send emails about YOURCAREERGROUP services that are similar to those you already use. Legal basis is a legitimate interest as per Art. 6 (1) sentence 1 f GDPR, namely the pursuit of our business interests.
You may object to all types of YOURCAREERGROUP newsletters at any time without incurring any costs other than the transmission costs at the basic rates (i.e., the cost of your internet service provider).
YOURCAREERGROUP organizes market surveys from time to time. As part of such surveys we will not collect any personal data, but at the end of the survey we might offer you the opportunity to participate in a competition. In order to participate in the competition you will have to provide us with your e-mail address, which we will only use for the purpose of the competition to notify you if you have won a prize. In particular, the e-mail address will be stored completely separately from your answers to the survey. The legal basis for the storage of your email address is your consent under Art. 6 (1) (a) GDPR. We will store your email address for this purpose until the end of the respective competition.
We use data processors, which we list below, to provide our services. The legal basis for using these data processors is legitimate interest under Art. 6 (1) (f) GDPR. The legitimate interest lies in the execution of our business activities, particularly to provide the services described elsewhere in this Data Protection Policy. No conflicting interest is apparent because we have entered into a data processing agreement with the respective processors under Art. 28 GDPR.
We use data processors to host our Platforms and for back-up services, meaning that personal data that is stored on our platforms is transferred to these data processors. These data processors are Amazon Webservices, Inc., 410 Terry Drive Ave North, WA 98109-5210 Seattle, USA (who processes data solely in the EU), StepStone GmbH, Axel-Springer-Str. 65, 10969 Berlin, Germany, StepStone Continental Europe GmbH, Völklinger Straße 1, 40219 Düsseldorf, Germany and StepStone N.V., Koningsstraat 47 Rue Royale, 1000 Brussels Belgium. These data processors will store the data for the same duration as it is stored on our Platforms for the various purposes defined in this Data Protection Policy.
Accordingly, these parties may also be provided with your personal data in the course of data processing commissioned by us. It will be stored there for a period that is otherwise lawful for purposes under this Data Protection Policy, i.e. in particular for the contractual communications in the course of contracts with you or otherwise for promotional communications. The use of Selligent, Inc. is permitted under Art. 45 GDPR, as they are Privacy Shield certified and thus, according to the Implementing Decision of the Commission (EU) 2016/1250 (http://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?Uri=CELEX:32016D1250&from=DE), an adequate level of data protection exists. The certification can be viewed at https://www.privacyshield.gov/participant?id=a2zt0000000PBKYAA4&status=Active.
The legal basis for our use of Selligent is a legitimate interest under Art. 6 (1) sentence 1 f GDPR, namely the execution of our business purposes in the course of the processes described elsewhere in this Data Protection Policy. No conflicting interest is apparent in this respect, in particular due to the fact that we have entered into a data processing agreement with Selligent.
Google is certified under the Privacy Shield Agreement and thus warrants that it complies with European privacy legislation ( https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).
For more information about Google reCAPTCHA and Google’s Data Protection Policy, please visit the following links: https://www.google.com/intl/en/policies/privacy/ and https://www.google.com/recaptcha/intro/android.html.
YOURCAREERGROUP offers a variety of services for your career development. YOURCAREERGROUP aims to support you at all stages of your professional life. In particular, you can subscribe to a Jobfinder and can create an account for the Applicant Center in which we process personal data. In this section 3.3, we inform you about the purpose, the respective legal basis as well as the storage duration of these processing operations.
- We will submit an application to a recruiter via your Application Center when you complete our application form and click the button to submit the application. The legal basis is your contract with us as per to Art. 6 para. 1 p. 1 b GDPR. Please note that the respective recruiter might not be based in the EU or the EEA so it may be necessary under this contract to transfer the data to a country or that your application will be accessed from a country which has a lower level of protection under data protection law than in the EU or the EEA. Please note that in the case of an application where the recruiter is not revealed, there is usually no right be informed about the recipient, since this would adversely affect the confidentiality interests of the recruiter.
- We store the applications you make through our Platforms in your Applicant Center account for you until you delete a stored application, they will be deleted after 12 months at the latest.
- You can create a profile under the contract for Applicant Center. Which personal data is transmitted to us in this context depends on your uploads or your input into the relevant fields. We will analyze the content and structure of any uploaded documents in an automated process in order to improve the services we provide to you. You can define the scope of the contractual use of this profile. You can either use it to apply to vacant positions only (including applications to box number advertisements), see below; or you can make the profile accessible partially or fully to potential employers who are YOURCAREERGROUP customers and use the YOURCAREERGROUP Applicant Profile Search or similar products. In the context of profiles made fully available, we may also use your profile data to find publicly available, business-related social media profiles and link these to your profile. Your profile will be stored until you delete it or the contract for your Applicant Center account is terminated. Please be informed that, as far as you make your profile accessible to recruiters, a recruiter could also be located outside of the EU/EEA. That means that as part of the contract between you and us, it might be necessary, that your profile is accessed from a country that does not have the same level of data protection as the EU or EEA.
- If you have created a profile and access a job application form made available on our Platforms for job advertisements published on our Platforms, we will use your profile data to complete this form and, when you click the button to submit the application, we will send the data recorded with the form and make your profile accessible to the recruiter who published the respective job advertisement with us. Again, please be informed that the respective recruiter might not be located in the EU or EEA, so that as part of the contract between you and us, it might be necessary, that the data is transmitted to or accessed from a country that does not have the same level of data protection as the EU or EEA.
- You can register for newsletters in the Applicant Center, we will then regularly inform you about interesting topics by email. The newsletters contain tracking pixels for the statistical evaluation of our newsletter campaigns. This is a miniature graphic embedded in HTML-formatted e-mails that lets us know if and when you opened an e-mail and which links in the e-mail were accessed. In this context your IP address will be transmitted to our servers, but we will not store the IP address or any other personal data. The legal basis for the use of these tracking pixels is a legitimate interest within the meaning of Art. 6 (1) (f) GDPR, where the legitimate interest is in being able to evaluate and optimize our newsletters. You may object to all types of YOURCAREERGROUP newsletters at any time without incurring any costs other than the transmission costs at the basic rates (i.e., the cost of your internet service provider).
Additionally, we use information provided by you as part of a profile in order to optimize the job search and job recommendations for you and other users of our Platforms using the statistical model described in clause 3.3.2 In this context we store certain parts of your profile which by themselves or in combination with each other cannot be used to identify you along with a pseudonymized user ID in the statistical model. Based solely on this pseudonymized ID you are not identifiable from within the statistical model: an identification would theoretically only be possible by externally pseudonymizing the user ID assigned to your Applicant Center account and then comparing the outcome with all pseudonymized user IDs stored in the statistical model. If we optimize the job search and the job recommendations for you with the statistical model, this is done in the context of your contract via the Applicant Center account on the legal basis of Art. 6 (1) (b) GDPR. If we use the data to generally improve our statistical model and thus also services for other users, this is done on the basis of a legitimate interest under Art. 6 (1) (f) GDPR. By deleting your Applicant Center account, your data will be completely anonymized in the statistical model, as the pseudonymized user ID stored in it will no longer allow any reference to your Applicant Center account. Our legitimate interest is in pursuing our business interests to improve our services. No conflicting interest is apparent, since the data is required during the contract period for achieving the purpose of the contract for the Applicant Center account and identification is no longer possible after the end of the contract.
Our services for recruiters aim to provide businesses with a wide selection of suitable candidates. In doing so, we process personal data of businesses (data relating to businesses is only personal data if the business is operated by one or more natural person/s) or employees of such businesses. The respective businesses may be in a contractual or pre-contractual relationship with us, but in some cases we may also process data about businesses and their employees if there is no such pre-contractual relationship. In this section 3.4 we inform you about the purpose, the respective legal basis as well as the retention period of such processing about businesses or their employees as well as the data categories, provided we do not collect the personal data from the data subject. The data will be deleted as soon as it is no longer necessary for the achievement of the purpose, that is, no contract with the customer exists and we no longer intend to enter into a contract with the respective customer and a legitimate interest no longer exists and, moreover, we are no longer obliged to keep records that may contain personal data.
which will then be data controller for the processing of personal data related to the sale of goods and services. The respective company is also data controller if the recruiter enters into a contract with that company for any other reason.
However, the actual services are provided by the the data controller named in section 1, so that it remains responsible for the provision of services. The various roles are referred to below. YOURCAREERGROUP Österreich GmbH, YOURCAREERGROUP Schweiz GmbH and StepStone Services Sp. Z o.o. are collectively referred to as "local subsidiaries" and then each such reference then refers to the company, which has sold the products or services to the recruiter.
YOURCAREERGROUP GmbH and the local subsidiaries process personal data for the purpose of contract management, that is, so that we can provide the customers with the contractual services and also for associated pre-contractual purposes. As far as the local subsidiaries enter into a contract with the customer, personal data will be transmitted to YOURCAREERGROUP GmbH for the fulfillment of the contract. If the customer is a natural person, the legal basis is that the processing is required for the performance of a contract or for the performance of pre-contractual measures pursuant to Art. 6 (1) sentence 1 b GDPR. If we process personal data of employees of the customer, the legal basis is a legitimate interest pursuant to Art. 6 (1) sentence 1 f GDPR. The legitimate interest lies in the conduct of our business and that of the customer. There is no conflicting interest of the data subject because, from the point of view of our customer, we are required to perform the processing in the context of the existing employment relationship with the data subject (section 26 revised German Data Protection Act (BDSG-neu). We store personal data for this purpose for the term of the contract.
Furthermore, we store accounting records for the duration of ten years and business correspondence, i.e. every message that is used to prepare, execute, or revoke a business transaction, for the duration of six years, in order to comply with statutory retention periods for business correspondence under section 257 (1) no. 2 German Commercial Code (HGB) and section 147 German Tax Code (AO), whereby the term begins at the end of the calendar year in which the correspondence was sent or received or the accounting record came into existence. The legal basis for this purpose is Art. 6 (1) (c) GDPR.
On our behalf, World Hotel Book Ltd, Maria-Theresien-Str. 29/4, A-6020 Innsbruck, Austria, is engaged in the distribution in Austria and South Tyrol, so that this company can be the recipient of data.
YOURCAREERGROUP GmbH and the local subsidiaries process the personal data of a business or its employees (as a contact person) obtained in connection with a contract with the respective company or in connection with a request addresses to it from a prospective customer, including after the end of the contract and, if no contract is entered into, for the purpose of customer services and particularly, in case of a new request of the customer or prospective customer, to be able to recommend suitable services on the basis of the previous contracts or inquiries. The legal basis is a legitimate interest under Art. 6 (1) sentence 1 f GDPR. The legitimate interest lies in the execution of our business activities. We store personal data for this purpose for as long as we believe the respective customer might enter into an initial or further contract with us in future, which is the case as long as the customer does not specifically inform us that he or she does not intend to enter into any contract with us under any circumstances.
In order to use and manage their contractual services, our customers or their employees can use the YOURCAREERGROUP Recruiter Space, which is provided by YOURCAREERGROUP GmbH. In this context, we process such personal data of the respective customer or its employees as was provided by them, as well as the respective contractually agreed or offered services and the manner in which they are utilized. When using our Applicant Profile Search we will also store if and when a candidate was contacted.
If the customer is a natural person, the legal basis is that the processing is required for the performance of a contract or for the performance of pre-contractual measures pursuant to Art. 6 (1) sentence 1 b GDPR. If we process personal data of the customer's employees, the legal basis is a legitimate interest pursuant to Art. 6 (1) sentence 1 f GDPR. The legitimate interest lies in the conduct of our business and that of the customer. There is no conflicting interest of the data subject because, from the point of view of our customer, we are already required to perform the data processing in the context of the existing employment relationship with the data subject (section 26 revised German Data Protection Act (BDSG-neu). Personal data will be stored for this purpose for the term of the contract for the use of the YOURCAREERGROUP Recruiter Space.
Additionally, we use the data collected under this section in anonymous form to produce statistics about the general behavior of the customers of the Applicant Profile Search. This allows us to make the services more customer-friendly. The legal basis is a legitimate interest pursuant to Art. 6 (1) sentence 1 f GDPR. The legitimate interest lies in the execution of our business activities.
If the customers publish advertising products or company portraits on our Platform, YOURCAREERGROUP GmbH processes personal data of the customer where the customer is a natural person. If our customer specifies an employee’s contact data in an advertisement product, we process this employee’s personal data to provide the relevant data to our users as part of the advertisement on our Platform and to ensure that the advertisement can be found via the search functionality on our Platforms. To increase the reach of the advertisement by submitting it to our co-operation partners, we may, in whole or in part, submit the advertisement content to our co-operation partners who provide the advertisement or a preview on their web site (for a list of co-operation partners, see https://www.hotelcareer.de/arbeitgeber/kooperationen-partner , further cooperation partner is meinestadt.de GmbH, Waidmarkt 11, 50676 Köln). If the customer is a natural person, the legal basis is that the processing is necessary for the performance of a contract pursuant to Art. 6 (1) sentence 1 b GDPR. If the advertisement contains contact details of employees of the customer, the legal basis is a legitimate interest pursuant to Art. 6 (1) sentence 1 f GDPR. The legitimate interest lies in the conduct of our business and that of the customer. There is no conflicting interest of the data subject because, from the point of view of our customer, we are required to perform the processing in the context of the existing employment relationship with the data subject (section 26 revised German Data Protection Act (BDSG-neu). We will store the data for this purpose for the contractual term during which the job advertisement is available on our Platforms.
YOURCAREERGROUP and the local subsidiaries process personal data about the respective customers as well as other companies and companies that are not in a business relationship with the respective company and in this context, if necessary, also from the respective contact persons for the purpose of direct marketing, as far as legally permitted. If we did not collect this data directly from the respective data subject, we may also collect contact data about the data subject from publicly available sources, in particular the website of the respective company, classified directories, or advertisements of the respective business. In connection with these direct marketing purposes, we can also process information about the previous contracts of our customers and specifics about the business such as industry or size of the business in order to make the advertising as appropriate as possible. The legal basis is a legitimate interest in accordance with Art. 6 (1) sentence 1 f GDPR. The legitimate interest lies in the processing of personal data for the purpose of direct advertising itself (see recital 47 GDPR). The data subjects have the right to object at any time to the processing of personal data concerning them for the purpose of such advertising. You object at any time under the contact details set out in clause 1; in the case of advertising by e-mail, you will also find an opt-out link directly in the respective e-mail. We will store personal data for this purpose as long as we are still interested in entering into a contract with the respective business or until the business objects.
When you register for a YOURCAREERGROUP webinar, YOURCAREERGROUP GmbH will collect certain information to enable you to participate in the webinar. The legal basis here is your consent in accordance with Art. 6 (1) sentence 1 a GDPR. We will store the data for this purpose until the webinar has taken place. We use LogMeIn, Inc., 333 Summer Street, Boston, MA 02210 USA to collect the registration data and provide the webinar as a data processor, and this party will be a recipient of your personal data in this context. Data will be transferred to the USA, i.e. into a country outside of the EU or the EEA. The transfer is permitted under Art. 45 GDPR as LogMeIn, Inc., is Privacy Shield certified and thus an adequate level of protection exists according to the Implementing Decision of the Commission (EU) 2016/1250 (http://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32016D1250&from=DE). The Privacy Shield notice can be accessed at https://www.logmeininc.com/de/legal/privacy-shield . Additionally, we have entered into the standard contractual clauses which are available at https://logmeincdn.azureedge.net/legal/(...) as a sample, so that a transfer is also permitted under Art. 46 (2) (c) GDPR.
We will also use the information you input to provide you with marketing as described in section 3.4.6, which is included herein by reference.
If you book participation in a seminar or event, we process personal data as described in Sections 3.4.2 to provide the seminar or event. Within the framework of such events or seminars, we transmit certain participant data (contact person name, job title, company) to the respective lecturer. In addition, these data will be recognizable on the day of the event by an attendance list and name plates on the tables of other participants. The legal basis is that this is necessary within the framework of the concluded contract.
You can set your browser up such that you are notified when a cookie is set and can decide individually whether to accept them or whether you opt out of accepting cookies for specific cases or generally. If you opt out of accepting cookies, the functionality of our website may be limited. We deal with specific cookies below.
Please click here if you wish to opt out of data recording via Facebook Pixel: https://www.facebook.com/settings?tab=advertisements#_=_. Alternatively, you can deactivate the Facebook Pixel on the Digital Advertising Alliance page via the following link: http://www.aboutads.info/choices/ .
You can opt out of using Adjust at any time by changing the setting of the slider for anonymous statistics in the app under "Settings".
We use the services of Firma AppDynamics LLC, 303 Second Street, 8th Floor, North Tower, San Francisco, CA 94107, for the purpose of performance monitoring. To this end, AppDynamics places a cookie that is only valid during your visit to our website.
Transfer of data to the USA is permissible under Art. 45 GDPR because AppDynamics is Privacy Shield certified and thus an adequate level of protection exists according to the Implementing Decision of the Commission (EU) 2016/1250 (http://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32016D1250&from=DE). The certification can be viewed at https://www.privacyshield.gov/participant?id=a2zt0000000GnJ2AAK .
The legal basis is a legitimate interest in accordance with Art. 6 (1) sentence 1 f GDPR. The legitimate interest is target group-oriented marketing for our services.
We use SiteCatalyst, a web-analytics tool from Adobe Systems Software Ireland Limited, that enables us to optimize our services in line with your requirements.
As a user of our websites you of course have the option to block cookies at any time in your browser settings. You can opt out of any future recording of your user behavior on the Platform at any time; click the following link for instructions on how to deactivate cookies on your computer: https://www.adobe.com/privacy/opt-out.html .
We use data processors as specified above for the respective processing purposes (in particular, “YOURCAREERGROUP Surveys”, “ hosting and securing our platforms, administrative, troubleshooting, and support services“ and „Cookies and technologies that we use via third party providers„). These can therefore, as described there, be the recipient of personal data.
Additionally, we may also provide or provide information to third parties under your consent or any agreement you have with us, as described above (in particular under „Application Form„, under „Application Center“ for a profile made available to you by potential employers and under „Data processing when publishing advertisement products“ in relation to business customers and their employees) so that these can be recipients as described.
In certain cases, we may transfer personal information to a country outside the EU or the EEA (so-called third countries). Essentially, this can be the case if you are applying for a job and the recruiter is based in a third country. More details can be found above under „Application form“ or „Application Center„. Furthermore, we use data processors or, within the scope of a legitimate interest, service providers that process data in some cases in third countries. For details, see „Sending of Emails and Other Messages,“ „Proxy Caching and Web Application Firewall„, „Google Re-Captcha“, „Youtube Videos“, „YOURCAREERGRPOUP Webinars“ and „Cookies and technologies that we use via third party providers„.
The right to receive the copy must not affect the rights and freedoms of others.
The supervisory body to which the complaint was submitted will notify the complainant of the status and outcomes of the complaint including the option of a judicial remedy under Art. 78 GDPR. Responsible supervisory authority for us is the Data Protection Commissioner for Nordrhein-Westfalen [Landesbeauftragter für den Datenschutz Nordrhein- Westfalen], www.ldi.nrw.de.
If you want to create a Jobfinder or an application center or if you would like to use our services as a business customer, you have to provide certain data within the scope of the contract to be concluded. We will specify such data. In any other context, the provision of personal data is neither required by law nor by contract, nor are you required to provide personal information. However, the provision of personal data for the use of our services may also be partially required within the services we provide. In other words, if you do not provide us with the information we specify to be necessary, we may not be able to provide you with the full scope of services.
We reserve the right to amend this Data Protection Policy in consideration of stipulations under data-protection law. You will always be able to locate the current version here or another corresponding, easily locatable point of our website or app. If we are intending to process your data for other purposes, i.e. those for which it was collected, we will notify you about this in advance in compliance with the statutory provisions.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 28
 Art. 45
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 45
 Art. 46
 Art. 45
 Art. 6
 Art. 78