Privacy policy regarding data processing in the application process

Privacy policy regarding data processing in the application process

General information

With this privacy policy we would like to inform you how your personal data are processed when you apply via our website to an advertised job or if you send an unsolicited application. This privacy policy additionally describes your data protection rights, to which you are entitled in connection with the processing of your personal data within the scope of the application process.

For the general privacy policy we refer to our website https://nuki.io/en/service/privacy/.

Controller

The controller within the meaning of the GDPR is:

Nuki Home Solutions GmbH
Münzgrabenstraße 92/4, 8010 Graz
Tel.: +43 316 22 84 09
Email: contact@nuki.io
Website: www.nuki.io

Company register court: Regional Court for ZRS Graz
Company register number: FN 422826d

You can contact our data protection officer under:
Tel.: +43 316 22 84 09
Email: privacy@nuki.io

Data collection

Personal data are details regarding personal or factual circumstances of a certain or definable natural person. These shall include information such as, for example, your name, your address, your telephone number and your date of birth, but also data regarding your concrete career, etc., which can be allocated to a certain person with a reasonable amount of work. Information which is not (in)directly associated with your real identity is, on the other hand, not personal data.

Bases and purposes of the processing

Should you apply to us by electronic means, thus per email or via our web form, we will collect and process your personal data for the purpose of

• processing your (unsolicited) application / examination of your suitability for an advertised position
• contact and
• keeping of evidence.

Should an employment relationship be concluded, you will be informed separately about the processing of your data within the scope of your employment relationship.

With the sending of an application on our recruiting site you announce your interest in wanting to begin employment in our company. You transmit personal data to us in this context, which we exclusively use and store for the purpose of your job search/application.

The following data are particularly collected hereby:

• Name (First as well as last name)
• Email address
• Telephone number
• Date of birth
• Salary expectation
• LinkedIn profile (optional)
• Availability from
• Channel, through which your attention was drawn to our company

In addition, you have the possibility to upload documents of informative value such as a cover letter, your curriculum vitae, certificates and references. These will, if applicable, contain further personal data such as date of birth, address, etc.

Only authorised employees from the Human Resources sector or employees who are involved in the application procedure have access to your data.

Legal basis

The processing of your personal data is principally based on the execution of pre-contractual measures (Art. 6 Para. 1 lit. b GDPR). A provision of special categories of personal data within the scope of the application form is principally not necessary for an application. If you nevertheless announce special categories of personal data (such as health-related data, religious confession etc), this shall be carried out voluntarily and the voluntary data transmission is to be assessed as an explicit consent within the meaning of the GDPR.

It is pointed out that the processing of the photos that are, if applicable, transmitted by you is only carried out for the purpose of recognition and allocation of the applicant’s documents and, in the event of the conclusion of an employment relationship, for the introduction of the new employee within Nuki and processing for other purposes is excluded.

Disclosure of data to third parties

Within our company, only those who require your personal data to fulfil the purposes stated above are granted access to these data (see Subclause 4). Incidentally, these data will, if applicable, be forwarded to the following data processors assigned by us within the scope of the application process.

The data transmitted within the scope of your application are transferred per TLS encryption and stored in a database. This database is operated by Personio GmbH, Rundfunkplatz 4, 80335 Munich, Germany, which offers a personnel and applicant management-software. Personio is, in this context, our data processor according to Art. 28 GDPR. The basis for the processing here is an agreement regarding the data processing between us as the controller and Personio.

For the execution of digital interviews in connection with the application process we use the service Google Meet of Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter “Google”). In this context, Google processes the video transmission on our behalf as well as necessary metadata and personal data required for the appointment. The basis for the processing in this case is an agreement regarding the data processing between us as the controller and Google. Part of the data processing agreement with Google are so-called EU standard data protection clauses (Art. 46 Para. 2 S. 1 lit. c GDPR). These are to be classified as a suitable guarantee for the protection of the transfer and the processing of personal data outside of the EU.

Duration of the storage

The data required for processing your (unsolicited) application/verifying your suitability for an advertised position are generally stored for a period of six months after the end of the application process due to the applicable legal provisions (Austrian Equal Treatment Act, Austrian Disabled Persons Employment Act). If your application is to be kept for a longer period of time for the purpose of evidence, your (explicit) consent will be obtained in advance.

After expiry of the storage deadline, your personal data will be anonymised by us and will only be available to us as so-called metadata still without a direct reference to a person for statistical evaluations (for example the share of applications by women or men, number of applications per period of time etc.).

Insofar as you have granted a corresponding consent, we shall deposit the personal data collected within the scope of the application process in our applicant pool for the duration of one year. This gives us the possibility to also be able to consider you for filling a vacant position in future. You have the right to revoke your consent at any time with effect for the future. After your consent has been revoked or after the course of two years, your data will no longer be used for the application process and will be erased from our applicant pool.

Insofar as you receive an offer for a position in our company within the scope of the application procedure and accept this, we shall store the personal data collected within the scope of the application procedure for at least the duration of the employment relationship. We will inform you separately about the processing of your data within the scope of your employment relationship.

Rights of data subjects

If personal data are processed by us as the controller, you as the data subject have, depending on the legal basis and purpose of the processing, certain rights from Chapter III of the EU General Data Protection Regulation (GDPR), if applicable, in particular the right of access (Art.15 GDPR), the right to rectification (Art.16 GDPR), the right to erasure (Art. 17 GDPR), the right to restriction of processing (Art. 18 GDPR), the right to data portability (Art. 20 GDPR), the right to object (Art. 21 GDPR).

Insofar as the processing of personal data is based on your consent according to Art. 7 III GDPR, you have the right to revoke this consent under data protection law.

If you are of the opinion that the processing of your personal data is not being carried out within the meaning of the General Data Protection Regulation, you have the right to lodge a complaint at the responsible supervisory authority (DSB – Data Protection Authority).

The contact details of the Austrian Data Protection Authority are as follows:

• Address: Barichgasse 40-42, 1030 Vienna
• Email: dsb@dsb.gv.at

Please contact us as follows for the assertion of your rights according to the General Data Protection Regulation:

• by email at privacy@nuki.io or
• by post at Nuki Home Solutions GmbH, Münzgrabenstraße 92/4, 8010 Graz

Final provisions

We reserve the right to adjust this privacy policy at any time so that it always complies with the current legal requirements or in order to depict changes to the application procedure or similar provisions. For a renewed visit to this recruiting site or a renewed application, the current privacy policy shall then apply.