Information about data processing

V2 (022024)

Kirchdorfer Group Services GmbH uses the onlyfy one service (by XING) to process job applications. This Privacy Policy will inform you about the processing of your data by the onlyfy one service and by Kirchdorfer Group Services GmbH.

Shared responsibility

With regard to interaction within the company account of Kirchdorfer Group Services GmbH, Kirchdorfer Group Services GmbH and New Work SE have shared responsibility pursuant to Article 26 GDPR, as they jointly determine the purposes and means of processing pursuant to Article 4 (7) GDPR. The current version of the agreement on shared responsibility pursuant to Article 26 GDPR, which New Work SE concludes with companies that use onlyfy one, can be viewed here https://www.xing.com/terms/onlyfy-one to gain information on the key aspects of the agreement.

Data processing by New Work SE

onlyfy one is part of the extensive XING service operated by New Work SE, which pursues the aim of improving and simplifying users’ working lives with a variety of applications (onlyfy one, as well as the XING social and jobs network, kununu, etc.), and creates a more fulfilling working world of work for individuals while boosting the performance of companies. As part of the extensive XING service, onlyfy one is an online platform on which or through which talent and companies meet.

With regard to data processing for which New Work SE is solely responsible or is responsible within the scope of the shared responsibility with Kirchdorfer Group Services GmbH, detailed information is available in the XING Privacy Policy at https://privacy.xing.com/en/privacy-policy. You will also find contact details for New Work SE, as well as for the New Work SE data protection officer there.

Job applications with onlyfy one

When submitting an application, you enter into a user relationship with New Work SE for the purpose of processing applications. In addition, you will receive support and New Work SE can present you with other opportunities in support of your career. A public profile will not be automatically created for you on the XING social and jobs network. The legal basis for New Work SE processing your data is, in particular, Article 6 (1)(b) GDPR (processing necessary for the performance of a contract).

Pausing your online application

You can pause the creation of your online application at any time and continue at a later point. Cookies are used for this purpose. The data you provide to create the user account, as well as any uploaded documents, are recorded in the company account of Kirchdorfer Group Services GmbH in onlyfy one. The data remains recorded even if an application is paused and/or not completed. In this case, your application is flagged as incomplete and the data remains visible to Kirchdorfer Group Services GmbH only.

Visibility of your data

The data you have provided as part of the online application can be read, edited, or updated in your candidate profile at any time.

Notes on the special functions of onlyfy one

Calendar function

If the calendar function is used, your data is processed during and for the purpose of setting appointments within the application process. The legal basis is Article 6 (1)(f) GDPR. The calendar function is provided by an IT service provider (Cronofy Ltd., United Kingdom). The United Kingdom is classified as a secure third country based on the adequacy decision of the European Commission. Further information on data protection at Cronofy is available here: https://www.cronofy.com/gdpr/ and https://docs.cronofy.com/policies/privacy-notice/

WhatsApp application

If you use the apply using WhatsApp function, your consent, which can be withdrawn at any time, forms the legal basis for communication (Article 6 (1)(a) GDPR). When applying via WhatsApp, all required applicant information is requested during a WhatsApp chat. The data is then sent directly to onlyfy one through a service provider, and is processed further there as part of and for the purpose of the normal application process.

The apply via WhatsApp function is provided by an IT service provider (PitchYou) that can gain access to your data for this purpose. More information is available here: https://www.pitchyou.de/en/pitchyou-gdpr. Candidate data from apply via WhatsApp are transferred to onlyfy one via an interface. Immediately after this transfer, candidate data are deleted from the apply via WhatsApp infrastructure in PitchYou. Further processing then takes place exclusively in onlyfy one.

Please note that you use your personal WhatsApp account for applications, and therefore we cannot rule out that messages will be transferred, to the USA in particular. WhatsApp data protection information, such as its processing or exercising of data protection rights with regard to WhatsApp is available here: https://www.whatsapp.com/legal/privacy-policy-eea.

Subject to your consent, your application will be sent from WhatsApp via the PitchYou infrastructure to onlyfy one. You have the right to withdraw your consent to this at any time. Either way, your application data will be deleted from the PitchYou infrastructure once transferred to onlyfy one, meaning that PitchYou will not process your data any further.

Applicability of the Swiss Federal Data Protection Act (FADP)

The FADP applies to circumstances which have an impact on Switzerland, even if said circumstances are initiated outside of Switzerland. Correspondingly, this privacy policy applies to information in line with the EU GDPR and the FADP. Here, EU GDPR terminology is used in favour of FADP terminology. However, FADP terminology is used if the FADP applies and the terminology differs from EU GDPR terminology in a given language. The About this site section on XING contains the name and address of our representative in Switzerland.

Data protection declaration – data processing by the Kirchdorfer Group
Version 2.4 (July 2023)

Below you will find information regarding the data processing for which the Kirchdorfer Group is solely responsible or which is jointly responsible with New Work SE.

1. General information on data protection in the Kirchdorfer Group

We are pleased that you are interested in us and would like to apply or have applied for a position in one of our companies in the Kirchdorfer Group. Transparency and trusting handling of your personal data is an important basis for good cooperation. We are therefore informing you about how we process your data and how you can exercise the rights you are entitled to under the General Data Protection Regulation (GDPR). The information below gives you an overview of the collection and processing of your personal data in connection with the implementation of the application process.

This data protection information applies in addition to our existing data protection information for visiting our websites, in which you will receive specific information on how we process your personal data as part of the website visit or for non-application-specific topics:

Beck Lärmschutz GmbH
DELTABLOC Holding GmbH
DELTABLOC International GmbH
https://deltabloc.com/de/datenschutzerklaerung

Kammel Ges.m.b.H.
https://www.kammel.eu/datenschutz/

Katzenberger Fertigteilindustrie GmbH 
https://www.katzenberger.at/impressum/

Kirchdorfer Fertigteilholding GmbH
https://www.concrete-solutions.eu/datenschutz/

Kirchdorfer Group Services GmbH
Kirchdorfer Kies und Transportbetonholding GmbH
https://www.kirchdorfer.at/kontakt/datenschutzerklaerung/

Kirchdorfer Zementwerk Hofmann Gesellschaft m.b.H.
ALFUMA GmbH
https://www.kirchdorfer-zement.at/kontakt/datenschutzerklaerung/

LUIKI Betonwerke GmbH
https://www.luiki.at/datenschutz/

MABA Fertigteilindustrie GmbH
MABA Montagebau GmbH
https://www.maba.at/datenschutz/

Rauter Fertigteilbau GmbH
https://www.rauter.at/Impressum.html

TIBA Austria GmbH
https://www.tibanet.com/datenschutz/

WIBAU Holding GmbH
WIBAU Kies und Beton GmbH
https://wibau.at/datenschutzerklaerung/

2. Who is responsible for data processing?

Responsible within the meaning of Art. 4 No. 7 DSGVO is the respective company to which you are applying or have applied. The person responsible in each case is hereinafter referred to as "we".

3. Contact options for the responsible body

You will find the contact details for the responsible office in the data protection declaration of the respective company linked above.

Contact option for the responsible office of the Kirchdorfer Group:

KIRCHDORFER GROUP SERVICES GMBH
Kirchdorfer Platz 1
2752 Wollersdorf
Austria
Phone: +43 57715 100-0
E-mail:dataprivacy@kirchdorfer.eu

4. What is personal data?

According to Art. 4 No. 1 GDPR, personal data is all information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more special features that express the physical , physiological, genetic, psychological, economic, cultural or social identity of that natural person.

5. Which of your data do we process and for what purposes?

We process the data that you have sent us in connection with your application in order to check your suitability for the position (or any other open positions in our group of companies).

The following data or data categories are processed to carry out the application process:

• Applicant master data (first name, surname, title, e-mail address, telephone number, address, date of birth, nationality)
• Qualification data (cover letter, letter of motivation, curriculum vitae, previous activities, professional qualifications and skills)
• Voluntary information, such as an application photo, information on severely disabled status or other information that you voluntarily provide to us in your application or upload voluntarily
• Additional questions depending on the respective advertisement (e.g. driver’s license)
• The communication between you and us, as well as comments and reviews written about you as part of your application process
• Other data or data categories, e.g. publicly available, job-related data such as a profile on professional social media networks such as XING or LinkedIn
• Special categories of personal data: If you provide information in your application documents that contains special categories of personal data within the meaning of Art. 9 Para. 1 DSGVO (e.g. information that allows conclusions to be drawn about your sexual orientation; information about your health; information that allows conclusions on your ethnic origin or your religion), we will also only process this data within the legally permissible framework.

For a simple, fast and uncomplicated appointment in the application process, we may optionally offer you the option of making an appointment online. For this service we primarily use the provider Microsoft Teams. This service is operated by Microsoft Ireland Operations, Ltd. If you require information about the processing by Microsoft, please see the relevant statement under the following link: https://privacy.microsoft.com/de-de/privacystatement

In connection with the use of the platform, further personal data is processed, which you can view under the following link: https://onlyfy.com/de/datenschutz/

6. For what purposes do we process your data and on what legal basis?

Data processing for the purposes of the employment relationship – Article 6 Paragraph 1 Letter b) GDPR, Section 26 Paragraph 1 BDSG
Your personal data will be processed for the purpose of selecting personnel to fill vacancies in connection with the decision to establish an employment relationship, i.e. to initiate an employment contract. The necessity and scope of the data collection are assessed, among other things, according to the position to be filled. More extensive data collection may be necessary if your desired position involves the performance of particularly confidential tasks, greater personal and/or financial responsibility, or is linked to certain physical and health conditions. Your data can also be used to remind you of the completion of your application.

Consent – Art. 6 (1) (a) and Art. 9 (2) (a) GDPR, Section 26 (2) BDSG
If you have given us your voluntary consent to the processing of certain personal data, then this consent forms the legal basis for the processing of this data.

In the following cases we process your personal data on the basis of your consent:

• For a longer data storage for our company, ie we store the application documents in our company account beyond the current application process for consideration in later application processes of our company.
• To forward the documents to other group companies. For this purpose, the data that you have already provided in the application process will be processed.

If we base data processing on your consent, you have the right to revoke your consent at any time with effect for the future. If possible, send the revocation by e-mail to dataprivacy@kirchdorfer.eu. The legality of the processing of your data up to the point of revocation remains unaffected.

Data processing based on legitimate interest – Art. 6 Para.1 lit. f GDPR
In certain cases, we process your data to protect a legitimate interest of ours or of third parties. A legitimate interest exists, for example, if your data is required to assert, exercise or defend legal claims in the context of the application process (e.g. claims under the General Equal Treatment Act). In the event of a legal dispute, we have a legitimate interest in processing the data for evidentiary purposes.

7. Who is your data shared with?

Your data will mainly be processed by our human resources department. In some cases, however, other internal and external bodies are also involved in the processing of your data.
Internal positions can be departments or departments or the works council of our company.Suitable applications are forwarded internally by the human resources department, if necessary also within the group of companies, to the department heads for the respective open position. In principle, only those people in the company who need it for the proper running of our application process have access to your data.

We use New Work SE as an external service provider. New Work SE, Strandkai 1, 20457 Hamburg operates onlyfy one, the online platform we use on which or via which talents and companies come together. You have received more information about onlyfy one above.

If you apply via onlyfy one, your personal data will be recorded directly in onlyfy one. We can also transfer your data to onlyfy one in the case of a postal or e-mail application.

8. How long will your data be stored in our onlyfy one company account?

We store your personal data for as long as this is necessary for the decision on your application. If the application process results in an employment relationship with a company in the Kirchdorfer Group, the data from the applicant data system will be transferred to our payroll accounting system. If an employment relationship does not come about between you and us, we can also continue to store data insofar as this is necessary to defend against possible legal claims. Your data is regularly deleted within six months after the end of the application process for our company.

If no employment relationship comes about, but you have given us your consent for the further storage of your data ("applicant pool of the Kirchdorfer Group"), we will save your data until you revoke your consent, but for a maximum of 18 months. If there is a specific reason, we can also store your data for the purpose of defending against possible legal claims for a longer period of time.

If you withdraw your application before the end of the application process, ie delete your data and your account, the stored data will be blocked for the period of the application process that is still ongoing and will be deleted for our company six months after the end of the application process.

If you do not make any further changes in your candidate profile, for example, complete an ongoing application, start a new application or change the data of an existing application, your data will be deleted within six months after the end of the last active application process for our company.

If you no longer use your candidate profile and have not given your consent to longer data storage in our applicant pool, the data will be deleted within six months after the end of the application process for our company.

You can request deletion of your candidate profile and application documents at any time. After the deletion request has been made, you will be informed of the exact deletion date and your data will be automatically deleted in accordance with the conditions set out in this data protection guideline.

9. What rights do you have in connection with the processing of your data?

(1) You can request information as to whether we have stored personal data about you. If you wish, we will tell you what data is involved, for what purposes the data is processed, to whom this data is disclosed, how long the data is stored and what other rights you have in relation to this data.

(2) In addition, you have the right to correction or deletion of your data. You can also request that we provide any personal data that you have provided to us in a structured, commonly used and machine-readable format, either to you or to a person or company of your choice.

(3) You also have the right not to be subject to a decision based solely on automated processing - including profiling - which has legal effect on you. As part of the application process, we do not use exclusively automated processing processes for decision-making.

(4) You also have the right, for reasons that arise from your particular situation, at any time against the processing of personal data concerning you, which is based on Art. 6 Para.1 l.it. e GDPR (data processing in the public interest) or based on Art. 6 Para.1 lit. f GDPR (data processing to protect a legitimate interest),to object, this also applies to profiling based on this provision. In the event of your objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

(5) In addition, there is a right of appeal to the competent data protection supervisory authority.

To exercise your rights, you can contact dataprivacy@kirchdorfer.eu or contact the responsible office of the respective company. We will process your request immediately and in accordance with the legal requirements and inform you of the measures we have taken or will take.

10. Is there an obligation to provide your personal data?

The provision of personal data is not required by law or contract, nor are you obliged to provide the personal data. However, the provision of personal data is required to carry out the application process. This means that if you do not provide us with any personal data when applying, we cannot carry out the application process.