Information on the Processing of Applicant Data

This page provides you with information on the processing of your personal data by the Casinos Austria AG & Österreichische Lotterien GmbH Group1 (hereinafter referred to as the “Group” or “we”) as part of the job application process.

Who is responsible for data processing in the Group and how can I contact the data protection officer?

The company to which you have submitted your application is also responsible for the processing of your data. Accordingly, one of the following companies can be responsible for data processing in the meaning of the General Data Protection Regulation (“GDPR”):

Headquarters of all these companies: Rennweg 44, 1038 Vienna, Austria

Headquarters: Kaiser Franz Ring 1A, 2500 Baden, Austria

You can contact our data protection officer by e-mail at

Which categories of data are processed as part of the application process and what is their source?

The categories of personal data processed include in particular the following:

As a rule, the data will be supplied by you as part of the application process (by e-mail, by phone or via our online portal). In some cases, we may receive data from third parties such as recruitment agencies.

Your data will only be processed in accordance with the purposes set out herein (e.g. inclusion of your data in an applicant database, keeping your applicant data on file in the event that we do not currently have a suitable vacancy to fill, collection of data to identify applicant statistics and assess the efficiency and effectiveness of the process), to process your application and, if necessary, transfer your data to your personnel file, and to take any measures required to establish and subsequently manage your employment relationship.

We process your personal data in accordance, for example, with the Austrian Equal Treatment Act (Gleichbehandlungsgesetz), the European General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (Datenschutzgesetz)

– in the fulfilment of (pre-contractual) measures (Article 6 (1) b, GDPR)

Your data are processed (in the event of a hire) to complete precontractual measures detailed in the employment contract and subsequent obligations relating to your employment.

– with your consent (Article 6 (1) a, GDPR)

If you have given us your consent to process your personal data, these data will be processed solely in accordance with the purposes set out in the statement of consent and to the agreed extent (e.g. in the forwarding of application documents to another company in our Group, when keeping your application on file in our talent pool for the duration of seven months). You can withdraw your consent to future processing at any time by sending an e-mail to

The withdrawal of consent shall not affect the lawfulness of any data processing prior to the withdrawal.

– in the pursuit of legitimate interests (Article 6 (1) f, GDPR)

Where necessary, your data may be processed beyond the actual fulfillment of the contract in order to protect our legitimate interests or those of third parties (e.g. in the event of a case before the Labour and Social Court (Arbeits- und Sozialgericht, ASG) or the Equal Opportunities Commission, data processing for statistical purposes that do not extend to personal data).

Who will receive your data?

Within the company to which your application is directed, your data will only be forwarded to the departments or members of staff involved in the actual applicant selection process, including, in particular, the human resources department and the department in which the actual job is located.

Your data will only be provided to – and for the separate purposes of – another company in our Group than the one to which you originally submitted your application with your express prior consent.

Your data will also be provided to our contractually bound subcontractors (in particular, IT service providers and back office service providers, who may also be other companies in our Group serving as subcontractors for the aforementioned purposes) in the event that they should require these data to complete their contracted tasks. All subcontractors are contractually obliged to treat your data as confidential and to process your data solely within the scope of fulfilling their contractual obligations.

How long will your data be stored?

We generally process your personal data for the duration of your application process and for up to seven months after the end of the application process. If an employment relationship is established, we will continue to process your personal data from the application process for the purposes and requirements of this employment relationship in accordance with the details supplied in a separate notification.

In the event that you have given your consent for your personal data to be kept on file, your data will be stored for a period of seven months from the last login and then erased. After five months have passed, we may contact you by e-mail to ask whether you would like to extend your consent for a further seven-month period so that your data can be kept on file for consideration in further vacancies in our job application portal.

Consent to future processing can be withdrawn at any time by sending an e-mail to The withdrawal of consent shall not affect the lawfulness of any data processing prior to the withdrawal.

If you withdraw your consent, we will erase your personal data seven months after the completion of the application process or with immediate effect should you withdraw your consent after the end of this period. This shall not apply if any legal provisions prevent the erasure of the data or if the continued storage of the data is required for evidentiary purposes, e.g. in legal proceedings.

Rights regarding the processing of personal data

Data subjects can assert their rights to disclosure, rectification or erasure of data, restriction of processing, data portability and objection by sending an e-mail to

Consent to future processing can be withdrawn at any time by sending an e-mail to The withdrawal of consent shall not affect the lawfulness of any data processing prior to the withdrawal.

Data subjects also have the possibility to lodge a complaint with the responsible supervisory authority (Data Protection Authority,

Are you obliged to provide your personal data?

You must provide the personal data required to enable us to make the decision on offering you a job and establishing an employment relationship. If you do not provide us with these data or only provide us with incomplete data, we regret that we will not be able to consider your application.

  1. Casinos Austria AG, Österreichische Lotterien GmbH, Glücks- und Unterhaltungsspiel Betriebsges.m.b.H., Österreichische Sportwetten GmbH, Casinos Austria International Holding GmbH, Cuisino Ges.m.b.H., CAST Casinos Austria Sicherheitstechnologie GmbH, Österreichische Klassenlotterie Vertriebsgesellschaft m.b.H. and Congress Center Baden Betriebsges.m.b.H.