Information on the Processing of Applicant Data

This page provides you with information on the processing of your personal data by the Casinos Austria AG & Österreichische Lotterien GmbH Group¹ (hereinafter referred to as the “Group” or “we”) as part of the job application process.

Who is responsible for data processing in the Group and how can I contact the data protection officer?

The company to which you have submitted your application is also responsible for the processing of your data. Accordingly, one of the following companies can be responsible for data processing in the meaning of the General Data Protection Regulation (“GDPR”):

• Casinos Austria Aktiengesellschaft
  (hereinafter referred to as “CASAG”) FN 99639d

• Österreichische Lotterien Gesellschaft m.b.H.
  (hereinafter referred to as “ÖLG”) FN 54472g

• Glücks- und Unterhaltungsspiel Betriebsges.m.b.H.
  (hereinafter referred to as “WINWIN”) FN 241637z

• Casinos Austria International Holding GmbH
  (hereinafter referred to as “CAIH”) FN 37681p

• Casinos Austria Management GmbH
  (hereinafter referred to as “CAMG”) FN 38657z

• Österreichische Sportwetten Gesellschaft m.b.H.
  (hereinafter referred to as “tipp3”) FN 196645i

• Cuisino Ges.m.b.H.
  (hereinafter referred to as “Cuisino”) FN 54015i

• CAST Casinos Austria Sicherheitstechnologie GmbH
  (hereinafter referred to as “CAST”) FN 94404f

• Österreichische Klassenlotterie Vertriebsgesellschaft m.b.H.
  (hereinafter referred to as “KLVG”) FN 468412t

Headquarters of all these companies: Rennweg 44, 1038 Vienna, Austria

• Congress Center Baden Betriebsges.m.b.H.
  (hereinafter referred to as “CCB GmbH”) FN 67046y

Headquarters: Kaiser Franz Ring 1A, 2500 Baden, Austria

You can contact our data protection officer by e-mail at datenschutz@cal.at.

Which categories of data are processed as part of the application process and what is their source?

The categories of personal data processed include in particular the following:

• Core data (e.g. name, address, date of birth, academic title/level, telephone number, e-mail address, marital status, curriculum vitae, link to social media channels)

• Data on the desired employment relationship (e.g. job title, salary expectations)

• Data on school, university and other qualifications (e.g. training, work experience, language skills)

• In the event of a job offer: extract from the criminal records and social security number)

As a rule, the data will be supplied by you as part of the application process (by e-mail, by phone or via our online portal). In some cases, we may receive data from third parties such as recruitment agencies.

For what purposes and on which legal basis are data processed?

Your data will only be processed in accordance with the purposes set out herein (e.g. inclusion of your data in an applicant database, keeping your applicant data on file in the event that we do not currently have a suitable vacancy to fill, collection of data to identify applicant statistics and assess the efficiency and effectiveness of the process), to process your application and, if necessary, transfer your data to your personnel file, and to take any measures required to establish and subsequently manage your employment relationship.

We process your personal data in accordance, for example, with the Austrian Equal Treatment Act (Gleichbehandlungsgesetz), the European General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (Datenschutzgesetz)

– in the fulfilment of (pre-contractual) measures (Article 6 (1) b, GDPR)

Your data are processed (in the event of a hire) to complete precontractual measures detailed in the employment contract and subsequent obligations relating to your employment.

– with your consent (Article 6 (1) a, GDPR)

If you have given us your consent to process your personal data, these data will be processed solely in accordance with the purposes set out in the statement of consent and to the agreed extent (e.g. in the forwarding of application documents to another company in our Group, when keeping your application on file in our talent pool for the duration of seven months). You can withdraw your consent to future processing at any time by sending an e-mail to datenschutz@cal.at.

The withdrawal of consent shall not affect the lawfulness of any data processing prior to the withdrawal.

– in the pursuit of legitimate interests (Article 6 (1) f, GDPR)

Where necessary, your data may be processed beyond the actual fulfillment of the contract in order to protect our legitimate interests or those of third parties (e.g. in the event of a case before the Labour and Social Court (Arbeits- und Sozialgericht, ASG) or the Equal Opportunities Commission, data processing for statistical purposes that do not extend to personal data).

Who will receive your data?

Within the company to which your application is directed, your data will only be forwarded to the departments or members of staff involved in the actual applicant selection process, including, in particular, the human resources department and the department in which the actual job is located.

Your data will only be provided to – and for the separate purposes of – another company in our Group than the one to which you originally submitted your application with your express prior consent.

Your data will also be provided to our contractually bound subcontractors (in particular, IT service providers and back office service providers, who may also be other companies in our Group serving as subcontractors for the aforementioned purposes) in the event that they should require these data to complete their contracted tasks. All subcontractors are contractually obliged to treat your data as confidential and to process your data solely within the scope of fulfilling their contractual obligations.

How long will your data be stored?

We generally process your personal data for the duration of your application process and for up to seven months after the end of the application process. If an employment relationship is established, we will continue to process your personal data from the application process for the purposes and requirements of this employment relationship in accordance with the details supplied in a separate notification.

In the event that you have given your consent for your personal data to be kept on file, your data will be stored for a period of seven months from the last login and then erased. After five months have passed, we may contact you by e-mail to ask whether you would like to extend your consent for a further seven-month period so that your data can be kept on file for consideration in further vacancies in our job application portal.

Consent to future processing can be withdrawn at any time by sending an e-mail to datenschutz@cal.at. The withdrawal of consent shall not affect the lawfulness of any data processing prior to the withdrawal.

If you withdraw your consent, we will erase your personal data seven months after the completion of the application process or with immediate effect should you withdraw your consent after the end of this period. This shall not apply if any legal provisions prevent the erasure of the data or if the continued storage of the data is required for evidentiary purposes, e.g. in legal proceedings.

Rights regarding the processing of personal data

Data subjects can assert their rights to disclosure, rectification or erasure of data, restriction of processing, data portability and objection by sending an e-mail to datenschutz@cal.at.

Consent to future processing can be withdrawn at any time by sending an e-mail to datenschutz@cal.at. The withdrawal of consent shall not affect the lawfulness of any data processing prior to the withdrawal.

Data subjects also have the possibility to lodge a complaint with the responsible supervisory authority (Data Protection Authority, dsb@dsb.gv.at).

Are you obliged to provide your personal data?

You must provide the personal data required to enable us to make the decision on offering you a job and establishing an employment relationship. If you do not provide us with these data or only provide us with incomplete data, we regret that we will not be able to consider your application.