Privacy Policy for bupco e.U.

Last updated: May 2026

1. Introduction

bupco e.U. ("we", "us", "our") is the controller within the meaning of Article 4(7) GDPR.

We are committed to protecting your personal data and processing it in accordance with:

the EU General Data Protection Regulation (GDPR); and
the Austrian Data Protection Act (Datenschutzgesetz – DSG).

2. Controller Contact Details

bupco e.U.
Schmiedgasse 20
4040 Linz
Austria

Email: [email protected]
Privacy inquiries: [email protected]
Phone: to be added

3. Categories of Personal Data

We may process the following categories of personal data:

Name
Email address
Phone number
CV/résumé information
Employment history
Education details
Professional qualifications
References
LinkedIn profile information
Interview notes
Photographs, where voluntarily provided

4. How We Collect Personal Data

We collect personal data through:

Email communications
Online meetings/interviews
Our website
LinkedIn and other professional networking platforms
Direct applications and referrals

5. Purpose and Legal Basis of Processing

We process personal data for the following purposes and legal bases under Article 6 GDPR:

PurposeLegal BasisAssessing candidates for job opportunitiesArticle 6(1)(b) GDPR (pre-contractual measures)Communicating regarding recruitment opportunitiesArticle 6(1)(b) and/or 6(1)(f) GDPRMaintaining a candidate database for future opportunitiesArticle 6(1)(a) GDPR (consent)Sharing candidate profiles with clients or recruitment partnersArticle 6(1)(b), 6(1)(f), or consent where requiredInternal business administration and complianceArticle 6(1)(f) GDPR

Where processing is based on consent, you may withdraw your consent at any time.

We may share personal data with:

Clients seeking candidates for employment or contract roles
Recruitment and HR service providers
IT and hosting providers

Recipients may act as independent controllers or processors depending on the circumstances.

Where required, we enter into appropriate data processing agreements in accordance with Article 28 GDPR.

Information about relevant recipients may be provided upon request, subject to confidentiality obligations.

7. International Data Transfers

As a general rule, personal data is processed within the European Economic Area (EEA).

If personal data is transferred outside the EEA, we will ensure appropriate safeguards are implemented in accordance with Chapter V GDPR.

8. Data Retention

We retain personal data only for as long as necessary for the purposes described in this policy.

Candidate data is generally retained for up to 24 months after the last meaningful interaction unless:

a longer retention period is required by law;
you renew your consent; or
earlier deletion is requested.

You may request deletion of your data at any time, subject to legal retention obligations.

9. Your Rights

Under GDPR, you have the right to:

Access your personal data
Rectify inaccurate data
Request erasure of your data
Restrict processing
Object to processing based on legitimate interests
Receive your data in a portable format
Withdraw consent at any time

To exercise these rights, contact: [email protected]

10. Automated Decision-Making

We do not use fully automated decision-making within the meaning of Article 22 GDPR.

We may use search filters or keyword matching tools to assist recruitment processes, but all decisions are subject to human review.

11. Data Security

We implement appropriate technical and organizational measures to protect personal data, including:

Access controls
Secure storage systems
Encryption where appropriate
Restricted access to candidate information

12. Complaints

You have the right to lodge a complaint with the Austrian Data Protection Authority:

Austrian Data Protection Authority (DSB)
Barichgasse 40–42
1030 Vienna
Austria

Website: https://www.dsb.gv.at

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The latest version will be made available on our website.