Privacy Policy for Bär und Pferd Consulting e.U.

1. Introduction

Bär und Pferd Consulting e.U. (referred to as "we", "us", or "our") is the data controller within the meaning of Article 4(7) of the General Data Protection Regulation (GDPR). We are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, and share your personal data in compliance with the GDPR and the Austrian Data Protection Act (Datenschutzgesetz, DSG).

Contact Information:

• Email: [email protected]
• Phone: Placeholder
• Address: Scmiedegase 20, 4040 Linz, Austria

2. Types of Data We Collect

We collect the following types of personal data:

• Full name
• Email address
• Phone number
• CV details
• Work history
• Education
• References
• Photos

3. How We Collect Data

We collect your personal data through:

• Online meetings
• Our website
• Email communications
• LinkedIn

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: When you provide your data to be considered for job opportunities.
• Legitimate Interest: To match you with job opportunities and communicate about roles.
• Contractual Necessity: To take steps prior to entering into a contract for employment or recruitment services.

5. Purpose of Data Processing

We use your data for the following purposes:

• Matching candidates to job opportunities
• Sharing your profile with third-party recruitment agencies (clients)
• Communicating about job opportunities
• Storing CVs for future openings

6. Sharing of Data

We may share your personal data with third-party recruitment agencies, as well as our clients, who act as either independent data controllers or processors, depending on the specific context. These third parties, including our clients, are contractually obligated to handle your data in accordance with GDPR requirements. A list of these third-party partners and clients (relevant to the user requesting this information) can be made available upon request.

7. International Data Transfers

All candidate data remains within the European Economic Area (EEA). We do not transfer data outside the EEA.

8. Data Retention

We retain your personal data for up to 5 years (60 months) from the date of your last interaction with us or until you withdraw your consent, whichever comes first. After this period, your data will be securely deleted unless you explicitly renew your consent. You may also request deletion of your data at any time.

9. Your Rights

Under GDPR, you have the right to:

• Access: Request a copy of your data.
• Rectify: Correct inaccurate or incomplete data.
• Erasure: Request deletion of your data.
• Restrict Processing: Limit how your data is processed.
• Object: Object to processing based on legitimate interests.
• Data Portability: Receive your data in a structured format.
• Withdraw Consent: Withdraw your consent at any time.

To exercise any of these rights, please contact us at: [email protected]

10. Automated Decision-Making and Profiling

We do not use automated decision-making or profiling, but we may use filters to narrow down candidate profiles for review, which is then manually verified by us.

11. Data Security

We take the security of your data seriously and implement the following measures to protect it:

• Encryption
• Secure storage
• Access controls

12. Complaints

If you have concerns about how we process your personal data, you have the right to lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde, DSB) in accordance with §24 of the Austrian Data Protection Act (DSG):
Austrian Data Protection Authority
Barichgasse 40-42
1030 Vienna, Austria
Website: https://www.dsb.gv.at

13. Updates to this Privacy Policy

This Privacy Policy may be updated from time to time. Any changes will be communicated via email and posted on our website.