V2 (022024)
ADMIRAL uses the onlyfy one service (by XING) to process job applications. This Privacy Policy will inform you about the processing of your data by the onlyfy one service and by ADMIRAL.
With regard to interaction within the company account of ADMIRAL, ADMIRAL and New Work SE have shared responsibility pursuant to Article 26 GDPR, as they jointly determine the purposes and means of processing pursuant to Article 4 (7) GDPR. The current version of the agreement on shared responsibility pursuant to Article 26 GDPR, which New Work SE concludes with companies that use onlyfy one, can be viewed here https://www.xing.com/terms/onlyfy-one to gain information on the key aspects of the agreement.
onlyfy one is part of the extensive XING service operated by New Work SE, which pursues the aim of improving and simplifying users’ working lives with a variety of applications (onlyfy one, as well as the XING social and jobs network, kununu, etc.), and creates a more fulfilling working world of work for individuals while boosting the performance of companies. As part of the extensive XING service, onlyfy one is an online platform on which or through which talent and companies meet.
With regard to data processing for which New Work SE is solely responsible or is responsible within the scope of the shared responsibility with ADMIRAL, detailed information is available in the XING Privacy Policy at https://privacy.xing.com/en/privacy-policy. You will also find contact details for New Work SE, as well as for the New Work SE data protection officer there.
When submitting an application, you enter into a user relationship with New Work SE for the purpose of processing applications. In addition, you will receive support and New Work SE can present you with other opportunities in support of your career. A public profile will not be automatically created for you on the XING social and jobs network. The legal basis for New Work SE processing your data is, in particular, Article 6 (1)(b) GDPR (processing necessary for the performance of a contract).
You can pause the creation of your online application at any time and continue at a later point. Cookies are used for this purpose. The data you provide to create the user account, as well as any uploaded documents, are recorded in the company account of ADMIRAL in onlyfy one. The data remains recorded even if an application is paused and/or not completed. In this case, your application is flagged as incomplete and the data remains visible to ADMIRAL only.
The data you have provided as part of the online application can be read, edited, or updated in your candidate profile at any time.
If the calendar function is used, your data is processed during and for the purpose of setting appointments within the application process. The legal basis is Article 6 (1)(f) GDPR. The calendar function is provided by an IT service provider (Cronofy Ltd., United Kingdom). The United Kingdom is classified as a secure third country based on the adequacy decision of the European Commission. Further information on data protection at Cronofy is available here: https://www.cronofy.com/gdpr/ and https://docs.cronofy.com/policies/privacy-notice/
If you use the apply using WhatsApp function, your consent, which can be withdrawn at any time, forms the legal basis for communication (Article 6 (1)(a) GDPR). When applying via WhatsApp, all required applicant information is requested during a WhatsApp chat. The data is then sent directly to onlyfy one through a service provider, and is processed further there as part of and for the purpose of the normal application process.
The apply via WhatsApp function is provided by an IT service provider (PitchYou) that can gain access to your data for this purpose. More information is available here: https://www.pitchyou.de/en/pitchyou-gdpr. Candidate data from apply via WhatsApp are transferred to onlyfy one via an interface. Immediately after this transfer, candidate data are deleted from the apply via WhatsApp infrastructure in PitchYou. Further processing then takes place exclusively in onlyfy one.
Please note that you use your personal WhatsApp account for applications, and therefore we cannot rule out that messages will be transferred, to the USA in particular. WhatsApp data protection information, such as its processing or exercising of data protection rights with regard to WhatsApp is available here: https://www.whatsapp.com/legal/privacy-policy-eea.
Subject to your consent, your application will be sent from WhatsApp via the PitchYou infrastructure to onlyfy one. You have the right to withdraw your consent to this at any time. Either way, your application data will be deleted from the PitchYou infrastructure once transferred to onlyfy one, meaning that PitchYou will not process your data any further.
The FADP applies to circumstances which have an impact on Switzerland, even if said circumstances are initiated outside of Switzerland. Correspondingly, this privacy policy applies to information in line with the EU GDPR and the FADP. Here, EU GDPR terminology is used in favour of FADP terminology. However, FADP terminology is used if the FADP applies and the terminology differs from EU GDPR terminology in a given language. The About this site section on XING contains the name and address of our representative in Switzerland.
YOUR PERSONAL DATA IN THE APPLICATION PROCESS
Version 2.0 (September 2024)
Information on data protection pursuant to Articles 13 and 14 GDPR
We are delighted that you are interested in applying for a position at the ADMIRAL Group. Transparency and reliable handling of your personal data form an important basis for a good working relationship. Accordingly, we are providing you with information on how we process your data and how you can exercise your rights under the General Data Protection Regulation (GDPR). The following information gives you an overview of how your personal data are collected and processed in the course of the application process. Please read this privacy policy carefully before submitting your application.
1. General information
a) Who is the data controller?
The controller within the meaning of Article 4(7) GDPR is
ADMIRAL Sportwetten GmbH
Novomaticstraße 5, A-2352 Gumpoldskirchen
and
ADMIRAL Casinos & Entertainment AG
Griesfeldstraße 15, A-2351 Wiener Neudorf
and
ADMIRAL Technologies GmbH
Novomaticstraße 5, A-2352 Gumpoldskirchen
and
HTM Hotel- und Tourismus-Management GmbH
Griesfeldstraße 15, A-2351 Wiener Neudorf
b) How can the data protection officer be contacted?
For all questions concerning data protection, please contact the ADMIRAL Group’s data protection officer by email at datenschutz@admiral.at.
2. What data are processed?
2.1. The following data or categories of data are processed in order to implement the application:
2.2. Feedback questionnaire
To optimise our application processes and improve ourselves as an employer, we offer you the opportunity to submit your personal feedback and will send a feedback questionnaire to the email address you provided. If you participate in the survey, your feedback, title and location of the position, job category and, if applicable, type of employment for which you have applied will be recorded. This information will then be transmitted to kununu GmbH and possibly other verified review platforms, and published without naming you.
Kununu will not be able to establish a link to your personal details. However, please note that other parties, such as your employer, may be able to identify you based on the information you provide in the published feedback.
3. For what purposes and on what legal basis do we process your data?
a) Implementation of pre-contractual measures and performance of the contract – Article 6(1)(b) GDPR
Your personal data will be processed as part of preparing the employment relationship, i.e. for the purposes of staff selection, filling vacant positions, and subsequently preparing your contract of employment, if applicable. The scope of the data to be collected is determined by the position to be filled and associated legal and internal company requirements.
The need to implement pre-contractual measures and the performance of a contract pursuant to Article 6(1)(b) GDPR form the legal basis for this processing.
b) Consent – Articles 6(1)(a) and 9(2)(a) GDPR
If you voluntarily consent to the processing of certain personal data, then your consent forms the legal basis for processing these data. Inter alia, this applies to additional information that you have voluntarily provided or uploaded in the course of your application.
Your personal data will also be processed on the basis of your consent in the following cases:
You have the right to withdraw your consent at any time, effective for the future. If possible, please send your withdrawal of consent by email to recruiting@admiral.at. The legitimacy of processing your data prior to the withdrawal remains unaffected.
c) Data processing to safeguard legitimate interests – Article 6(1)(f) GDPR
In certain cases, we process your data to protect our legitimate interests or those of third parties. A legitimate interest would exist if your data are required in order to assert, exercise or defend against legal claims that arise during the application process (e.g. claims under the Gleichbehandlungsgesetz [Austrian Equality of Treatment Act]), for example. In the event of litigation, we have a legitimate interest in processing the data for evidentiary purposes.
We also have a legitimate interest in processing professional data that you have published. In particular, this includes viewing profiles on relevant social media networks such as XING or LinkedIn.
Another legitimate interest is to prevent and defend against attempts at fraud and technical attacks.
4. Who will your data be shared with?
The HR department of companies within the ADMIRAL Group will process your data. If required for the position you are applying for, other internal bodies, such as specialised units or departments within our company, may also be involved in the processing of your data.
We use the onlyfy one application system from New Work SE, Am Strandkai 1, D-20457 Hamburg. Your data will be processed by ADMIRAL and New Work SE as joint controllers pursuant to Article 26 GDPR. You will find more detailed information at the beginning of this privacy policy.
5. How long will your data be stored?
We will store your personal data until a decision has been made with regard to your application. If an employment relationship does not materialise, we will continue storing your data for as long as is necessary to defend against potential legal claims. As a rule, your data will be deleted within seven months of the application process ending.
If an employment relationship does not materialise, but you have given us your consent for the continued storage of your data (applicant pool), we will store your data until you withdraw your consent, but for no longer than an additional 24 months. We may store your data for a longer period if there is a specific reason for so doing (in particular, for defence against potential legal claims).
Should you withdraw your application before the end of the application process, i.e. delete your data and your account, then the stored data will be blocked for the duration of the ongoing application process and permanently deleted seven months after the application process ends.
You can delete your candidate profile and application documents at any time. You also have the option to request restriction of processing or erasure.
6. Are you obliged to provide your personal data?
The provision of your data is necessary for the implementation of the application process and any subsequent contract conclusion. If you do not provide us with the necessary personal data, we will not be able to carry out the application process or consider your application.
7. What rights do you have in relation to the processing of your data?
You have the right to:
You have the option to lodge a complaint with a supervisory authority if you believe that the processing of your data violates data protection legislation or your rights to data protection have been violated in any other way. The Austrian Data Protection Authority (https://www.dsb.gv.at), Barichgasse 40-42, A-1030 Vienna, is responsible in Austria.
If you wish to exercise any of the above rights, please contact the ADMIRAL Group’s data protection officer by email at datenschutz@admiral.at.
We can only process your request after your identity has been unequivocally verified and appreciate your understanding in this regard
