Data Privacy

Privacy Policy

  1. Information on the Collection of Personal Data and Contact Details of the Controller

We are pleased that you are visiting our website and thank you for your interest. The protection of your personal data is of particular concern to us. Below, we inform you about how your personal data is handled when you use our website.

The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Red Jobs GmbH, Franz-Dullnig-Gasse 5, 9020 Klagenfurt am Wörthersee, Email:office@redjobs.at

The controller responsible for processing personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller). You can recognize an encrypted connection by the character string "https://" and the lock symbol in your browser line.

  1. Principles of Data Processing

Personal data is any information relating to an identified or identifiable natural person (e.g., name, address, telephone number, date of birth, or email address). The processing of personal data (e.g., collection, retrieval, use, storage, or transfer) always requires a legal basis or your consent. Processed personal data is deleted as soon as the purpose of processing has been achieved and no legally prescribed retention obligations exist.

If we process your personal data to provide certain offers, we will inform you below about the specific processes, the scope and purpose of data processing, the legal basis for processing, and the respective storage duration.

  1. Individual Processing Operations

To provide our platform (happly.world) and deliver our services (as detailed in our General Terms of Use), it is necessary to process the personal data provided by our users (companies and applicants) as described below.

3.1. Provision and Use of the Website

You can visit our website without providing any personal information.

When accessing and using our website, usage data is collected that your browser automatically transmits to our server. This information is stored in so-called server log files. The following data is transmitted when you use our website:

•          IP address of the requesting computer

•          Date and time of the retrieval

•          Name and URL of the retrieved file

 

3.2. Registration / User Account

To use our platform, which allows (i) companies to upload job advertisements and (ii) applicants to apply for those job advertisements, and in both cases for companies and applicants to contact each other via the platform, exchange messages and videos, or use other functions of our platform, users are required to provide certain minimum information without which registration is not possible.

During the registration process, the following data is collected:

For the applicant:

•          First and last name

•          Email address

•          Date of birth

•          Address

•          Telephone number

•          Information on gender and ethnicity

•          Information on education, professional background, and resume

•          Information on personal characteristics (interests, talents)

 

For the company:

•          Company name

•          Company registration number

•          Company headquarters and address

•          Company size

•          Information about the contact person (first and last name, email address, gender)

•          Information about the business field, number of employees, slogan

Access to the platform is via the email address provided by the user and the password selected by them (login details).

3.3. Use of the Platform / Communication Between Members

Companies can upload job advertisements on the platform and provide detailed information about the vacant position and desired profile.

Additionally, companies have the option to present themselves, the company, and the vacant position via video (either recorded through the platform in the browser or uploaded).

In this context, we collect the following data in addition to the data collected during registration:

•          Information about the contact person (first and last name, email address, gender) for the respective position

•          Video and audio data of the person depicted

Companies can decide whether the job advertisement is visible only to registered users on the platform or publicly (i.e., visible to any website user).

Video and audio data collected during video recording via our platform, which is technically required, is stored only as long as necessary for review during the session in which the recording took place, unless the user expressly consents to a longer storage period. After each recording, the user has the option to discard the recorded video material, which will irreversibly delete the collected data.

3.4. Newsletter and Contact

Our website offers the possibility to subscribe to a free newsletter. Registration does not automatically subscribe you to our newsletter.

To regularly send you our newsletter, we require:

•          Email address

•          First and last name

•          Role (company or applicant)

•          Ihre Anfrage.

For newsletter distribution, we use Sendinblue (Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany) as the technical service provider, with whom we have entered into a data processing agreement in accordance with Art. 28 GDPR. (More information is available at https://de.sendinblue.com/legal/privacypolicy/).

We use a double opt-in procedure for sending newsletters, meaning we will only send you the newsletter if you have confirmed your registration via a confirmation email sent to you for this purpose. This ensures that only you, as the owner of the email address, can register for the newsletter. Your confirmation must be sent promptly after receiving the confirmation email, otherwise, your newsletter registration will be automatically deleted from our database.

Consent Declaration:

By entering my data and clicking the "Send message" or "Register" button, I consent to the processing of the above-mentioned data for regular newsletter distribution. I can unsubscribe from the newsletter service at any time by sending an email to office@redjobs.at with the subject "Unsubscribe" or by clicking the unsubscribe link within the newsletter and confirming the unsubscription.

I can revoke my consent to the collection of personal data obtained during the registration process at any time by emailing office@redjobs.at or by postal mail to Red Jobs GmbH, Franz-Dullnig-Gasse 5, A-9020 Klagenfurt am Wörthersee.

 

3.5. Login Data

The following user data is stored during each login:

 

•          Date and time of login

•          Email address

•          IP address

  1. Cookies

To make visiting our website more attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e., after you close your browser (so-called session cookies). Other cookies remain on your device and enable us or our partner companies (third-party cookies) to recognize your browser on your next visit (persistent cookies).

We may work with advertising partners who help us make our internet offering more interesting for you. In this case, cookies from partner companies are also stored on your browser when you visit our website (third-party cookies). If we work with the aforementioned advertising partners, you will be individually and separately informed about the use of such cookies and the scope of the information collected.

Please note that you can configure your browser to notify you when cookies are set and to decide individually whether to accept them or exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find the settings for each browser under the following links:

•          Internet Explorer:
http://windows.microsoft.com/de-DE/windows-vista/Block-or- allow-cookies

•          Firefox:
https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen

•          Chrome:
http://support.google.com/chrome/bin/answer.py?hl=en&hlrm=en&answer=95647

•          Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac Opera: https://

•          Opera:
https://help.opera.com/en/latest/web-preferences/

Please note that the functionality of our website may be restricted if cookies are not accepted.

No cookies are set when you first visit our website.

After successfully logging into our platform, authentication cookies are set to identify the user. These are the following cookies:

Cookie name:  CognitoIdentityServiceProvider.xxx.LastAuthUser

Category: Functional

Lifespan: Permanent

Authentication cookie. This cookie contains the username of the last logged-in user.             

Cookie name: CognitoIdentityServiceProvider.xxx.accessToken

Category: Functional

Lifespan Permanent

Authentication cookie. This cookie contains the areas of the website for which the user has access rights.

Cookie name:  CognitoIdentityServiceProvider.xxx.refreshToken

Category: Functional

Lifespan Permanent

Authentication cookie. This cookie contains the information required to obtain a new authorization (Access Token).

Cookie name: CognitoIdentityServiceProvider.xxx.id.Token

Category: Functional

Lifespan: Permanent

Authentication cookie. This cookie contains the permissions linked to a logged-in user profile.

  1. Use of Google Analytics

We use Google Analytics to analyze website usage. This allows us to optimize the website and user experience.

Google Analytics is provided by Google Ireland Limited (Registration Number: 368047 / VAT Number: IE6388047V, Gordon House, Barrow Street, Dublin 4, Ireland).

Google processes the data on our behalf to analyze website usage and is contractually obligated to ensure the confidentiality and security of the processed data.

During a visit to the website, the following data is collected:

•          Accessed pages

•          Achievement of "website goals" such as contact requests and newsletter sign-ups

•          Behavior on the website, such as time spent, clicks, and scroll behavior

•          Approximate location (country and city)

•          IP address (in truncated form to prevent exact identification)

•          Technical information such as browser, internet provider, device, and screen resolution

•          Source of the visit (e.g., which website or advertising material)

However, personal data such as name, address, or contact details are never transmitted to Google Analytics.

Google Analytics stores cookies in your web browser, which remain valid for two years after your last visit. These cookies contain a randomly generated user ID, which allows you to be recognized on future visits to the website.

The collected data is stored together with the randomly generated user ID, which enables the creation of pseudonymous user profiles. These user-related data are automatically deleted after 14 months. Other data are stored in aggregate form indefinitely.

The above-mentioned data is transmitted to Google servers in the USA. By consenting to the use of these services, you also agree to the processing of your data in the USA in accordance with Art. 49 (1) lit. a GDPR. The European Court of Justice classifies the USA as a country with inadequate data protection according to EU standards. For example, there is a risk that US authorities may process personal data in surveillance programs without existing legal remedies for Europeans.

If you disagree with the data collection, you can prevent it by installing the browser add-on for disabling Google Analytics once or by rejecting cookies through the cookie settings dialog.

  1. YouTube 

We embed YouTube videos on our website. YouTube is a service provided by  Google Ireland Limited (Registration Number: 368047 / VAT Number: IE6388047V, Gordon House, Barrow Street, Dublin 4, Ireland).

Once you start a YouTube video embedded on our website, a connection to YouTube's servers is established.

By watching the YouTube video, the following data may be collected:

•          Accessed pages

•          Approximate location (country and city)

•          IP address (in truncated form to prevent exact identification)

•          Technical information such as browser, internet provider, device, and screen resolution

If you are logged into YouTube, this information will also be associated with your user account (you can prevent this by logging out of YouTube before accessing the video).

We have no knowledge of or influence over the collection and use of your data by YouTube.

For more information, please refer to YouTube's privacy policy at  www.google.de/intl/de/policies/privacy/.

  1. Processing Purposes

We process your data for the following purposes based on the legal bases outlined below:

•          To provide our website and the platform operated on it and to fulfill the services described in our General Terms of Use, including in particular:

                                  •Providing our platform for registered users and thus also providing a login via our platform

                                  •Providing a means of contact between companies and applicants

                                  •Sending emails or other contract-relevant messages

The legal basis for processing is the fulfillment of a contract between you and us or the implementation of pre-contractual measures, in some cases also your explicit consent. Additionally, our legitimate interest in providing the platform, improving user-friendliness, and ensuring the stability and security of our website.

•          For self-promotion (including through newsletter distribution)

The legal basis is our legitimate interest in direct marketing for our own products as well as § 174 Abs 4 TKG 2021 and your consent.

•          To comply with statutory retention obligations and other legal or regulatory obligations and requirements (e.g., in connection with tax audits, official or court inquiries, and other orders). The legal basis is the fulfillment of our legal obligations.

•          For other communication purposes in the context of inquiries. The legal basis may be a pre-contractual legal relationship or a legal obligation.

  1. Legal Bases

• If we obtain consent for the processing of personal data, Art. 6(1) sentence 1 lit. a GDPR serves as the legal basis.

• For the processing of personal data necessary for the performance of the contractual relationship between us and our users, Art. 6(1) sentence 1 lit. b GDPR serves as the legal basis. This also applies to processing operations necessary for pre-contractual measures.

• For the processing of personal data to fulfil a legal obligation, Art. 6(1) sentence 1 lit. c GDPR serves as the legal basis.

• If the processing is necessary to protect a legitimate interest of ours or a third party, such as its members, and the interests, fundamental rights, and freedoms of the data subject do not override this first-mentioned interest, Art. 6(1) sentence 1 lit. f GDPR serves as the legal basis for processing.

• For the processing of personal data necessary for self-promotion, in addition to Art. 6(1) sentence 1 lit. f GDPR, § 174 Abs 4 TKG 2021 serves as the legal basis.

• For further data processing, Art. 6(1) GDPR applies, depending on the data processing constellation in its relevant section.

 

  1. How Long Do We Store Data?

We will only store your data for as long as necessary for the purposes for which we collected your data.

The duration of the storage of personal data is determined by the respective statutory retention period (e.g., commercial and tax retention periods). After the period expires, the corresponding data is routinely deleted unless it is still required for contract fulfillment or initiation and/or we have a legitimate interest in further storage.

  1. Your Rights

As a data subject under the GDPR, you have the following rights regarding the processing of your personal data:

Pursuant to Art. 15 GDPR, you can request information about your personal data processed by us. You can, in particular, request information about the purposes of processing, the categories of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage duration, the existence of a right to correction, deletion, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if not collected by us, about the transfer to third countries or international organizations, and about the existence of automated decision-making, including profiling, and if applicable, meaningful information about its details.

Pursuant to Art. 16 GDPR, you can immediately request the correction of incorrect or the completion of your personal data stored by us.

Pursuant to Art. 17 GDPR, you can request the deletion of your personal data stored by us, provided that the processing is not necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest, or to assert, exercise, or defend legal claims. Please note that your right to deletion is subject to restrictions. For example, we are not allowed or required to delete data that we must continue to retain due to legal retention periods. Also, data that we need to assert, exercise, or defend legal claims is exempt from your right to deletion.

Pursuant to Art. 18 GDPR, you can request the restriction of the processing of your personal data if you dispute the accuracy of the data, the processing is unlawful, but you oppose its deletion, we no longer need the data, but you require it for the assertion, exercise, or defense of legal claims. The right under Art. 18 GDPR also applies if you have lodged an objection to the processing pursuant to Art. 21 GDPR.

 Pursuant to Art. 20 GDPR, you can request to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format, or you can request the transfer to another controller.

Pursuant to Art. 7(3) GDPR, you can revoke your consent given to us at any time. This results in us no longer being allowed to continue the data processing based on this consent for the future.

Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority. Generally, you can contact the supervisory authority of your usual place of residence, workplace, or our company headquarters. In Austria, the supervisory authority is the Data Protection Authority, Barichgasse 40-42, 1030 Vienna, Telephone: +43 1 52 152-0, Email: dsb@dsb.gv.at, Web: www.dsb.gv.at.

  1. Right to Object

If the processing of your personal data is based on legitimate interests pursuant to Art. 6(1) lit. f GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, provided there are reasons arising from your particular situation, or if the objection is directed against direct marketing. In the case of direct marketing, you have a general right to object, which we will implement without specifying a particular situation.

  1. Data Security and Safeguarding Measures

We are committed to protecting your privacy and treating your personal data confidentially. To prevent manipulation, loss, or misuse of your data stored with us, we take extensive technical and organizational security measures that are regularly reviewed and adapted to technological progress. This includes, among other things, the use of recognized encryption methods (TLS 1.2). However, we would like to point out that, due to the structure of the internet, it is possible that the rules of data protection and the aforementioned security measures are not observed by other persons or institutions outside our area of responsibility. In particular, unencrypted data disclosed – e.g., if done by email – can be read by third parties. We have no technical influence on this. It is the user's responsibility to protect the data they provide against misuse by encryption or other means.