1. Controller & Contact
ArbeIT HR OG
Bloch-Bauer-Promenade 20/18, 1100 Vienna, Austria
Email: info@arbeithr.at
No data protection officer appointed.
Applies to: (A) Applicants, (B) Clients/Business Contacts, (C) Website Users.
2. A) Applicants
Processed data: CV and contact details, role/change preferences, salary information, interview notes. No regular processing of special categories (e.g. health data). Please only submit such data if explicitly requested and you have given your consent.
Sources: directly from you; public professional profiles (LinkedIn, XING).
Purposes & Legal Bases:
- Processing of your application and presenting you to a client at your request – Art. 6(1)(b) GDPR
- Professional sourcing/initial contact and short-term documentation – Art. 6(1)(f) GDPR (legitimate interests; proportionate)
- Talent pool (future roles) – Consent (Art. 6(1)(a) GDPR)
- Special categories only with explicit consent or if legally permitted (Art. 9(2)(b)/(h) GDPR)
Recipients: potential employer clients (only with your prior consent), our IT service providers (processors), authorities where legally required.
Third-country data transfers: Hosting via IONOS within the EU. We use Google Drive/Sheets (Google Ireland Ltd.); if support access occurs from outside the EEA, it is based on Standard Contractual Clauses (SCCs) and appropriate safeguards.
Retention period: specific position – 8 months after decision; talent pool – 24 months or until withdrawal; contracts/invoicing (client side) – 7 years (legal retention period).
Your rights: access, rectification, erasure, restriction, data portability, and objection; you may withdraw your consent at any time with effect for the future.
How to exercise them: info@arbeithr.at
(proof of identity may be required). We typically respond within one month.
Indirect data collection (Art. 14 GDPR): If we obtain your data via sources such as LinkedIn, we will inform you at first contact (or within one month) and link to this privacy notice.
Automated decision-making: none. Video recordings: none.
3. B) Clients & Business Contacts
Data: business contact details, role information, communications, billing data.
Legal bases: Art. 6(1)(b) (contract) and (f) (relationship management, permissible B2B communications to existing clients).
Retention: business/trade documents 7 years (legal requirement).
4. C) Website & Cookies
Hosting: IONOS (EU). Server logs are stored for a limited time for security and error diagnostics.
Cookies/Services: We avoid non-essential cookies. When using the contact form, Google reCAPTCHA may set a cookie (e.g. _GRECAPTCHA) and process technical data to prevent spam. We load reCAPTCHA only with your consent or on-click activation. For details, see our cookie policy.
5. Contact & Complaints
Data protection contact: info@arbeithr.at
Supervisory authority: Austrian Data Protection Authority (DSB), Vienna (www.dsb.gv.at
).
Last updated: 11 September 2025.