1. Processing activity
Making information about the company of the person responsible available online to interested parties and customers 1
2. Responsible person
JOBIQO – Job Board Technology
jobiqo GmbH
Postgasse 8b,
1060 Vienna, Austria
E-Mail: info@jobiqo.com
3. Contact details of the data protection officer
Wolfgang Renzl
pfletschinger . renzl
PARLAW Law Firm Partnership
Hegelgasse 19/5+6
1010 Vienna, Austria
Email: privacy@jobiqo.com
4. Purposes of data processing on the legal basis of contract fulfillment or preparation
- Making information and advertising about the company of the responsible party available for retrieval
- Provision of communication channels for disseminating content and servicing the customer relationship.
- Maintaining and increasing customer satisfaction and customer loyalty through analysis of user behavior with the aim of improving the service offering.
- Survey of user numbers to document reach
5. Legal basis for data processing
- Online Use: Contract Fulfillment The use of online media and the data controller is based on a contract within the meaning of Article 6(1)(b ) GDPR . Registration creates a registration relationship. When using the data controller’s social media channels, the primary contractual relationship exists with the respective service provider.
- Additional services: Consent. For certain services (e.g., electronic newsletter), the data controller explicitly obtains consent from the customer. This consent can be revoked at any time with effect for the future.
- Overriding legitimate interests (see point 7.)
6. Change of purpose
The controller does not change the purpose of processing the personal data.
7. Description of the (predominant) legitimate interests for IT security purposes
The data controller stores the IP addresses of its customers for a period of 7 days in order to defend against targeted attacks in the form of server overload attacks („denial-of-service“ attacks) and other damage to the systems. The data controller has an overriding legitimate interest in this data processing for the purpose of maintaining the functionality of its online services (Recital 49 of the GDPR).
8. Evaluations of personal aspects of the customer
No evaluation of the customer’s personal aspects takes place.
9. Obligation to provide data
Customers are under no obligation to provide data.
10. Automated decision-making
The customer is not subject to any automated decision that has legal effect on him.
11. Data types processed
Announced by customers:
- Name/Company, Academic Degree
- Telephone and fax number
- e-mail address
- Address
- country
- Industry
- Salutation
- News content
Additional information collected by the responsible party:
- IP addresses (log files)
- Data about the end device
- Browser / device used
- Communication protocol
- Information about newsletter subscription
12. Data sources (unless disclosed by the customer or collected by the controller)
| source | Data types |
| Mailchimp | IP location, preferred email client, source of registration, campaign details (receipt, open, click) |
| Social media channels | |
| Facebook: | Meta Platforms Ireland Limited, ATTN: Privacy Operations, Merrion Road, Dublin 4, D04 X2K5, Ireland, https://www.facebook.com/privacy/center |
| XING: | New Work SE, Strandkai 1, 20457 Hamburg, Germany, Tel.: +49 40 419 131-0, Fax: +49 40 419 131-11, E-Mail: info@xing.com, Germany, https://privacy.xing.com/de/datenschutzerklaerung |
| LinkedIn: | LinkedIn Ireland Unlimited Company, Attn: Legal Dept. (Privacy Policy and User Agreement) Wilton Plaza, Wilton Place, Dublin 2, Irland, https://www.linkedin.com/legal/privacy-policy |
13. Externe Empfänger von Daten
Auftragsverarbeiter:
- E-Mail-Kampagnenversand „Mailchimp“: Intuit Mailchimp 405 N Angier Ave. NE Atlanta, GA 30308 USA
- Customer Relationship Management: Pipedrive OÜ, Paldiski mnt 80, Tallinn 10617, Estonia
- Bewerbermanagement: Recruitee B.V., Keizersgracht 313, 1016 EE Amsterdam, Niederlande
- Interaktive Demo Plattform: Arcade Software, Inc. Address: 595 Market Street, Floor 10, San Francisco, CA 94105
Analysetools:
- Google Analytics (“anonymize IP”): Google Analytics (mit “anonymize IP”): Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Cloud- und technische Services
- World4You Internet Services GmbH, Wolfgang-Pauli-Straße 2, BT3, 4020 Linz, Austria
- Code Enigma, 5 St John’s Lane, London, EC1M 4BH, United Kingdom
Diese Datenverarbeitungen der Auftragsdatenverarbeiter finden unter der Verantwortung des Verantwortlichen statt.
14. Drittstaatstransfer
Folgende Daten werden im Zuge der Datenverarbeitung an Staaten außerhalb der EU übermittelt:
| Land | Anwendung | Datenarten |
| USA (EU-US Privacy Framework Agreement) | Google Analytics: anonymisierte IP-Adresse, Websitetitel, browserspezifische Informationen, Informationen über die Websitenutzung USA (EU-US- Privacy-Shield) | |
| USA (EU-US Privacy Framework Agreement) | Mailchimp | E-Mail-Versand: E-Mail-Adresse, Name; Anrede |
15. Speicherdauer
- Nicht registrierte Kunden: Die personenbezogenen Daten (insb. IP-Adresse) von (nicht registrierten) Websitebesuchern werden zum Zweck der IT-Sicherheit 7 Tage gespeichert.
- Interessenten (Kontaktanfragen): Die personenbezogenen Daten von Interessenten, die über das Kontaktformular übermittelt werden, werden vom Verantwortlichen auf Grund der oben genannten Rechtsgrundlage bis zum Widerruf, aber maximal 7 Jahre gespeichert, es sei denn, es geht in ein weiteres Vertragsverhältnis über.
- Registrierte Kunden (Newsletterabonnenten): Die personenbezogenen Daten von registrierten Kunden werden vom Verantwortlichen auf Grund der oben genannten Rechtsgrundlage auf Dauer des Vertragsverhältnisses verarbeitet. Die Daten können vom Verantwortlichen jederzeit geändert und gelöscht werden. Der Nutzungsvertrag endet jedenfalls durch den Widerruf des Newsletterabonnements; dieser führt zu einer sofortigen Löschung.
16. Rechte des Betroffenen
| Art 15 DSGVO „Auskunft“ | Der Kunde hat das Recht, Auskunft darüber zu verlangen, ob personenbezogene Daten von ihm verarbeitet werden. |
| Art 16 DSGVO „Berichtigung“ | Der Kunde hat das Recht, unverzüglich die Berichtigung unrichtiger personenbezogener Daten oder deren Vervollständigung zu verlangen. |
| Art 17 DSGVO „Löschung“ | The customer has the right to request that personal data be deleted without undue delay, provided that the grounds set out in Article 17(1) GDPR are met. |
| Article 18 GDPR “Restriction” | The customer has the right to request that the processing of personal data be restricted, provided that the grounds mentioned in Article 18 Paragraph 1 GDPR are met. |
| Article 21 GDPR “Right to object” | The customer has the right to object at any time to the processing of his or her personal data on the basis of overriding legitimate interest. |
| Article 20 GDPR “Data portability” | The customer has the right to receive their personal data in a structured, commonly used and machine-readable format. |
| Article 77 GDPR „Right to lodge a complaint“ | Every customer has the right to lodge a complaint with the supervisory authority if they believe that the processing of their personal data infringes this Regulation. |
17. Supervisory Authority
Austrian Data Protection Authority
, Barichgasse 40-42,
1030 Vienna, Austria,
Phone: +43 1 52 152-0,
Email: dsb@dsb.gv.at
1. Where designations relating to natural persons are used in this data protection information only in the masculine form, they refer to women and men equally. When applying the designation to specific natural persons, the respective gender-specific form must be used. The term „customers“ refers to both consumers and businesses.