Data protection information for applicants

Mandatory information according to Art 13 and 14 GDPR of a purely informative nature.
Status: September 2023

1. What information is available on this page?

Österreichische Post AG (hereinafter referred to as "Austrian Post", "we", "us") processes your personal data in full compliance with the provisions of data protection law, in particular the General Data Protection Regulation (GDPR), the Austrian Data Protection Act, and all other applicable laws.
In this document, you will find information about data processing concerning our internal and external applicants. This includes the following sections:

  • To whom is this information addressed? (item 2)
  • Who is responsible for the processing of your data? (item 3);
  • Information about Austrian Post's applicant management (item 4);
  • With whom are we allowed to share your data? (item 5.);
  • Automated decision-making and profiling (item 6);
  • What rights do you have? (item 7);
  • How can you get in touch with us? (item 8).

Information about the use of cookies on our websites is available at Data protection.

If you are looking for information on specific postal products or services such as letter mail and parcel delivery, advertising and marketing or business client relations, you will find it in the selection box on the right side of the page. If you need printed copies of the information provided on this page or on additional pages, please contact the staff at our service locations.

2. To whom is this information addressed?

This data protection policy applies to external and internal applicants of Austrian Post. 
If your application leads to employment with Austrian Post, our relevant data protection policy for employees of Austrian Post will additionally apply. This policy might already be available to you for your information.

If you are a client, supplier, or business partner of Austrian Post or if you have subscribed to the Austrian Post newsletter or visit the Austrian Post website, the data protection policy available under post.at/dataprotection will apply to you.

 

3. Who is responsible for the processing of your data?

3.1. Sole responsibility of Austrian Post AG
If you apply to us, you are entitled to use the karriere.post.at applicant management systems (hereinafter referred to as "career portal", "career profile" or "the platform"). Each applicant can create their own user profile. Austrian Post can create user profiles for applications received in writing.

If you apply for a position at Austrian Post through this or other channels  

Österreichische Post AG,
Rochusplatz 1,
1030 Vienna,
Austria

is responsible for the further data processing described in this document.
In the case of applications to subsidiaries of Austrian Post, there may be a joint responsibility between that subsidiary and Austrian Post. For more information, please see item 3.2. 

3.2. Applications to subsidiaries
3.2.1. Joint responsibility with our subsidiary
Austrian Post supports the following subsidiaries ("co-managed subsidiaries") in their applicant management: 

  • ACL advanced commerce labs GmbH - Keplerstraße 69, 8020 Graz
  • Adverserve digital advertising services GmbH - Wimbergergasse 28/Top 5, 1070 Vienna
  • Bank99 AG - Praterstraße 31, 1020 Vienna
  • Feibra GmbH Altmannsdorferstraße 329, 1230 Vienna
  • Medien.Zustell GmbH Rochusplatz 1, 1030 Vienna
  • Post Business Solutions GmbH Halban-Kurz-Straße 11, 1230 Vienna
  • Post E-Commerce GmbH Weintraubengasse 22, 1020 Vienna
  • Post IT-Services GmbH Erzherzog-Karl-Straße 131-133, 1220 Vienna
  • Post Systemlogistik GmbH Czeija-Nissl-Gasse 8, 1210 Vienna
  • Post Wertlogistik GmbH Steinheilgasse 1, 1210 Vienna
  • post.sozial Erzherzog-Karl-Straße 131 – 133, Postfach 2, 1220 Vienna

Austrian Post supports its co-managed subsidiaries in the following cases:

  • If you apply for positions at any of these subsidiaries through your career profile;
  • If Austrian Post contacts you via direct mail in connection with a position at a co-managed subsidiary;
  • If you, in the course of one of your applications processes, agree for your application to be shared with a co-managed subsidiary of Austrian Post and there is a suitable position at a co-managed subsidiary.

In these cases, the respective co-managed subsidiary and Austrian Post are joint controllers as defined by Article 26 of the GDPR. The purpose of this joint responsibility is to fill vacancies at the respective subsidiary of Austrian Post and to process the corresponding applications.

In the case of subsidiaries not mentioned here, there is no joint responsibility, even if applications are forwarded to them on an individual basis (based on request or consent).



3.2.2. Competences in the case of joint responsibility
Austria Post is responsible for the following data processing in the case of joint responsibility: 

  • Receiving your applications for the co-managed subsidiary;
  • Providing infrastructure, storage and security for the data you submit through your career profile in connection with an application at a co-managed subsidiary and for any other data you submit and that will be uploaded to your career profile after you have been informed about it;
  • Sending rejection letters;
  • Corresponding with you when you first apply for a position at the co-managed subsidiary by e-mailing Austrian Post or sending a direct message to Austrian Post;
  • Processing and responding to your data subject rights requests in relation to your data in connection with an application to a co-managed subsidiary, to the extent that this data has been stored by Austrian Post or uploaded to the platform;
  • Activating your applications for a co-managed subsidiary on the platform;
  • Activating your application for a co-managed subsidiary, if you have agreed to the forwarding to group companies and there is a suitable position at a co-managed subsidiary.

In the case of joint responsibility, the co-managed subsidiary is responsible for the following data processing operations (with the exception of applications to Bank99): 

  • Corresponding with you to schedule appointments for job interviews, as far as this option is provided on the platform;
  • Corresponding with you for the purpose of sending acceptance letters;
  • Corresponding with you to send rejection letters in exceptional cases (especially if the subsidiary has previously been in touch with you). 

The company to which you submit the data will be responsible for processing any data that you provide in the application process in addition to your career profile. The company in question can upload this information to your career profile after informing you about it.

In any case, co-managed subsidiaries are solely responsible for data processing in connection with applications for positions at the respective co-managed subsidiary if the processing is handled in its entirety outside the career portal. This also applies to the guarantee of all data subject rights and other data protection obligations.

3.3. Use of our talent pool

The technology for our talent pool is called "myVeeta" and is operated and provided by Talent Solutions GmbH (Kölblgasse 2, 1030 Vienna, Austria). Upon registration, you can create a confidential, private myVeeta account, unless you have one already. By doing so, you will be allowing myVeeta to make your data available to our company. Talent Solutions GmbH itself is the controller for the processing of your personal data.

4. Information about Austrian Post’s applicant management 

We process your data as part of our applicant management for the purpose of handling application processes. If you apply to us, the karriere.post.at applicant management system will be available to you. Every applicant can create their own user profile. Austrian Post can create user profiles for applications received in writing. We also recruit via direct message: if you have not yet applied to us and have an active profile on a job portal (e.g., LinkedIn), we may use your data uploaded to the job portal to contact you directly via these platforms and offer you suitable jobs. Furthermore, we may receive your personal data from external recruiters in order to create a suitable profile for you on our career platform. The recruiters from whom we have received your data have access to this profile for the purposes mentioned above.

Following an application, we may use our external service provider "SurveyMonkey (Momentive Europe UC)" to conduct surveys. If you participate in the voluntary survey, your IP address will be transmitted to SurveyMonkey, a company based in the USA. SurveyMonkey conducts the survey, summarises the survey results, and makes them accessible to the administrator of the user account on behalf of Austria Post. The aggregated survey result is subsequently shared with the survey commissioner. The survey is conducted anonymously.

Which of your data may we process for this purpose? 

For this purpose, we process the following data: 
Address data, identification data, contact data, personal master data, document content data, data from criminal proceedings (criminal record extract)

What is the legal basis for this processing?

The legal basis for the processing of your applicant data is:

  • The employment contract with you (employment contract) and/or the precontractual relationship as defined in Article 6 (1) (d) of the GDPR;
  • The fulfilment of legal obligations (Art 6 (1) (c) of the GDPR) according to Section 18 of the Austrian Employees Act (duty of care) or Section 1157 of the Austrian Civil Code (employer's duty of care); pursuant to the Austrian Postal Market Act, we have the obligation to process any data from criminal proceedings (criminal record excerpt); 
  • The protection of our legitimate interests (Art 6 (1) (f) of the GDPR) for the purpose of handling application processes. 
  • Your consent pursuant to Article 6 (1) (a) of the GDPR provided that you consent to your application being forwarded to a group company of Austrian Post. You can revoke this consent at any time with future effect (see item 5.1.). 

How long can your data be stored?

You can delete your entire career profile on karriere.post.at yourself at any time by going to Options/Profile. If you delete your profile, you will also be withdrawing your application because we cannot process applications without knowing your personal data.
If you do not delete your profile, your data will be deleted by us no later than 7 months after the application process has been completed (acceptance, rejection, or application withdrawal).
Your data will be deleted automatically no later than 7 months after the last login if there is no activity in your profile.
Deleting your personal data from the talent pool is the sole responsibility of "myVeeta". The personal data provided to us by "myVeeta" for the above-mentioned purpose will be deleted by us no later than 7 months after the application has been rejected.

Other information about this processing:
If you do not provide the above-mentioned data, we will not be able to process your application and sign an employment contract with you. 

 

5. With whom are we allowed to share your data?

5.1. Sharing information with subsidiaries
If you have used your career profile to apply for a position with an Austrian Post subsidiary, we will forward your personal data to selected employees of the subsidiary in question. For detailed information on this data sharing, please see item 3.2.

For every application that you submit you have the option of consenting to the processing of your application data for all open job positions at Austrian companies that belong to the Austrian Post group. If you provide this separate consent, other Austrian companies in addition to Austrian Post and, if applicable, Austrian Post subsidiaries to which you apply can get access to your application data. This serves the purpose of considering your application for other appropriate positions within the Austrian Post group. For an updated list of companies associated with Austrian Post pursuant to Section 15 of the Austrian Stock Corporation Act, please see:  Holdings. 

If you do not provide your consent, we will consider your application data only for the group companies to which you have applied. This means that you will not be considered for possible job openings available at other group companies. You can revoke this consent at any time with future effect by going to your candidate profile and selecting "Job applications/position-specific information" for the application in question. Until then, we will process your data lawfully on the basis of your consent.


5.2. Transferring data to the talent management service provider

If you use our talent pool, your data may be sent to Talent Solutions GmbH (Kölblgasse 2, 1030 Vienna, Austria) (see item 3.3. above).

5.3. Other data transfer
Your data may also be transferred to the following recipient categories for the purpose of Austrian Post applicant management: 
Processors (IT service provider)
 

6. Automated decision-making and profiling

As a general rule, no automated decision-making or profiling pursuant to Article 22 (1) and (4) GDPR is carried out in data processing at Austrian Post. 
 

7. What rights do you have?

With regard to the data processed by Austrian Post as a controller, you have the following rights: 
You have the right of access to your personal data that we process as a controller. Under certain conditions, you may request the restriction of processing as well as the rectification and deletion of your personal data. For more information, please refer to Articles 15 to 19 of the GDPR. 
In some cases, you also have the right to data portability, meaning that we would give you all personal data you have disclosed to us in a structured, standard, and machine-processable format. For more information, please refer to Article 20 of the GDPR. 
In addition, you have the right to object at any time to the processing of your data carried out in the legitimate interests of Austrian Post or third parties if reasons arise from your specific circumstances. For more information, please refer to Article 21 of the GDPR. 
Insofar as the processing of your personal data is based on your consent pursuant to Article 6 (1) (a) of the GDPR, you may revoke this consent at any time without stating reasons with future effect; until then, we will process your data lawfully.


In addition, you have the right to file a complaint with the Austrian Data Protection Authority:
Austrian Data Protection Authority, 
Barichgasse 40-42, 
1030 Vienna
Telephone: +43 1 52 152-0 
E-mail: dsb@dsb.gv.at
 

8. How can you get in touch with us?

Would you like to exercise your rights or do you have further questions, suggestions, or feedback?
To contact Austrian Post's data protection officer or to exercise your rights as an applicant, please use one of the following options:

  • The contact form at datenschutzanfrage.post.at;
  • The address 
    Austrian Post Customer Service  (Postkundenservice) 
    Attention: Data Protection Officer (Datenschutzbeauftragte)
    Bahnsteggasse 17-23
    1210 Vienna;
  • The e-mail address team-datenschutz@post.at. 

For additional information and contact options, please visit item 8 under post.at/dataprotection.