1. Controller
The controller responsible for processing personal data on this website is Daniela Schlick Unternehmensberatung e.U., Lisseeweg 30, Haus 2, 1210 Wien - Strebersdorf. Contact: kontakt@danielaschlick.at.
2. Purposes of processing
We process personal data to provide this website, answer enquiries via the contact form, handle job applications via the application form and — where enabled — send the newsletter.
3. Hosting
This website is hosted by Hostinger International Ltd. (Cyprus/EU); content is served from a data centre in the European Union. A data processing agreement under Art. 28 GDPR is in place with the provider. When you access the website, technically required data (IP address, date, time, requested page) is processed in server logs. The legal basis is our legitimate interest in the secure and stable operation of the website (Art. 6(1)(f) GDPR). This data is deleted after 30 days. Provider’s privacy notice: https://www.hostinger.com/privacy-policy.
4. Contact form
When you contact us via the form, your name, email address, phone number (if provided) and message are transmitted to us. The legal basis is the handling of your enquiry / the performance of pre-contractual measures and our legitimate interest in communicating with prospective clients (Art. 6(1)(b) and (f) GDPR). To prevent automated abuse (spam), your IP address is briefly processed in pseudonymised (hashed) form. Confirmation and notification mails are sent via Resend Inc. (USA) under EU Standard Contractual Clauses. Data is automatically deleted after 180 days.
5. Newsletter (double opt-in)
If you sign up for our newsletter, we process your email address based on your consent (Art. 6(1)(a) GDPR). Sign-up uses a double opt-in procedure: you first receive a confirmation email and are only added to the list after clicking the confirmation link. As proof of consent we store the time of sign-up and a pseudonymised (hashed) IP address. Sending is handled via Resend Inc. (USA) under EU Standard Contractual Clauses. You can unsubscribe at any time via the unsubscribe link in every email or by message to the address above; your data is then removed from the list.
6. Applications and CV upload
If you apply for a position via our application form, we process your name, email address, phone number (if provided) and your CV (as PDF or text) including the information it contains. The legal basis is your consent (Art. 6(1)(a) GDPR) and the performance of pre-contractual measures (Art. 6(1)(b) GDPR). As proof we store the time of your consent.
To structure your CV we use an AI service for automated extraction (Mistral AI, France/EU). The contents of your CV are processed to read out fields such as work experience, education and qualifications. No automated decision within the meaning of Art. 22 GDPR takes place — the extraction is merely preparatory; your application is assessed by a human. Confirmation and notification mails are sent via Resend Inc. (USA) under EU Standard Contractual Clauses.
Your application data, including the uploaded CV and the extracted information, is automatically deleted 180 days after receipt, unless you have expressly consented to longer storage (e.g. inclusion in a talent pool). You may withdraw your consent at any time and request deletion of your data.
7. Captcha (hCaptcha)
To protect our forms from automated abuse we use hCaptcha (Intuition Machines, Inc., USA). Technical data (IP address, browser data, behavioural signals) is processed. The transfer to the USA is based on EU Standard Contractual Clauses. Details: https://www.hcaptcha.com/privacy.
8. Cookies
This website uses only strictly necessary cookies. No consent is required (§ 165 para. 3 Austrian TKG 2021).
9. Retention
We retain personal data only for as long as required for the respective purpose or as required by statutory retention periods. Contact enquiries are deleted after 180 days; applications 180 days after receipt.
10. Your rights
You have the right to access, rectify, erase, restrict processing, object and to data portability under Articles 15 ff. GDPR at any time, as well as the right to withdraw consent at any time with future effect. Please direct requests to the email address above.
11. Right to lodge a complaint
You may lodge a complaint with the Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna.