Privacy Policy
1. Controller
The controller responsible for processing personal data on this website is Daniela Schlick Unternehmensberatung e.U., Lisseeweg 30, Haus 2, 1210 Wien - Strebersdorf. Contact: kontakt@danielaschlick.at.
2. Purposes of processing
We process personal data to provide this website, answer enquiries via the contact form, handle job applications via the application form and — where enabled — send the newsletter.
3. Hosting
This website is hosted by Hostinger International Ltd. (Cyprus/EU); content is served from a data centre in the European Union. A data processing agreement under Art. 28 GDPR is in place with the provider. When you access the website, technically required data (IP address, date, time, requested page) is processed in server logs. The legal basis is our legitimate interest in the secure and stable operation of the website (Art. 6(1)(f) GDPR). This data is deleted after 30 days. Provider's privacy notice: https://www.hostinger.com/privacy-policy.
4. Contact form
When you contact us via the form, your name, email address, phone number (if provided) and message are transmitted to us. The legal basis is the handling of your enquiry / the performance of pre-contractual measures and our legitimate interest in communicating with prospective clients (Art. 6(1)(b) and (f) GDPR). To prevent automated abuse (spam), your IP address is briefly processed in pseudonymised (hashed) form. Confirmation and notification mails are sent via Resend Inc. (USA) under EU Standard Contractual Clauses. Data is automatically deleted after 180 days.
5. Newsletter (double opt-in)
If you sign up for our newsletter, we process your email address based on your consent (Art. 6(1)(a) GDPR). Sign-up uses a double opt-in procedure: you first receive a confirmation email and are only added to the list after clicking the confirmation link. As proof of consent we store the time of sign-up and a pseudonymised (hashed) IP address. Sending is handled via Resend Inc. (USA) under EU Standard Contractual Clauses. You can unsubscribe at any time via the unsubscribe link in every email or by message to the address above; your data is then removed from the list.
6. Applications and CV upload
If you apply for a position via our application form, we process your name, email address, phone number (if provided) and your CV (as PDF or text) including the information it contains. The legal basis is your consent (Art. 6(1)(a) GDPR) and the performance of pre-contractual measures (Art. 6(1)(b) GDPR). As proof we store the time of your consent.
To structure your CV we use the AI service of Mistral AI SAS, Paris, France, as a processor. Depending on the file format, we transmit either the text extracted from your CV or, in the case of designed or scanned documents, your complete CV as a file or image file, including any photograph it contains. The sole purpose is to read details such as contact data, work experience, education, qualifications and language skills into structured fields.
Processing takes place on servers within the European Union. The use of the transmitted content to train the provider's AI models is disabled in our account settings. The provider's privacy terms apply in addition: https://legal.mistral.ai
No automated decision-making within the meaning of Art. 22 GDPR takes place. The extraction is purely preparatory; your application is assessed exclusively by a human. The AI does not score, rank or pre-select applications.
If your CV contains special categories of personal data, for example relating to health, religion or trade union membership, we process these on the basis of your explicit consent (Art. 9(2)(a) GDPR). Please submit only information that is necessary for your application.
Confirmation and notification emails are sent via Resend Inc. (USA) under EU Standard Contractual Clauses.
Your application data, including the uploaded CV and the extracted information, is automatically deleted 180 days after receipt, unless you have expressly consented to longer storage (e.g. inclusion in a talent pool). You may withdraw your consent at any time and request deletion of your data.
7. Captcha (hCaptcha)
To protect our forms from automated abuse we use hCaptcha (Intuition Machines, Inc., USA). Technical data (IP address, browser data, behavioural signals) is processed. The transfer to the USA is based on EU Standard Contractual Clauses. Details: https://www.hcaptcha.com/privacy.
8. Cookies
This website uses only strictly necessary cookies. No consent is required (§ 165 para. 3 Austrian TKG 2021).
9. Retention
We retain personal data only for as long as required for the respective purpose or as required by statutory retention periods. Contact enquiries are deleted after 180 days; applications 180 days after receipt.
10. Your rights
You have the right to access, rectify, erase, restrict processing, object and to data portability under Articles 15 ff. GDPR at any time, as well as the right to withdraw consent at any time with future effect. Please direct requests to the email address above.
11. Right to lodge a complaint
You may lodge a complaint with the Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna.