Data Protection Information Regarding the Use of Applicant and Employee Data in the Casinos Austria AG & Österreichische Lotterien GmbH Group

Transcription

1 Data Prtectin Infrmatin Regarding the Use f Applicant and Emplyee Data in the Casins Austria AG & Österreichische Ltterien GmbH Grup This dcument prvides yu with infrmatin n the use f yur persnal data in cnjunctin with yur applicatin fr emplyment r yur emplyment relatinship in the Casins Austria AG & Österreichische Ltterien GmbH Grup 1 (hereinafter referred t as the Grup r we ) and yur crrespnding rights under data prtectin regulatins. Wh is respnsible fr the use f this data in the Grup? Wh is the Data Prtectin Officer? Yur emplyer is respnsible fr the data use. Yur ntice f emplyment and/r cntract f emplyment details which f the fllwing cmpanies yu are emplyed by. Within ur Grup, the fllwing cmpanies as emplyers are respnsible fr the use f emplyee data as defined in the General Data Prtectin Regulatin (hereinafter referred t as the GDPR ): - Casins Austria Aktiengesellschaft (hereinafter referred t as CASAG ) FN 99639d - Österreichische Ltterien Gesellschaft m.b.h. (hereinafter referred t as Österreichische Ltterien ) FN 54472g - win2day Entwicklungs- u. Betriebsgesellschaft m.b.h. (hereinafter referred t as win2day ) FN p - Glücks- und Unterhaltungsspiel Betriebsges.m.b.H. (hereinafter referred t as WINWIN ) FN z - Casins Austria Internatinal Hlding GmbH (hereinafter referred t as CAIH ) FN 37681p - Österreichische Sprtwetten Gesellschaft m.b.h. (hereinafter referred t as tipp3 ) FN i - Cuisin Ges.m.b.H. (hereinafter referred t as Cuisin ) FN 54015i 1 Casins Austria AG, Österreichische Ltterien GmbH, win2day Entwicklungs -und Betriebsgesellschaft m.b.h., Glücks- und Unterhaltungsspiel Betriebsges.m.b.H., Österreichischen Sprtwetten GmbH, Casins Austria Internatinal Hlding GmbH, Cuisin Ges.m.b.H., CAST Casins Austria Sicherheitstechnlgie GmbH, Österreichische Klassenltterie Vertriebsgesellschaft m.b.h. and Cngress Casin Baden Betriebsges.m.b.H.

2 - CAST Casins Austria Sicherheitstechnlgie GmbH (hereinafter referred t as CAST ) FN f - Österreichische Klassenltterie Vertriebsgesellschaft m.b.h. (hereinafter referred t as KLVG ) FN t All f the cmpanies listed abve have their headquarters at Rennweg 44, 1038 Vienna, Austria. - Cngress Casin Baden Betriebsges.m.b.H. (hereinafter referred t as CCB GmbH ) FN 67046y Headquarters at Kaiser Franz Ring 1A, 2500 Baden, Austria. Yu can cntact ur Data Prtectin Officer at ur ffice address Rennweg 44, 1038, Vienna, Austria as well as by phne n r at datenschutz.cal.at. The cntact details fr ur Data Prtectin Officer can als be fund n the websites f the individual cmpanies in ur Grup by clicking n the Data Prtectin link r in ur intranet by clicking n the link Game rules/data prtectin ( Spielregeln/Datenschutz ). Which categries f data d we use as an emplyer and where d we btain this data? The data used relates t the fllwing categries in particular: Cre data (e.g. first name, surname, additins t names, date f birth, citizenship, persnnel number assigned t yu by us); Cntact details (e.g. hme address, mbile and/r landline number, address); Image data (pht); Data n yur marital status and if applicable yur spuse, partner and children; Data n yur religin if and s far as this can be/is specifically indicated; Data n yur prfessinal qualificatins, schl-level educatin and prfessinal training; Prtcl data stemming frm yur use f ur IT systems and ther data relating t yur emplyment relatinship with us (e.g. phts, wrking time recrds, vacatin details, perids f incapacity t wrk, character references, bank accunt details, scial security number and salary data). These can als include special categries f persnal data like health data (e.g. diagnsed level f disability). Wrk-related perfrmance data (perfrmance grade, bnus level). The grup f peple fr whm we use such data cmprises emplyees and frmer emplyees as well as persns applying fr emplyment with ur Grup. As a rule, yur persnal data will be btained directly frm yu in the curse f yur hiring prcess r during yur emplyment with ur Grup.

3 In sme circumstances, we are bliged by law t btain persnal data frm ther surces n a needt-knw basis. This includes in particular tax infrmatin frm yur tax ffice and infrmatin n incapacity t wrk frm yur health insurance prvider. We may als have received data frm third parties, e.g. recruitment agencies. We may als n ccasin use persnal data btained admissibly frm publicly accessible surces (e.g. prfessinal netwrks like Xing r LinkedIn). Fr what purpses and n what legal basis are data used? We use yur persnal data fr the purpses f yur emplyment relatinship with ur Grup, paying due care in the prcess t the prvisins f the EU General Data Prtectin Regulatin (GDPR), the Austrian Data Prtectin Act (DSG) and all ther relevant emplyment-related legal prvisins (e.g. the Austrian Gaming Act (GSpG), Labr Cnstitutin Act (ArbVG), Emplyees Act (AngG), Wrking Hurs Act (AZG), Wrkers Prtectin Act (ASchG), etc.). In essence, we use yur persnal data t justify, enact and terminate yur emplyment relatinship with ur Grup. The primary legal basis fr this is Art. 6 (1) b GDPR in cnjunctin with Art. 11 DSG. We may als use data under the prvisins f Art. 6 (1) b in cnjunctin with Art. 88 (1) DSGVO in cnjunctin with Art. 11 DSG thrugh wrks agreements r, if necessary, by btaining yur explicit cnsent t d s in accrdance with Art 6 (1) a, 7 and Art. 9 (2) a DSGVO. The relevant wrks agreement that cvers yur emplyment relatinship can be accessed at any time n ur internal Infnet netwrk via the We als use yur data t cmply with ur legal bligatins as an emplyer, in particular ur tax and scial security bligatins. This is dne n the basis f and in accrdance with Art. 6 (1) c GDPR. If necessary, we als use yur data in line with Art. 6 (1) f GDPR t safeguard ur wn legitimate interests r thse f third parties (e.g. authrities). This applies in particular t the investigatin f criminal acts r fr internal cmmunicatin and ther administrative purpses within ur Grup. In the event that we shuld make use f any special categries f persnal data as defined in Art. 9 (1) GDPR, this serves in the cntext f yur emplyment relatinship t exercise rights r fulfil legal bligatins arising frm emplyment and scial legislatin (e.g. the transmissin f health-related data t health insurance prviders). This is dne n the basis f Art. 9 (2) GDPR. The use f such special categries f persnal data may als be based n prir cnsent as defined in Art. 9 (2) GDPR (e.g. Wrks Cuncil, religius affiliatin). In the event that we shuld use yur persnal data fr any purpse ther than thse indicated abve, we will infrm yu f the situatin in advance. Wh receives yur data? Within ur Grup, yur persnal data is nly prvided t thse persns and departments (e.g. payrll accunting, persnnel administratin, yur line manager, wrks cuncil) wh require this data t fulfill ur cntractual and legal bligatins.

4 We als n ccasin use varius sub-cntractrs t fulfill ur cntractual and legal bligatins. Furthermre, we may prvide yur persnal data t ther recipients utside ur Grup if s required t fulfill ur cntractual and legal bligatins as an emplyer. These can include, fr instance: Authrities (e.g. pensin scheme, scial security agencies, tax ffices, curts), Bank f the emplyee (SEPA payment media), Health insurance cmpanies, Emplyee pensin and severance fund (Valida Vrsrgemanagement GmbH), Bdies required t fulfil ur ld-age pensin cmmitments, Insurance cmpanies (Uniqa, Dnauversicherung, Funk Gruppe) with whm we have Grup insurance arrangements, if and when the emplyee has signed a cntract with the cmpany, In the event that a persn shuld be hired by the Grup, ur Crprate Functin Respnsible Gaming carries ut checks t determine if the emplyee has in the past exhibited signs f a gambling prblem as defined in the Austrian Gaming Act, Third parties in the event f a seizure f wages r salary, Liquidatrs in the event that a persn shuld declare themselves bankrupt. Which data prtectin laws can yu assert? Yu can request infrmatin abut the persnal data we stre n yu frm yur emplyer, frm ur Data Prtectin Officer r frm ur Crprate Functin Human Resurces. Yu can als demand in certain circumstances that yur data be crrected r deleted. Yu likewise have a right t restrict the use f yur data as well as a right t be prvided with the data yu have supplied in a structured, cmmn and machinereadable frmat. Shuld yu wish t assert such a claim, please cntact ur Data Prtectin Officer. Right t Refuse Yu have the right t refuse that yur persnal data be used fr direct advertising purpses withut giving any reasn fr this refusal. If we use yur data fr justified reasns in accrdance with Art. 6 f GDPR, yu can bject t this use fr reasns that relate t yur particular situatin. We will then n lnger use yur persnal data unless we can supply cmpelling and legitimate reasns fr ding s that utweigh yur interests, rights and liberties r if the use theref serves t enfrce, exercise r defend legal claims.

5 Where can yu ldge a cmplaint? Yu have the pssibility t ldge a cmplaint with ur afrementined Data Prtectin Officer r with the Data Prtectin Authrity. Hw lng d we stre yur data? We delete yur persnal data as sn as it is n lnger required fr the afrementined purpses. At the end f yur emplyment relatinship with ur Grup, yur persnal data will be stred fr as lng as we are legally required t d s. These regular requirements are the result f legal burdens f prf and data retentin bligatins arising frm varius laws and prvisins, including the Austrian Cmpanies Act (UGB), the Austrian Civil Cde (ABGB), the Austrian Fiscal Cde (BAO) and the Austrian Emplyee Act (AngG). The actual strage perids can thus range frm six (6) mnths t thirty (30) years after terminatin f the emplyment relatinship. Applicant data will be stred fr the duratin f the applicatin prcess and deleted after a perid f six (6) mnths. In the event that the applicant shuld cnsent t his/her data being retained n file, this data will be stred fr a perid f 12 mnths and then subsequently deleted. The situatin may als arise that we are required t stre data fr the duratin f time in which claims can be made against us (legal statute f limitatins f three (3) r up t thirty (30) years). In the event that a frmer emplyee shuld have a claim t a cmpany pensin, his/her emplyee data will als be used beynd the end f his/her term f emplyment with the grup and used as required t prvide the cmpany pensin. Will yur data be prvided t a third cuntry? In general, we d nt prvide any persnal emplyee data t any third cuntries. Hwever, shuld we nnetheless be required t prvide persnal data t a cntractr r cmpany in ur Grup utside the Eurpean Ecnmic Area (EEA), we will nly d if and when the level f data prtectin in this third cuntry is deemed adequate by the Eurpean Cmmissin r if ther adequate data prtectin guarantees (e.g. binding cmpany-internal data prtectin prvisins r EU Standard Cntract Clauses) are in place. Are yu bliged t supply yur data? Fr the purpses f yur emplyment with ur Grup, yu must supply the persnal data required t justify, enact and end yur emplyment relatinship and t fulfil yur cntractual duties thereby. Yu must als supply the persnal data that we are legally bliged t btain. Withut these data, we are nt in a psitin t enter int an emplyment relatinship with yu.

6 T what extent des the Grup make autmated decisins in individual cases r carry ut prfiling measures? We currently d nt make use f any autmated decisin prcesses including prfiling t justify, enact r end an emplyment relatinship. Analyses f prtcl data are nly carried ut in individual cases specifically cvered by the respective wrks agreements. In all such cases, the Central Wrks Cmmittee and/r Lcal Wrks Cmmittee is immediately infrmed. The relevant wrks agreement that cvers yur emplyment relatinship can be accessed at any time n ur internal Infnet netwrk via the Versin: ***