Privacy

Privacy policy for the application process


1.  General information
Starbucks Coffee Austria GmbH thanks you for visiting our career site and for your interest in our company. We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations as well as this privacy policy.
The following information provides a simple overview of what happens to your personal data when you visit this website. It also explains how and for what purpose this is done. Personal data is all data with which you can be personally identified. For detailed information on data protection, please refer to our privacy policy below.
We would like to point out that data transmission over the Internet (e.g. when communicating via email) may have security gaps. Complete protection of the data from access by third parties is not possible.
 
2.  Information about the data controller
The person responsible for data processing on this website is:

Starbucks Coffee Austria GmbH
Theobaldgasse 20, A - 1060 Wien
Tel: +43 1 336633 0
Email: office@starbucks.at

The data controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data (e.g. names, email addresses, etc.).
 
3.  For what purposes and on what legal basis is your data processed?
3.1.  Provision of the website

In principle, you can visit the website without us collecting personal data from you. When you access the website or retrieve a file stored on the website, data is collected and processed. This only happens insofar as it is necessary to provide a functional website and its content and services. The personal data is generally collected and used only after the appropriate consent has been given. An exception applies in cases where it is not possible to obtain prior consent for practical reasons and the processing of data is permitted by law. When the website is accessed, the browser type/version, operating system used, IP address and the date and time of the server request are logged.
Storage in log files ensures that the website functions properly and also serves to improve and secure our systems. No further evaluation of this data takes place in this context. The data we hold in this context will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. This is the case after six weeks at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or alienated so that it is no longer possible to assign the calling client. Collection of the aforementioned data is strictly necessary for the operation of the website. There is therefore no possibility of objection on the part of the user.
 
3.2          Enquiry by email
If you contact us via the email address provided, your enquiry including all personal data (name, details of enquiry) will be stored and processed by us for the purpose of processing your request. We will not share this data without your consent.
This data is processed on the basis of Art. 6(1)(b) GDPR insofar as your enquiry is related to the fulfilment of a contract or is necessary to carry out pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective processing of the enquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) if this has been requested.
The data sent by you to us by means of contact enquiries remains with us until you ask us to delete it, revoke your consent to its storage or the purpose for which it was stored ceases to apply (e.g. after your enquiry has been processed). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.
                 
3.3          Application process/application portal/job alert
The purpose of the data processing is to be able to carry out a lawful examination of your application as part of the application process. For this purpose, we store all the data provided by you as part of your application. On the basis of the data submitted as part of the application, we will check whether you can be invited for interview as part of the selection process.
If we are unable to consider your application for a current position, we reserve the right to include your application in our pool of applicants. Your application will then be saved and we will have the opportunity to check your profile for newly advertised positions. You can withdraw your application from our pool of applicants at any time. In this case, the application will be deleted completely within two weeks. Processing for inclusion in our pool of applicants is carried out exclusively on the basis of your consent (Art. 6(1)(a) GDPR). You can revoke your consent at any time by withdrawing from the pool of applicants.
Your applicant data is processed on the basis of Art. 6(1)(b) GDPR or Art. 9(2)(a) and (b) GDPR (fulfilment of a contract or carrying out pre-contractual measures).
  
4.  Who receives your data?
Within our company, only those departments or employees receive your data insofar as they require it for processing for the corresponding purposes. In addition, processors commissioned by us (especially IT service providers) receive your data insofar as they require the data to perform their respective services. All contractual processors have been carefully selected and take appropriate technical and organisational measures to ensure that the processing of your data is carried out in accordance with the obligations of data protection law and that the protection of your rights is guaranteed. In particular, the contractual processors are not permitted to use your personal data for their own purposes.
With regard to the transfer of data to other third parties, such a transfer will only be carried out if there is a valid legal basis for doing so and for purposes specified in advance.
The application portal is operated by our contractual processor rexx systems GmbH, Süderstraße 75-79, D-20097 Hamburg.
 
5.  Transfer of personal data to a third country
Your personal data is generally processed in member states of the European Union. In the event that your personal data is transferred to recipients located in countries outside the European Union, we will ensure that appropriate security measures have been taken to protect your personal data (e.g. existence of an adequacy decision, use of standard contractual clauses).
 
6.  How long is your data stored?
We process your personal data for as long as is reasonably necessary to achieve the aforementioned purposes and, in addition, in accordance with statutory retention and documentation obligations arising, among others, from the Austrian General Civil Code (ABGB) and the Austrian Business Code (UGB) or for the establishment, exercise or defence of legal claims.
As a matter of principle, your data will therefore be deleted after we receive revocation of your consent or your objection, provided that storage is not required for the fulfilment of a legal obligation or for the establishment, exercise or defence of legal claims. Further processing will then only take place if you have expressly consented to the further use of your data or if we have reserved the right to carry out further data processing that is permitted by law.
In any case, your personal data will be stored for the duration of the application process and, in addition, for as long as this is necessary to defend against possible legal claims, generally six months after completion of the application process. The provision of your personal data is always voluntary. If you do not provide us with your data, we will not be able to process your application properly.
 
7.  What rights do you have?
7.1          Withdrawal of your consent to data processing

Many data processing operations are only possible with your express consent. You can revoke any consent already given at any time. The legality of the data processing carried out up to the revocation remains unaffected by the revocation.

7.2          Right of objection to data collection in special cases and to direct marketing (Art. 21 GDPR)
If data processing is carried out on the basis of Art. 6(1)(f) GDPR, you have the right at any time to object to the processing of your personal data for reasons arising from your particular situation. The respective legal basis on which a processing is based can be found in this privacy policy. If you lodge an objection, we will no longer process your personal data, unless we can prove compelling legitimate grounds for processing that override your interests, rights and freedoms or the processing serves to establish, exercise or defend legal claims (objection in accordance with Art. 21(1) GDPR).
If your personal data is processed in order to conduct direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; if you object, your personal data will then no longer be used for the purpose of direct marketing (objection in accordance with Art. 21(2) GDPR).

7.3          Right to data portability
You have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a commonly used and machine-readable format. If you request direct transfer of the data to another controller, this will only occur insofar as this is technically feasible.

7.4          Information, erasure and rectification
Within the scope of the applicable statutory provisions, you have the right at any time to obtain information free of charge about your stored personal data, its origin and recipients and the purpose of the data processing and, if applicable, a right to rectification or erasure of this data. You can contact us at any time for this purpose or for any other questions regarding personal data at the address given in the imprint.

7.5          Right to restrict processing
You have the right to request that the processing of your personal data be restricted. To do so, you can contact us at any time using the contact details given in point 2. The right to restrict processing exists in the following cases:
  • If you dispute the accuracy of your personal data stored by us, we usually need time to verify this. For the time it takes us to perform this verification, you have the right to demand restriction of the processing of your personal data.
  • If the processing of your personal data was or is carried out unlawfully, you may demand restriction of the processing of your data instead of its deletion.
  • If we no longer need your personal data, but you need it for the establishment, exercise or defence of legal claims, you have the right to demand restriction of the processing of your personal data instead of its erasure.
  • If you have lodged an objection in accordance with Art. 21(1) GDPR, a balance must be struck between your interests and ours. As long as it has not yet been established whose interests prevail, you have the right to demand restriction of the processing of your personal data.
  • If you have restricted the processing of your personal data, such data shall – with the exception of being stored – only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State.
7.6          Objection to advertising emails
The use of contact data published in the context of the imprint obligation for sending unsolicited advertising and information materials is hereby rejected. The operators of the website expressly reserve the right to take legal action in the event of unsolicited sending of advertising information, for example by means of spam emails.
 
8.  Right to lodge a complaint with the supervisory authority
If you believe that the processing of your data violates data protection law or that your data protection rights have otherwise been violated in any way, you have the right to lodge a complaint with the supervisory authority. The Austrian Data Protection Authority is the national supervisory authority for data protection in Austria.

Austrian Data Protection Authority
Barichgasse 40-42 
1030 Wien
Tel: +43 1 52 152-0
Email: dsb@dsb.gv.at
 
9.  Is there an obligation to provide data?
The provision of your personal data is always voluntary. However, some information is necessary for the proper processing of your application. This information is marked accordingly. If you do not provide your personal data, we may not be able to process your application properly.
 
10.  Will my data be used for automated decision making, including profiling?
We do not use automated decision-making in accordance with Art. 22 GDPR.
  
11.  Cookies
This website uses so-called "cookies", which serve to make the website more user-friendly, more effective and more secure. Cookies are small text files and do not cause any damage on your device. They are stored either temporarily for the duration of a session (session cookies) or permanently (persistent cookies) on your device. Session cookies are automatically deleted after your visit. Persistent cookies remain stored on your device until you delete them yourself or until your web browser automatically deletes them.
When the website is accessed, the user is informed about the use of cookies and their consent to the processing of the personal data used is obtained. Numerous cookies are necessary for technical reasons because certain website functions would not work without them (e.g. displaying videos). In some cases, cookies from third-party companies can also be stored on your device when you enter our website (third-party cookies). These enable us or you to use certain services of the third-party company (web analytics software Matomo). Of course, you can decline or delete cookies at any time, provided that your browser allows this. Please note that certain functions of this website may not be able to be used or may only be used to a limited extent if your browser is set to not accept cookies.
Cookies that are required to carry out the electronic communication process (strictly necessary cookies) or to provide certain functions that you have requested or to optimise the website (e.g. cookies for audience measurement) are stored on the basis of Art. 6(1)(f) GDPR, unless another legal basis is specified. The website operator has a legitimate interest in the storage of cookies for the technically error-free and optimised provision of its services. If consent to the storage of cookies has been requested, the respective cookies will be stored exclusively on the basis of this consent (Art. 6(1)(a) GDPR); consent may be revoked at any time.
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for specific cases or in general and activate the automatic deletion of cookies when the browser is closed. Disabling cookies may limit the functionality of this website.
If cookies are used by third-party companies or for analysis purposes, we will inform you about this separately within the scope of this privacy policy and, if necessary, ask for your consent. For more information on the privacy settings of the Matomo software, please visit the following link: https://matomo.org/docs/privacy/. You have the option to prevent actions you take here from being analysed and linked.
 
12.  Amendment of the privacy policy 
We reserve the right to change or adapt this privacy policy at any time in accordance with the applicable data protection regulations. Last updated: August 2020.