Privacy statement

This privacy policy explains the nature, scope and purpose of the processing of your personal data within the scope of the offers of the association "WUK - Werkstätten- und Kulturhaus".

To illustrate the terms used, such as "Personal data" or their "processing", we refer to the definitions in Article 4 of the General Data Protection Regulation (GDPR).

1. Your rights

According to the General Data Protection Regulation (DSGVO), you are entitled in principle to information, correction, deletion, restriction, data portability, revocation and opposition.

As users of our offers, you have the right

• to obtain information on whether and which personal data we have stored about you, free of charge.
• To receive copies of the data stored about you.
• to request the correction or addition of your personal data if it is incorrect.
• to demand the deletion of your personal data if these are incorrect or not processed in accordance with the law.
• to require us to limit the processing of your personal data.
• in certain circumstances to object to the processing of your personal data.
• to revoke a consent previously granted to us for the processing of your data.
• to require data portability under certain circumstances.
• to know the identity of third parties to whom your personal information is transmitted.

In order to exercise your rights or if you believe that the processing of your data violates data protection law or your data protection claims have otherwise been violated in any way, we ask you to contact our data protection officer.

• Mag. Philip König-Bucher, T +43-1-401 21-2503, datenschutz@wuk.at

In addition, you have the right to lodge a complaint with the competent supervisory authority - in Austria: Data Protection Authority.

2. Safety measures

We take organizational, contractual and technical security measures in accordance with the state of the art to ensure that the provisions of data protection laws are adhered to and in order to protect the data processed by us against accidental or intentional manipulation, loss, destruction or against access by unauthorized persons.

3. Disclosure of data to third parties and third party providers

A transfer of data to third parties is only within the scope of legal requirements. We will only pass users' data on to third parties if this is the case, for example. on the basis of Art. 6 para. 1 lit. b) GDPR is required for contract purposes or based on legitimate interests in accordance with Art. Art. 6 para. 1 lit. f. DSGVO on the economical and effective operation of our business operations.

If we use subcontractors to provide our services, we will take appropriate legal precautions and appropriate technical and organizational measures to protect personal data in accordance with applicable law.

If, within the framework of this Privacy Policy, content, tools or other means are used by other providers (collectively referred to as "third party providers") and their registered office is located in a third country, it is to be assumed that data will be transferred to the countries of residence of the third party providers. Third countries are countries in which the GDPR is not a directly applicable law, i. E. basically countries outside the EU or the European Economic Area. The transfer of data to third countries takes place either when there is an adequate level of data protection, user consent or other legal authorization.

4. Storage duration and deletion of data

Your personal data will only be stored by us for as long as the respective purpose of the data processing requires and as permitted under applicable law. In any case, we retain your personal data as long as statutory or contractual retention requirements exist or prescription periods of potential legal claims have not yet expired.

The storage duration is described in each case in the explanation of the individual data processing.

5. Changes to the privacy policy

We reserve the right to change this Privacy Policy in order to adapt it to changes in legal situation or to changes in our offers and related data processing.

The privacy policy applies regardless of the domains, systems, platforms, and devices (such as desktop or mobile) on which the online offering is being run.

1. Collection of access data and log files

Based on our legitimate interest in maintaining the security of our IT infrastructure, we collect data about every access to the server hosting this service (so-called server log files). The access data includes the name of the retrieved web page, file, date and time of retrieval, amount of data transmitted, message about successful retrieval, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address and the requesting provider ,

Logfile information is stored for security purposes (for example, to investigate abusive or fraudulent activities) for a maximum of 14 days and then deleted. Data whose further retention is required for evidential purposes shall be exempted from the cancellation until final clarification of the incident.

2. Cookies & reach measurement

In order to improve the WUK online offer in terms of users, we use "session cookies", which are only stored for the duration of the current visit on our online presence. Cookies are information that is transmitted from our web server to the users' web browsers and stored there for later retrieval. Cookies can be small files or other types of information storage.

In a session cookie, a randomly generated unique identification number is stored, a so-called session ID. In addition, a cookie contains information about its origin and the retention period. These cookies can not save any other data. Session cookies will be deleted if you have finished using our online offer and you have e.g. log out or close the browser.

If you do not want to have cookies stored on your computer, we ask you to disable the corresponding option in the system settings of your browser. Saved cookies can be deleted in the system settings of the browser. The exclusion of cookies can lead to functional restrictions of our online offer.

You may opt for the use of cookies for distance measurement and promotional purposes through the Network Advertising Initiative's opt-out page (http://optout.networkadvertising.org/) and the US website (http://www.aboutads.info/choices ) Or the European website (http://www.youronlinechoices.com/uk/your-ad-choices/).

3. Google Analytics

Based on our legitimate interests (ie interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 (1) lit. DSGVO), we use Google Analytics, a web analysis service provided by Google Inc. ("Google") , Google uses cookies. The information generated by the cookie about the use of the online offer by the users are usually transmitted to a Google server in the USA and stored there.

Google is certified under the Privacy Shield Agreement, which provides a guarantee to comply with European privacy legislation (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

Google will use this information on our behalf to evaluate the use of our online offer by the users, to compile reports on the activities within this online offer and to provide us with further services related to the use of this online offer and the internet usage. In this case, pseudonymous user profiles of the users can be created from the processed data.

We use Google Analytics to have the ability to display ads within Google and its affiliate advertising services only to those users who have shown an interest in our online offering or who have certain traits (eg interests in specific topics or products that they use) Web pages) that we may submit to Google (so-called "remarketing" or "Google Analytics audiences"). With the help of the Remarketing Audiences, we also want to make sure that our ads are in line with the potential interest of the users and are not annoying.

We only use Google Analytics with activated IP anonymization. This means that the IP address of the users is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there.

The IP address submitted by the user's browser will not be merged with other data provided by Google. The users can prevent the storage of the cookies by an appropriate setting of their browser software; Users may also prevent the collection by Google of the data generated by the cookie and related to their use of the online offer as well as the processing of this data by Google by downloading and installing the browser plug-in available under the following link: http: // tools .google.com / dlpage / gaoptout? hl = en.

For more information about Google's data usage, hiring and opt-out options, please visit Google's websites: www.google.com/intl/en/policies/privacy/partners ("Google's use of your data when you use websites or apps our partners "), www.google.com/policies/technologies/ads (" Use of data for promotional purposes "), www.google.com/settings/ads (" Managing information that Google uses, to show you advertising ").

4. Google Re/Marketing Services

On the basis of our legitimate interests (ie interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 (1) lit. DSGVO) we use the marketing and remarketing services ("Google Marketing Services ") Of Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA, (" Google ").

Google is certified under the Privacy Shield Agreement, which provides a guarantee to comply with European privacy legislation (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

The Google Marketing Services allow us to better target advertisements for and on our website so that we only present users with ads that are potentially in their interests. If a user is e.g. Ads for products that he / she has been interested in on other websites are referred to as remarketing. For these purposes, when Google and our other websites accessing Google Marketing Services are directly accessed by Google, a code will be executed by Google and so-called (re) marketing tags (invisible graphics or code, also called "Web Beacons ") incorporated into the website. With their help, the user's device becomes an individual cookie, i. a small file is saved (instead of cookies, comparable technologies can also be used). The cookies can be set by different domains, including google.com, doubleclick.net, invitemedia.com, admeld.com, googlesyndication.com or googleadservices.com. In this file is noted which websites the user visited, for what content he is interested and what offers he has clicked, as well as technical information on the browser and operating system, referring websites, visit time and other information on the use of the online offer. The IP address of the users is also recorded, whereby in the context of Google Analytics we announce that the IP address is shortened within member states of the European Union or other parties to the Agreement on the European Economic Area and only in exceptional cases to one Google server in the US is transmitted and shortened there. The IP address will not be merged with user data within any other Google offerings. The above information may also be linked by Google with such information from other sources. If the user then visits other websites, advertisements tailored to his interests may be displayed to him.

The data of the users are pseudonym processed in the context of the Google marketing services. That Google stores and processes e.g. not the name or e-mail address of the users, but processes the relevant data cookie-related within pseudonymous user profiles. That from the perspective of Google, the ads are not managed and displayed to a specifically identified person, but to the cookie owner, regardless of who that cookie owner is. This does not apply if a user has explicitly allowed Google to process the data without this pseudonymization. The information collected by Google Marketing Services about the Users is transmitted to Google and stored on Google's servers in the United States.

One of the Google marketing services we can use is the Google AdWords online advertising program. In the case of Google AdWords, each advertiser receives a different conversion cookie. Cookies can not be tracked through AdWords advertisers' websites. The information gathered through the cookie is used to generate conversion statistics for AdWords advertisers who have opted for conversion tracking. The AdWords advertisers are told the total number of users who clicked on their ad and were redirected to a conversion tracking tag page. However, they do not receive information that personally identifies users.

In addition, we may use the "Google Tag Manager" to integrate and manage the Google Analytics and Marketing Services on our website.

For more information about Google's data usage for marketing, see the overview page: www.google.com/policies/technologies/ads, Google's Privacy Policy located at www.google.com/policies/privacy available.

If you wish to opt-out of interest-based advertising through Google Marketing Services, you can take advantage of Google's recruitment and opt-out options: www.google.com/ads/preferences.

​​​​​​​​​​​​​​5. Facebook, Custom Audiences und Facebook Marketing Services

Within our online offer is due to our legitimate interests in analysis, optimization and economic operation of our online offer and for these purposes, the so-called "Facebook pixel" of the social network Facebook, by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025 , USA, or, if you are located in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland ("Facebook").

Facebook is certified under the Privacy Shield Agreement, which provides a guarantee to comply with European privacy legislation (https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active).

With the help of the Facebook pixel, it is on the one hand possible for Facebook to determine the visitors to our online offer as a target group for the presentation of advertisements (so-called "Facebook ads"). Accordingly, we use the Facebook pixel to display the Facebook ads we have been sent only to those Facebook users who have also shown an interest in our online offer or certain features (eg interests in certain topics or products that have been visited by them) Web pages determined), which we transmit to Facebook (so-called "Custom Audiences"). With the help of the Facebook pixel, we also want to make sure that our Facebook ads are in line with the potential interest of the users and do not seem to be annoying. With the help of the Facebook pixel, we can also understand the effectiveness of the Facebook ads for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Facebook ad (so-called "conversion").

The Facebook pixel is integrated when calling our website directly through Facebook and can on your device a so-called cookie, i. save a small file. If you subsequently log in to Facebook or visit Facebook in the logged-in state, your visit to our online offer will be noted in your profile. The data collected about you are anonymous to us, so do not give us any conclusions about the identity of the users. However, the data is stored and processed by Facebook, so that a connection to the respective user profile is possible and can be used by Facebook as well as for its own market research and advertising purposes. If we should send data to Facebook for comparison purposes, they will be encrypted locally in the browser and then sent to Facebook via a secure https connection. This is done solely with the purpose of establishing a comparison with the equally encrypted by Facebook data.

The processing of the data by Facebook is part of Facebook's data usage policy. Accordingly, general notes on how to display Facebook Ads, in Facebook's Data Usage Policy: www.facebook.com/policy.php. For specific information and details about the Facebook Pixel and how it works, visit the help section of Facebook: www.facebook.com/business/help/651294705016616.

You may object to the capture by the Facebook Pixel and use of your data to display Facebook Ads. To set which types of ads you see within Facebook, you can go to the page set up by Facebook and follow the instructions for the usage-based advertising settings: www.facebook.com/settings. The settings are platform independent, i. they are adopted for all devices, such as desktop computers or mobile devices.

You can also use the Cookies for distance measurement and promotional purposes via the deactivation page of the Network Advertising Initiative (http://optout.networkadvertising.org/) and in addition the US website (http://www.aboutads.info/ choices) or the European website (http://www.youronlinechoices.com/uk/your-ad-choices/).

​​​​​​​6. Integration of services and contents of third parties

Based on our legitimate interests (ie interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 (1) lit. DSGVO), we make use of content or services offered by third-party providers in order to provide their content and services Services, such as Include videos or fonts (collectively referred to as "content"). This always presupposes that the third-party providers of this content perceive the IP address of the users, since they could not send the content to their browser without the IP address. The IP address is therefore required for the presentation of this content. We endeavor to use only content whose respective providers use the IP address solely for the delivery of the content. Third parties may also use so-called pixel tags (invisible graphics, also referred to as "web beacons") for statistical or marketing purposes. The "pixel tags" can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information may also be stored in cookies on the user's device and may include, but is not limited to, technical information about the browser and operating system, referring web pages, visit time, and other information regarding the use of our online offer.

The following presentation provides an overview of third-party providers as well as their contents, as well as links to their data protection statements, which contain further information on the processing of data and, for already mentioned here, contradictory possibilities (so-called opt-out) contain:

• Online ticketing of third-party service "Eventjet" Datascroll Eventsupport GmbH, Eggerthgasse 9, 1060 Vienna.
  Privacy Policy: eventjet.at/about/legal
• External fonts from Google, Inc., www.google.com/fonts ("Google Fonts"). The integration of Google fonts is done by a server call on Google (usually in the US).
  Privacy Policy: www.google.com/policies/privacy/,
  Opt-Out: www.google.com/settings/ads/.
• Maps of the third-party Google Maps service, Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.
  Privacy Policy: www.google.com/policies/privacy/,
  Opt-Out: www.google.com/settings/ads/.
• Third-party platform "YouTube" videos from Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.
  Privacy Policy: www.google.com/policies/privacy/,
  Opt-Out: www.google.com/settings/ads/.
• Vimeo third-party videos from Vimeo, Inc., 555 West 18th Street, New York, New York 10011, USA.
  Privacy Policy: vimeo.com/privacy
• Audio embeddings of Spotify's third party platform Spotify AB, Regeringsgatan 19, 111 53 Stockholm, Sweden.
  Privacy Policy: www.spotify.com/at/legal/privacy-policy/
• Audio embedding of the "Soundcloud" platform of the third-party provider SoundCloud Limited, Rheinsberger Straße 76/77, 10115 Berlin, Germany.
  Privacy Policy: soundcloud.com/pages/privacy
• Within our online offer functions of the service Instagram can be integrated. These features are provided by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, United States. If you are logged in to your Instagram account, you can link the contents of our pages to your Instagram profile by clicking on the Instagram button. This allows Instagram to associate your visit to our pages with your user account. We point out that we as the provider of the pages do not receive knowledge of the content of the transmitted data and their use by Instagram.
  Privacy Policy: instagram.com/about/legal/privacy/.
• We may use social plugins from the Pinterest social network operated by Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, USA ("Pinterest"). When you visit a page containing such a plugin, your browser connects directly to the servers of Pinterest. The plugin transmits protocol data to the server of Pinterest in the USA. This log data may include your IP address, the address of the websites visited, which also includes Pinterest features, browser type and settings, the date and time of the request, how you use Pinterest, and cookies.
  Privacy Policy: about.pinterest.com/en/privacy-policy.
• Within our online offer functions of the service Twitter can be integrated. These features are available through Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. By using Twitter and the "Re-Tweet" feature, the websites you visit are linked to your Twitter account and shared with other users. This data is also transmitted to Twitter. We point out that we as the provider of the pages are not aware of the content of the transmitted data and their use by Twitter.
  Privacy Statement from Twitter at twitter.com/privacy.
  You can change your privacy settings on Twitter in the Account Settings at twitter.com/account/settins.
• External code of the JavaScript framework "jQuery" provided by the third-party jQuery Foundation, jquery.org.

7. WUK Cloud Services

WUK offers selected users cloud services hosted on WUK servers. Prerequisite for the use of these services is the creation of a user account, whereby name and e-mail address, optionally a photo are stored. The processing of this data is required for user administration and for the traceability of activities in the sharing of files by multiple users.

The WUK cloud services use the system OwnCloud, which is constantly updated to the latest version. The security precautions are described at owncloud.com/en/security/.

With the termination of the use of the deletion of the user account and thus all personal data.

By subscribing to our newsletter, you agree to receive it and to the procedures described.

The data processing takes place on the basis of your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time by unsubscribing from the newsletter.

To send our newsletter, we use CleverReach, a newsletter dispatch service provided by CleverReach GmbH & Co. KG, Schafjückenweg 2, 26180 Rastede, Germany.

The order processing contract concluded with CleverReach in accordance with Art. 28 GDPR guarantees that your personal data will only be processed in accordance with our instructions and in compliance with the GDPR. The data processed by you in the context of the WUK newsletter subscription is stored on servers in Germany and Ireland.

Registration

You can register to receive the newsletter using the registration form provided by CleverReach on our website. To register, you must provide a valid email address and select the desired newsletter. Optionally, you can enter your name and date of birth.

Registration takes place in a so-called double opt-in procedure. After registering, you will receive an e-mail asking you to confirm your registration. This confirmation ensures that no-one can register using other people's e-mail addresses.

Analysis

Our newsletters sent with CleverReach enable us to analyse the behaviour of recipients. Among other things, we can analyse which recipients have opened the newsletter and which content they have clicked on. Further information on data analysis by CleverReach can be found at: https://www.cleverreach.com/de/funktionen/reporting-und-tracking/.

Unsubscribing and cancellation

Your data processed for the purpose of subscribing to the newsletter will be stored by us or CleverReach until you unsubscribe from all WUK newsletters. After cancellation - for which we provide a corresponding link at the end of each newsletter - your data will be deleted from the newsletter distribution list. Data stored by us for other purposes remains unaffected by this.

Further information can be found in CleverReach's privacy policy at: https://www.cleverreach.com/de/datenschutz/.

In den WUK Bildungs- und Beratungseinrichtungen verwenden wir zoom für Online-Beratung und -Schulung.

1. Zweck und Rechtsgrundlage der Verarbeitung

Die Datenverarbeitung erfolgt entweder aufgrund eines berechtigten Interesses nach Art. 6 Abs. 1 lit. F, sofern sie der Erleichterung der Kommunikation ohne physische Präsenz dient oder auf Basis eines vorvertraglichen bzw. vertraglichen Rechtsverhältnisses gem. Art. 6 Abs. 1 lit. B, wenn die Nutzung von zoom Teil des Vertragsverhältnisses ist, z.B. bei Online-Workshops.

Weitere Informationen zur Datenverarbeitung sind der Datenschutzerklärung von Zoom (https://zoom.us/de-de/privacy.html) zu entnehmen.

2. Verarbeitete Datenkategorien

Im Rahmen der Nutzung von zoom werden Daten aus folgenden Kategorien verarbeitet:

• Benutzer_innen-Angaben: Name, E-Mail-Adresse, Passwort, Profilbild (optional), Abteilung (optional).
• Metadaten des Meetings: IP-Adressen der Teilnehmer_innen, Geräte- und Hardwareinformationen, Thema, Beschreibung (optional).
• Chat Logs bei Nutzung der Chat-, Frage- oder Umfragefunktion.
• Bei Telefoneinwahl: Eingehende sowie ausgehende Rufnummer, Ländername, Beginn- und Endzeit, IP-Adresse, Hostname, Host-E-Mail, MAC-Adresse.

3. Übermittlung von Daten

Die oben angeführten Daten werden an unseren Auftragsverarbeiter (nach Art 28 DSGVO) Zoom Video Communications Inc., 55, Almaden Blvd, Suite 600, San Jose, CA 95113. USA übermittelt und von diesem verarbeitet.

Zoom Video Communications garantiert durch die Privacy-Shield-Zertifizierung und durch die Heranziehung der EU-Standardvertragsklauseln ein angemessenes Datenschutzniveau.

Weitere Informationen zur Datenverarbeitung sind der Datenschutzerklärung von Zoom (https://zoom.us/de-de/privacy.html) zu entnehmen.

4. Speicherdauer

Zoom hält die personenbezogenen Daten solange wie es für den Zweck der Bereitstellung ihrer Dienste erforderlich ist. Selbst angelegte Benutzer_innen-Konten können selbst gelöscht werden.

We process data that you have provided to us yourself or through discussion notes during the interview by personnel responsible for personnel. The provision of your personal data is voluntary. However, it will not be possible to go through a complete application process if you do not provide your personal information.

1. Purpose of processing

We will process your personal information referred to in point 3 in order to complete the application process and to keep personal data of candidates for employment at a later date.

2. Legal basis of processing

We process your personal data on the basis of our predominant legitimate interest in accordance with Art. 6 para. 1 lit. F DSGVO, which is to achieve the above purposes.

3. Processed data categories

Title and name, address, date and place of birth, e-mail address, telephone number, marital status and children, citizenship, type of job for which you would like to apply, type of application (eg apprenticeship, internship), extent of activity, Earliest date of entry, period of notice, your salary requirements, photo, curriculum vitae, military service, education (school, university, courses), driver's license (yes / no), employment and internships, responsibilities and responsibilities, personal skills and competencies, interests and hobbies, Signature, certificates and certificates;

4.  Transmission of your personal data

Before establishing a employment relationship, we will transfer your personal data to the clients of the respective project, such as the Ministry of Social Affairs, the Public Employment Service or the European Social Fund. The submission is used for classification in salary schemes and proof of qualifications. We transfer personal data only to the extent to which we are contractually or legally obliged.

5. Duration of storage 

After completing the application process (date of filling the vacancy), we will keep your application for another 6 months. Afterwards, we will delete all your personal information without any further notice.