About

Below we inform you about the processing of personal data in connection with the services we offer on www.bb-jobportal.com or other websites or apps (hereinafter collectively referred to as "platforms") that include this privacy policy. Personal data are information relating to an identified or identifiable natural person (Article 4 No. 1 GDPR). This includes information such as your name, email address, postal address, or telephone number. Information that cannot be directly associated with your identity, such as the number of users of a website, is not included.

BB Jobportal privacy policy

The protection and confidentiality of your data are of great importance to BB Jobportal.

1. Information about the collection of personal data and contact details of the controller

1.1 Thank you for visiting our website. Below we would like to inform you about the handling of your personal data when using our website. Personal data are generally all data that can be used to personally identify you.

1.2 The controller responsible for data processing on our website within the meaning of the General Data Protection Regulation (GDPR) is:

Barbara Bertolini
Domgasse 4/14
1010 Vienna
Austria
Tel.: 004319461246
E-Mail: office@bb-jobportal.com

1.3 To protect the security of your data during transmission, we use encryption methods corresponding to the current state of technology (e.g., SSL or TLS) via HTTPS.

2. Data collection when visiting our website

Each time our website is accessed, our system automatically collects data and information that your browser transmits to our server (so-called "server log files"). The following data, which are technically necessary for us, are collected:

• Our visited website
• Date and time at the moment of access
• Amount of data sent in bytes
• Source/reference from which you accessed the site
• Used operating system
• Used browser
• Used IP address (if applicable: in anonymized form)

The legal basis for the processing is Art. 6(1)(f) GDPR due to our legitimate interest in improving the stability and maintaining the functionality of our website. The data will not be shared or used in any other way. The temporary storage of the IP address by the system is necessary to enable the delivery of the website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session.

We reserve the right to review the server log files retrospectively if there are concrete indications of unlawful use. The data will be deleted as soon as they are no longer necessary for achieving the purpose of their collection. In the case of data collection for the provision of the website, this is when the respective session has ended.

In the case of storage of data in log files, this is the case at the latest after seven days. Further storage is possible. In this case, the IP addresses of the users are deleted or anonymized so that an assignment of the calling client is no longer possible. The collection of data for the provision of the website and the storage of data in log files are essential for the operation of the website. Therefore, the user has no possibility to object.

3. Cookies

Our website uses cookies.

Cookies are text files that are stored on the user's device. When a user accesses a website, a cookie can be stored on the user's operating system. Some functions of our website cannot be offered without the use of cookies. For this purpose, it is necessary that the browser is recognized even after a page change. The user data collected through technically necessary cookies are not used to create user profiles. Our legitimate interest in processing personal data according to Art. 6(1)(f) GDPR lies in the aforementioned purposes.

In addition, our website may use cookies that enable the analysis of users' browsing behavior (so-called third-party cookies). For more information on the scope, purpose, legal basis, and options for objection, please refer to the respective sections of the relevant chapter of this privacy policy.

As a user, you have full control over the use of cookies. By changing the settings in your internet browser, you can disable, restrict, or delete the transmission of cookies. If you disable cookies for our website, not all functions of the website may be fully usable. You can prevent the transmission of Flash cookies by changing the settings of the Flash Player.

You can find help with the settings in the help menu of your browser under the following links:

Google Chrome: https://support.google.com/chrome/answer/95647?hl=en
Mozilla Firefox: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences
Safari: https://support.apple.com/guide/safari/manage-cookies-and-website-data-sfri11471/mac
Microsoft Edge: https://support.microsoft.com/en-us/microsoft-edge/delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09
Internet Explorer: https://support.microsoft.com/en-us/topic/how-to-delete-cookie-files-in-internet-explorer-bca9446f-d873-78de-77ba-d42645fa52f
Opera: https://help.opera.com/en/latest/web-preferences/#cookies

Some of the cookies used here are deleted after you close your browser (so-called session cookies). Other cookies remain on your device and allow us or our partner companies (third-party cookies) to recognize your browser on your next visit (persistent cookies). When cookies are set, they collect and process certain user information such as browser and location data as well as IP address values to a specific extent. Persistent cookies are automatically deleted after a predetermined period, which may vary depending on the cookie.

4. Contact us

When you contact us via the contact form, the data entered in the input mask is transmitted to us and stored. The collected data can be seen in the respective input mask. When contacting us by email, only the data you enter will be transmitted to us.

The data is used exclusively for processing the conversation and your inquiry. The legal basis for processing the data is Art. 6(1)(a) GDPR if the user has given consent. The legal basis for processing data transmitted in the course of sending an email is Art. 6(1)(f) GDPR. If the email contact aims to conclude a contract, the additional legal basis for processing is Art. 6(1)(b) GDPR. The data will be deleted as soon as they are no longer necessary for achieving the purpose of their collection and if there are no statutory retention requirements. For personal data from the contact form input mask and those sent by email, this is the case when the respective conversation with the user is concluded. The conversation is considered concluded when the circumstances indicate that the relevant matter has been finally clarified. The user can revoke their consent to the processing of personal data at any time. If the user contacts us by email, they can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.

4.1 If you have purchased goods with digital elements or a digital product from us and we owe you updates according to the contract, we will inform you about upcoming updates through an appropriate communication channel. For this purpose, we process the data you provided during the order (name, address, email address) in a targeted manner and only to the necessary extent. The legal basis for this processing is Art. 6(1)(c) GDPR, namely the fulfillment of our legal obligation.

5. Data processing when opening a customer account and for contract execution

When you open a customer account with us, personal data is collected and processed in accordance with Art. 6(1)(b) GDPR. The extent of the data collected can be seen from the input form. The data you enter will be stored and used by us for contract execution.

You can delete your customer account at any time. This can be done by sending a message to the address of the controller or, if available, directly in the customer account. In this case, we will also lock your data, taking into account tax and commercial retention periods, and delete it after these periods expire. This is unless your consent to permanent storage or legally permitted further use of the data by us stands in the way.

6. Data processing for order handling

6.1 To process your order, we work with the following service providers who support us in whole or in part in the execution of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.

We pass on your payment data to the commissioned credit institution as part of the payment processing, provided this is necessary for the payment transaction. If payment service providers are used, we will explicitly inform you of this below. The legal basis for the transfer of data is Art. 6(1)(b) GDPR.

Klarna

When paying via the following payment methods (if offered): – "Klarna Invoice Purchase" – "Klarna Installment Purchase" – "Klarna Direct Debit" (a Klarna immediate payment method) – "Klarna Credit Card Payment" (a Klarna immediate payment method), the payment processing is carried out via Klarna AB (publ) [https://www.klarna.com/de], Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter referred to as "Klarna"). We pass on your personal data (first and last name, street, house number, postal code, city, gender, email address, telephone number, and IP address) as well as data related to the order (e.g., invoice amount, items, delivery method) to Klarna for the purpose of identity and credit check, provided you have expressly consented to the transfer of data in accordance with Art. 6(1)(a) GDPR. Klarna may transfer your data to one of the following credit agencies: https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies

The credit report may contain probability values (so-called score values). If score values are included in the credit report result, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, among other things, but not exclusively, address data. You can revoke your consent at any time by sending a message to the data controller or to Klarna. However, Klarna reserves the right to continue processing your personal data if this is necessary for the contractual payment processing. For data subjects residing in Germany, the following Klarna data protection provisions apply: https://cdn.klarna.com/1.0/shared/content/policy/data/de_de/data_protection.pdf.
For data subjects residing in Austria, the following Klarna data protection provisions apply: https://cdn.klarna.com/1.0/shared/content/policy/data/de_at/data_protection.pdf.

SOFORT

When selecting the payment method "SOFORT," the payment processing is carried out via the payment service provider SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (hereinafter referred to as "SOFORT"). We pass on your personal data along with the information about your order to SOFORT exclusively for the purpose of payment processing and only to the extent necessary, in accordance with Art. 6(1)(b) GDPR.

SOFORT GmbH is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). The data protection provisions of SOFORT can be viewed here: https://www.klarna.com/sofort/datenschutz

7. Use of social media: video

We integrate plugins from the Vimeo video portal, provided by Vimeo, LLC, 555 West 18th Street, New York, New York 10011, USA, on our website. When you access a page of our website that contains such a plugin, your browser establishes a direct connection to Vimeo's servers. The content of the plugin is transmitted by Vimeo directly to your browser and integrated into the page. This allows Vimeo to receive the information that your browser has accessed the corresponding page (including your IP address). This happens even if you do not have a Vimeo account or are not currently logged into Vimeo. This information is transmitted directly to a Vimeo server in the USA and stored there.

If you are logged into Vimeo, Vimeo can directly associate your visit to our website with your Vimeo account. As soon as you interact with one of the plugins (e.g., by clicking the start button of a video), this information is also transmitted directly to a Vimeo server and stored there.

This data processing occurs in accordance with Art. 6(1)(a) GDPR, namely your express consent.

To prevent the direct association of data with your Vimeo account, you must log out of Vimeo before visiting our website.

The purpose and scope of data collection and the further processing and use of data by Vimeo, as well as your rights in this regard and settings options for protecting your privacy, can be found in Vimeo's privacy policy: http://vimeo.com/privacy

When using Vimeo videos embedded on this website, the tracking tool Google Analytics is automatically integrated. This is Vimeo's own tracking, which we have no access to and cannot influence. Google Analytics uses "cookies" for tracking. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.

This processing occurs in accordance with Art. 6(1)(a) GDPR based on your express consent. The data transfer to the USA is based on the EU Commission's standard contractual clauses. Details can be found here: [https://vimeo.com/privacy](https://vimeo.com/privacy)

7.2 Use of YouTube videos

On this website, we use the YouTube embedding function to display and play videos from the provider “YouTube,” which belongs to Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). We use the extended data protection mode, which, according to the provider, only initiates the storage of user information when the video(s) are played. When you start playing embedded YouTube videos, YouTube sets cookies to collect information about your user behavior. According to YouTube, these cookies are used, among other things, to collect video statistics, improve user-friendliness, and prevent abusive practices.

If you are logged into Google, your data will be directly associated with your account. If you do not wish your profile to be associated with YouTube, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and evaluates them.

Such an evaluation is carried out in particular in accordance with Art. 6(1)(a) GDPR on the basis of your express consent.

You have the right to object to the creation of these user profiles, in which case you must contact YouTube to exercise this right. Regardless of whether the embedded videos are played, a connection to the Google “DoubleClick” network is established each time this website is accessed, which may trigger further data processing operations beyond our control.

Data may also be transmitted to the servers of Google LLC in the USA. For more information on data protection at “YouTube,” please refer to the provider’s privacy policy at: https://policies.google.com/privacy?hl=en. Settings for personalized advertising can be made at: https://adssettings.google.com/authenticated.

As a subsidiary of Google, data transfers to the USA are based on the EU Commission’s standard contractual clauses. Details can be found here: https://privacy.google.com/businesses/gdprcontrollerterms/.

8. Online-Marketing

This website uses the online advertising program “Google Ads” and, as part of Google Ads, the conversion tracking service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

Using advertising materials (known as Google AdWords), we advertise our offers on external websites. Our legitimate interest lies in displaying advertising that is of interest to you and achieving a fair calculation of advertising costs. The legal basis is Art. 6(1)(a) GDPR, namely your express consent.

Google Ads uses cookies for conversion tracking, which are set when you click on an ad placed by Google AdWords.

These cookies usually expire after 30 days and do not serve personal identification. Each Google Ads customer receives a different cookie, so cookies cannot be tracked across the websites of Ads customers.

The information obtained using these cookies is used to create conversion statistics for Ads customers about the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag.

You cannot be personally identified with this information.

If you want to prevent tracking, you can disable the Google Conversion Tracking cookie through your internet browser under user settings.

Data transfer to the USA is based on the EU Commission’s standard contractual clauses. Details can be found here: https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/. Information about Google’s privacy policy can be found here: http://www.google.de/policies/privacy/

You can permanently disable conversion cookies by adjusting your browser settings or by downloading and installing the browser plug-in available at the following link: http://www.google.com/settings/ads/plugin?hl=en

In that case, certain functions of this website may not be fully usable or may be restricted.

9. Web Analytics Services

Matomo (formerly Piwik)

We use the web analytics service Matomo (www.matomo.org) (InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand) (hereinafter referred to as “Matomo”) on our website.

To safeguard our legitimate interest in the statistical analysis of user behavior for optimization and marketing purposes, Matomo collects, evaluates, and stores pseudonymized visitor data, from which pseudonymized usage profiles can be created and evaluated. Matomo uses cookies to recognize the browser and thus allow a more precise determination of statistical data.

The legal basis is Art. 6(1)(a) GDPR, namely your express consent. The data collected using Matomo technology (including your pseudonymized IP address) is processed on our servers.

Your data is not used to personally identify you and is not merged with personal data about the bearer of the pseudonym.

If you do not wish your data to be stored and evaluated, you can object to storage and use at any time by clicking a button. In this case, an opt-out cookie will be set in your browser, so Matomo will no longer collect any session data. Deleting all cookies will also delete the opt-out cookie, which may need to be reactivated by you.

The European Commission has issued an adequacy decision for New Zealand, attesting to compliance with European data protection standards in international data transfers. We have a data processing agreement with Matomo, which can be viewed here: https://matomo.org/matomo-cloud-dpa/

10. Rights of the data subject

10.1 Rights of the Data Subject

The applicable data protection law grants you comprehensive rights regarding the processing of your personal data by the controller (rights of access and intervention), which we will inform you about below:

• Right of Access According to Art. 15 GDPR. You can request confirmation from the controller as to whether personal data concerning you are being processed. Furthermore, you have the right to information about the purposes of the processing, the categories of personal data, the recipients, the planned duration of storage, and the existence of additional rights such as rectification of the data or the right to lodge a complaint with a supervisory authority. You also have the right to know the origin of your data, if it was not collected by us, the existence of automated decision-making including profiling, and, if applicable, meaningful information about the logic involved as well as the significance and intended effects of such processing on you. Additionally, you have the right to be informed about the guarantees pursuant to Art. 46 GDPR when your data is transferred to third countries.
• Right to Rectification According to Art. 16 GDPR. You have the right to immediate rectification of inaccurate data concerning you and/or the completion of your incomplete data stored by us; the rectification or completion must be carried out without delay.
• Right to Restriction of Processing According to Art. 18 GDPR. You have the right to request the restriction of the processing of your personal data as long as the accuracy of your data, which you dispute, is being verified, if you refuse the deletion of your data due to unlawful data processing and instead request the restriction of the processing of your data, if you need your data to assert, exercise, or defend legal claims after we no longer need these data for the purpose of processing, or if you have objected to processing for reasons related to your particular situation, as long as it is not yet determined whether our legitimate reasons outweigh yours.If the processing of your personal data has been restricted, these data – apart from being stored – may only be processed with your consent or to assert, exercise, or defend legal claims or to protect the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State. If the restriction of processing has been restricted, you will be informed by the controller before the restriction is lifted.
• Right to Erasure According to Art. 17 GDPR. You have the right to the immediate deletion of your personal data if the conditions of Art. 17(1) GDPR are met. However, this right to erasure does not apply, particularly – but not exclusively – when the processing is necessary for the exercise of the right to freedom of expression and information, for the fulfillment of a legal obligation, for reasons of public interest, or for the assertion, exercise, or defense of legal claims.
• Right to Notification According to Art. 19 GDPR. If you have exercised your right to rectification, erasure, or restriction of processing, the controller is obliged to communicate this rectification or erasure of data or restriction of processing to all recipients to whom your personal data have been disclosed, unless this proves impossible or involves disproportionate effort. You also have the right to be informed about these recipients.
• Right to Data Portability According to Art. 20 GDPR. You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format or to request the transmission to another controller, where technically feasible.
• Right to Withdraw Consent According to Art. 7(3) GDPR. You have the right to object at any time to the processing of your personal data based on Art. 6(1)(e) or (f) GDPR; this also applies to profiling based on these provisions. You also have the right to withdraw your consent under data protection law at any time with effect for the future. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
• Right to Lodge a Complaint According to Art. 77 GDPR. Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work, or the place of the alleged infringement, if you consider that the processing of your personal data violates the GDPR.

10.2 Right to object

You have the right to object to the processing of your data at any time with effect for the future if we process your data based on our overriding legitimate interest after balancing interests. If you exercise this right to object, we will cease processing your data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing serves the assertion, exercise, or defense of legal claims.

11. Duration of storage of personal data

The duration of the storage of personal data depends on the respective statutory retention periods. After these periods expire, we routinely delete the data if they are no longer required for the fulfillment or initiation of the contract and/or if there is no legitimate interest on our part in further storage.