We aim to provide you with services, for which you can be sure that the personal data you provide will be processed in strict confidence and for the intended purpose, and that it is always you who decides on disclosure and transfer to third parties. You entrust us with your personal data, and we reliably protect it in compliance with legal requirements.
Here, we will provide you with detailed information about what data we collect and store on which occasion, why we do it, and how this data is used. Your private information and personal data are collected and stored with the utmost care and integrity and used only for the intended purpose.
Storage of access data: Access data is temporarily stored whenever a file is requested from this website. Each data set consists of the following:
-the name of the file
-the date and time of the request
-the amount of data transferred
-the access status (file transferred, file not found, etc.)
-the description of the type of browser used.
The stored data is analyzed exclusively for statistical purposes. The transfer to third parties, even in the form of extracts, does not take place.

Data controller
See Imprint.

Contact details of the controller’s data protection officer
Our Data protection officer will be happy to provide you with information or receive your suggestions on data protection:
Vladyslav Prykhodko
E-mail: info@workconsult.com

For any further information, requests, or suggestions on the subject of data protection, please contact us by email at info@workconsult.com, thank you!

Processing purposes
The purposes of processing are the performance of the following tasks by the controller: technical realization and support of the web application www.workconsult.com to enable the activities within the framework of job placement consulting and coaching.

Legal basis for data processing
The lawfulness of the data processing is given in particular by Art. 6 para. 1 p. b GDPR for the fulfillment of the employment agency contract. In addition, the Art. 6 para. 1 p. a GDPR also permits data processing if the concerned person has given his or her consent. The legal basis for data processing, if the user registers voluntarily on his or her own initiative, is given by Art. 6 para. 1 p. a GDPR – Consent of the data subject to the processing of personal data concerning him or her for one or more specific purposes. Only data necessary for the use of the services offered in a personal applicant account is collected here. The indication of first and last name (personal address), an email address (identifying feature, enabling support, e.g. in case of forgotten password, email notification of incoming job offers), and a password (logging in to the applicant account) is necessary. This information will not be disclosed or transferred to third parties under any circumstances. By registering, you declare your agreement that all information will be included in our database free of charge.

Types of personal data
Master data incl. contact data (e.g. client number, BG (benefit community) number, last name, first name, date of birth, address, telephone number, email address, user name, and password), data on career counseling as well as placement/integration in work (CV, proof of degrees, etc., information on knowledge and skills, driver’s license, qualification, general conditions such as mobility, data based on the commissioning of third parties such as measure providers, documentation of client contacts, data on job offers, job applications and feedback from employers, if applicable), public employer data, service data of the job agents or case managers/coaches.

Categories of data subjects
Group of persons affected by the data processing: Applicants/measure or coaching participants, job agents or case managers/coaches, employers.

Adding a CV
By registering for a user account and adding a CV, you allow interested companies to contact you (you are still anonymous). A personal message box available in your user account allows companies to leave you a message, possibly via an intermediary. Since you can determine at any time on your own, which and how detailed anonymous data (i.e. without the name, address, telephone number, fax number, or email) you provide in your CV, you can also decide, for example, whether the names of employers should be included. It is up to you whether you want to reveal your identity to an interested company upon a message.

Optional visibility of application profile in the entire job network
The CV assistant for creating/editing the applicant profile contains a checkbox that allows the applicant profile to be made visible without displaying your contact details, in addition to this portal, in other partner portals of the job network when it is activated, in other languages as well. Advantages: increased range of employer requests from the entire job network with full protection of personal data. Deactivation in this portal automatically means that the applicant profile is also deactivated in all other partner portals of the job network and can then no longer be accessed there. Data is expressly not transferred to third parties as a result of this visibility within the entire job network. This means that you always have full control over your own profile data.

Applying for a job advertisement via an application form
If you apply online in response to an ad, there are several options: often, you will be forwarded directly to the company’s website, where there is an option to apply online. However, in some cases, you will receive one of the application forms. Here, personal data will be entered according to your CV and sent to the company by email via a corresponding button or stored in a database and made available to the company in this way. Regardless of which form you find in response to an ad, by filling it out you only apply for the job posted, and your data is made available only to the potential employer posting the job ad there.

Cookies
Cookies are partially used on the pages of this board to enable the user to navigate within the restricted areas and gain experience about general user behavior (visits and page impressions). Cookies are small text files that your web browser stores on the hard disk in your computer’s drive dedicated to this purpose. Therefore, cookies are not programs. Using cookies does not give anyone else access to your personal data. You always have the option to fully disable cookies or display a warning before accepting a cookie and thus decide whether you want to accept it or not. If you do not accept cookies, this will partially affect the use of the services of this board.

Newsletter
We offer you the possibility to subscribe to our newsletter on our website. If you have given us special consent to inform you by email about jobs that are suitable for you on a daily basis, the corresponding processing is carried out pursuant to Art. 6 para. 1 p. 1 p. a GDPR. However, this is also only permissible based on consent. You can revoke your consent at any time without this affecting the lawfulness of the processing carried out so far. If consent is revoked, we will stop the corresponding data processing. If you no longer wish to receive the newsletter in the future, you can unsubscribe at any time, e.g. by sending an email to info@workconsult.com or by clicking on the unsubscribe link provided in every newsletter email.

Basic information
Furthermore, basic information is collected. When you visit the board, our web servers possibly save what browser and operating system you are using, the name of your Internet service provider, the IP address of the computer used to visit the website pages, the website used to access the Internet job board, the web pages you visit on the Internet job board, as well as the date, time, and duration of your visit. There is no possibility to identify a certain person with this data. This information can never be directly associated with you.

Use of the collected data
We need you to give us your personal data in the cases mentioned above so that we can provide you with certain services. We always collect only the data that is absolutely necessary for the fulfillment of the purpose. You can be sure that the data is only used for the purpose for which it is meant to be used.

Data transfer to other third parties
We only pass on your data to third parties if you wish us to do so. This is the case, for example, if you apply online in response to a job advertisement. In this case, we will pass on information that you have entered in your user account or CV to these companies. This also applies to messages that you send to other users. Therefore, you always have full control over your profile data. You can decide anytime what data or whether your data is passed on to employers. We will not pass on your data to third parties for purposes of advertising, market research, or the like under any circumstances.

Data security
We use technical and organizational security measures to protect your data managed by us against accidental or intentional manipulation, loss, destruction, or access by unauthorized persons. Our security measures are continuously improved in line with technological developments. We have no liability for the actual process of data transmission over the Internet. No claims can be made against us for the loss of data for whatever reason as well.

Your rights
a) Right of confirmation
Each data subject shall have the right granted by the European Directive and Regulatory authority to obtain confirmation from the controller as to whether or not personal data concerning him or her are being processed. If a data subject wishes to avail himself or herself of this right of confirmation, he or she may, at any time, contact our data protection officer or another employee of the controller.

b) Right of access
Each data subject shall have the right granted by the European Directive and Regulatory authority to obtain information free of charge at any time from the controller about the personal data concerning him or her stored and receive a copy of this information. Furthermore, the European Directive and Regulatory authority grants the data subject access to the following information:
-the purposes of the processing
-the categories of personal data that are processed
-the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations
-if possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine this duration
-the existence of the right to request from the controller rectification or erasure of personal data, or restriction of processing of personal data concerning the data subject, or to object to such processing
-the existence of the right to lodge a complaint with a supervisory authority
-if the personal data are not collected from the data subject: any available information as to their source
-the existence of automated decision-making, including profiling, pursuant to Art. 22 para. 1 and 4 GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for the data subject

Furthermore, the data subject shall have a right to obtain information as to whether personal data are transferred to a third country or an international organization. Where this is the case, the data subject shall have the right to be informed of the appropriate safeguards relating to the transfer.

If a data subject wishes to avail himself or herself of this right of access, he or she may, at any time, contact our data protection officer or another employee of the controller.

c) Right to rectification
Each data subject shall have the right granted by the European Directive and Regulatory authority to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

If a data subject wishes to exercise this right to rectification, he or she may, at any time, contact our data protection officer or another employee of the controller.

d) Right to erasure (Right to be forgotten)
Each data subject shall have the right granted by the European Directive and Regulatory authority to obtain from the controller the erasure of personal data concerning him or her without undue delay where one of the following grounds applies, as long as the processing is not necessary:
-The personal data were collected or otherwise processed for purposes for which they are no longer necessary.
-The data subject withdraws consent based on which the processing was carried out pursuant to Art. 6 para. 1 p. a GDPR or Art. 9 para. 2 p. a GDPR, and where there is no other legal ground for the processing.
-The data subject objects to the processing pursuant to Art. 21 para. 1 GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Art. 21 para. 2 GDPR.
-The personal data have been unlawfully processed.
-The personal data must be erased for compliance with a legal obligation pursuant to Union or Member State law to which the controller is subject.
-The personal data have been collected in relation to the offer of information society services pursuant to Art. 8 para. 1 GDPR.

If one of the aforementioned reasons applies, and a data subject wishes to have personal data stored by us deleted, he or she may, at any time, contact our data protection officer or another employee of the controller. The data protection officer or another employee will ensure that the erasure request is complied with immediately.

If we have made the personal data public and our company as a controller is obliged to erase the personal data pursuant to Art. 17 para. 1 GDPR, we shall take reasonable measures, including technical measures, taking into account the available technology and the cost of implementation, to inform other data controllers processing the disclosed personal data that the data subject has requested the erasure of all links to or copies or replications of such personal data by those other data controllers unless the processing is necessary. The data protection officer or another employee will arrange the necessary measures in individual cases.

e) Right of restriction of processing
Each data subject shall have the right granted by the European Directive and Regulatory authority to obtain from the controller restriction of processing where one of the following conditions applies: -The accuracy of the personal data is contested by the data subject for a period enabling the controller to verify the accuracy of the personal data.
-The processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead.
-The controller no longer needs the personal data for the processing, but they are required by the data subject for the establishment, exercise, or defense of legal claims.
-The data subject has objected to processing pursuant to Art. 21 para. 1 GDPR pending the verification of whether the legitimate grounds of the controller override those of the data subject.

If one of the aforementioned conditions is met, and a data subject wishes to request the restriction of the processing of personal data stored by us, he or she may, at any time, contact our data protection officer or another employee of the controller. The data protection officer or another employee will arrange the restriction of the processing.

f) Right to data portability
Each data subject shall have the right granted by the European Directive and Regulatory authority to receive the personal data concerning him or her, which was provided to a controller, in a structured, commonly used, and machine-readable format. The data subject shall have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, as long as the processing is based on consent pursuant to Art. 6 para. 1 p. a GDPR or Art. 9 para. 2 p. a GDPR, or on a contract pursuant to Art. 6 para. 1 p. b GDPR and the processing is carried out by automated means, as long as the processing is not necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

Furthermore, in exercising his or her right to data portability pursuant to Art. 20 para. 1 GDPR, the data subject shall have the right to have personal data transmitted directly from one controller to another, where technically feasible, and when doing so does not affect the rights and freedoms of others.

To assert the right to data portability, the data subject may contact the data protection officer appointed by us or another employee at any time.

g) Right to object
Each data subject shall have the right granted by the European Directive and Regulatory authority to object at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her which is based on Art. 6 para. 1 p. e or f GDPR, including profiling based on those provisions.

We shall no longer process the personal data in the event of the objection unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or for the establishment, exercise, or defense of legal claims.

In addition, the data subject has the right, on grounds relating to his or her particular situation, to object to the processing of personal data concerning him or her by us for scientific or historical research purposes, or statistical purposes pursuant to Art. 89 para. 1 GDPR, unless the processing is necessary for the performance of a task carried out for reasons of public interest.

To exercise the right to object, the data subject may contact the data protection officer appointed by us or another employee directly. Furthermore, the data subject is free in the context of the use of information society services, and notwithstanding Directive 2002/58/EC, to exercise his or her right to object by automated means using technical specifications.

h) Automated individual decision-making, including profiling
Each data subject shall have the right granted by the European Directive and Regulatory authority not to be subjected to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her, or similarly significantly affects him or her, unless the decision (1) is necessary for entering into, or the performance of, a contract between the data subject and a data controller, or (2) is authorized by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests, or (3) is based on the data subject’s explicit consent.

If the decision (1) is necessary for entering into, or the performance of, a contract between the data subject and the data controller, or (2) it is based on the data subject’s explicit consent, we implement suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express his or her point of view and contest the decision.

If the data subject wishes to exercise the rights concerning automated individual decision-making, he or she may, at any time, contact our data protection officer or another employee of the controller.

i) Right to revoke consent under the data protection law
Each data subject shall have the right granted by the European Directive and Regulatory authority to withdraw his or her consent to the processing of his or her personal data at any time.

If the data subject wishes to exercise the right to withdraw the consent, he or she may, at any time, contact our data protection officer or another employee of the controller.

Duration of the personal data storage
The personal data will only be stored in a form that enables the identification of data subjects as it is required for the mentioned purposes.

Existence of automated decision-making
We do not use automated decision-making or profiling in the sense of making decisions that have legal effects on the data subject or significantly affect the data subject (e.g., as in the case of insurers or credit intermediaries).

Data processing of minors
The portal is not intended for persons under the age of 16. We do not knowingly collect information about children and juveniles under the age of 16 and delete all such information as soon as a parent or guardian notifies us that we are collecting such information.