Notification Letter of Data Privacy Rights

Click here for Country Specific Additions


1. Introduction

This Privacy Policy applies to our SuccessFactors recruitment tool and the connected privacy of all individuals whose personal data is processed and stored therein. This Privacy Policy should be read together with the Privacy Policy of Prinzhorn Holding GmbH (available here: https://www.prinzhorngroup.com/footer-menu/privacy-policy/). In the event of any conflict with the Privacy Policy, the provisions of this Privacy Policy shall prevail. Please read this Privacy Policy carefully.

2. Who manages SuccessFactors and is considered Data Controller?

"Prinzhorn" refers to one or more affiliated companies or subsidiaries, each of which constitutes a separate legal entity and, as an independent controller, determines the purposes and means of data processing at its own discretion. The organizational structure of the member firms can be seen here: https://www.prinzhorngroup.com/company. The relevant personal data will be made available to the company advertising a position. At your request, this data may also be shared with other member firms of Prinzhorn (or all of them).
The member firm acting as Data Controller by providing SuccessFactors to process and store your personal data is Prinzhorn Holding GmbH (see: https://www.prinzhorngroup.com/footer-menu/imprint), Lemböckgasse 21-25, 1230 Vienna. In the event that the application is made to one of the member firms of Prinzhorn Holding GmbH, Prinzhorn Holding GmbH processes your personal data on behalf of the latter and acts as Data Processor.

3. Why do we need your personal data ("processing purposes and legal bases")?

SuccessFactors is a cloud-based system designed to better assist Prinzhorn Talent Teams in conducting recruiting activities. Personal data is collected for the following main purposes:

a) Recruiting platform for the submission of applications ("main purpose I"); and
b) as an applicant pool for filling vacancies as well as for candidate promotion and general communication ("main purpose II“).

Prinzhorn bases the processing of your personal data for the aforementioned purposes on the following legal bases:

If you are a candidate or applicant, your personal data will be processed on the basis of the following legal grounds:

- Main purpose I: In order to be able to assess whether you are suitable for the position for which you have applied and fulfil the necessary requirements for a contract to be initiated under employment law (Article 6 (1)(b) GDPR) and insofar as the processing is necessary to safeguard the legitimate interests of the Controller or a third party, unless the interests or fundamental rights and freedoms of the data subjects which require the protection of personal data override (Article 6 (1) (f) of the GDPR). The specific legitimate interest is the implementation and safeguarding of our recruitment process. You have the right to object to the processing of personal data at any time for reasons relating to your particular situation.

- Main purpose II: Admission to our applicant tool is voluntary and only takes place if you wish to do so. In this respect, we rely on your consent with regard to the admission to the applicant tool (Article 6 (1)(a) GDPR). You can withdraw your consent at any time with effect for the future. However, if you do not provide us with all or only part of your personal data, we may not be able to fulfil the processing purposes.

The applicant's personal data will be treated confidentially in accordance with Section 6 (1) of the Austrian Data Protection Act (DSG), without prejudice to other legally regulated obligations of confidentiality, unless there are legal grounds which oblige us to disclose the data.

In the event of a successful application, your data will be transferred to the Prinzhorn SuccessFactors Recruiting System for further processing.

It is possible to share the application data within the Prinzhorn Group at your request in order to check the availability of further vacancies.
However, this will only be done with your explicit consent within the meaning of Art. 6 (1) (a) GDPR.

Processing is necessary for the purposes of the legitimate interests of the Controller or of a third party, except where such interests are overridden by the interests or fundamental rights or freedoms of data subjects which require the protection of personal data. The specific legitimate interests are:

- Human resource management, including performance reviews and recruitment; and
- Success of Prinzhorn's recruiting practices, including sourcing, recruiting, selection, and hiring.

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you based on the legitimate interests referred to above.

4. What type of personal data is processed ("categories")?

If you are a candidate or applicant, we process the following categories of personal data:

- For main purpose I: details of candidate profile (name, contact details, educational details; CV, languages spoken, location, post applied for/job offered, diversity details, photograph).
- In addition, the following are processed for main purpose II:
a) Candidate details for a specific job requirement, interview information, assessment information, information on country-specific regulatory or operational requirements;
b) Special categories of personal data: ethnic origin, health data, sexual orientation, official identifiers such as passport numbers, visa details;

The data comes from:
- Yourself
- Prinzhorn recruiters, employees or contractors (as references)
- SuccessFactors

5. Special categories of personal data ("sensitive data")

Special categories of personal data are those that reveal information about your race, ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health or sexual orientation.

During the recruitment and selection process, Prinzhorn does not collect such sensitive data and does not ask applicants to disclose such data. The use of sensitive applicant data may only be used by Prinzhorn, if necessary, within the strict limits of applicable national law.

If you provide such data as a candidate or applicant, Prinzhorn will process it for the above-mentioned purposes. The basis for the processing of special categories of personal data is in accordance with legal obligations as a (potential) employer to which Prinzhorn is subject. In particular, for main purpose II, the special categories of personal data will only be processed on the basis of your consent.

6. Who has access to your personal data?

Your data is stored and processed by Prinzhorn, which is operated by a hosting provider in accordance with our instructions. Access to this database is only granted to those parties involved in the recruitment process, including external parties who provide outsourced HR services to Prinzhorn (e.g. telephone interviews, pre-selection, interviews, etc.) and who are bound to treat your data confidentially.
Further information may be provided to us by third parties (e.g. recruitment agencies, educational establishments to which you have referred us for this purpose (subject to national laws). Prinzhorn uses a range of technical, physical and organizational security measures to ensure the integrity, confidentiality and availability of candidate data, taking into account its nature, scope, context, purpose and risks. Prinzhorn has implemented security technologies to protect the stored Candidate Data from unauthorized access, misuse, alteration, unlawful or accidental destruction and accidental loss.
Applicants play an important role in the security of applicant data. You should keep your password confidential at all times and follow the correct procedure for logging in and out of the recruitment system.

These access rights include the transfer of personal data to various countries (including countries outside the European Union) in which Prinzhorn operates (the locations of Prinzhorn's offices are listed at https://www.prinzhorngroup.com/ ). Prinzhorn will process your personal data in the tool in accordance with the laws and regulations applicable in your country. The transfer of personal data within Prinzhorn is subject to binding company guidelines on data protection.

If such an international data transfer takes place to a country with a different data protection system, Prinzhorn will ensure that the international data transfer does not negatively affect the level of protection of your personal data. If required, Prinzhorn will inform you about further details regarding international data transfer.
As part of the application process, you will be asked to select one of the following options:

- All company representatives who manage the recruitment process worldwide
- All company representatives responsible for recruitment in my country of residence
- Only company representatives who manage jobs I apply for.

If the applicant selects "Any Prinzhorn recruiter worldwide", the applicant acknowledges that his or her personal data will be transferred outside of his or her country of origin and will be accessible to all Prinzhorn recruiters in the various countries where Prinzhorn is located (e.g. Turkey or Russia) for the purposes set forth in this Privacy Policy.

Prinzhorn will ensure appropriate security measures and valid transmission mechanisms for the transfer and processing of applicant data at Prinzhorn locations in the various countries of establishment. During the recruitment process, internal information is only accessed by Prinzhorn employees who are involved in the recruitment process. If an international data transfer takes place from an EEA country to a recipient in a country with a different data protection regime, we ensure that this international data transfer does not negatively affect the level of protection of your personal data.

7. Data storage

Our Policy is to retain personal data only for as long as is necessary for the purposes described in the "Why do we need your personal data" section. Retention periods vary by jurisdiction and are determined in accordance with local regulatory and professional requirements for retention.

In order to comply with our professional and legal requirements, to establish, exercise or defend our legal rights and for archiving purposes, we are required to retain information for an extended period of time.

If you are a candidate or applicant, your data will be stored in accordance with the retention rules of your country, which can be viewed in more detail in point 12. The retention period is triggered based on the last activity date. An activity in the tool is, for example, your logging in to the tool, changing and updating your data, deciding against you as a new employee. After your retention period has expired, your data will be deleted or anonymised (in which case it will no longer be classified as personal data and you will no longer be identifiable from the anonymised data).

The following applies if the application is rejected:
The data will be kept for 7 months from the date of the rejection letter and will be deleted thereafter.
This serves to be able to answer any questions about your application and its rejection. Afterwards, the data will be deleted, unless the further archiving of the data would be necessary for the defense of claims, or the applicant expressly consents to the further maintenance of the data.

Upon acceptance of the application:
In this case, the application data is transferred to the personnel file.
The storage periods specified there apply. You can obtain more detailed information from the data protection officer of the respective company.

If you withdraw your application:
The data will be restricted in processing for 7 months from the date of withdrawal of your application and will be deleted thereafter.
This serves to be able to answer any questions about your application and its withdrawal. After that, the data will be deleted, unless the further archiving of the data would be necessary for the defense of claims.

8. Security

Prinzhorn takes appropriate administrative, technical and organizational measures to ensure the integrity and confidentiality of personal data and to protect personal data in its possession against accidental or unlawful destruction, accidental loss, alteration, unauthorized disclosure or misuse, access and any other unlawful forms of processing. In accordance with applicable data protection laws and internal company policies, Prinzhorn takes security precautions at all appropriate points in its technological infrastructure.

Prinzhorn provides training to its employees on its privacy policies and procedures and permits authorized employees to access personal information to the extent necessary in the performance of their duties.

9. Data Subject Rights

Right of information of the data subject according to Art. 15 GDPR:

You have the right to obtain information from us about the processing of personal data. This includes purpose and category of personal data, recipients and category of recipients, possible recipients in a third country, duration of data storage.
In this regard, please contact the respective data protection officer of the company to which you have applied.
You also have the right to complain to the relevant data protection authority.

Right to rectification of data according to Art. 16 GDPR:

If data is incorrect or incomplete, you have the right to have this data corrected or completed. If applicable, we will carry this out immediately.

Right to erasure of data according to Art. 17 GDPR:

You have the right to have your personal data deleted as soon as the following conditions are met:

   • The personal data is no longer necessary for the purpose.
   • You withdraw your consent or object to the processing of personal data and there is no other legal basis which makes the further processing of personal data necessary.
   • The processing of personal data was unlawful.
   • The deletion of personal data is required by law.

The right to erasure does not exist if the processing is necessary for legal reasons or for the assertion, exercise or defense of legal claims.

Right to data portability according to Art. 18 GDPR:

You have the right to restrict your personal data as soon as the following conditions are met:

   • As soon as you dispute the accuracy of the data.
   • If the processing of the data is unlawful, or the data is no longer needed by us for the purpose and you require the deletion of your data for the assertion, exercise or defense of legal claims.

Where processing has been restricted in accordance with this paragraph, such personal data may be processed, with the exception of storage, only with the consent of the data subject or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of substantial public interest of the Union or of a Member State.

If you have obtained a restriction of the processing of the data, you will be informed by us before the restriction is lifted.

Right to data transmission:

You have the right to have the personal data which you have made available to us on the basis of Art. 6 Para. 1 a or b and which have been processed by us transferred to you in a structured, common and machine-readable format.

Right of objection according to Art. 21 GDPR:

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you carried out on the basis of Article 6(1)(e) or (f), including profiling based on those provisions.

Right to revoke the declaration of consent under data protection law:

You have the right to revoke your data protection consent at any time. However, the revocation shall not affect the lawfulness of the processing carried out up to that point.

Right to lodge a complaint with the national data protection authority:

If you are concerned about an alleged breach of the Data Protection Act or any other regulation, please contact dataprotection@prinzhorn-holding.com. Prinzhorn will investigate your complaint and provide information on how it should be handled and resolved.

If you are not satisfied with the resolution of your complaint, you may, without prejudice to other legal remedies, lodge a complaint with the Austrian data protection authority or also with another data protection supervisory authority in the European Union. Our competent data protection authority is:

   Austrian Data Protection Authority (DSB)>
   Barichgasse 40-42>
   1030 Vienna>
   Phone: +43 1 52 152-0>
   Email: dsb@dsb.gv.at

They may also refer the matter to a court of competent jurisdiction.

10. Contact us

If you have any further questions regarding data protection with regard to the website, please contact: dataprotection@prinzhorn-holding.com.

The company responsible for the further processing of your personal data is the Prinzhorn Group company to which you are applying. Please refer to the respective company pages for the contact details for data protection questions.

11. Changes to this Privacy Policy

From time to time, this Privacy Policy may be amended without prior notice to reflect changes in our practices. Prinzhorn will notify you of any material changes and provide the most recent update date.

12. Country specific additions (relevant only for the processing of Personal Data in the relevant country)

Depending on the countries in which your personal data is being processed, in accordance with your preference in Section 6 of this Data Protection Statement, processing may be subject to different provisions of law. The following data retention times refer to the period of inactivity of the candidate´s profile and to the period after the job requisition for which the candidates have applied to is closed.

Particularly, the following country specific provisions regarding data retention periods will apply (within the meaning of Art. 6 Para. 1 GDPR):

Austria: 7 months

My data may be forwarded within Prinzhorn to the following companies (provided you have given your consent accordingly):

- Mosburger GmbH
- W. Hamburger GmbH
- Hamburger Containerboard GmbH
- Hamburger Recycling Group GmbH
- Prinzhorn Treasury Services GmbH
- MeinAlpenStrom GmbH

Bulgaria: 6 months

Addition to Section 3: Prinzhorn shall not exchange, transfer or transmit personal data to any third party for any reason without the express consent of the person, except in the cases of its statutory obligations relating to the exercise of the main activity, or, if it is required to disclose any information to the competent authorities by virtue of a law, court decision or other statutory instrument. Prinzhorn does not collect or process personal data of children under the age of 18, except for a specific purpose related to social policy and limited to the maximum possible minimum. Data is collected and stored after the express consent given by the parent/ guardian.

Addition to Section 5: You can block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies, you may not be able to access all or parts of the Platform. You agree to storing and accessing cookies on your device

Addition to Section 8: You have the right to complain to the Data Protection Supervisor in the Republic of Bulgaria in the person of the Commission for Personal Data Protection.

Bosnia: 2 years

Croatia: 6 months

I hereby consent to the collection and processing of my personal data which will be used exclusively for the purpose of possible employment in compliance with the relevant regulations, namely the General Data Protection Regulation (GDPR), the Law on Implementation of the General Data Protection Regulation and the Ordinance on Personal Data Processing data of the company Valoviti papir Dunapack doo

Czech Republic: 1 year

Clarification to Sections 7 and 8: “The applicable data protection legislation is Act No. 101/2000 Coll. on the protection of the personal data.

Germany: 6 months

Greece: 12 months

The data provided when applying for the job advertisement is personal.

The data you provide will be processed only for the purposes of the current and future selection, for a maximum period of 1 year from the date of publication of the notice.

Your personal data will be processed in strict compliance with legal requirements and will not be provided to third parties.

During the selection process, you retain all the rights granted to you by the GDPR and Regulation (EU) 2016/679 (EU Data Protection Regulation).

Hungary: 6 months

Italy: 1 year

Poland: 1 year

Addition to Section 8: You have a right of access to your Personal Data and the right to rectify your Personal Data. Submitting your Personal Data is voluntary. However, it is necessary in order for you to use the Platform.

Clarification to Section 4: Prinzhorn only processes sensitive data where it is under a legal obligation to do so and you are explicitly asked to refrain from voluntary providing sensitive information in whatever form in any other circumstance.

Romania: 1 year

Addition to Section 8: You are granted the following rights: to request changes with regard to the data and to not be subject to an individual decision, rights expressly provided by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

Serbia: unless otherwise mandated differently by applicable law, the required retention period will be deemed to be 10 years from the date of creation of the recruitment platform account.

Clarification to Sections 7 and 8: The applicable data protection legislation is the Law on Protection of Personal Data ("Official Gazette of the Republic of Serbia", 87/2018) and the Law on Companies ("Official Gazette of the Republic of Serbia", No. 36/2011, 99/2011, 83/2014 - other Law and 5/2015).

Slovakia: 1 year

Clarification to Sections 7 and 8: The applicable data protection legislation is Act No 122/2013 Coll. on Personal Data Protection as amended.

Slovenia: 1 year

Turkey: 2 years

Addendum to the Notice Letter as a whole:

We, as Prinzhorn Holding (“Prinzhorn”), respect the personal data we process and the relevant individuals involved in our operations and activities and have the utmost effort regarding the security of personal data under current legislation and universal values. Accordingly, Prinzhorn considers the security and confidentiality of all personal data belonging to real persons who apply to our company through the MyHR system as an applicant.

Prinzhorn conducts its personal data processing activities in accordance with the regulations under the Law on the Protection of Personal Data No. 6698 (“LPPD”).

About Prinzhorn Holding

"Prinzhorn" refers to one or more affiliated companies or subsidiaries, each of which constitutes a separate legal entity and, as an independent controller, determines the purposes and means of data processing at its own discretion. The organizational structure of the member firms can be seen here: https://www.prinzhorngroup.com/company. The relevant personal data will be made available to the company advertising a position. At your request, this data may also be shared with other member firms of Prinzhorn (or all of them).

The member firm acting as Data Controller by providing SuccessFactors to process and store your personal data is Prinzhorn Holding GmbH (see: https://www.prinzhorngroup.com/footer-menu/imprint), Lemböckgasse 21-25, 1230 Vienna. In the event that the application is made to one of the member firms of Prinzhorn Holding GmbH, Prinzhorn Holding GmbH processes your personal data on behalf of the latter and acts as Data Processor.

In accordance with your preference regarding the company you are applying for and whether your application is valid for other companies in Turkey or abroad, the data controller changes and each Prinzhorn Holding company located in Turkey are seperatly listed below;

   Dentaş Ambalaj ve Kağıt San. A.Ş., of which the head office is located at the address of Barbaros Mah. Begonya Sk. Nidakule Kuzey No:3 Kat:13, Ataşehir/İstanbul 34746 and conduct its activities in wrapping industry.

   Eskişehir Oluklu Mukavva San A.Ş. of which the head office is located at the address of Şirket merkezi Osb Mahallesi Mümtaz Zeytinoğlu Blv. No: 31/ Odunpazarı/Eskişehir and conduct its activities in wrapping industry.

   Hamburger Turkey Kağıt Üretim ve Tic. Ltd. Şti., of which the head office is located at the address of Ulaş Osb D100 No:127/14 Ergene/Tekirdağ and conduct its activities in paper production industry.

   Hamburger Recycling Turkey Atık Yönetimi A.Ş, of which the head office is located at the address of 1237/2 Sokak No:10 Naldöken Bornova/İzmir and continues its activities in waste paper and recycling industry.

Processed Personal Data

Your job application process is carried out through our website and your personal data is collected by Prinzhorn through the form you have completed and the documents you have uploaded. Within the scope of the process, your personal data which consists of information such as full name, e-mail address, phone number, password, country, your address information, identity number, date and place of birth, gender, other citizenship information, diploma information, introduction letter, your social security number, your health insurance document, your work permit, your military service discharge paper, your driver's license information, your certificates and other documents/your licenses that you are qualified for, your education information, your foreign language information, your ability to travel, your picture, your previous work-related documents, your marital status, first and last name, closeness and contact information of your close connections to be reached in case of emergency, your salary expectation, your bank account information, your resume, your cover letter, other documents that you want to upload to the system with regards to your job application, your interests. In addition, no special types of your personal data is collected within the scope of the process.

During the application process, only the fields specified by * are required to be filled-out and if these fields are not filled-out, your application cannot be completed. However, if you provide any other personal data not specified by * at Your own discretion, such data will be considered as covered by job application.

In addition, your personal data such as your IP address, which web pages you visit, device category, type of internet browser, clicks and views during your visit and use of our website are processed for the purpose of customizing and notifying you of the ads that are appropriate for you on our website.

It is your responsibility to ensure that the personal data you provide to Prinzhorn is provided correctly and that your personal data remains accurate and up-to-date. Prinzhorn is, except for gross negligence or unlawful intent, not liable for errors, consequences or activities taken as a result of inaccurate or incomplete information that you provided to us.

Personal Data Processing Purposes

Personal data is processed by Prinzhorn, based on one or more of the personal data processing requirements set out in Articles 5 and 6 of the LPPD, in accordance with the personal data processing principles set out in Article 4 of the LPPD. All personal data processing activities conducted by Prinzhorn also complies with obligations which are sought in all relevant legislation particularly in LPPD, Labor Law No. 4857 and Social Insurance and General Health Insurance Law No. 5510 and Identification Reporting Law No. 1774. Under personal data processing requirements and purposes listed in Article 5 and 6 of LPPD, your personal data is processed within the scope of legitimate interset and for the purposes of assessment of job applications, execution of job application process, application for existing job positions within Prinzhorn, matching your data provided in your job application with our current open positions within Prinzhorn and offering you for future positions that suit you, evaluating the eligibility to work at Prinzhorn, communicating our recruitment and selection procedures, conclusion and execution of the contract, verification of the data you provided on the application form by having interview and carrying out test, sending e-mail on current vacancies on the basis of the profile you created of yourself or providing information regarding job applications, personalization of alerts which suit you and communicate them with you on our website, fulfillment of legal obligations and carrying out Prinzhorn's activities, provided that it does not violate your fundamental rights and freedoms.

Your personal data is not processed for any other purpose other than for the purpose of informing you about recruitment processes, conducting the application process, other uses reasonably necessary in connection with the online application process and for mandatory official reporting purposes and for the purposes stated above according to the information provided you.

In addition, your personal data may be processed by Prinzhorn based on the profile you have created for your job application for the purpose of sending you an e-mail with information about available positions. In addition, when you visit our website, matters such as your IP address, device category, browser information are processed for the purposes of personalizing your website and giving You priority to appropriate job positions. In addition, your personal data can be processed anonymously to measure and analyze responses to the business opportunities we offer at Prinzhorn and to conduct in-house reporting and statistical studies.

Data Transfer

The transfer of personal data within Prinzhorn is subject to binding company guidelines on data protection and comply with LPPD and its secondary legislation.

If such an international data transfer takes place to a country with a different data protection system, Prinzhorn will ensure that the international data transfer does not negatively affect the level of protection of your personal data. If required, Prinzhorn will inform you about further details regarding international data transfer.

As part of the application process, you will be asked to select one of the following options:

- All company representatives who manage the recruitment process worldwide
- All company representatives responsible for recruitment in my country of residence
Only company representatives who manage jobs I apply for.

If the applicant selects "Any Prinzhorn recruiter worldwide", the applicant acknowledges that his or her personal data will be transferred outside of his or her country of origin and will be accessible to all Prinzhorn recruiters in the various countries where Prinzhorn is located (e.g. EU or Russia) for the purposes set forth in this Notification Letter upon your explicit consent.

If the applicant selects “All company representatives responsible for recruitment in my country of residence” from the above options, your personal data will be transferred to Prinzhorn companies in your country based on your explicit consent. In the event of such a situation, all kinds of technical and administrative measures are taken by Prinzhorn in order to ensure data security and the necessary data transfer agreements are concluded.

Prinzhorn will ensure appropriate security measures and valid transmission mechanisms for the transfer and processing of applicant data at Prinzhorn locations in the various countries of establishment. During the recruitment process, internal information is only accessed by Prinzhorn employees who are involved in the recruitment process. If an international data transfer takes place from Turkey country to a recipient in a country with a different data protection regime, we ensure that this international data transfer does not negatively affect the level of protection of your personal data.

In addition, your personal data can be shared with law enforcement officers, legally authorized public authorities for the purposes of fulfilling legal obligations within the framework of personal data processing requirements and purposes stated in the article 8 and 9 of LPPD.

Additionally, your personal data will be transferred to SuccessFactor resides abroad ( a cloud-based system designed to better assist Prinzhorn Talent Teams in conducting recruiting activities.) who acts as a data processor based on your explicit consent.

The Methods and Legal Basis for Collecting Your Personal Data

Personal data is collected electronically by Prinzhorn directly through You via the profile you have created in the system established in Career section on our website and through the job applications you have made accordingly for the purpose of conclusion and execution of an employment contract. Personal data, within the scope of conditions and purposes for personal data processing stated in Article 5 and 6 of LPPD, can be processed and transferred for the purposes stated hereinunder provided that it does not violate fundamental rights and freedoms f the person concerned. Personal data processed by Prinzhorn may be processed by updating during the time your profile or job application is updated by You as long as your profile exists.

Cookies

Our website places Session Cookies. Session Cookies are small text files are saved on your computer or mobile device via our website. Session Cookies enable to remember your actions and preferences on the website. Thanks to these cookies your information is remembered when you visit the website later on. You can always check or delete these cookies from the browser settings you are using. If you delete these cookies, however your preferences will not be automatically remembered and you may need to log back in. Cookies on the website process data for the following purposes and for the purpose of conclusion and execution of the contract and for the reason of compliance with legitimate interest basis:

   Storing your preferences and settings
   Age gate verification,
   Site analytics

Through Cookies the date with regards to your IP address, age gate data (your birthdate), Cookie ID, your browser, language settings, the website you came from and the website you visit and the links you click while using the website are collected.

Data Security

We care about protecting the privacy and security of all personal data being processed within Prinzhorn. Accordingly, Prinzhorn takes all necessary technical and administrative security measures to protect against the risks of unauthorized access, damage, loss or disclosure of personal data. In this context, all kinds of technical and administrative measures are taken and necessary infrastructure is provided by Prinzhorn for the security of the career database where the application is made . In addition, You have an important role in keeping the data secure as well and You should not share your account and password with any persons and You should use the correct procedure to log in the system.

In addition, you can always delete your Prinzhorn profile. If you do not update your profile, your profile will be destroyed after 2 years. At the same time, after the completion of the recruitment process, your profile will be destroyed again after 2 years, taking into account our periodic disposal processes.

Personal Data Subject's Rights Listed In Article 11 of LPPD:

As a personal data subject, you can submit your request regarding your rights to dataprotection@prinzhorn-holding.com. Prinzhorn shall conclude the request as soon as possible and within thirty (30) days at the latest, according to the nature of the request. If the transaction requires a further cost, we will charge you the tariff set by the Turkish Data Protection Authority. The real persons whose personal data is processed are granted the following rights as per Article 11 of LPPD:

   • The right to know whether personal data is processed,
   • The right to receive an answer if his/her personal data has been processed,
   • The right to learn the purpose of processing of personal data and whether personal data is being used consistently with the purpose,
   • The right to know the third parties to which personal data is transferred in the country or abroad,
   • In the event that personal data is incompletely or improperly processed, the right to request such personal data to be corrected and make the transaction carried out in this context to be notified to the third parties to whom the personal data was transferred,
   • The right to request the erasure or destruction of personal data in the event that the reasons for its processing are eliminated, even though it has been processed in accordance with the provisions of LPPD and other relevant laws, and to request that the transaction carried out in this context to be notified to third parties to whom the personal data was transferred,
   • The right to object to the processing, exclusively by automatic means of his personal data, which leads to an unfavorable consequence for the data subject,
   • The right to request compensation for the damage arising from the unlawful processing of his personal data.

Ukraine: 5 years

- Addition to Section 4: You are explicitly asked to refrain from transmitting sensitive data via the platform. This especially includes information regarding your racial, ethnic, or national origin, your political opinions, your beliefs of a religious or similar nature, your membership in political parties and/or organizations, in unions, in religious communities or in non-governmental organizations with an ideological orientation, your state of health, your sexual life, your biometric data, your genetic data, any data regarding criminal offenses committed by or criminal convictions against a natural person, any data regarding restraining orders issued against a natural person, any data regarding measures taken against a natural person on the basis of the Ukrainian law on operative investigation work, any data regarding the use of violence of any kind against a natural person, and any data regarding the locations visited and/or the routes traveled by a natural person. Prinzhorn reserves the right not to process such data

- Addition to Section 8: Data use by companies based outside of Ukraine: if you are applying for a position at a company based in Ukraine, but your data is also being processed by a group company based outside of Ukraine (such as Austria or Germany ), we will take measures to ensure an appropriate level of protection for such personal data in accordance with the Ukrainian law regarding the protection of personal data; furthermore, we also ensure that the respective personal data is only used for the purpose for which it is collected.

- Rights of the data subject: you have the following rights with regard to your personal data:

• The right to know the sources of collection, the location of your personal data, the purpose of its processing, the location and/or residence (registration) of the controller or processor of this personal data, or the right to grant a corresponding power of attorney for the authorized persons to receive such information, save in the cases provided for by law;
• The right to receive information regarding the conditions of access to personal data, especially information regarding third parties who receive your personal data;
• The right to access your personal data;
• The right to receive an answer as to whether your personal data is being processed, as well as to receive the contents of your personal data within 30 days following the receipt of the request, provided there are no legal requirements to the contrary;
• The right to send a justified request to the controller in order to object to the processing of your personal data;
• The right to submit a justified request in order to obtain the modification or the destruction of your personal data by a controller or processor of this personal data if this data is being processed illegally or is inaccurate;
• The right to protect your personal data against illegal processing and accidental loss, destruction, damage due to intentional concealment, non-delivery or delayed delivery of this data, as well as protection against the delivery of information that is inaccurate or that damages the honor, dignity, or business reputation of a natural person;
• The right to file complaints regarding the processing of your personal data with the Ukrainian Parliament Commissioner for Human Rights or with a court;
• The right to implement legal protective measures in case of violation of the laws regarding the protection of personal data; When granting a declaration of consent, the right to restrict the processing of your personal data through reservations;
• The right to withdraw the consent for the processing of personal data;
• The right to receive information regarding the process in the event of automatic processing of personal data;
• The right to protection against automated decisions that have legal consequences for you.