Data Protection

The protection of your personal data and your privacy is of particular concern to us.

We therefore process your data exclusively on the basis of the statutory provisions [Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data, on the free movement of such data and repealing Directive 95/46/EC (GDPR), Data Protection Act 2018 (DSG 2018), Telecommunications Act 2003 (TKG 2003)].

We will only process your personal data for the purposes set out in this privacy policy. Your personal data will not be transferred for purposes other than those stated unless one or more of the following apply:

  • you have given your express consent to this,
  • the processing is necessary for the performance of a contract with you,
  • the processing is necessary for compliance with a legal obligation,
  • the processing is necessary to protect legitimate interests and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data.

Therefore, please also note the data protection declaration of the Austrian Federal Economic Chamber, available at www.wko.at.

Only those offices or employees receive personal data insofar as they need it for processing for the corresponding purposes. In addition, processors (IT service providers) commissioned by the Styrian Economic Chamber receive personal data insofar as they require the data to perform their respective services. All processors have been carefully selected and take appropriate technical and organisational measures to ensure that the processing of personal data is carried out in accordance with the obligations under data protection law and that the rights of the data subjects are safeguarded. In particular, the processors are not permitted to use your personal data for their own purposes.

I General contact

1.1 Establishing contact in general

We look forward to you getting in touch with us.

If you contact us by e-mail or contact form regarding questions of any kind, you give us your voluntary consent for the purpose of contacting you. For this purpose, you must provide a valid e-mail address. This is used for the assignment of the enquiry and the subsequent response to it. The provision of further data is optional.

The following personal data is processed when contacting us:

  • Salutation (optional)
  • Title (optional)
  • Last name, first name
  • Address (optional)
  • E-mail address
  • Telephone number (optional)
  • Your individual message

1.1.1 Purpose of the processing

The personal data you provide when contacting us will be used for the following purposes

  • the answer to the question
  • the establishment of contact and
  • the conclusion of a contractual relationship

processed.

Should a contractual relationship be concluded, you will be informed separately about the processing of your personal data within the framework of the contractual relationship.

1.1.2 Legal basis

The processing of your personal data in the context of contacting us is usually based on the implementation of pre-contractual measures in accordance with art 6 para 1 lit b GDPR. The legal basis for the processing in case of a consent is art 6 para 1 lit a GDPR.

1.1.3 Storage period

The information you provide will be stored for the purpose of processing the enquiry and for possible follow-up questions. Personal data will be deleted after your enquiry has been dealt with.

The data processed for (pre-)contractual purposes is processed for the duration of the initiation of the contractual relationship. If the contractual relationship is concluded, your personal data will also be stored for a period of 7 years after the end of the contractual relationship due to the applicable legal provisions or retention obligations [§ 132 Federal Fiscal Code (BAO)].

You have the possibility to revoke your consent at any time. The revocation of your consent does not affect the lawfulness of the processing carried out on the basis of your consent until the revocation.

 

II Processing of personal data

2.1 Data collection in the course of registering for an event
(Talentcheck, Career Orientation 16+, Summer Workshops)

There is the possibility of both paid and free participation in the career orientation events offered at the Talentcenter of the Styrian Economic Chamber.

2.1.1 Purpose of the processing

We are pleased to receive your written and/or digital registration for the implementation of the paid or free event at the Talentcenter of the Styrian Economic Chamber. With the written registration form, the following personal data (registration data) will be processed in order to ensure the proper (free or paid) implementation of the booked event:

  • Salutation of the deputy (e.g. guardian/legal guardian)
  • Title of the deputy (optional)
  • Last name, first name of the deputy
  • Address of the deputy
  • E-mail address of the deputy
  • Telephone number of the deputy
  • Gender of the participant
  • Last name, first name of the participant
  • E-mail address of the participant
  • Date of birth of the participant
  • Telephone number of the participant
  • School and school level of the participant or highest education completed
  • Salutation of other persons involved in the procedure (e.g. teachers)
  • Title of other persons involved in the procedure
  • Last name, first name of other persons involved in the procedure
  • E-mail address of other persons involved in the procedure
  • Telephone number of other persons involved in the procedure
  • Consents to electronic messaging of other persons involved in the procedure

Please note:

In case of an offer of information society services made directly to a child, consent pursuant to art 6 para 1 lit a GDPR to the processing of the child’s personal data is lawful if the child has reached the age of fourteen (section 4 para 4 DSG 2018). Before the child reaches the age of fourteen, the consent of the guardian/legal guardian is required.

For participants, who have not yet reached the age of 14, we reserve the right to request proof of guardianship from the parent or legal guardian (e.g. a copy of the parents’ marriage certificate in case of a valid marriage or a copy of a certificate of guardianship with confirmation of legal effect).

2.1.2 Legal basis

The processing of your personal data in the context of registration for participation is generally based on the implementation of contractual measures in accordance with art 6 para 1 lit b GDPR. The legal basis for processing in case of a consent is art 6 para 1 lit a GDPR.

2.1.3 Storage period

The data processed for the aforementioned purposes will be processed for the duration of the initiation of the contractual relationship. If the contractual relationship is concluded, your personal data will also be stored for a period of 7 years after the end of the contractual relationship due to the applicable legal provisions or retention obligations [§ 132 Federal Fiscal Code (BAO)].

The data of the other persons involved in the procedure, if the registration takes place in the context of a school-related event, will be processed for a period of 36 months after the last contact and then deleted.

2.2 Data collection in the context of the implementation of the booked event

2.2.1 Preliminary collection and completion of the Talentcheck

2.2.1.1 Purpose of the processing

In order to be able to ensure proper completion within the scope of the Talentcheck, an online pre-collection must be carried out. For this purpose, a user account is generated, for which the participant chooses his/her own user name and password during the pre-collection. Only with this access data can the participant call up and view his/her individual results as well as the calculated training and occupational suggestions, via the “Login Talentreport” function on our homepage.

The following data, in addition to the login data, is processed as test data during the pre-collection in the context of user account management:

  • German as mother tongue (yes/no)
  • Classification of German language skills if mother tongue is not German
  • Self-chosen username
  • Self-chosen password (not visible)
  • Career aspirations
  • Favourite subjects at school
  • Anonymisation code consisting of a number/letter combination

In addition, the following data (test data) for the four test areas listed below is collected or calculated during the actual completion of the Talentcheck:

  • Interests
  • Cognitive skills:
    • Logical thinking with numbers
    • Retentiveness
    • Logical thinking with figures
    • Basic arithmetic skills
    • Word fluency
    • 2D spatial imagination)
  • General skills and knowledge relevant to the profession:
    • Practical arithmetic
    • German language skills
    • English language skills
    • Concentration and observation
    • A sense of form and space
    • Physical-technical understanding
    • IT knowledge
    • Organisational talent
  • Motor skills and receptivity:
    • Craftsmanship
    • Absorption capacity
    • Eye-hand-foot coordination

If all tests are completed within the framework of the Talentcheck, the individual results are used to calculate

  • Individual training and career suggestions

that are output as a summary result in the Talentreport. A total of 15 occupational and training suggestions are calculated twice. These suggestions are also processed in the user account.

In the course of the Talentcheck, the following additional data is also processed through observation and/or questioning:

  • Test dropouts and observed test behaviour
  • Subjective satisfaction with the Talentcheck
  • Subjectively perceived difficulty of the test items
  • Problems encountered in understanding the tasks

2.2.1.2 Legal basis

The processing of your personal data in the context of the event implementation is generally based on the implementation of contractual measures in accordance with art 6 para 1 lit b GDPR. The legal basis for processing in case of a consent is art 6 para 1 lit a GDPR.

2.2.1.3 Storage period

As a rule, after 36 months, calculated from the completion of the Talentcheck, the above-mentioned test data and the observation data collected through observation and/or questioning during the Talentcheck is anonymised. This means that it can no longer be assigned to an individual. The anonymised data is used for statistical purposes and for quality assurance.

If a separate consent for data processing and follow-up survey has been given, the test data will be stored together with the registration data until the end of the seventh year from the collection of the data. On the basis of a contact within seven years, ongoing quality assurance can thus be carried out within the framework of an evaluation.

You also have the option of revoking any consent you have given to the controller at any time. The revocation of your consent does not affect the lawfulness of the processing carried out on the basis of your consent until the revocation.

2.2.2 Career Orientation 16+

2.2.2.1 Purpose of the processing

In order to be able to carry out high-quality career orientation, various standardised psychological test procedures are carried out, which are then interpreted in a counselling interview and supplemented by individual qualitative information from the interview.

Standardised test data from the three test areas, interests, cognitive abilities and personality, is collected or calculated during the implementation of the career orientation measure.

If all tests within the framework of Career Orientation 16+ are completed and the counselling interview is used, the individual results of the test systems and the additional information from the counselling interview are used to calculate and document

  • Individual training directions and career suggestions.

 

2.2.2.2 Legal basis

The processing of your personal data in the context of the implementation of the Career Orientation 16+ offer is generally based on the implementation of contractual measures in accordance with art 6 para 1 lit b GDPR. The legal basis for processing in case of a consent is art 6 para 1 lit a GDPR.

2.2.2.3 Storage duration

As a rule, the above-mentioned test data and the results from the counselling interview are deleted after 36 months, calculated from the completion of the career orientation measure.

If a separate consent for data processing and follow-up survey has been given, the test data and developed training directions and career suggestions are stored together with the registration data until the end of the seventh year from the collection of the data. On the basis of a contact within seven years, ongoing quality assurance can thus be carried out within the framework of an evaluation.

You also have the option of revoking any consent you have given to the controller at any time. The revocation of your consent does not affect the lawfulness of the processing carried out on the basis of your consent until the revocation.

 

III Other processing of personal data based on your consent

3.1 Purpose of the processing

If you have given us consent to process personal data, your consent is the basis of our data processing. Which of your data we process based on your consent depends on the purpose of your consent.

These purposes are:

  • The storage of the test data as well as a contact for participation in a follow-up survey for the evaluation of the Talentcheck within a period of seven years
  • Postal and electronic delivery of career orientation information and offers from the Talentcenter

3.2 Legal basis and storage period

The processing of your personal data in the context of participation in the respective event is generally based on the implementation of contractual measures in accordance with art 6 para 1 lit b GDPR. The legal basis for processing in case of a consent is art 6 para 1 lit a GDPR.

You have the possibility to revoke your consent at any time. The revocation of your consent does not affect the lawfulness of the processing carried out on the basis of your consent until the revocation.

IV WEBSITE

4.1 Categories of data processed and purposes of data processing within the framework of the WEBSITE

In the course of your visit to our website, we will automatically collect the following personal data about you:

  • The date and time a page is viewed on our website;
  • The website (URL) you visited before accessing this website;
  • Certain cookies (see the section below).

In addition, we may ask you to enter personal data, such as your name and e-mail address, on our website in order to provide you with certain services.

There is no obligation to actually provide the information we ask you to provide on our website. However, if you do not do this, it will not be possible for you to use all the functions of the website.

We process your data for the following purposes:

  • to provide you with this website and to further improve and develop this website;
  • to be able to compile usage statistics;
  • to be able to detect, prevent and investigate attacks on our website; and

4.2 Legal basis of the processing

We process your personal data on the basis of:

  • the need to comply with legal obligations, to which we are subject, in particular under the Economic Chamber Act 1998 (“WKG”), in accordance with art 6 para 1 lit c of the General Data Protection Regulation (“GDPR”) and
  • our overriding legitimate interest pursuant to art 6 para 1 lit f GDPR, which is to make our website user-friendly and to protect our website from attacks.

4.3 Storage period

We will generally store your data for a period of 14 months. Longer storage will only take place insofar as this is necessary to investigate identified attacks on our website and, beyond this, only until the end of relevant limitation periods, statutory retention periods or any legal disputes, in which the data is required as evidence. In addition, we store the data that we collect to provide your user account or WKO user administration for as long as your account exists.

4.4 Cookies

So-called cookies are used on our website. A cookie is a small file that can be stored on your computer when you visit a website. Basically, cookies are used to provide users with additional functions on a website. For example, they can be used to make it easier for you to navigate a website, to allow you to continue using a website where you left it and/or to save your preferences and settings when you visit the website again. Cookies cannot access, read or modify any other data on your computer.

Most of the cookies on our website are so-called session cookies. They are automatically deleted when you leave our website again. Permanent cookies, on the other hand, remain on your computer until you delete them manually in your browser. We use such permanent cookies to recognise you the next time you visit our website.

If you want to control cookies on your computer, you can select your browser settings such that you receive a notification when a website wants to store cookies. You can also block or delete cookies if they have already been stored on your computer. If you would like to know more about how to set these steps, please use the “Help” function in your browser. For the most user-friendly handling possible, we sometimes also use a so-called ” Cookie Management Tool”, with which you can manage the setting of cookies even more easily. Please note that blocking or deleting cookies may affect your online experience and prevent you from making full use of this website.

Our website may use plugins from the YouTube site operated by Google. The operator of the pages is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. When you visit one of our pages equipped with a YouTube plugin, a connection to the YouTube servers is established as soon as you start playing a video. This tells the YouTube server which of our pages you have visited.

If you are logged into your YouTube account, you enable YouTube to assign your surfing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account. Further information on the handling of user data can be found in YouTube’s privacy policy at: https://www.google.de/intl/de/policies/privacy

This website uses the Google Maps product from Google LLC. By using this website, you consent to the collection, processing and use of automatically collected data by Google LLC, its agents and third parties.

The terms of use of Google Maps can be found under “Terms of use of Google Maps” https://www.google.com/intl/de_de/help/terms_maps.html.

4.5 Google Analytics

Our website uses features of the Google Analytics web analytics service provided by Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA (“Google”). Google Analytics uses cookies to help us analyse how you use this website.

The information generated by such a cookie about your use of this website (including your IP address and the URLs of the web pages accessed as well as the attributes of the website) is transmitted to Google servers in the USA and stored there. We do not store any of your data collected in connection with Google Analytics.

Our website uses the IP anonymisation option offered by Google Analytics. Your IP address will therefore be shortened/anonymised by Google as soon as Google receives your IP address. On our behalf, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activities and providing us with other services relating to website activity and Internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data by Google.

You can prevent the collection of your data by Google Analytics on this website via our “Cookie Management Tool” (link “Cookie Settings” at the bottom of the page) (an opt-out cookie will be set that prevents the future collection of your data when visiting this website).

For more information on Google’s terms of use and Google’s privacy policy, please visit http://www.google.com/analytics/terms/de.html or https://www.google.at/intl/at/policies/.

The legal basis for the use of Google Analytics is the legitimate interest pursuant to Art 6 (1) f DSGVO. The analysis of the use of the website and the statistical evaluation is carried out in order to further improve the offer on the website and to make it more user-friendly.

4.6 On security

The security of your personal data is of particular concern to us.

Appropriate technical and organisational measures within the meaning of art 32 GDPR will be taken, taking into account the state of the art, the costs of implementation and the nature, scope, circumstances and purposes of the processing, as well as the likelihood and severity of the risk to the rights and freedoms of natural entities.

In this sense, the following measures, among others, are taken to protect your data and secure it against loss, destruction, access, modification and dissemination by unauthorised persons:

  • Ensuring the confidentiality, integrity, availability and resilience of the systems and services related to the processing;
  • Ensuring rapid restoration of availability of personal data in the event of a physical or technical incident;
  • Implementing procedures to regularly review, assess and evaluate the effectiveness of the technical and organisational measure to ensure the security of the processing.

Please note that we accept no liability for the disclosure of information due to errors in data transmission not caused by us or attributable to us and/or unauthorised access by third parties (e.g. hacking attacks).

For further information on data protection at the Austrian Federal Economic Chamber, please visit https://www.wko.at/service/datenschutzerklaerung.html#heading_1_7_Nutzer_unserer_Website.

4.7 Your rights in relation to personal data

Under applicable law, you have the right, inter alia (subject to the conditions of applicable law), (i) to verify whether and what personal data we save about you and to obtain copies of such data, (ii) to request the rectification, supplementation or deletion of your personal data that is inaccurate or not processed in accordance with the law, (iii) to request us to restrict the processing of your personal data, (iv) under certain circumstances, to object to the processing of your personal data or revoke any consent previously given for the processing, such revocation not affecting the lawfulness of the processing up to the point of revocation (v) request data portability, (vi) to know the identity of third parties, to whom your personal data is transferred and (vii) to lodge a complaint with the data protection authority.

4.8 Our contact details

If you have any questions about the processing of your data, please feel free to contact us as follows, both by letter and by email to:

Party responsible
Styrian Economic Chamber

Data Protection Officer
Mag. Ing. Markus Oman,
O.P.P. – Compliance GmbH:

datenschutz@wkstmk.at

Address
Körblergasse 111-113, 8010 Graz

We also refer to the privacy policy of the Styrian Economic Chamber.