V2 (022024)
CA Immo uses the onlyfy one service (by XING) to process job applications. This Privacy Policy will inform you about the processing of your data by the onlyfy one service and by CA Immo.
With regard to interaction within the company account of CA Immo, CA Immo and New Work SE have shared responsibility pursuant to Article 26 GDPR, as they jointly determine the purposes and means of processing pursuant to Article 4 (7) GDPR. The current version of the agreement on shared responsibility pursuant to Article 26 GDPR, which New Work SE concludes with companies that use onlyfy one, can be viewed here https://www.xing.com/terms/onlyfy-one to gain information on the key aspects of the agreement.
onlyfy one is part of the extensive XING service operated by New Work SE, which pursues the aim of improving and simplifying users’ working lives with a variety of applications (onlyfy one, as well as the XING social and jobs network, kununu, etc.), and creates a more fulfilling working world of work for individuals while boosting the performance of companies. As part of the extensive XING service, onlyfy one is an online platform on which or through which talent and companies meet.
With regard to data processing for which New Work SE is solely responsible or is responsible within the scope of the shared responsibility with CA Immo, detailed information is available in the XING Privacy Policy at https://privacy.xing.com/en/privacy-policy. You will also find contact details for New Work SE, as well as for the New Work SE data protection officer there.
When submitting an application, you enter into a user relationship with New Work SE for the purpose of processing applications. In addition, you will receive support and New Work SE can present you with other opportunities in support of your career. A public profile will not be automatically created for you on the XING social and jobs network. The legal basis for New Work SE processing your data is, in particular, Article 6 (1)(b) GDPR (processing necessary for the performance of a contract).
You can pause the creation of your online application at any time and continue at a later point. Cookies are used for this purpose. The data you provide to create the user account, as well as any uploaded documents, are recorded in the company account of CA Immo in onlyfy one. The data remains recorded even if an application is paused and/or not completed. In this case, your application is flagged as incomplete and the data remains visible to CA Immo only.
The data you have provided as part of the online application can be read, edited, or updated in your candidate profile at any time.
If the calendar function is used, your data is processed during and for the purpose of setting appointments within the application process. The legal basis is Article 6 (1)(f) GDPR. The calendar function is provided by an IT service provider (Cronofy Ltd., United Kingdom). The United Kingdom is classified as a secure third country based on the adequacy decision of the European Commission. Further information on data protection at Cronofy is available here: https://www.cronofy.com/gdpr/ and https://docs.cronofy.com/policies/privacy-notice/
If you use the apply using WhatsApp function, your consent, which can be withdrawn at any time, forms the legal basis for communication (Article 6 (1)(a) GDPR). When applying via WhatsApp, all required applicant information is requested during a WhatsApp chat. The data is then sent directly to onlyfy one through a service provider, and is processed further there as part of and for the purpose of the normal application process.
The apply via WhatsApp function is provided by an IT service provider (PitchYou) that can gain access to your data for this purpose. More information is available here: https://www.pitchyou.de/en/pitchyou-gdpr. Candidate data from apply via WhatsApp are transferred to onlyfy one via an interface. Immediately after this transfer, candidate data are deleted from the apply via WhatsApp infrastructure in PitchYou. Further processing then takes place exclusively in onlyfy one.
Please note that you use your personal WhatsApp account for applications, and therefore we cannot rule out that messages will be transferred, to the USA in particular. WhatsApp data protection information, such as its processing or exercising of data protection rights with regard to WhatsApp is available here: https://www.whatsapp.com/legal/privacy-policy-eea.
Subject to your consent, your application will be sent from WhatsApp via the PitchYou infrastructure to onlyfy one. You have the right to withdraw your consent to this at any time. Either way, your application data will be deleted from the PitchYou infrastructure once transferred to onlyfy one, meaning that PitchYou will not process your data any further.
The FADP applies to circumstances which have an impact on Switzerland, even if said circumstances are initiated outside of Switzerland. Correspondingly, this privacy policy applies to information in line with the EU GDPR and the FADP. Here, EU GDPR terminology is used in favour of FADP terminology. However, FADP terminology is used if the FADP applies and the terminology differs from EU GDPR terminology in a given language. The About this site section on XING contains the name and address of our representative in Switzerland.
** Information available in further languages: German / Czech / Polish / Hungarian **
The CA Immo company to which you are applying (hereafter ‘CA Immo’ or ‘we’) processes your personal data as part of the application process. You can view the companies of the CA Immo Group to which you can apply here. This data privacy policy sets out the details of data processing.
Unless otherwise stated in this data privacy policy, we (or our processors) collect personal data directly from you; we do not obtain such data from third parties.
We are conscious of the importance of personal data, so we do not generally pass such data to third countries or international organisations. If, despite this, your data should be transferred to a third country in a specific case, we will expressly notify you in this data privacy policy and inform you of the measures we have taken to guarantee the necessary protection level for your data. We do not use your data for the purposes of automated decision-making or profiling.
CA Immo processes your personal data in order to facilitate the application process.
CA Immo processes this data in the course of various application procedures:
In the course of the stated application process(es), the following data may be collected in order to process your application for a certain position:
You are not obliged to provide personal data to CA Immo. If you do not provide the required data, however, CA Immo may be unable to perform or continue with the application process under certain circumstances.
If you apply via email and/or post, the documents provided will be imported to our online applicant portal in digital form. To this end, the data specified under point 1.1. is processed; if necessary, CA Immo will manually add extra information that you provide as part of the application process. You will be given access to the online applicant portal, which enables you to inspect the application documents and the details of your application.
It is possible to import your data straight to the online applicant portal from your XING or LinkedIn profile. The legal basis for the processing of this data by CA Immo is our legitimate interest in rendering the service explicitly requested by yourself (article 6 subsection 1(f) of the GDPR). No data is transferred to Xing or LinkedIn, or imported automatically from Xing or LinkedIn, unless you expressly request this via the link provided.
In the case of certain vacancies, we commission recruitment agents to search for suitable candidates. As part of their assignment, recruitment agents provide us with appropriate candidate profiles. In another step, CA Immo holds interviews with selected candidates before making a final selection. Recruitment agents are controllers under the terms of the GDPR in the search processes we use. Depending on the application procedure, we work with different recruitment agents. For more information on the recruitment agents we work with in your case, please contact our
Data Protection Officer (dsb@caimmo.com) directly. For information on the processing of your data by recruitment agents, please contact the agents directly.
The documents provided will be imported to our online applicant portal. For this purpose, the data provided will be processed and manually supplemented by CA Immo as necessary. You will be given access to the online applicant portal, which enables you to inspect the application documents and the details of your application.
In the event that we directly and actively contact you to draw your attention to a vacancy, your data will be processed as soon as you voluntarily submit your details (CV, personal statement, etc.) to CA Immo. The documents provided will then be imported to our online applicant portal. For this purpose, the data provided will be processed and manually supplemented by CA Immo as necessary. You will be given access to the online applicant portal, which enables you to inspect the application documents and the details of your application.
The myAbility Talent® programme gives candidates with special needs the chance to attend a Job Shadowing Day and subsequently complete a work placement with us. Candidate profiles are passed to us via myAbility Social Enterprise GmbH, an independent controller under the terms of the GDPR. Please forward any questions on the processing of your data by myAbility Social Enterprise GmbH to the company itself.
As regards the processing of your usage data when using the online applicant portal, we refer to the general data privacy policy for the website and the relevant notes on cookies.
Your application data will be processed until the application process is completed on the basis of the pre-contractual relationship according to article 6 subsection 1(b) of the GDPR.
When the application process is complete, your application data (points 1.1 to 1.6) will be processed on the basis of our legitimate interest under article 6 subsection 1(f) GDPR for documentation purposes where a legal action is defended or asserted.
The legal basis for keeping your applicant details on record so that we can notify you of any other relevant positions is your explicit consent in line with article 6 subsection 1(a) GDPR. You may revoke your consent at any time without stating a reason by demanding the deletion of your data via the applicant portal or by emailing dsb@caimmo.com.
Your application data is stored for the duration of the application process. At the end of the application process, your data will be retained for a further six months before being deleted, unless you do not consent to the retention of your data.
If you expressly request the retention of the data and documents you have supplied and consent to this in the online applicant portal, your data will be retained for a period of one additional year from the date of your consent being granted. No more than two weeks before the expiry of this deadline, we will offer to extend the retention period of your data. In addition, your data may be stored for an extended period in individual cases where necessary to assert, exercise or defend legal actions.
In line with CA Immo’s established structure of centralised HR, your data will be processed by both CA Immobilien Anlagen AG and by CA Immo Deutschland GmbH (‘HR Group’) as processors for the company advertising the vacancy.
Depending on the application process, personal data may also be processed within the CA Immo Group (e.g. owing to potential cross-company reporting lines for the vacancy in question). You can view the companies of the CA Immo Group here. For more details, please email dsb@caimmo.com.
Our online applicant portal is provided by New Work SE, Strandkai 1, 20457 Hamburg, Germany (hereafter ‘New Work’). New Work is responsible for processing your data jointly with ourselves. For more information on joint responsibility, click here.
The following processors are used by the joint controllers for processing purposes:
As a data subject, you have the following rights as regards the processing of your personal data:
Where we process your data on the basis of your consent, you are entitled to withdraw your consent at any time. As soon as we receive notice of your revocation of consent, we will no longer process such data. However, note that revocation of consent does not affect the legitimacy of data processing activities carried out up to the point of revocation.
You have the right to be informed of what personal data is being processed, and in particular the origin and categories of the data processed, the storage period, the recipients to whom your personal data is (or has been) disclosed, the purpose and the type of processing. On request, we will provide you will a copy of the personal data concerning yourself that we are processing.
Please note that in accordance with article 4 subsection 6 of the Data Protection Act 2018, no information needs to be disclosed where this would jeopardise the business or trade secrets of the responsible party or third parties.
If we process data concerning yourself that is incorrect or incomplete, you may demand the correction or completion thereof; this can also be done by means of a supplementary declaration.
You are entitled to demand that we delete your personal data. We will delete your data as long as this is legal under article 17 GDPR.
We would like to point out that there is no right to deletion where, in particular, we are obliged to process data in order to meet a legal obligation or to assert, exercise or defend a legal action.
Where it is unclear whether the data concerning yourself is incorrect or incomplete or is being processed unlawfully, you may demand that we restrict the use of your personal data.
Even where your personal data is correct, complete and processed by ourselves in line with the law, you are entitled to object to the processing of this data in special cases, thereby providing a justification. You can also object if you receive direct advertising from us and no longer wish to receive such communications in future.
When we process the personal data that you supply to us, you may, under certain circumstances, demand that we provide this data to you in machine-readable format. Where technically feasible, you may also instruct us to send this data to a third party of your choice.
Although we make every effort to protect and uphold the integrity of your data, differences of opinion concerning the way we utilise your data cannot be ruled out. If you believe that the processing of your data is in violation of the GDPR, you may contact our Data Protection Coordination Team or lodge a complaint with the Austrian data protection authority.
For all matters relating to data protection, and in particular the assertion of your rights, please write (by letter or email) to
