V2 (022024)
Sattler AG uses the onlyfy one service (by XING) to process job applications. This Privacy Policy will inform you about the processing of your data by the onlyfy one service and by Sattler AG.
With regard to interaction within the company account of Sattler AG, Sattler AG and New Work SE have shared responsibility pursuant to Article 26 GDPR, as they jointly determine the purposes and means of processing pursuant to Article 4 (7) GDPR. The current version of the agreement on shared responsibility pursuant to Article 26 GDPR, which New Work SE concludes with companies that use onlyfy one, can be viewed here https://www.xing.com/terms/onlyfy-one to gain information on the key aspects of the agreement.
onlyfy one is part of the extensive XING service operated by New Work SE, which pursues the aim of improving and simplifying users’ working lives with a variety of applications (onlyfy one, as well as the XING social and jobs network, kununu, etc.), and creates a more fulfilling working world of work for individuals while boosting the performance of companies. As part of the extensive XING service, onlyfy one is an online platform on which or through which talent and companies meet.
With regard to data processing for which New Work SE is solely responsible or is responsible within the scope of the shared responsibility with Sattler AG, detailed information is available in the XING Privacy Policy at https://privacy.xing.com/en/privacy-policy. You will also find contact details for New Work SE, as well as for the New Work SE data protection officer there.
When submitting an application, you enter into a user relationship with New Work SE for the purpose of processing applications. In addition, you will receive support and New Work SE can present you with other opportunities in support of your career. A public profile will not be automatically created for you on the XING social and jobs network. The legal basis for New Work SE processing your data is, in particular, Article 6 (1)(b) GDPR (processing necessary for the performance of a contract).
You can pause the creation of your online application at any time and continue at a later point. Cookies are used for this purpose. The data you provide to create the user account, as well as any uploaded documents, are recorded in the company account of Sattler AG in onlyfy one. The data remains recorded even if an application is paused and/or not completed. In this case, your application is flagged as incomplete and the data remains visible to Sattler AG only.
The data you have provided as part of the online application can be read, edited, or updated in your candidate profile at any time.
If the calendar function is used, your data is processed during and for the purpose of setting appointments within the application process. The legal basis is Article 6 (1)(f) GDPR. The calendar function is provided by an IT service provider (Cronofy Ltd., United Kingdom). The United Kingdom is classified as a secure third country based on the adequacy decision of the European Commission. Further information on data protection at Cronofy is available here: https://www.cronofy.com/gdpr/ and https://docs.cronofy.com/policies/privacy-notice/
If you use the apply using WhatsApp function, your consent, which can be withdrawn at any time, forms the legal basis for communication (Article 6 (1)(a) GDPR). When applying via WhatsApp, all required applicant information is requested during a WhatsApp chat. The data is then sent directly to onlyfy one through a service provider, and is processed further there as part of and for the purpose of the normal application process.
The apply via WhatsApp function is provided by an IT service provider (PitchYou) that can gain access to your data for this purpose. More information is available here: https://www.pitchyou.de/en/pitchyou-gdpr. Candidate data from apply via WhatsApp are transferred to onlyfy one via an interface. Immediately after this transfer, candidate data are deleted from the apply via WhatsApp infrastructure in PitchYou. Further processing then takes place exclusively in onlyfy one.
Please note that you use your personal WhatsApp account for applications, and therefore we cannot rule out that messages will be transferred, to the USA in particular. WhatsApp data protection information, such as its processing or exercising of data protection rights with regard to WhatsApp is available here: https://www.whatsapp.com/legal/privacy-policy-eea.
Subject to your consent, your application will be sent from WhatsApp via the PitchYou infrastructure to onlyfy one. You have the right to withdraw your consent to this at any time. Either way, your application data will be deleted from the PitchYou infrastructure once transferred to onlyfy one, meaning that PitchYou will not process your data any further.
The FADP applies to circumstances which have an impact on Switzerland, even if said circumstances are initiated outside of Switzerland. Correspondingly, this privacy policy applies to information in line with the EU GDPR and the FADP. Here, EU GDPR terminology is used in favour of FADP terminology. However, FADP terminology is used if the FADP applies and the terminology differs from EU GDPR terminology in a given language. The About this site section on XING contains the name and address of our representative in Switzerland.
Last updated: 24 October 2024
The protection of your personal data is our top priority. Below we inform you about the most important aspects of this data processing.
We process your personal data in accordance with the applicable data protection regulations (GDPR, DSG, TKG).
This statement describes how the Sattler GROUP ("we") processes your personal data as part of the application process. The Sattler GROUP includes the following companies in Europe:
Sattler AG, Sattlerstrasse 45, 8077 Gössendorf, Austria
Sattler SUN-TEX GmbH, Sattlerstrasse 45, 8077 Gössendorf, Austria
Sattler PRO-TEX GmbH, Sattlerstrasse 45, 8077 Gössendorf, Austria
Sattler Italia Srl, Via Vittor Pisani 16, 20100 Milan, Italy
Sattler Schweiz GmbH, Falkenweg 9b, 9300 Wittenbach, Switzerland
Sattler d.o.o., Kneza Mihaila 1-3, 11000 Belgrade, Serbia
The company to which you have specifically applied is responsible for data processing.
We process your personal data mentioned in paragraph 2 in order to carry out the application process with you and to ensure optimal staffing within our group of companies.
We do this on the legal basis of our overriding legitimate interest in carrying out an efficient application process (Art 6 (1) (f) GDPR), on the basis of the necessity to carry out pre-contractual measures (Art 6 (1) (b) GDPR) and on the basis of your consent (Art 6 (1) (a) GDPR).
The processed data is either provided by you directly as part of the application or we collect it ourselves (e.g. by taking notes during the interview).
Alternatively and voluntarily, you can also apply directly via the onlyfy one platform integrated into the website. In this case, there is joint responsibility with New Work SE, Strandkai 1, 20457 Hamburg, Germany, as the operator of the onlyfy one platform. Details can be found in the separate privacy policy for the use of onlyfy one by the Sattler Group. This can be accessed at https://www.sattler.com/en/footermetanav/privacy-statement.
Within the Sattler Group, those companies that need your data to process your application will receive it as processors in accordance with Art. 28 GDPR. We also use external processors (e.g. IT service providers) who receive your data from us.
Your data will generally be stored by us for seven months from the date of completion of an unsuccessful application process. It is also possible to retain the data for up to 18 months if you have consented to this longer retention period.
If your application is successful, we will retain your data collected in connection with the application process for as long as statutory retention obligations exist or as long as any legal claims are not yet time-barred.
We do not use exclusively automated decision-making within the meaning of Art. 22 GDPR to carry out the application process.
You have the rights of access under Art 15 GDPR, rectification under Art 16 GDPR, erasure under Art 17 GDPR, restriction under Art 18 GDPR, data portability under Art 20 GDPR and objection under Art 21 GDPR (if your data is processed on the basis of legitimate interests). If you believe that the processing of your data violates data protection law or your data protection claims have otherwise been violated in any way, you have the right to lodge a complaint with the supervisory authority in accordance with Art 77 GDPR. In Austria, this is the data protection authority.
If you have any questions or wish to exercise your rights, please contact:
Please contact the company to which you have specifically applied.
In addition, the following contact is available within the Sattler Group for your data protection concerns:
Sattler AG
For the attention of the Data Protection Coordinator
Sattlerstrasse 45
8077 Gössendorf
AUSTRIA
Phone: +43 (316) 4104-0
E-mail: privacy@sattler.com
