privacy policy – job candidates

Personal data are all data which directly or indirectly allow an inference to your person (“data”) Art 4 Z 1 GDPR. This includes, for example, name, address, e-mail address, user behavior. With regard to further terminology, in particular the terms processing’, ‘controller’, ‘processor’ and ‘consent’, we refer to the legal data protection definitions of Art. 4 GDPR.

We process personal data only to the extent necessary for the recruitment process. Personal data is regularly processed only if you have given us your consent within the meaning of Art. 6 (1) a) GDPR or if the processing is permitted by statutory provisions, in particular by one of the legal bases mentioned in Art. 6 (1) b) to f) GDPR.
Your personal data will be deleted or blocked as soon as the purpose of storage ceases to apply. In addition, storage may take place if this has been provided for by national or European regulations to which we are subject. In this case, the data will be blocked or deleted when the storage period prescribed by the respective regulations has expired. The latter does not apply if further storage of the data is necessary for the conclusion or fulfilment of a contract.

If you send us your job application, we can use the personal data, which you give us voluntarily (CV, attachments etc).
pharma& collects the data, which your application entails, as well as all other personal data, which have been provided by yourself or which have been determined in the course of the application process in relation to you, including information relating to applicant evaluation on the basis of a personality test, if conducted. All of this data will be processed by pharma& in compliance with the law for the purpose of fulfilling all the requirements, which are to be fulfilled in the area of Human resources and administrative reasons.

1. Personal data

In the course of an application, the following information will be processed:
a) Contact information, which identifies you, e.g. your name, date of birth, nationality, address, phone number and E-Mail address (“personal data”),
b) Data about education and studies
c) Additionally, electronically saved documents attached to the application, such as motivational letter, curriculum vitae, transcripts, photo etc.

For the sake of good order, we would like to point out that we as pharma& do not use automatic decision-making procedures such as profiling acc. to art. 22 GDPR in the course of the application process.

2. Attachments

Please be aware that you do not send us information or attachments, which entail special categories of personal data (e.g. information regarding racial and ethnic origin, political, or philosophical beliefs, union membership, health, sexual orientation), as we do not need this information for the purpose of an application.

Your personal data will be processed for the purpose of recruitment (conducting the application processes) as well as for record keeping for other positions and for defending our legitimate interest and rights in recruitment context.

We process your data in compliance with data protection principles acc. to art. 6 (1) lit a), b) and f) of GDPR, especially on account of your explicit consent for processing your personal data, for the execution of pre-contractual measures in light of a potential employment relationship and if necessary, based on our legitimate interest to safeguard our rights and interests in recruitment context.

Your personal data – as described above – can be accessed and viewed especially by authorized personnel or contractual partners of pharma& that assist us in the processing as well as the respective management.
Possible external recipients of your personal data will be other pharma& Group companies and for certain positions, it might be additionally required to pass on personal data to external recruiters/recruitment companies for the purpose of conducting and supporting the application process for us.

Such data recipients can be located inside or outside the EU, depending on the recruitment process for the position you applied for. If your data is shared with a data recipient located outside EU, pharma& will establish adequate data protection standards or contracts in line with the GDPR in its respectively valid version and applicable local law.

How long do we store your personal data?
pharma& stores your data for the duration of the recruitment process and for further 6 months after the conclusion of the recruitment process. Should you wish an immediate deletion of your data from our database, please send an e-mail to career@pharmaand.com. For certain jurisdictions – i.e.: Austria, please note that the deletion of your data is only possible six months after your application according to the provisions of law.

According to current data protection laws, you enjoy the following rights regarding the processing of personal data:

• Right of access (information about the data we process about you),
• Right to rectification (correction of incorrect data),
• Right to restriction of processing (limitation of data processing),
• Right to data portability,
• Right to object and the
• Right to erasure (data deletion – “right to be forgotten”).

If the processing of your personal data is based on our legitimate interest, you have the right, to object any time to the processing of your data for reasons arising out of the particular situation; this applies in particular to the processing of data for the purpose of direct marketing.

If the processing of your data is based on your consent, you have the right to withdraw the consent at any time with future effect. Such withdrawal shall not affect the lawfulness of the data processing up to the date of withdrawal.

If you believe that our processing of your data is violating applicable data protection laws or if your privacy rights have otherwise been violated, please contact us using the contact details provided in point I above. In this way, we get to know and understand your concerns and can respond accordingly.

You can exercise your aforementioned rights by sending your request via email to privacy@pharmaand.com.

You also have the right to file a complaint with the national competent data protection authority. In Austria it is the Data Protection Authority.

Österreichische Datenschutzbehörde
Barichgasse 40-42, 1030 Wien, Österreich
Tel.: +43 1 52 152-0, dsb@dsb.gv.at