Data Protection Information
The protection of your personal data is very important to us, which is why we would like to list all the information about the processing and storage of your data when you visit our website and in our company.
In order to be able to use all the functions and services of our website, it is necessary to collect your personal data. However, the processing and storage only takes place in accordance with the legal guidelines and requirements of the General Data Protection Regulation (GDPR) and the Telecommunications Act (TKG 2021).
Responsible Body
BR International Consulting Services GmbH
Office Park 4, Top B.80
1300 Vienna Airport
Austria
Contact: office@br-ics.com
Further information can be found in the imprint.
Collection and Processing of Personal Data on this Website
Note: In order to protect your data as comprehensively as possible from unwanted access, we take so-called technical and organisational measures and use an encryption process on our website. Your data is transmitted over the internet from your computer to our computer and vice versa using what is known as TLS encryption. TLS stands for “Transport Layer Security” and is an encryption protocol for data transmission on the internet. You can usually recognise “TLS” by the fact that the lock symbol in the status bar of your browser is closed and the address begins with https://.
1. Collection of access and log data
When you visit my website, information is automatically stored.
These are
- the browser type and version used (if transmitted by the user!),
- the operating system,
- Date and time of the server request,
- the time spent on the website,
- the previously visited website (if transmitted by the user!),
- the IP address of the user.
The legal basis for this data processing is the legitimate interest pursuant to Art. 6 para. 1 lit. f) GDPR. The legitimate interest lies in being able to identify indications of unlawful use of our website (e.g. defence against hacker attacks) and to ensure a smooth connection setup.
We have concluded an order processing contract with the provider of this website, trinet e. U., based in Austria, in accordance with Art. 28 GDPR. This is a contract required by data protection law, which ensures that trinet processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR. Trinet hosts the website on rented servers of Hetzner Online GmbH based in Germany.
The data collected is stored for a maximum of 6 months. We only store the server log files in the event of attacks on our server infrastructure or other legal violations. This longer storage period is based on our legitimate interest in accordance with Art. 6 para. 1 lit. f) GDPR and serves only to preserve evidence.
2. Enquiries via Contact Form, E-Mail and Telephone
Any personal data that you provide to us on a voluntary basis will of course be treated confidentially. We use the personal data you provide exclusively to process and respond to your enquiry. The legal basis for data processing is our legitimate interest in accordance with Art. 6 para. 1 lit. f) GDPR. This arises from our interest in responding to enquiries from our customers, business partners and interested parties and in promoting and maintaining customer satisfaction. Another legal basis for natural persons is the initiation or fulfilment of a contract in accordance with Art. 6 para. 1 lit. b) GDPR.
All personal data that you send to us with your enquiry will be deleted or anonymised by us no later than 9 months after the final response has been given, unless a contract is concluded. The retention period of 9 months is due to the fact that you may occasionally contact us again about the same matter after a reply and refer to the previous correspondence. In our experience, we have found that after 9 months there are no more queries in response to our replies.
3. Use of Web Analysis Tools and Cookies
We use cookies to facilitate and improve the use of our website. Cookies are small pieces of text information that can be stored on your computer or smartphone via the browser when you visit a website. This serves to recognise the website visitor. Cookies can also provide us with information about how you use our website so that we can continuously improve the design of the website.
Cookies themselves do not contain any personal data about users, they are only used to uniquely identify what our customers find interesting and useful on our website.
The legal basis for the processing of personal data using cookies and other technologies is your consent in accordance with Art. 6 para. 1 lit. a) GDPR, which you give us via the so-called “consent banner” as soon as you visit our website for the first time.
We use cookies for the following purposes:
- Technically necessary: These are cookies and similar methods without which you cannot use our services, for example to display our website correctly or to use functions you have requested.
- Convenience: With the help of these techniques, we can take into account your actual or presumed preferences for the convenient use of our website. For example, we can use your settings to display our website in a language that suits you.
- Statistics: These techniques enable us to compile anonymous statistics on the use of our services. This allows us to determine, for example, how we can better customise our website to the habits of our users.
- Marketing: This allows us to show you advertising content tailored to you based on an analysis of your usage behaviour. Your usage behaviour can also be tracked across different websites, browsers or end devices using a user ID (unique identifier).
The data processed by necessary cookies is required for the purposes listed below to protect our legitimate interests and those of third parties in accordance with Art. 6 para. 1 lit. f) GDPR and § 96 para. 3 TKG.
Any use of cookies that is not absolutely technically necessary constitutes data processing that is only permitted with your express and active consent in accordance with Art. 6 para. 1 lit. a) GDPR. You can use our so-called “Cookie Consent Tool” to set which cookie categories you would like to consent to when visiting our website.
Once cookies have been saved, you can delete them at any time via the settings of your web browser. You can also adjust the settings of your web browser so that no cookies are stored. In this case, not all functions of our website may be available.
Link cookie settings, consent history bzw. revocation.
These third-party cookies are set when the YouTube map service is reloaded with your consent in accordance with Art. 6 para. 1 lit. a) GDPR.
Cookie Name | Period of Validity | Category of the cookie | Purpose |
|---|---|---|---|
VISITOR_INFO1_LIVE | 6 months | Marketing | Enables ad serving or retargeting to store and track a visitor’s identity, store and track interactions. |
YSC | Session | Marketing | To save and track interactions. |
APISID | 2 years | Marketing | Used for targeting purposes to create a profile of website visitors’ interests in order to display relevant and personalised Google advertising. |
HSID | 2 years | Functional Cookie | Contains encrypted entries of your Google account and the last login time to protect against attacks and data theft from form entries. |
SAPISID | 2 years | Marketing | Used for targeting purposes to create a profile of website visitors’ interests in order to display relevant and personalised Google advertising. |
SID | 2 years | Marketing | Google uses cookies such as the NID and SID cookies to customise advertising in Google products such as Google Search. With the help
of such cookies, Google records, for example, your most recent search queries, your previous interactions with an advertiser’s adverts or search results and your visits to an advertiser’s website. This allows Google to display customised advertising on Google. Other Google products such as YouTube or Doubleclick also use these cookies to select more relevant adverts. |
__Secure-3PAPISID | 2 years | Marketing | Used by for targeting purposes to create a profile of the website visitor’s interests and display relevant and personalised Google advertising. |
__Secure-3PSID | 2 years | Marketing | Used for targeting purposes to create a profile of website visitors’ interests in order to display relevant and personalised Google advertising. |
__Secure-3PSIDTS | 2 years | Marketing | The “__Secure-3PSIDTS” cookie from Google collects information about your interactions with Google services and adverts. It is used to measure the effectiveness of advertising and deliver personalised content based on your interests. The cookie contains a unique identifier. |
__Secure-1PSIDTS | 1 year | Marketing | Used for targeting purposes to create a profile of the website visitor’s interests so that relevant and personalised Google advertising can be displayed. |
SIDCC | 1 year | Functional Cookie | Security cookie to protect user data from unauthorised access. |
__Secure-1PAPISID | 2 years | Marketing | Used by Google for targeting purposes to create a profile of the website visitor’s interests so that relevant and personalised Google advertising can be displayed. |
__Secure-1PSID | 1 year | Marketing | Used by Google for targeting purposes to create a profile of the website visitor’s interests and to display relevant and personalised Google advertising. |
SSID | 2 years | Marketing | Targeting-Cookie. Used by Google for targeting purposes to create a profile of the website visitor’s interests so that relevant and personalised Google advertising can be displayed. |
__SECURE—3PSIDCC | 2 years | Marketing | Used to create a user profile and display relevant and personalised Google Ads to the user. |
__SECURE-YEC | 13 months | Marketing | Saves the user’s preferences for the video player with embedded YouTube video |
VISITOR_PRIVACY_METADATA | 180 days | Marketing | Saves the user’s cookie consent status for the current domain |
PREF | 8 months | Marketing | Tracks the number of views for a specific video. |
LOGIN_INFO | 2 years | Marketing | This cookie is used to play embedded YouTube videos on the website. |
Elementor Local Storage {“__expiration”:{},”pageViews”:,”sessions”:}” | current Session | essential cookie | HTML Local Storage: We use Elementor for content creation. |
_icl_visitor_lang_js | 1 day | essential cookie | Cookie: Saves the selected language |
wp-wpml_current_language | Session | essential cookie | Cookie: Directs the user of this website directly to the appropriate multilingual content based on the browser language. |
wpml_browser_redirect_test | Session | essential cookie | Cookie: Saves the selected language |
As part of data processing (with the help of cookies and similar techniques for processing usage data), we may use specialised service providers, in particular from the online marketing sector. These process your data on our behalf as processors, are carefully selected and contractually bound in accordance with Article 28 GDPR. All of the above providers work for us as processors.
Integration of YouTube Videos and Map Services
We embed videos and map services on our websites that are not stored on our servers. To ensure that accessing our websites with embedded videos and maps does not automatically result in the third-party provider’s content being loaded, we only display locally stored preview images of the maps in a first step. This means that the third-party provider does not receive any information.
Only after you click on the preview image or give your consent via the cookie consent banner will the third-party provider’s content be reloaded. As a result, the third-party provider receives the information that you have accessed our site and the usage data technically required in this context. We have no influence on further data processing by the third-party provider. By clicking on the preview image, you give us your consent to load content from the third-party provider. The embedding takes place on the basis of your consent in accordance with Art. 6 para. 1 lit. a) GDPR, provided that you have previously given your consent by clicking on the preview image. There is an adequacy decision for the USA, so that the data transfer can take place without further measures. You can view the certification of Google (YouTube) here.
Provider of the video service:
Google Ireland Limited/Google LLC (USA) (“YouTube” and “Google Maps”)
Revocation of consent
If you have clicked on a preview image, the content of the third-party provider will be reloaded immediately. If you do not want such reloading on other pages, please do not click on the preview images or revoke your consent for reloading via the cookie consent banner.
Web Analysis with Matomo without Cookies
We use the web analysis service Matomo. It is hosted on one of our IT service provider – trinet e.U. – operated web servers (server location: Hetzner Online GmbH based in Germany). No data is transferred to third parties. The IP address is anonymised before storage and no user profile is created so that we do not recognise returning visitors. We have taken measures to ensure that no cookies or similar technologies are stored on your end device. The use of the web analysis service is based on the legitimate interest pursuant to Art. 6 para. 1 lit. f) GDPR. The interest lies in obtaining an anonymised analysis of user behaviour in order to be able to adapt the website accordingly.
You can object to this data processing at any time by sending us an e-mail.
You also have the option of selecting your browser settings so that the acceptance of cookies or similar technologies is generally blocked. As an alternative, the so-called “do-not-track option” can be set in the browser; this is also supported by Matomo.
Instructions for the most common browsers can be found here:
Chrome: https://support.google.com/accounts/answer/61416?hl=de
Mozilla Firefox: https://support.mozilla.org/de/kb/verbesserter-schutz-aktivitatenverfolgung-desktop?redirectslug=cookies-erlauben-und-ablehnen&redirectlocale=de
Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
Applications
BR International Service Center GmbH is responsible for data processing as part of the application process together with the company (legal entity) for whose position you are applying.
BR International Service Center GmbH carries out the application procedure together with the following companies
BR International Consulting Services GmbH
Office Park 4, Top B.80
1300 Vienna Airport
Austria
BR International Real Estate Services GmbH
Office Park 4, Top B.80
1300 Vienna Airport
Austria
Your application relates to the position explicitly described in the job advertisement at one of the above-mentioned companies.
BR International Service Center GmbH is the responsible body for applications for vacancies at BR International Service Center GmbH.
Information on joint responsibility
What does joint responsibility mean?
Joint controllership under the GDPR means that several organisations work together to carry out a specific process. If personal data is also processed jointly in the organisations, this constitutes joint controllership.
Agreement on joint responsibility
The GDPR stipulates that a joint controllership agreement must be concluded in such a case. This regulates which company fulfils which obligations under the GDPR. We have created the following overview so that you know which company you can contact with questions:
Process section of data processing/obligation | Fulfilment of obligations by |
|---|---|
Definition of purposes and means | all |
Information obligations pursuant to Art. 13, 14 in conjunction with. Art. 26 para. 2 sentence 2 GDPR | BR International Service Center GmbH |
Survey | all |
Storage | all |
Transmission | all |
Utilisation | all |
Amendment | all |
Blocking | all |
Cancellation | all |
Duty to provide information pursuant to Art. 15 GDPR | all |
Processing of rectification requests pursuant to Art. 16 GDPR | all |
Processing of erasure requests pursuant to Art. 17 GDPR | all |
Processing the rights of data subjects in accordance with Art. 18 and 19 GDPR | all |
Processing of requests for surrender in accordance with Art. 20 GDPR | all |
Responding to objections in accordance with Art. 21 GDPR | all |
Determination of technical and organisational measures in accordance with Art. 24, 25 and 32 GDPR | all |
Commissioning of processors in accordance with Art. 28 GDPR | all |
Keeping the processing register of this processing in accordance with Art. 30 GDPR | all |
Notification of data protection incidents in accordance with Art. 33 f. GDPR | all |
Carrying out the data protection
impact assessment, if necessary (Art. 35 f. GDPR) | all |
Note: Even if there is joint responsibility, the rights under the GDPR (data subject rights) can be exercised against all of the above-mentioned companies.
Implementation of the application procedure
You can send us your application documents by e-mail for the purpose of receiving and managing the application and thus for the purpose of (possibly) establishing an employment relationship. As part of the application process, we only collect the data from you that is required to establish the employment relationship.
You can also send us your application documents via job advertisements on career platforms. Where necessary, there are data protection agreements in place with the providers of the platforms regarding the handling of personal data.
The legal basis for this data processing is the initiation of an employment contract in accordance with Art. 6 para. 1 lit. b) GDPR.
If your application is successful, your personal data will be stored for the duration of the employment relationship. In addition,
tax-relevant data will be archived within the scope of the statutory retention periods and stored for 30 years for the preparation of a simple reference.
In the event of an unsuccessful application, your personal data will be deleted 7 months after the rejection, unless you have given us your consent for further storage.
Employees recruit employees
As part of the “Employees recruit employees” programme, employees of the above-mentioned companies have the opportunity to recruit new employees and, in the event of successful recruitment, to receive a bonus under certain conditions. If you have been recruited by an employee of the above-mentioned companies, you can indicate this. The legal basis for this data processing is the legitimate interest pursuant to Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the implementation of the “Employees recruit employees” programme for the purposes of personnel marketing and the recruitment of new employees.
Recipients or categories of recipients
If you apply for an advertised position, only those persons who make the decision about filling the position will have access to your personal data to the extent absolutely necessary; we do not pass on the data to other third parties.
Provision
You are neither contractually nor legally obliged to provide us with your personal data. Without your data, however, we cannot contact you or carry out the application process. Your data is also required in the event of a contract being concluded as part of the recruitment process.
Data Processing of Business Partners and Customers
1. Fulfilment of contractual obligations (Art. 6 para. 1 lit. b) GDPR)
The purposes of data processing arise from the implementation of pre-contractual measures and the fulfilment of obligations arising from the concluded contract.
We process master data such as first and last name, billing address, telephone numbers, e-mail address, billing and payment data for contract processing.
2. For the fulfilment of legal obligations (Art. 6 para. 1 lit. c) GDPR)
The purposes of data processing arise in individual cases from legal requirements. These legal obligations include, for example, the fulfilment of retention and identification obligations, e.g. in the context of requirements for tax control and reporting obligations and data processing in the context of enquiries from authorities.
3. For the fulfilment of our legitimate interests (Art. 6 para. 1 lit. f GDPR)
We process the contact details of contact persons at customers, interested parties, suppliers, trade fair visitors and other business partners for communication by email, telephone and post. The legal basis for data processing is the legitimate interest pursuant to Art. 6 para. 1 f) GDPR. The legitimate interest arises from the interest in conducting or initiating the business relationship with customers, interested parties, suppliers and other business partners as well as personal contact with contact persons.
As a matter of principle, we do not pass on data to third parties.
Personal data is stored for the purpose of conducting business relationships for as long as there is a legitimate interest in doing so. It may be necessary to process the personal data provided by you beyond the actual fulfilment of the contract with business partners. The legitimate interests here are in particular the fulfilment of compliance measures, assertion of legal claims, defence against liability claims, prevention of criminal offences and the settlement of damages resulting from the business relationship.
4. Who receives the personal data you provide?
As part of the contractual relationship, we may also commission processors or service providers who may have access to your personal data. ompliance with data protection regulations is ensured by contract.
Intercompany order processing (Art. 28 GDPR)
Within the BR Group, certain services are provided centrally by BR International Service GmbH. Specifically, the following data processing is affected by this:
- Provision of IT applications and Saas products such as Microsoft, BMD, …
- Branding measures
- Event management
- Accounting and payroll accounting
Here it is contractually regulated internally that the data processing may only take place for the commissioned services and that no own processing of data may take place.
5. Storage period
Personal data will be stored for as long as is necessary to fulfil the above-mentioned purposes. The statutory retention period in Austria is 7 years.
6. Processing in connection with the assertion of data protection rights
Insofar as your data has been processed on the basis of consent in accordance with Art. 6 para. 1 lit. Art. 9 para. 2 lit. a) or Art. 49 para. 1 lit. a) GDPR, we will process your data exclusively for a specific purpose and after separate information in order to be able to prove that you have consented to the data processing in question within the framework of the accountability obligation incumbent upon us in accordance with Art. 5 para. 2 GDPR. If you revoke your consent, your data will be deleted within the legally prescribed period – please note, however, that data that falls under tax or other retention obligations must be stored for at least seven years and, if necessary, extended by the duration of proceedings by the (tax) authority. The legal basis for data processing is Art. 6 para. 1 lit. c) GDPR.
If you assert data subject rights against us in accordance with Art. 15 to 21 GDPR, we will also process and store your data in order to be able to prove that we have complied with the GDPR when processing your enquiry as part of our accountability obligations in accordance with Art. 5 para. 2 GDPR. The legal basis for this processing is Art. 6 para. 1 lit. c) GDPR in conjunction with the respective data subject right(s) asserted.
Operation of social media presences
We operate the following social media presences:
LinkedIn: https://www.linkedin.com/company/br-international-consulting-services-gmbh/
Facebook: https://www.facebook.com/BR.International.Consulting.Services.GmbH
Instagram: https://www.instagram.com/br_ics/
Instagram and Facebook are products from Meta Platforms Inc. (formerly Facebook Inc.): https://www.facebook.com/help/1561485474074139/
Data processing by us:
a. Maintaining the above-mentioned social media pages and placing ads (“adverts”)
The personal data entered on social media pages, such as comments, videos, images, likes, public messages etc. are published by the respective social media platform. We reserve the right to delete content if necessary. We may share content on our site and contact you via the social media platform, for example via the messengers offered. In addition, we regularly place adverts via our social media pages. The legal basis for this data processing is the legitimate interest pursuant to Art. 6 para. 1 lit. f) GDPR, which is in the interest of our public relations and communication.
b. Page Insights
The social media platforms provide anonymised statistics and insights that help us gain knowledge about the types of actions people take on our site (so-called “page insights”). These Page Insights are created based on certain information about people who have visited our site.
The legal basis for this data processing is our legitimate interest in accordance with Art. 6 para. 1 lit. f) GDPR, which is based on obtaining information about the actions and visitors to our website.
This processing of personal data is carried out by the social media platform and us as so-called joint controllers in accordance with Art. 26 GDPR. In the case of joint controllership, a separate agreement must be concluded.
LinkedIn: https://legal.linkedin.com/pages-joint-controller-addendum
Instagram and Facebook: https://www.facebook.com/legal/terms/page_controller_addendum
If you wish to object to certain data processing over which we have an influence (e.g. deletion of comments), please contact us using the contact details given above.
Note: The provision of your data is neither legally nor contractually required or necessary for the conclusion of a contract. You are not obliged to provide your personal data. The consequence of not providing your data is that you will not be able to communicate with us via our social media pages, interact with us or take part in the competition. To contact us, please use the above e-mail address.
Data processing by the operator of the social media platform:
In addition to us, there is also the operator of the social media platforms themselves. From a data protection perspective, this is also regarded as another controller that carries out its own data processing. This means that the operator is also a separate controller under the GDPR. However, we only have limited influence on data processing by the operator. Where we can exert influence (e.g. through parameterisation), we work within the scope of our possibilities to ensure that the operator of the social media platform handles data in compliance with data protection regulations. In many places, however, we cannot influence the data processing by the operator of the social media platform and do not know exactly what data they process. The respective operator will inform you about the processing of personal data in its own privacy policy:
LinkedIn: https://de.linkedin.com/legal/privacy-policy
Facebook: https://www.facebook.com/help/568137493302217
Instagram: https://privacycenter.instagram.com/policy/
Note: The operator of the social media platform uses web tracking methods. Web tracking can also take place regardless of whether you are logged in or registered with the social media platform. As already explained, we unfortunately have little influence on the web tracking methods of the social media platform. For example, we cannot switch it off. Please be aware of this: It cannot be ruled out that the provider of the social media platform uses your profile and behavioural data, for example to evaluate your habits or personal relationships and preferences, etc. We have no influence on the processing of your data by the provider of the social media platform.
Rights of data subjects
Your rights as a data subject
You have the right to receive information about the personal data stored about you free of charge upon request in accordance with Art. 15 para. 1 GDPR. Furthermore, if the legal requirements are met, you have the right to rectification (Art. 16 GDPR), erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR) of your personal data. If you have provided the processed data yourself, you have the right to data portability in accordance with Art. 20 GDPR.
If the data processing is based on Art. 6 para. 1 1 e) or f) GDPR, you have the right to object in accordance with Art. 21 GDPR. If you object to data processing, this will not take place in future unless the controller can demonstrate compelling legitimate grounds for further processing which override the data subject’s interest in objecting.
If the data processing is based on consent in accordance with Art. 6 para. 1 lit. Art. 9 para. 2 lit. a) or Art. 49 para. 1 lit. a) GDPR, you can revoke your consent at any time with effect for the future without affecting the legality of the previous processing.
You also have the right to lodge a complaint with a data protection supervisory authority. The complaint may in particular be lodged with a supervisory authority in the EU Member State of your habitual residence, place of work or place of the alleged infringement.
Contact details of the responsible data protection authority: Wickenburggasse 8, 1080 Vienna, dsb@dsb.gv.at
No automated decision-making
We do not carry out automated decision-making or profiling.
Provision
Unless otherwise stated in the previous chapters, the provision of personal data is neither legally nor contractually required or necessary for the conclusion of a contract. Failure to provide your personal data may mean that we are unable to respond to your enquiries, for example.
This data protection information was created in cooperation with the consulting firm SCALELINE. The legal texts are subject to copyright.
