Information on the collection and processing of your personal data 

In the following, you have an overview of our personal data collection and processing policy and your related rights. The type of your data that we process and for which purpose depends on the respective contractual relationship. 

1. Who is responsible for processing data? 

Responsible party: 

Good Solutions & Logistics GmbH
An der Au 2/4/7
1230 Vienna

Austria

Email: support@getinshapeacademy.com
Managing Director: Oliver Toshevski

1. How can I reach the data protection officer? 

You can reach our data protection officer at: 

Good Solutions & Logistics GmbH
An der Au 2/4/7
1230 Vienna

Austria

Email: support@getinshapeacademy.com
Managing Director: Oliver Toshevski

1. What types of personal data do we use? 

We process personal data that we receive to carry out the contractual 

relationships of our customers. 

In detail, this refers to the following personal data: 

- Personal details (name, address, date, and location of birth, citizenship, email address, telephone number) 

- Professional background, education, additional qualifications, certification/certificates, 

- Account information to reimburse travel costs, where necessary 

- Copies of IDs 

1. From what sources do we collect data 

We process the personal data, which we receive from you during the application process, as well as data that are accessible via career platforms (such as LinkedIn, Xing) publicly provided by the applicant. 

1. For what purposes do we process your data and on what legal basis? 

We process your personal data in particular in compliance with the General Data Protection Regulation (DSGVO) and the Federal Data Protection Act (BDSG) as well as all other relevant laws 

1. a) Data processing for application purposes (§26 Abs. 1 BDSG) 

Applicants' personal data may be processed for the purposes of the application process if this is necessary for the decision to establish an employment relationship with us. 

The necessity and the extent of the data collection are assessed i.a. according to the position to be filled. If your desired position involves engaging in highly confidential work, increased personal and/or financial responsibility, or is subject to certain physical and health conditions, more extensive data collection may be required. In order to protect the privacy of such data processing takes place only after completion of the applicant selection and immediately before your recruitment. 

1. b) Based on the consent that you provided (Art. 6 Para. 1 GDPR) 

If you have given us consent with respect to the collection, processing, or transfer of certain personal data, then this consents creates the legal basis for the processing of this data. 

You can withdraw your declaration of consent at any time. A declared withdrawal does not affect the legality of data processing up to the notice of objection. 

This consent includes the following procedures: 

- - consent to conduct a video interview 

- - Inclusion of the application data in a "Join The Team" 

1. c) Based on legitimate interests (Art. 6 Para. 1 f GDPR) 

In certain cases, we process your data to protect a legitimate interest on our part or the part of a third party. 

- Storage of applicant profiles which are provided on career platforms such as LinkedIn, Xing for a direct approach to the possible candidate 

- Creation of a "Join The Team" 

- In defense of legal claims in proceedings under the General Equal Treatment Act (AGG). In the event of a legal dispute, we have a legitimate interest in processing the data for evidential purposes. 

1. Where does my data go? 

To comply with our contractual and legal requirements, various public or internal offices, as well as external service providers, have access to your personal data. 

Public offices: 

- Consulates: when creating an invitation letter for the purpose of receiving a visa 

- Local authorities: when issuing a work visa 

Internal offices: 

List of various internal offices, provided they are involved in the respective business processes 

- Accounting 

- Human Resources Department (only in the event a candidate is hired) 

- Marketing Department (only in the event that a candidate is invited to the specific department) 

- Product & Engineering Department (only in the event that a candidate is invited to the specific department) 

- Finance & Legal Department (only in the event that a candidate is invited to the specific department) 

- Data Science & Analytics Department (only in the event that a candidate is invited to the specific department) 

If you have additional questions on the individual recipients, contact us at: 

join.the.team@getinshapeacademy.com

1. Is my data sent to countries outside of the European Union (so-called third countries)? 

Data will be sent to a country outside of the European Union (so-called third country) when: 

- Complying with contractual obligations 

- You have given us consent 

- Protecting our legitimate interests 

- It is legally required 

In connection with this, we send personal data to the following third countries: 

- USA 

In order to ensure a suitable level of data protection in these third countries, there shall exist either suitability resolutions from the European Commission or suitable and appropriate guarantees in the form of: 

- EU standard clauses 

If you have additional questions, you can obtain more detailed information on data transfers to 

third countries from join.the.team@getinshapeacademy.com

1. How long is my data stored? 

We store your personal data for as long as it is necessary to comply with our legal and contractual obligations. 

This means that your data will be stored for an additional 6 months after the application process has finished. If, during the recruitment process, you provide us consent to store your data for future job offers, we will save your data for 24 months. 

Should it no longer be necessary to store data to comply with contractual or legal requirements, we will delete your data unless it is necessary for further processing for the following purposes: 

- Compliance with commercial and taxation storage requirements 

- Maintenance of evidence within the framework of legal statutes of limitation 

- Defense of legal claims 

1. What rights do I have in connection with the processing of my data? 

Each affected person has the right of access in accordance with Art. 15 GDPR, the right to rectification in accordance with Art. 16 GDPR, the right to erasure in accordance with Article 17 GDPR, the right to restriction of processing in accordance with Art. 18 GDPR, the right to object from Art. 21 GDPR as well as the right to data portability from Art. 20 GDPR. The limitations according to Sections 34 and 35 BDSG apply to the right of access and to the right to erasure. 

1. a) Right to object 

What right do you have in case of data processing for your legitimate or public interest? 

According to Art. 21 Abs. 1 GDPR you have the right at any time, for reasons that arise from your particular situation, to raise an objection against the processing of personal data concerning you, which is based on Art. 6 para. 1 e DSGVO (Data Processing in the Public Interest) or Art 6 para. 1 f DSGVO (data processing for the protection of a legitimate interest), this also applies to a profiling based on this provision. 

In the event of your opposition, we will no longer process your personal information unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights, and freedoms, or the processing is for the purpose of enforcing, pursuing, or defending legal claims. 

1. b) Right of withdrawal 

Your consent to the processing of personal data can be revoked at any time. Please note that the revocation only works for the future. 

1. c) Right to information 

You can request information about whether we have personal information about you stored. If you wish, we will tell you what the data are, what the purpose of the data processing is, to whom this information is disclosed, how long the data is stored, and what other rights you have with respect to that data. 

1. d) other rights 

In addition, you have the right to correct incorrect data or to delete your data. If there is no reason for further storage, we will erase your data, otherwise restricting processing. You may also request that we provide any personal information you have provided to us in a structured, common, and machine-readable format either to you or to any person or company of your choice. 

In addition, there is a right of appeal to the competent data protection supervisory authority (Art. 77 DSGVO i.V.m. § 19 BDSG). 

1. e) exercise your rights 

To exercise your rights, you may contact the person responsible or the Privacy Officer at the contact details provided or contact the Human Resources Department at join.the.team@getinshapeacademy.com. We will process your requests promptly and in accordance with legal requirements and inform you of the measures we have taken.

1. Do I have an obligation to provide my personal data? 

In order to enter into a business relationship, you must provide us with the personal data that is necessary to implement the contractual relationship or that we are required by law to collect. If you do not provide us with this data, then it is not possible for us to develop and implement the contractual relationship. 

We are also required to verify the identity of the applicant, e.g. in order to avoid unauthorized visa procedures if non-EU applicants are invited to application interviews.