Information on Data Processing of Applicant Data in Accordance with Articles 13 and 14 of the General Data Protection Regulation (GDPR)

We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with legal requirements. In this privacy notice, we inform you about the processing of your personal data. The use of our website is generally possible without providing personal data. If personal data (e.g., name, address, or email address) is collected on our pages, it is always done to enable the use of the website or on a voluntary basis.

Who is responsible for data processing, and whom can you contact?

Responsible for data processing: Raiffeisen Bank International AG (hereinafter “Bank” or “RBI”) Am Stadtpark 9, 1030 Vienna Phone: +43 1 71707-0 Email: datenschutz@rbinternational.com

Contact details of the Data Protection Officer:

Mag. Daniela Bollmann, LL.M Phone: +43 1 71707-8603 Email: datenschutzbeauftragter@rbinternational.com

What data is processed, and from what sources do these data originate?

We process the personal data that you provide to us during the application process (e.g., personal details, education, and previous career), as well as such data that we obtain with your consent from others (e.g., references).

For what purposes and on what legal basis are data processed?

We process your personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the Data Protection Act (DSG).

For the fulfillment of contractual obligations (Art 6(1)(b) GDPR): The processing of your personal data is carried out for the handling and review of your application. This also includes communication related to your application.

For compliance with legal obligations (Art 6(1)© GDPR): Processing of personal data may be necessary to fulfill various legal obligations (e.g., Equal Treatment Principle). Additionally, processing of personal data may be carried out to fulfill regulatory requirements (e.g., checking the qualifications and reliability of employees, conducting compliance checks).

Based on your consent (Art 6(1)(a) GDPR): If you have given us consent to process your personal data, such processing is carried out solely for the following purpose and the agreed extent: 1. Increasing efficiency in the application process 2. Better matching of applicants with open positions.

Your data may be shared with the following companies:

• Raiffeisen Bank International AG
• Raiffeisen Bausparkasse GmbH
• Raiffeisen Factor Bank AG
• Raiffeisen Group IT GmbH
• Raiffeisen Kapitalanlage-GmbH
• Raiffeisen-Leasing Gesellschaft m.b.H
• ZHS Office- & Facilitymanagement GmbH
• Notartreuhandbank AG
• Elevator Ventures Beteiligungs GmbH

Consent to this tool is voluntary and not mandatory. If you do not give consent, it will not affect your evaluation or application process. In case of non-consent, you can send your application by email to recruiting@rbinternational.com. A consent given can be revoked at any time with effect for the future. To do so, please send an email to recruiting@rbinternational.com.

For the protection of legitimate interests (Art 6(1)(f) GDPR): As necessary, data processing may occur within the scope of a legitimate interest, which goes beyond the actual fulfillment of the contract (especially measures to protect employees, customers, and the property of the credit institution; conducting judicial proceedings).

Who receives my data? What data is processed, and from what sources do these data originate?

We process the personal data that you provide to us during the application process (e.g., personal details, education, and previous career), as well as such data that we obtain with your consent from others (e.g., references).

Within the credit institution, those departments or employees that require your data to fulfill contractual obligations and to protect legitimate interests receive your data. Additionally, commissioned processors (especially IT service providers) and contractual partners (especially SAP) receive data necessary for fulfilling their respective services. All processors are contractually obligated to treat your data confidentially and to process it only within the scope of service provision.

In case of a legal or regulatory obligation or another legal basis, public authorities or other institutions may receive your personal data, including the Financial Market Authority, Health Insurance, Tax Office, Employee Pension Fund, Pension Fund, Employment Service, Municipal Authorities and District Administrative Authorities in administrative police agendas, statutory interest representatives, works council, education providers, legal representatives, courts, banks paying out reference balances, insurance companies within the scope of group or individual insurance, and the Federal Office for Social Affairs and Disabled Persons as per §16 BEinstG.

Further data recipients may be those entities for which you have granted us authorization (consent for data processing).

How long are my data stored?

The storage of your personal data is carried out according to legal retention and documentation obligations, which derive from the Employees Act (AngG), General Civil Code (ABGB), Equal Treatment Act (GlBG), Maternity Protection Act (MSchG), etc. Generally, we process your personal data for a duration of 7 months following the end of the application process. If an employment relationship is established, we continue processing your personal data from the application for the purposes and requirements of the employment relationship in accordance with separate information.

CV Parsing Methodology & Provider

With your consent, your application data is matched with open positions using CV parsing and, if applicable, other suitable positions according to your qualifications, to optimize the application process for you (e.g., through intelligent online scheduling of interview appointments). A tool based on a fit-scoring procedure is used for this purpose. If you would like more information, please write an email to recruiting@rbinternational.com. It is ensured that human decision-making remains central in our process.

Am I obliged to provide data?

Within your application, you must provide the personal data necessary for reviewing your application and concluding the employment contract, and which we are legally obligated to collect.

What data protection rights do I have?

You have the right to access, rectify, delete, or restrict the processing of your stored data, the right to object to the processing, and the right to data portability under the conditions specified in data protection law. If you wish to exercise your rights, please contact datenschutz@rbinternational.com or the data protection officer. If the handling of your rights is not satisfactory in accordance with the GDPR, you can also contact us or lodge a complaint with the Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna, Austria, www.dsb.gv.at.

This privacy notice was last updated on 1.07.2024.