Privacy Policy - Applicants
(As of 05/2026)
Here we provide information about how your personal data is processed during the application process and the data protection rights and entitlements to which you are entitled.
1. Name and address of the controller
The controller responsible for processing your personal data in accordance with data protection regulations is:
medaia GmbH
Am Eisernen Tor 5/1/12
8010 Graz
The contact details of the data protection officer are: datenschutz@skinscreener.at.
2. What data is processed and for what purposes?
We process only the data that you have provided to us directly, via a recruitment agency or via a job platform in connection with your application, in order to assess your suitability for the vacancy (or, where applicable, other open positions within our companies) and to carry out the application process.
Personal data includes, in particular, your personal details (e.g. name, address, date of birth, academic title/degree, telephone number, email address, cover letter, CV), details regarding the intended employment (e.g. job title, salary expectations) and details regarding qualifications and school and university degrees (e.g. education, professional experience, language skills). This relates exclusively to the data that you provide to us.
3. Legal basis for data processing under data protection law
Your personal data will be processed exclusively in accordance with the provisions of the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (DSG).
Processing is carried out exclusively for the purposes set out in this statement (adding your data to our applicant database, and keeping a record for future job vacancies). Furthermore, the processing serves to manage your application process, the possible inclusion of your data in your personnel file, and the completion of all necessary steps in connection with the commencement and subsequent management of an employment relationship.
Processing based on your consent (Art. 6(1)(a) GDPR)
If you have given us your consent to process certain personal data, this will be done exclusively for the purposes specified therein and to the extent agreed. This may include, for example, the disclosure of application documents to affiliated companies or the retention of your data beyond the current application process (e.g. for twelve months). You have the right to withdraw your consent at any time with effect for the future. However, the withdrawal does not affect the lawfulness of the processing carried out up to the time of withdrawal.
Processing for the purpose of taking steps prior to entering into a contract (Art. 6(1)(b) GDPR)
If your application is successful and an employment relationship is established, data processing will take place for the purpose of carrying out pre-contractual measures and fulfilling all obligations arising from the employment contract and the ongoing employment relationship.
Processing to safeguard legitimate interests (Art. 6(1)(f) GDPR)
In individual cases, personal data may also be processed beyond the original purpose if this is necessary to safeguard the legitimate interests of our company or third parties. Such processing will only take place provided that there are no overriding legitimate interests of the data subjects that prevent it.
4. Duration of storage
In the event of a rejection, applicants’ personal data will be deleted no later than six months after the selection process has been completed. If you have given us your express consent to retain your data for a longer period, your details will be added to our applicant pool. This data is used solely for the purpose of considering you for suitable future job vacancies. The data will be deleted no later than three years after inclusion in the applicant pool, unless further consent has been given.
If you receive an offer during the application process and are subsequently appointed, the data collected during the application process will be transferred to our HR information system and processed there within the framework of the employment relationship.
5. Recipients of the data
Within our company, access to your personal data is restricted solely to those departments and employees who are directly involved in the application and selection process. This includes, in particular, the Human Resources department and the relevant specialist department for the position to which you have applied. Access is strictly limited to those individuals who require the data to properly assess and process your application.
All employees with access rights are obliged to maintain the confidentiality and integrity of your personal data and to ensure that it is processed only to the extent permitted.
6. Your rights
You may request information about the personal data we process, as well as request the rectification, erasure or restriction of processing. You also have the right to object, the right to withdraw consent with effect for the future, and the right to data portability – in each case subject to the legal requirements.
Furthermore, you have the right to lodge a complaint with the Austrian Data Protection Authority or with another data protection supervisory authority within the EU, in particular at your place of residence or work.
If you believe that the processing of your personal data violates data protection regulations, we ask you to first contact our Data Protection Officer by email at datenschutz@skinscreener.at so that we can promptly review and resolve your concern.