Privacy Policy for Applicants

Table of contents

1. General
2. What interest does IXOPAY have in your data and for which purpose does IXOPAY process them?
3. To whom is your data passed on?
4. How long will your data be stored?
5. What rights do you have?
6. Contacting us

1. General

1.1. This Privacy Policy provides transparent information about the processing of your personal data by IXOPAY when you apply for a job at IXOPAY GmbH, Vorgartenstraße 206c, 1020 Vienna, Austria via our Website or by other means (e.g., via email). We are responsible for adequately protecting your personal data and therefore complies with all legal regulations for the protection, legal handling and secrecy of personal data, as well as for data security.

1.2. In this context, the legal entities processing personal data are:

• IXOPAY GmbH, Vorgartenstraße 206c, 1020 Vienna, Austria (“IXOPAY AT”),
• IXOPAY, Inc., 333 E Main St #396, Lehi, Utah 84043, United State (“IXOPAY US”)

as joint controllers under Art 26 GDPR. In this statement, we collectively refer to the joint controllers IXOPAY AT and IXOPAY US as “IXOPAY”, “we”, “us” or “our”.

1.3. The essence of the Joint Controllers’ arrangement under Article 26 GDPR is available here.

2. What interest does IXOPAY have in your data and for which purpose does IXOPAY process them?

Your applicant data (typically including name, address, mother tongue, place and date of birth, nationality, marital status, driving licence, e-mail, telephone number, general education and schooling, work experience, language and IT skills as well as other voluntary documents such as CV, motivation letter, photo, certificates) provided as part of an unsolicited or job-related application will be processed by IXOPAY solely for recruitment purposes. This includes evaluating and processing your application, as well as comparing it with job vacancies in the context of steps taken prior to entering into a contract, in accordance with Article 6 (1) (b) GDPR.

IXOPAY AT is subject to legal obligations, e.g. obligations under the Austrian Equal Treatment Act (GlBG), as well as tax or company law requirements. To fulfill these obligations, we process your personal data in accordance with Article 6 (1) (c) GDPR, but only to the extent required by the relevant laws.

Additionally, under Article 6 (1) (f) GDPR, we process your data based on IXOPAY’s legitimate interests. These interests primarily involve the establishment, exercise, or defense of legal claims. We also share your applicant data between IXOPAY Group entities, IXOPAY AT and IXOPAY US, for internal administrative purposes.

If none of the above legal bases applies, we will seek your consent pursuant to Art 6 (1) (a) GDPR. This is particularly relevant if we wish to contact you about other open positions beyond your specific application or retain your data for longer periods in our records.

3. To whom is your data passed on?

3.1 We cooperate with external service providers (processors) and transmit your personal data to them as necessary for the provision of services. Processors include in particular the following categories of IT service providers:

• IT Service Providers: These include software and service providers for email and administrative activities, suppliers for special recruiting platforms, data centers, IT operations and hosting, and security service providers for physical and data security.
• Project Management and IT Support: IT service providers and support teams assist with project management, requirement definition, software introduction, adaptation and development, and maintenance of IT systems.

We have entered into data processing agreements with our processors in accordance with Article 28 GDPR. These agreements oblige processors to strictly comply with applicable data protection laws and to process your data only to the extent required.

3.2. Additionally, we transmit your personal data to the following external recipients (controllers) as required:

• External Third Parties: On the basis of our legitimate interests, we may share your data with auditors, tax consultants, insurance companies (in the event of an insurance claim), and legal representatives when necessary.
• Authorities and Public Bodies: We may disclose your data to tax authorities and other public bodies to the extent required by law.

4. How long will your data be stored?

Your personal data will be deleted once IXOPAY no longer requires it for the purposes described above and no further legal retention periods apply.

• If an employment relationship is established: We will retain your data for the duration of your employment and delete it after the termination of your engagement, following the expiry of legal retention obligations.
• If an employment relationship is not established: Your data will be retained for seven months based on legitimate interests (in accordance with § 15 GlBG) and will be subsequently deleted. Any further processing requires your separate prior consent.

5. What rights do you have?

According to Art 15 ff GDPR you have the following data subject rights:

• You have the right to access all your personal data that we process at any time. 
• Under certain conditions, you may request that your personal data be restricted, rectified or erased.
• In certain cases, you have the right to data portability, allowing you to receive your personal data disclosed to us in a structured, current, and machine-readable format.
• You have the right to object to the processing of your data for reasons arising from your particular situation. This includes objections to the processing of your data for direct marketing purposes, which are not relevant for the purposes of the processing at hand.
• Where processing is based on consent, you can withdraw your consent at any time without giving reasons with effect for the future.
• Also, you can lodge a complaint with the competent data protection authority.

6. Contacting us

If you have questions regarding this policy, or wish to exercise any of the data protection rights outlined above, feel free to contact IXOPAY at:

[email protected] or IXOPAY GmbH, Privacy Department, Vorgartenstrasse 206c, 1020 Vienna, Austria.

Our Data Protection Officer can be reached at [email protected] or IXOPAY, Inc., Attn: Legal Department, P.O. Box 521068, Tulsa, Oklahoma 74152-1068.

The EU Representative of IXOPAY, Inc. is: The Document Warehouse, Document Park, Castle Road, Sittingbourne, Kent, ME10 3JP, +44 (0)208 092 4555, [email protected].

To enable us to process your request regarding your above-mentioned rights and to ensure that personal data are not disclosed to unauthorized third parties, please direct the request with clear identification of your person and with a brief description of the extent to which your above-mentioned rights are exercised.