mySugr Privacy Notice for Processing of Applicant Data

Version 2.0, dated 02.09.2021

In the context of this Privacy Notice “we” or “mySugr” means mySugr GmbH, Trattnerhof 1/5 OG, 1010 Vienna, Austria. mySugr is the data controller for the processing of your personal data.

mySugr uses an internet-based application tracking and recruiting system. We use the system globally to post open positions and to manage your application and the recruiting process. We are committed to protecting your personal data and to observing applicable data protection laws and regulations. Legitimate interest of the Data Controller in accordance with Art. 6 (1) 1 f GDPR is the legal basis for the processing of your personal data.

This Privacy Notice explains which types of your personal data are processed in the application and recruiting process. For the purposes of this Privacy Notice, "Personal Data” has the meaning as set forth in the GDPR.

1. We collect the following Personal Data about you:

• We will collect your name, address, contact details, work experiences and professional skills;
• This includes any information you provide to us in your resume or CV as well as your cover letter and any other documents you provide during the recruitment process.

2. We use your Personal Data for the following purposes:

Application & Recruiting:

We use your personal data to process your application for one or more open positions at mySugr. The data provided by you will be used in the selection process and to communicate with you. It will also be used to offer you other positions in the time your data is stored.

3. Data Storage:

Your personal data is being stored for six months after the end of your application process, unless you request the deletion of your personal data before the end of this retention period. Please note that even if you request the deletion of your personal data before the end of the retention period, certain data needs to be retained due to legal requirements.

4. Data Processors and Data Transfer:

For the collection, the processing and the storage of your personal data mySugr makes use of the following data processor:

• Greenhouse Software Inc., 18 West 18th Street, 11th Floor New York, NY 10011, USA

Your personal data is being processed within the European Union and in the United States. mySugr has made sure that appropriate safeguards are in place when your personal data is being transferred to third parties outside of the European Union.

5. Your Rights:

• You have the right to be provided with information on your Personal Data processed by us;
• You have the right to access and receive a copy of your Personal Data processed by us;
• You have the right to request the correction or rectification of your Personal Data;

• You have the right to request the deletion of your Personal Data which is processed by us. You can also exercise this right if you wish to object to the processing of your Personal Data.

  Please be advised that due to legal requirements we will have to retain your Personal Data for a certain period of time even after your request for deletion has been fulfilled. If you request the deletion of your personal data, mySugr might not be able to process your application any further;

• You have the right to request the restriction of processing of your Personal Data;
• Your Personal Data is not being processed solely by nor are any decisions made based solely on automated means. Therefore the right to be not subject to a decision based solely on automated means does not apply;
• You are entitled to lodge a complaint with the relevant supervisory authority at any time. The relevant authority for mySugr is the Österreichische Datenschutzbehörde, Barichgasse 40-42, 1030 Vienna, Austria - dsb@dsb.gv.at. However, you can lodge a complaint to any data protection authority within the European Union.

If you wish to exercise your rights, or if you have any questions regarding the processing of your Personal Data, please don’t hesitate to contact the mySugr Data Protection Officer at privacy@mysugr.com.