Privacy Policy.

1. Subject matter of the data protection information

The data protection declaration comprises the information within the meaning of Art. 13 GDPR on data processing in connection with accessing our website and using the functions available on it.

2. Responsibility and contact details

Iventa Group Holding GmbH is responsible for processing personal data. Further information can be found in our legal notice. You can contact us regarding data protection matters by email at [datenschutz@iventa.eu].

1. Log files

When you visit our websites, a log file (server log file) is stored on our web server, which includes your IP address. The data within these server log files is required, among other things, to display the content of our website correctly and to ensure the secure operation of our IT infrastructure (Art. 6 (1) (f) GDPR). The log files are deleted regularly and automatically. If you would like further information on this, please feel free to contact us at any time using the contact details provided above.

2. Cookies

We use cookies on our websites. Details about the cookies used when you visit our website, how long they are stored and information on how you can delete the data collected here can be found in the data protection settings. We distinguish between necessary cookies, which are required, for example, to provide the basic functions of the website. The legal basis for these cookies is Art. 6 (1) f) GDPR. Cookies that enable us, among other things, to evaluate website visits and visits or to implement targeted marketing measures, on the other hand, require prior consent (the legal basis here is Art. 6 (1) a) GDPR).

3. Tools

Our website uses various services and applications (collectively referred to as ‘tools’) that are provided either by us or by third parties. These include, in particular, tools that use technologies to store or access information on the end device (e.g. cookies, web storage, JavaScript or pixels). Details about the tools, in particular the cookies used, can be found in the privacy settings. We distinguish between tools that are absolutely necessary, e.g. to provide the basic functions of the website or to provide an expressly requested service (the legal basis for the use of these tools is our legitimate interest pursuant to Art. 6 (1) (f) GDPR). On the other hand, we use tools that are not absolutely necessary and enable us, for example, to evaluate the number of visits to the website or to carry out targeted marketing measures. We require your prior consent to use these tools (Art. 6(1)(a) GDPR).

4. Management and configuration of tools and cookies

Our website uses a cookie consent management tool to manage and control any necessary consent for storing or loading certain tools. The associated data processing is necessary to provide you with the legally required consent management and to comply with our documentation obligations. The legal basis is Art. 6 (1) (c), (f) GDPR, in particular justified by our interest in complying with the legal requirements for consent management. You can revoke your consent for certain tools at any time. To do so, click on the data protection settings. There you can also change the selection of tools you wish to consent to using, as well as find additional information about cookies and their respective storage periods. Alternatively, you can revoke your consent for certain tools directly with the provider. If you have any questions about the provider or require further information, please feel free to contact us at any time using the contact details provided above.

5. Google Tag Manager

On this website, we use the Google Tag Manager service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This tool allows us to implement ‘website tags’ (i.e. keywords that are embedded in HTML elements) and manage them via an interface. By using Google Tag Manager, we can automatically track which button, link or personalised image you have actively clicked on and can then record which content on our website is of particular interest to you. These processing operations are carried out exclusively with your express consent in accordance with Art. 6 (1) (a) GDPR. Further information on Google Tag Manager and Google’s privacy policy can be found at https://www.google.com/intl/de/policies/privacy.

6. Google Analytics

On our websites, we use Google Universal Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (‘Google’). Google Universal Analytics uses JavaScripts and pixels, among other things, to read information on your device, as well as cookies to store information on your device. This serves to analyse your usage behaviour and improve our website. We will process the information obtained to evaluate your use of the website and to compile reports on website activity for website operators. We have made various settings to comply with data protection requirements (including IP anonymisation and automatic deletion of old logs). The legal basis for this data processing is your consent in accordance with Art. 6(1)(a) GDPR.

7. Google DoubleClick

This website contains components from DoubleClick by Google. DoubleClick is a brand of Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland), under which special online marketing solutions are marketed to advertising agencies and publishers. Each time you visit one of the individual pages of this website, which is operated by us and on which a DoubleClick component has been integrated, the internet browser on your IT system is prompted by the respective DoubleClick component to transmit data to Google for the purpose of online advertising and commission billing. As part of this technical process, Google obtains data that Google also uses to generate commission statements. Among other things, Google can track that you have clicked on certain links on our website. These processing operations are carried out exclusively with your express consent in accordance with Art. 6 (1) (a) GDPR. You can view the privacy policy of DoubleClick by Google at https://www.google.com/intl/de/policies/.

8. Google Ads

We have integrated Google Ads into our website. Google Ads is a service provided by Google Ireland Limited to display targeted advertising to users. Google Ads uses cookies and other browser technologies to evaluate user behaviour and recognise users. Google Ads collects information about visitor behaviour on various websites. This information is used to optimise the relevance of advertising. Furthermore, Google Ads delivers targeted advertising based on behavioural profiles and geographical location. Your IP address and other identifying features such as your user agent are transmitted to the provider. If you are registered with a Google Ireland Limited service, Google Ads can associate the visit with your account. Even if you are not registered with Google Ireland Limited or have not logged in, it is possible that the provider may find out and store your IP address and other identifying features. In this case, your data will be passed on to the operator of Google Ads, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The use of Google Ads is based on your consent in accordance with Art. 6 (1a) GDPR. This involves the transfer of personal data to third countries outside the European Economic Area, in particular the USA. Data is transferred to the USA in accordance with Art. 45 (1) GDPR on the basis of the adequacy decision of the European Commission. The US companies involved and/or their US subcontractors are certified under the EU-US Data Privacy Framework (EU-US DPF). In addition, we obtain your consent in accordance with Art. 49 (1) sentence 1 a) GDPR prior to such a transfer to a third country, which you give via the Consent Manager (or other forms, registrations, etc.). We would like to point out that third-country transfers may involve unknown risks (e.g. data processing by security authorities in the third country, the exact scope and consequences of which we do not know, over which we have no influence and of which you may not be aware). Further information can be found in the privacy policy for Google Ads: https://policies.google.com/privacy.

9. YouTube Video

We have integrated YouTube Video into our website. YouTube Video is a component of the video platform YouTube, LLC, where users can upload content, share it via the Internet, and receive detailed statistics. YouTube Video allows us to integrate content from the platform into our website. YouTube Video uses cookies and other browser technologies to evaluate user behavior, recognize users, and create user profiles. This information is used, among other things, to analyze the activity of the content listened to and to create reports. If a user is registered with YouTube, LLC, YouTube Video can assign the videos played to the profile. When you access this content, you connect to servers of YouTube, LLC, Google Ireland Limited, Gordon House, Barrow Street Dublin 4 Ireland, whereby your IP address and, if applicable, browser data such as your user agent are transmitted. The use of the service is based on your consent in accordance with Art. 6 (1) a) GDPR. We have no influence on the specific storage period of the processed data; this is determined by YouTube, LLC. Further information can be found in the privacy policy for YouTube Video: https://policies.google.com/privacy.

10. Google reCAPTCHA

We have integrated components from Google reCAPTCHA into our website. Google reCAPTCHA is a service provided by Google Ireland Limited that enables us to distinguish whether a contact request originates from a natural person or is automated by a program. When you access this content, you establish a connection to servers of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, whereby your IP address and, if applicable, browser data such as your user agent are transmitted. Furthermore, Google reCAPTCHA records the user’s dwell time and mouse movements in order to distinguish automated requests from human ones. This data is processed exclusively for the above-mentioned purposes and to maintain the security and functionality of Google reCAPTCHA. The use of Google reCAPTCHA is based on your consent in accordance with Art. 6 (1) a) GDPR. Data is transferred to the USA in accordance with Art. 45 (1) GDPR on the basis of the adequacy decision of the European Commission. The US companies involved and/or their US subcontractors are certified under the EU-US Data Privacy Framework (EU-US DPF). Further information can be found in the privacy policy for Google reCAPTCHA: https://policies.google.com/privacy?hl=en-US.

1. Applications

For information on the type and scope of data processing in connection with our application portal, please refer to the menu item..

2. Newsletter

When you subscribe to our email newsletter, we process your email address and the contact details you provide. The data will be used exclusively to send you information about our products and promotions at regular intervals. Data processing is based on your consent (Art. 6 (1) (a) GDPR). You can revoke this consent at any time by unsubscribing from the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation.

3. Registration for events and webinars

For information on the type and scope of data processing in connection with our event and information series, please refer to the ‘Insights’ section.

We operate accounts on online platforms and social networks in order to interact with potential or existing customers, exchange information with interested parties and users, or advertise offers and services. We operate our accounts in so-called joint (data protection) responsibility with the providers. We process data that you share or publish directly via online platforms and networks (e.g. via comment and chat functions) as the responsible party in order to interact with you or exchange information with you. As part of this interaction, we may also receive statistical data from the platform operators on the use of our ‘channels and fan pages’. This includes, for example, information about interactions, likes, comments or summarised information and statistics (e.g. IP address; origin of followers), which help us to learn about interactions with our site. The legal basis for data processing in our area of responsibility is Art. 6 (1) (f) GDPR.

However, providers also process data on their own responsibility. We have no influence on data that is processed by the provider on its own responsibility in accordance with its own terms of use and data protection conditions. We would like to point out that when you visit the aforementioned providers, further data (e.g. from your usage and ‘surfing behaviour’) may be collected and, if necessary, transmitted to the provider. Please also note that in the event of interaction via the aforementioned media, data may also be processed outside the European Union. Furthermore, user data is generally processed for market research and advertising purposes. For example, usage profiles can be created from the usage behaviour and resulting interests of users. The usage profiles can in turn be used, for example, to place advertisements within and outside the platforms that are presumed to correspond to the interests of the users. Further information on this can be found in the data protection information of the respective providers. If we have personal data from you in connection with the use of online platforms and networks, please address your concerns to us. If you wish to assert further rights against a specific provider, please contact the respective provider.

You can exercise your rights regarding your processed personal data at any time by contacting us using the contact details provided above. In particular, you have the following rights:

Art. 15 GDPR: Right to information about your data processed by us 

This includes, in particular, information about the purposes of processing, the category of data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, deletion, restriction of processing or objection, the existence of a right of appeal, the origin of your data if it was not collected by us, and the existence of automated decision-making, including profiling and, where applicable, meaningful information about its details.

Art. 16 GDPR: Right to rectification of inaccurate data or completion of your data stored by us.

The right to rectification means, in particular, that you have the right to request that we immediately rectify any inaccurate personal data concerning you and complete any incomplete personal data.

Art. 17 GDPR: Right to erasure of your data stored by us

The right to erasure means that you have the right to request that we erase personal data concerning you without delay, and we are obliged to erase personal data without delay. This may be the case, for example, if personal data is no longer necessary for the purposes for which it was collected or otherwise processed.

Art. 18 GDPR: Right to restriction of processing.

The right to restriction may become relevant if you dispute the accuracy of the personal data.

Art. 20 GDPR: Right to disclosure of your data (‘data portability’).

The right to disclosure means that you have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format, and you have the right to transmit this data to another controller without hindrance from us.

Art. 21 Right to object to processing, provided that the processing is based on Article 6(1)(e) or (f) GDPR.

As a data subject, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Article 6(1)(e) or (f) GDPR; This also applies to profiling based on these provisions. If personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling insofar as it is related to such direct marketing

Art. 77 GDPR: Right to lodge a complaint with a data protection supervisory authority.

Status: 29.08.2025

How is my data collected?

During my application to Iventa, whether online via the Iventa website, by email, or after being contacted directly by Iventa, I agree that the personal data I enter, as well as any application documents submitted via upload or email, will be electronically recorded and processed by Iventa in a specialized, secure database.

What data is processed and how?

Iventa processes my personal data that I submit to Iventa for my application or make available on publicly accessible social media platforms (e.g., XING or LinkedIn). This generally includes my name, address, contact details, information about my education and career, specializations or skills, marital status, citizenship, and the application documents I submit. I have been informed that Iventa generally does not request or store any sensitive data (this includes data about racial and ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health, or sex life). I am free to provide this data voluntarily in my application. Should this data be required in exceptional circumstances, I will be asked for my express consent to the processing of sensitive data in advance. I agree that references about me may be obtained from previous employers after consultation with me.

Purpose of data use / who has access

Inclusion in the database and further processing is carried out solely for the purpose of supporting me in my current application process and contacting me in the event of any future job advertisements if I am considered a potential candidate based on the data provided here. My application will be made available to the client in the course of a specific project/job advertisement for which I have actively applied or have been contacted by Iventa. I acknowledge that Iventa has obligated the client to comply with data protection regulations. I further agree that my personal data may be transmitted to and processed by affiliated companies of the Iventa Group exclusively for the aforementioned purpose.

The registration of my data with Iventa or the submission of my application documents does not create a contractual relationship between me and Iventa. Iventa’s liability to me is excluded to the extent permitted by law.

Iventa expressly points out that all Iventa employees are obliged to maintain data confidentiality.

I have been informed that Iventa will not forward my data to third parties for purposes other than those intended. The technical processing of data may be carried out by third parties on behalf of Iventa and in compliance with all data protection regulations.

My Rights – Data Storage / Duration

I can revoke this consent at any time. My data will be stored electronically by Iventa until revoked or, at the latest, for the legally prescribed retention period (as of May 2018 – 7 years). Iventa also reserves the right to delete parts or all of my data at any time without consultation and without giving reasons. Iventa is not obligated to consider my data as part of a search and selection process, and I have no legal right to have my data used by Iventa.

If I apply for an anonymous advertisement (i.e., the client is not named in the advertisement), I acknowledge that my documents will be forwarded to the client in specific projects after checking for confidentiality notices, and may also be processed electronically there. Iventa may not disclose the client’s name during the project to protect the client. My data will be protected when forwarded to the client by checking for confidentiality notices. My right to information is undisputed and can therefore be processed accordingly after the project is completed.

Upon my request, I will be provided with information about the personal data processed concerning me, and any inaccurate data will be corrected or deleted.

If I believe that the processing of my data or the result of my right to information violates data protection law, or that my data protection rights have been violated in any way, I can first contact the data protection contact person at Iventa, datenschutz@iventa.eu, or, in the event of further violations, the supervisory authority (in Austria, this is the Data Protection Authority).

If data is knowingly forwarded to third parties after I have given my consent, I am responsible for exercising my right to information, correction, or deletion accordingly.

How is my data protected?

Iventa takes all necessary measures to prevent access to my personal data and its misuse, loss, or unauthorized access. The data is stored by processors. Iventa obliges any processors to comply with data protection regulations.

As of: 29.08.2025