Privacy Policy regarding Candidate Management

In this privacy policy, we provide you with information about the processing of personal data in connection with the use of the careers page, the application portal and the application process. This information is not contractually binding but is provided for your information only. All references to persons and job titles used in this privacy policy apply to all genders.

DATA PROTECTION RESPONSIBILITIES

The data controller responsible for the processing of personal data in connection with a specific job application is SES Spar European Shopping Centers GmbH (hereinafter referred to as ‘we’, ‘us’, ‘SES’ or ‘the data controller’).

DESCRIPTION OF DATA PROCESSING ACTIVITIES

When using the website https://jobs.ses-european.com/SesCareers, personal data may be processed in various ways. We provide further details below:

1.1 Candidate Management

1.1.1 Subject matter and purpose

The personal data you enter, upload or submit via the website https://jobs.ses-european.com/SesCareers will be processed for the purpose of corresponding with you and processing your application. The relevant group companies of the SPAR Austria Group are listed below. Furthermore, subject to your consent, your personal data will be processed for the purpose specified in the relevant consent form.
If you have given your consent by ticking the checkbox in the consent form, this privacy policy also applies mutatis mutandis to the following group companies:
  • SPAR Österreichische Warenhandels-AG
  • INTERSPAR Gesellschaft m.b.H.
  • Maximarkt Handels-Gesellschaft m.b.H.
  • SPAR Business Services GmbH
  • SES Spar European Shopping Centers GmbH including subsidiaries:
    • SES Center Management GmbH
    • Forum Salzburg Verwaltungsgesellschaft
    • VARENA Shopping Center GmbH
    • SILLPARK Shopping Center GmbH
    • max center Wels GmbH
    • EUROPARK Shopping Center GmbH
    • Liga Handelsgesellschaft m.b.H. & Co KG
    • Shopping Lienz GmbH & Co OG
    • ZIMBAPARK Shopping Center GmbH
    • Weberzeile Ried GmbH & Co KG
    • Seestadt Bregenz Besitz- und Verwaltungsgesellschaft m.b.H.
    • Q19 Shopping Center GmbH
    • PRISES Quartierentwicklung GmbH
    • Mariandl GmbH & Co KG
    • huma eleven Shopping Center GmbH
    • FISCHAPARK Shopping Center GmbH
    • ATRIO Shopping Center GmbH
    • Aspern Seestadt Einkaufsstraßen GmbH
    • MURPARK Shopping Center GmbH
    • Ried Shopping Center GmbH
    • VD SPAR Versicherungsdienst Gesellschaft m.b.H.
    • SIMPEX Import Export GmbH
    • Schloss Fels GmbH

1.1.2 Legal basis

The processing of your data is necessary for the purpose of processing your application in accordance with Article 6(1)(b) of the EU General Data Protection Regulation – Regulation 2016/679 (hereinafter ‘GDPR’; pre-contractual relationship). In addition, your data may be processed on the basis of the consent you have given, in accordance with Article 6(1)(a) of the GDPR, for the purposes specified in the relevant consent form.

1.1.3 Retention period/erasure

Personal data will only be retained for as long as is necessary to fulfil the purposes set out above. For the purposes of processing your application, SPAR will retain your personal data for a maximum of 7 months after the end of your application process (rejection of your application), unless further retention is necessary in a specific case. Group companies will also retain your data for this period, provided you have given your consent to the transfer of the data to them.

If you have given your consent to the retention of your data, your data will be retained by the SPAR Austria Group company specified in the job advertisement for a total period of 12 months, so that we can contact you should there be any further job vacancies that may be of interest to you.

1.1.4 Recipients

Provided you give us your consent by ticking the relevant checkbox, we will pass on your data to the group companies listed in section 1.1.1 so that they too can process your data for the agreed purposes.

For the technical and administrative handling of the processing of your data, the data controller engages SPAR Business Services GmbH as a data processor.

1.1.5 Withdrawal of consent

You may withdraw the consent you have given for the processing of your personal data at any time by sending an e-mail to [email protected] or by post to SES Spar European Shopping Centers GmbH, for the attention of People & Culture, Europastraße 3, 5015 Salzburg. However, this does not affect the lawfulness of any processing or transfer carried out on the basis of your consent up until the time of withdrawal. If you withdraw your consent, your data will no longer be transferred to the group companies. In this case, your data will only be stored for up to 7 months after the end of your application process (rejection of your application); beyond that, your data will not be retained by the group companies.

1.2. Cookies

1.2.2 Definition of cookies

Cookies sind kleine Textdateien, die beim Erstbesuch auf unseren Webseiten von Ihrem Browser heruntergeladen und dort gesetzt werden. Bei erneutem Aufruf dieser Webseite mit demselben Endgerät bzw. Browser wird der Cookie und die darin gespeicherten Informationen entweder an die jeweilige Webseite zurückgesandt, die sie erzeugt hat (First Party Cookie) oder an einen Drittanbieter gesandt, zu der es gehört (Third Party Cookie). Dadurch wird erkannt, dass die Webseite mit dem jeweiligen Browser aufgerufen wurde und ändert mit diesem Status, die Darstellung von Inhalten. Dadurch erinnern sich Cookies z.B. an Ihre Vorlieben, teilen mit, wie Sie eine Seite nutzen, und passen die angezeigten Angebote zum Teil individuell an. Folgende Cookies sind auf der jobs.ses-european.com/SesCareers vorhanden:

1.2.3 Technically necessary cookies

1.2.3.1 Subject matter and purpose

Strictly necessary cookies, also known as functional cookies, ensure the website functions correctly. The following technically necessary cookies are processed:

  • „portalLanguage“ stores the language setting selected by the user for the duration of the session
  • „ScustomPortal“ stores the language setting selected by the user for the duration of the session
  • „tokenField“ is used exclusively for logged-in users to protect against so-called cross-site request forgery (CSRF) attacks and is stored for one hour.
  • „userCookieConsent“ stores the cookie settings or consents given by the user so that these can be taken into account when further pages are viewed, and is stored for 24 hours.

1.2.3.2 Legal basis

The data processing activities resulting from the use of cookies are based on our legitimate interests in providing a fully functional website and the services you have requested (Article 6(1)(f) of the GDPR, Section 165(3) of the Telecommunications Act).

1.2.3.3 Storage/deletion

Functional cookies are stored on your computer for up to a maximum of 24 hours and can be disabled via your browser settings. However, users are advised that, in this case, it may not be possible to make full use of all the functions of these web pages.

 

1.3 Applicant Portal

1.3.1 Subject matter and purpose

The data you enter during registration, as well as any personal data uploaded whilst using the applicant portal, is processed for the purposes of providing and technically operating the platform, registering and managing user accounts, authenticating users, and establishing the technical and organisational framework of the applicant portal.

For this purpose, the following personal data is processed:

  • Master data (name, address, nationality, date of birth)
  • Contact details (telephone number, e-mail)
  • Evidence of qualifications, such as a work permit
  • Curriculum vitae (CV)
  • Apprenticeship application letter
  • Optional information (preferred place of work, working hours, skills)
  • Optional documents (such as certificates, school reports, photograph, letter of motivation)
  • Login details (e-mail address and password)

1.3.2 Legal basis

Your data is processed on the basis of Article 6(1)(b) of the GDPR in order to fulfil the terms of use of the applicant portal for registered users.

1.3.3 Retention period/deletion

Your data will generally be deleted upon deactivation of your applicant account, provided that no statutory retention obligations prevent such deletion and we do not require the data in individual cases to defend against or enforce legal claims.

Personal data will only be retained for as long as is necessary to achieve the purposes set out above. For the purposes of processing your application, SPAR will retain your personal data for a maximum of 7 months after the end of your application process (rejection of your application), provided that further retention is not required in the specific case. Group companies will also retain your data for this period, provided that you have given your consent to the transfer of the data to them.

If you have given your consent to the retention of your data, your data will be retained by the SPAR Austria Group company specified in the job advertisement for a total period of 12 months, so that we can contact you should there be any further job vacancies that may be of interest to you.

1.4. Visiting the website

1.4.1 Purpose

Each time you use our website, we collect the data that your browser transmits to our server. This includes the following:

  • Country (derived from the IP address)
  • Browser type
  • Operating system
  • HTTP referrer
  • Pages visited
  • Page types (e.g. viewJob)
  • Associated references (e.g. job ID)

The collection and processing of this data serves to display the website to the user.

1.4.2 Legal basis

The legal basis for this data processing is our legitimate interest (Article 6(1)(f) of the GDPR). The data processing is technically necessary to display the website to you and to ensure its stability and security.

1.4.3 Storage/deletion

Data is stored for 30 days and subsequently anonymised.

RECIPIENTS

The data controller engages SPAR Business Services GmbH as a data processor for the technical and administrative handling of the processing of your data.
The data processors (recipients) are contractually bound to use personal data exclusively in accordance with specific instructions, such as for the operation of the applicant platform. Data processors are prohibited from using personal data for their own purposes and must delete such data upon instruction from the data controller.

LEGAL NOTICE

All rights exercised by data subjects in connection with all processing activities covered by this agreement, namely the right of access (Article 15 of the GDPR), the right to rectification (Article 16 of the GDPR), the right to erasure (Article 17 of the GDPR), the right to restriction of processing (Article 18 of the GDPR), the right to object to processing (Article 21 of the GDPR) and the right to data portability (Article 20 of the GDPR), the right not to be subject to a decision based solely on automated processing – including profiling (Article 22 of the GDPR), as well as the duty to provide information (Article 19 of the GDPR).

To exercise your rights as set out above, please contact us in writing by e-mail at [email protected] or by post to SES Spar European Shopping Centers GmbH, for the attention of People & Culture, Europastraße 3, 5015 Salzburg.

If you believe that the processing of your personal data contravenes the GDPR, please do not hesitate to raise your concerns with us (see below for contact details). In such cases, you also have the right to lodge a complaint with a supervisory authority.
By post:
SES Spar European Shopping Centers GmbH
Europastraße 3
5015 Salzburg

By e-mail: [email protected]

Last updated in August 2026