We appreciate your interest in a position within Borealis Group!

In accordance with the General Data Protection Regulation ("GDPR"), we are providing you with the following information regarding the processing of your personal data during the recruitment process. If you have any questions or wish to exercise your data privacy rights, you can contact our Data Privacy Team at:

E-Mail: gdprquestions@borealisgroup.com

Postal address: Borealis GmbH, Trabrennstraße 6-8, 1020, Vienna, Austria

Who is the data controller?

The controller responsible for the processing of your personal data and for ensuring compliance with applicable data privacy laws, is the Borealis Group Entity to which you submit your application. A list of all Borealis Group Entities is available here.

What personal data, for which purpose, based on what legal ground and for how long do we process about you?

We process the following categories of personal data as part of the application process:

• Personal details (name, surname, nationality, gender)
• Contact details (address, e-mail, phone number)
• Professional experience (e.g., previous employment, experiences, job titles)
• Qualifications and educational background (e.g., degrees, professional certificates)
• Salary expectations
• Letter of Reference
• In some cases, we may process further personal information such as immigration status or work permits.
• Any additional information you provide voluntarily. (together "Application Data")

The purpose for processing your personal data is to effectively manage and evaluate your application. This includes communication with you, assessing your qualifications, and making decisions related to the recruitment process. The legal basis for processing your personal data is the necessity to carry out pre-contractual steps required to establish an employment contract with you, in accordance with Article 6(1)(b) of the GDPR.

Unless you explicitly consent to longer retention, your personal data will be stored only for the duration of the application process and thereafter in accordance with the applicable statutory retention periods relevant to the Borealis Legal Entity you applied with. These range from 7 months to up to 2 years from the date of the refusal of your application.

If you are hired, your personal data will be transferred into your employee file and maintained in accordance with our Employee Privacy Policy.

With whom do we share your personal data?

We may share your personal data with the following parties, strictly in accordance with applicable data protection laws: (i) data processors, such as IT service providers, who process data on our behalf under strict confidentiality and security obligations; (ii) external service providers who support us in identifying and selecting the most suitable candidates; and (iii) other Borealis Affiliates, but only when you have explicitly given your consent for such data sharing. In all cases, we ensure that appropriate contractual safeguards are in place to protect your personal data and that all recipients comply fully with the GDPR and other relevant data protection regulations.

You can find all the Borealis Group Entities here.

Do we send your personal data to third countries or international organizations?

During the application process, it may be necessary to transfer your personal data to a third country if you are applying for a position outside the European Union (EU) or the European Economic Area

In general, except for these cases, we do not transfer your personal data to third countries or international organizations. Should a transfer to a third country occur, we ensure that, unless the country has an adequacy decision from the European Commission, appropriate safeguards such as the Standard Contractual Clauses pursuant to Article 46(2)(c) of the GDPR are implemented to protect your data.

Is it necessary to provide all the mentioned personal data?

Yes. The provision of your Application Data is necessary for the recruitment process. Without this data, we are unable to assess your application or enter an employment contract with you.  

Do we conduct automated decision-making including profiling?

In general, we do not conduct any automated decision-making, including profiling according to Article 4 (4) of the GDPR. In the case where such activity is envisaged you will be informed accordingly and have the right to require a human intervention in the decision making, express your point of view and contest the decision.

Your rights

In case you have questions or wish to exercise your data subject rights, please send an e-mail to gdprquestions@borealisgroup.com.

Right of Access

You have the right to request information about your personal data we process and to receive a copy, unless this would adversely affect the rights and freedoms of others.

Right to rectification

You have the right to request correction of any personal data that is inaccurate or incomplete. To process your request, please provide proof that the data is incorrect or incomplete, along with supporting documentation to validate your request for rectification.

Right to erasure (‘right to be forgotten’)

You have the right to request an erasure if:

• The personal data are no longer necessary in relation to the application process;
• You withdraw your consent in case processing is based only on consent,
• Your personal data have been unlawfully processed,
• Erasure is required to comply with a legal obligation applicable to us.

Please note, we are not obliged to fulfill such a request if processing is necessary for:

• Exercising the right of freedom of expression and information;
• Compliance with a legal obligation to which we are subject;
• The performance of a task carried out in the public interest or in the exercise of official authority;
• Reasons of public interest in the area of public health;
• Archiving purposes in the public interest, scientific or historical research, or statistical purposes;
• The establishment, exercise, or defense of legal claims.

Restriction of Processing

You have the right to request the restriction of processing of your personal data in the following circumstances and for the corresponding periods: 

• You contest the accuracy of the personal data concerning you; in this case, restriction of processing may apply for a period enabling us to verify the accuracy of the relevant personal data; 
• The processing is unlawful, and you oppose the erasure of the personal data and instead request restriction of their use; 
• We no longer need the personal data for the purposes of processing, but you require them for the establishment, exercise, or defense of legal claims; 
• You have objected to processing, and restriction applies for the period necessary to verify whether our legitimate grounds override yours. 

Data Portability

You have the right to data portability, which means you can receive your personal data in a structured, commonly used, and machine-readable format.

• based on your consent or in connection with a contract,
• and processed by automated means.

You have the right to request that your personal data be transmitted directly to another controller by Borealis, where technically feasible. Please note, this right does not apply to processing that is necessary for the performance of a task carried out in the public interest or in the exercise of official authority.
 

Right to Object

You have the right to object to the processing of your personal data when such processing is necessary for the performance of a task carried out in the public interest Article 6(1)(e) GDPR or is based on our legitimate interests Article 6(1)(f) GDPR, including profiling related to these purposes. This also applies when your data is processed for marketing purposes, unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of our legal claims.

Right to withdraw your consent

You may withdraw your consent at any time with future effect, without affecting the lawfulness of processing carried out prior to withdrawal.  

Complaint

You have the right to lodge a complaint with your local Data Protection Authority if you believe that your rights to data protection are being infringed.

In any cases regarding data protection our data protection team is at your disposal under: gdprquestions@borealisgroup.com. We are happy to help you with any questions you may have!

Date of last change: 12 August 2025