DSB (Austria) - 2024-0.835.856

Small amendments to short summary }}}} The DPA held that an organisation could retain and process a job applicant’s personal data even after rejection, as doing so served its legitimate interest in defending itself against possible legal claims raised by the applicant.The DPA held that an organisation could retain a job applicant’s personal data after their rejection, as doing so served its legitimate interest in defending itself against possible legal claims raised by the applicant. In particular, the DPA considered that the applicant already announced legal action against the controller. == English Summary ==== English Summary ==