1. Who is responsible for data processing and whom can you contact?
3. Purposes for which data is processed and legal basis
Your personal data will be processed in accordance with the provisions of the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG) and other relevant data protection regulations. Our contractual documents, forms, declarations of consent and other information provided to you (e.g. on the website) contain further details and additions for processing purposes.
3.2 Performance of contractual obligations (Art. 6 para. 1 b GDPR)
We process your personal data for the purpose of handling the application process. Processing may also be carried out electronically. This is particularly the case if you submit your application documents to us electronically, for example by e-mail or via a web form located on our website.
3.4 Legitimate interests of the controller or a third party (Art. 6 para. 1 f GDPR)
We may also use your personal data to protect our legitimate interests of those of a third party subject to a weighing of interests. This may be done for the following purposes:
- for obtaining information and exchanging information with credit bureaus, if this goes beyond our economic risk
- for the limited storage of your data, if a deletion due to the special nature of the storage is not possible or only with disproportionate effort
- for the assertion of legal claims and defence in the case of legal disputes that are not directly attributable to the contractual relationship
- to ensure and exercise our domestic law through appropriate measures (for example video surveillance)
5. Who receives your data?
We share your personal data within our company with those departments that require your data to comply with contractual and legal obligations or to pursue our legitimate interests.
In addition, the following entities/bodies may receive your data:
- Contract processors commissioned by us (Art. 28 GDPR), service providers for supporting activities and other responsible persons within the meaning of the GDPR, especially in the areas of e.g. IT services, logistics and printing services, external computer centres, support/maintenance of data processing/IT applications, archiving, document processing, compliance services, data validation and plausibility checks, data destruction, customer administration, letter shops, marketing, research, billing, telephony, website management, auditing services, credit institutions.
- Public authorities and institutions in the event of a legal or official obligation under which we are obliged to disclose, report or share data or the disclosure of data is in the public interest
- Bodies and institutions on the basis of our legitimate interest or the legitimate interest of a third party (e.g. shared with public authorities, credit agencies, debt collection, lawyers, courts, experts, affiliated companies and executive bodies and supervisory bodies)
- other bodies for which you have given us your consent to the transfer of data
7. How long do we store your data?
If the controller concludes a contract of employment with an applicant, the data transmitted will be stored for the purposes of the employment relationship in accordance with the law. If no employment contract is concluded with the candidate by the controller, the application documents shall be deleted six months after notification of the rejection, unless deletion precludes other legitimate interests of the controller. In this context, other legitimate interests may include, for example, burden of proof requirements in proceedings under the General Act on Equal Treatment (AGG).
8. To what extent is automated decision-making used in individual cases (including profiling)?
We do not use purely automated decision-making procedures as referred to in Article 22 GDPR. Should we use these procedures in individual cases, we will inform you separately provided we are required to do so by law.
9. Your data protection rights
You have the right to request information pursuant to Art. 15 GDPR, the right to rectification pursuant to Art. 16 GDPR, the right to erasure pursuant to Art. 17 GDPR, the right to limitation of processing pursuant to Art. 18 GDRP and the right to data portability pursuant to Art. 20 GDPR.
In addition, you have right to lodge a complaint with the competent data protection authority pursuant to Art. 77 GDPR. As a fundamental principle, you have the right to object to the processing of your personal data in accordance with Article 21 GDPR. However, this right of objection only applies in the event of very special circumstances related to your personal situation. It may also be the case that our rights override your right of objection in certain circumstances. Please contact our data protection officer if you wish to assert any of these rights: datenschutz(at)hilt-evolution.com.
10. Scope of your duties to provide us your data
You are required to provide us the information necessary for the employment application process. Without this information we will usually not be able to conclude an employment contract with you. If we request further data from you, you will be separately informed of the voluntary nature of the information.
11. Your right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The supervisory authority responsible for us is:
[The State Commissioner for Data Protection and Freedom of Information]
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit