Privacy Information for Job Applicants
In the following, we provide you—as an applicant or someone interested in a position we have advertised—with information about the processing of your personal data and the rights you have under the GDPR with respect to us. We process your personal data in compliance with the provisions of the European General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG), and all other relevant laws governing the processing of personal data.
I. Data Controller
The controller within the meaning of Article 4(7) of the GDPR is
Strojmetal Singen GmbH, Managing Director Ralf Sänger. Adress: Alusingen-Platz 1, 78224 Singen, Phone: + 49 773196 953-0
E-Mail ralf.saenger(at)strojmetal.com
II. Data Protection Officer
You can contact our Data Protection Officer addressing the data controller- c/o Data Protection Officer or at dsb(at)reichert-reichert.de
III. Processing of Personal Data
Affected parties: Applicants
Data categories:
Master data, contact information, address information, all data related to the application (e.g., resume, certificates, qualifications), special categories of data as defined in Article 9(1) of the GDPR, data voluntarily provided in correspondence with you during the selection process, and data regarding eligibility for the German labor market.
Purpose of processing:
Selecting a candidate who meets the job requirements, and retaining promising applications
Legal Basis:
Article 6(1) lit (b) GDPR for pre-contractual measures as part of the application process; Article 6(1)lit (a)GDPR for consent to retain promising applications beyond the application process, and Article 9(2) GDPR if the processing of special categories of data is necessary as part of the application process.
Categories of Recipients:
Within our company, access to applicant data is granted only to those individuals who are authorized to process such data for the purpose of conducting the application process (e.g., the Human Resources department) or selecting an applicant (e.g., the CEO, department heads).
We may disclose the data to third parties provided that the applicant has expressly consented to such disclosure in advance, there is a legal obligation to disclose the data, or we have a legitimate interest in doing so.
In some cases, we rely on the assistance of third parties and/or data processors to process personal data. As part of these support activities, processing may be carried out by third parties or data processors. If these are service providers, they have been carefully selected and commissioned by us. In particular, data processors are contractually bound by our instructions in accordance with Article 28 of the GDPR and are regularly monitored. A data processing agreement has been concluded with all of them to ensure the protection of your personal data.
Data Sources:
We process the personal data we have received from our applicants as part of the application process. To the extent necessary to assess an applicant’s suitability for the position to be filled, we also process personal data that we have lawfully obtained from publicly available sources (e.g., the press, media, professional social networks, the Internet) and are permitted to process.
Transfers to third countries:
Personal data will only be transferred to countries outside the EU or the EEA if this is necessary for the application process, required by law, the applicant has given their consent, or as part of data processing on behalf of a client. In such cases, a transfer is only permissible if the European Commission has determined that the third country in question provides an adequate level of data protection, or if appropriate safeguards are in place and the data subject has enforceable rights and effective legal remedies available.
Retention Period:
Unless you are hired, the data processed as part of the selection process will be deleted no later than 6 months after the conclusion of the application process; otherwise, it will be deleted once the legal obligation no longer applies and any resulting claim periods have expired. If we have received your consent to retain your application documents, we will delete your data upon revocation of your consent or, at the latest, 12 months after you provided your consent.
IV. Provision of Personal Data and Profiling
The provision of the personal data listed above is generally not required by law or contract. However, if personal data is necessary as part of the application process for the selection of candidates and for the decision regarding the establishment of an employment relationship, the applicant must provide such data. Without this data, we will generally not be able to conduct the application process or conclude an employment contract. In all other cases, applicants are not obligated to provide us with personal data. There are no negative consequences associated with the non-provision of voluntary data. However, in individual cases, failure to provide such data may, for example, complicate or delay communication.
The data collected is not used for automated decision-making, including profiling.
V. Your Rights as a Data Subject
You have the right to request from us information about the personal data we have stored about you, as well as the right to have inaccurate data corrected or deleted, provided that one of the grounds specified in Article 17 of the GDPR applies, e.g., if the data is no longer necessary for the purposes for which it was collected. You also have the right to restrict processing if one of the conditions listed in Article 18 of the GDPR applies, and in the cases specified in Article 20 of the GDPR, the right to data portability. Furthermore, pursuant to Article 22 of the GDPR, you have the right not to be subject to a decision based solely on automated processing—including profiling—that produces legal effects concerning you or similarly significantly affects you.
Pursuant to Article 77 of the GDPR, you have the right to file a complaint with a supervisory authority if you believe that the processing of your personal data violates data protection regulations. In particular, you may exercise this right to lodge a complaint with a supervisory authority in the Member State of your habitual residence, your place of work, or the place where the alleged infringement occurred.
A list of contacts for state data protection authorities can be found on the website of the Federal Commissioner for Data Protection and Freedom of Information at the link www.bfdi.bund.de/ DE/Service/Anschriften/Laender/Laender-node.html; a list of all data protection authorities in the European Union and the European Economic Area can be found at the link edpb.europa.eu/about-edpb/about-edpb/members_de.
Your Right to Withdraw Consent
You have the right to withdraw your consent given pursuant to Article 6(1)(a) of the GDPR at any time, without this affecting the lawfulness of the processing carried out prior to the withdrawal. If consent is withdrawn, we will cease the relevant data processing and delete the data processed for this purpose.