Information on the processing of your applicant data
in accordance with the General Data Protection Regulation (GDPR)
With the information below, we are providing you with an overview of the processing of your personal data in the application procedure and your rights arising from data protection law.
1. Who is responsible for the data processing, and whom can you contact?
Controller for the processing of your personal data is
deister electronic GmbH
2. What personal data do we gather?
For carrying out the application procedure, we in particular process the following personal data concerning you:
- Your master data: last and first name, name affixes, date of birth, nationality
- Your contact data: private address, telephone and mobile number, email address
- Your skills: Data on your abilities and knowledge in regard to the requirement profile of the position advertised
- Any work/residence permit
- Health data: to the extent it is necessary to provide evidence of medical suitability for the position advertised
- Previous convictions: to the extent it is necessary to provide evidence of personal suitability for the position advertised
- Further data: A licence to hold the professional designation, assessments in job references, professional experience, expected salary
Your personal data will usually be gathered directly from you in the context of the employment process, in particular from your application documents and the job interview, as well as by way of the staff questionnaire. In the event of a job placement, we also receive corresponding data from third parties.
3. For what purposes, and on what legal basis, do we process your personal data?
We process your personal data, paying attention to the provisions of the EU General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG), as well as any other applicable laws (e.g. The Works Council Constitution Act (BetrVG), Social Security Code (SGB) IX).
The data is processed for the purpose of deciding on the establishment of an employment relationship on the legal basis of Article 6(1)(b) GDPR in conjunction with Sec. 26(1) Federal Data Protection Act (BDSG). In addition, any data on criminal convictions may be processed based on Article 10 GDPR in conjunction with Sec. 26(1) Federal Data Protection Act, to the extent it is necessary to provide evidence of your personal suitability to perform the duties of the job advertised. Your health data may, moreover, be processed based on Article 9(2)(h) GDPR in conjunction with Sec. 22(1) Federal Data Protection Act, in order to assess your fitness for work.
Should we wish to process your personal data for a purpose not specified above, we will let you know about it in advance.
4. To whom may my personal data be transmitted?
Within our company, only the persons and offices who are involved in the decision about employment (such as Personnel Department staff, the management, the specialist department) will receive your personal data. In addition, it may be necessary for the IT service provider who works for us in the field of contract data processing and is subject to a confidentiality obligation to access the data. Data will not be transferred to third parties.
5. For how long will my data be stored?
In the event of being turned down, your application documents will be deleted no later than six months after the application procedure has been concluded. They will only be stored for longer if you have granted us your consent for this purpose (e.g. for incorporation into a pool of applicants).
6. What rights do you have under the GDPR as a data subject affected by the processing of your personal data?
- You are entitled, under Article 15 GDPR in conjunction with Sec. 34 Federal Data Protection Act, to request information from us about the personal data concerning you processed by us. In such a case, we will provide you with a copy of the personal data, possibly also in electronic format. You also have the right to be given the information specified in detail in Article 15(1) GDPR. The above-mentioned rights do not, however, exist to an unlimited extent. The restrictions of these rights can in particular be inferred from Article 15(4) GDPR and Sec. 34 Federal Data Protection Act.
- Under Article 16 GDPR, you are entitled to have any incorrect data concerning you rectified, and any incomplete data completed.
- Under Article 17 GDPR in conjunction with Sec. 35 Federal Data Protection Act, you are entitled to request the immediate erasure of the personal data concerning you. This right to erasure does not, however, exist without restriction. Erasure can in particular not be requested if it is necessary for us to process the personal data concerning you further in order to carry out the contract in place between us, fulfil a legal obligation or assert, exercise or defend legal claims. The prerequisites and restrictions of the right to erasure can be seen in detail from Article 17 GDPR and Sec. 35 Federal Data Protection Act.
- You are entitled, pursuant to Article 18 GDPR, to request the processing of the personal data concerning you to be restricted if one of the prerequisites of Article 18(1) GDPR exists. In such a case, we may continue to store said data, however only process it subject to strict requirements. The prerequisites and restrictions of the right to erasure can be seen in detail from Article 18 GDPR.
- You may, pursuant to Article 20 GDPR, request to receive the personal data provided by you, that we are processing based on the contract in place between us or your consent using an automated process, in a structured, common and machine-readable format. We are not allowed to obstruct the transmission of such data by you to another controller. You may, moreover, request us to transmit it directly to another controller, to the extent that it is technically feasible. The prerequisites for and restrictions of the aforementioned rights can be inferred in detail from Article 20 GDPR.
Pursuant to Article 12(5) GDPR, we provide the above notifications and measures requested by you free of charge.
As a data subject, pursuant to Article 77 GDPR in conjunction with Sec. 19 Federal Data Protection Act, notwithstanding any other legal remedy under administrative law or of a judicial nature, you have the right to file an appeal with a data protection supervisory authority if you are of the opinion that the processing of your personal data is in violation of the GDPR.
You may revoke any consent to the processing of your personal data granted to us at any time. Please note that such a revocation only has effect for the future, and does not affect the legitimacy of the processing that has been carried out based on your consent up to the time of the revocation.
7. Are you obliged to transmit to us your personal data?
In order to be able to take your application into consideration, we need from you the personal data that is necessary for the decision on the establishment of the employment relationship. It is not possible to conduct the application procedure without said data.