Information obligations for applicants pursuant to Articles 13 and 14 GDPR

As of: 05/2018

1. Who is responsible for data processing and who can I contact?

The responsible body for all applications to a company of the Bodo Wascher Group or its subsidiaries is:

Bodo Wascher Gruppe GmbH
Hochstr. 84
23554 Lübeck
Email address: info@wascher-gruppe.de

The subsidiaries of the Bodo Wascher Group can be found here: www.wascher-gruppe.de

2. What sources and data do we use?

We process personal data that we receive from you during the application process.

Type of data:
Relevant personal data may include, in particular: personal details (name, address and other contact details, date and place of birth, nationality), bank details (for the purpose of travel expense reimbursement), identification data (e.g., ID card details) and authentication data (e.g., signature sample), health data (e.g., information on disability/severe disability), qualification documents (e.g., certificates, evaluations, and other training certificates), photographs.

3. Why do we process your data (purpose of processing) and on what legal basis?

We process your personal data in accordance with the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG), and sector-specific data protection standards that may apply to the application process (Social Security Code, Telecommunications Act, Works Constitution Act, etc.).

3.1 To carry out the application process

The processing of personal data (Art. 4 No. 2 GDPR) is carried out for the purpose of conducting the application process, taking into account Art. 88 GDPR and § 26 BDSG. There is no contractual obligation.

3.2 In the context of balancing interests

Where necessary, we also process your data to protect our legitimate interests or the legitimate interests of third parties. For example: asserting legal claims and defending against legal disputes, measures for business management and further development.

3.3 Based on your consent:

If you have given us your consent to process personal data for specific purposes (e.g., forwarding application data to affiliated companies), the lawfulness of this processing is based on your consent. Consent that has been given can be revoked at any time.

If you have given us your consent to process personal data for specific purposes (e.g., forwarding application data to affiliated companies), the lawfulness of this processing is based on your consent. Consent that has been given can be revoked at any time. Please note that the revocation only applies to the future. Processing that took place before the revocation is not affected. If the processing of the collected personal data is revoked, the purpose for which it was collected can no longer be fulfilled or implemented.

3.4 Due to legal requirements:

As a company, we are also subject to various legal obligations (e.g., tax laws, social security laws). The purposes of processing include, among other things, measures to fulfill control and reporting obligations.

4. Who receives my data?

Within the company, your data will be received by those departments that need it to process the application process and fulfill legal obligations. Processors employed by us may also receive data for these purposes. In addition to companies within the group, these also include companies in the IT services category. With regard to the transfer of data to recipients outside the company, it should first be noted that we comply with the applicable data protection regulations. We may only pass on information about you if required to do so by law, if you have given your consent, or if we are authorized to provide such information. Under these conditions, recipients of personal data may include, for example, affiliated companies (for the purpose of the application process for other positions). Other data recipients may be those entities for which you have given us your consent to transfer data.

 

We use specialized software from d.vinci HR-Systems GmbH (Nagelsweg 37-39, 20097 Hamburg) for the application process. This provider acts as a service provider for us and may also obtain knowledge of your personal data in connection with the maintenance and servicing of the systems. We have concluded a so-called data processing agreement with this provider, which ensures that data processing is carried out in a permissible manner. Your application data will be reviewed by our human resources department after we receive your application. Suitable applications will then be forwarded internally to the department managers responsible for the respective open position. The further process will then be coordinated. Within the company, only those persons who need your data for the proper execution of our application process have access to it.

Where is the data processed?

The data is processed exclusively in data centers in the Federal Republic of Germany.

5. How long will my data be stored?

Where necessary, we process and store your personal data for the duration of the application process. Your personal data will be deleted once the purpose (application process) has been fulfilled, but no later than after 6 months. As soon as the storage of the data is no longer necessary for the application process and there are no legal retention periods or you have not given your consent for longer storage (e.g., for further application processes), your data will be deleted immediately.

6. Is data transferred to a third country or to an international organization?

Data is not transferred to third countries (countries outside the European Economic Area - EEA).

7. What data protection rights do I have?

Within the framework of the legal requirements, every data subject has the right to information about the processing of their personal data, the right to correction, the right to deletion, the right to restriction of processing, the right to object to processing, and the right to data portability. The restrictions under Sections 34 and 35 of the German Federal Data Protection Act (BDSG) apply to the right to information and the right to erasure. In addition, there is a right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR in conjunction with Section 19 BDSG).

8. Am I obliged to provide data?

As part of the application process, you only need to provide the personal data that is necessary for the application process. There is no obligation to provide us with this data. Without this data, we will generally not be able to carry out the application process.

9. To what extent is there automated decision-making in individual cases?

We do not use automated processing to make decisions about the justification and implementation of the application process.

10. To what extent is my data used for profiling (scoring)?

We do not use data for profiling (scoring) for the justification and implementation of the application process.

Information about your right to object:
You have the right to object to the processing of personal data concerning you at any time. If you object, we will no longer process your personal data unless we can demonstrate compelling reasons for the processing that outweigh your interests, rights, and freedoms, or if the processing serves to assert, exercise, or defend legal claims. The objection can be made informally and should be addressed to:

Bodo Wascher Gruppe GmbH
Department: Data Protection
Hochstr. 84
23554 Lübeck

Or by email to:
Datenschutz@wascher-gruppe.de