Data protection information for applicants
Compliance with data protection regulations is a high priority for us. In the following, we would like to inform you about the collection and processing of your personal data:
Data controller
The respective edding AG Group company to which you have applied is responsible for data processing.
Purpose and legal basis of data processing
We process your personal data for the purpose of deciding on the establishment of the employment relationship. As part of the application process, we process in particular your contact details, such as your name and address, and all data related to the application, e.g. CV, certificates, qualifications. If you submit an application for reimbursement of travel expenses, we also need your bank details. The legal basis for the processing of your data results from Art. 88 GDPR in conjunction with § 26 (1) sentence 1 BDSG or Art. 6 (1) sentence 1 lit. b GDPR.
In addition, we collect and process personal data that you provide to us voluntarily. This data is processed on the basis of your revocable consent in accordance with Art. 6 (1) sentence 1 lit. a, Art. 7 GDPR in conjunction with § 26 (2) BDSG.
Talent pool
If you are not hired, but your application is still of interest to us, we may ask you whether we may keep your application for future vacancies. This longer retention period is based on your revocable consent in accordance with Art. 6 (1) sentence 1 lit. a, Art. 7 GDPR in conjunction with § 26 (2) BDSG. Inclusion in our talent pool is voluntary and failure to grant the relevant consent has no effect on other ongoing application procedures.
Recipients of your data
We only pass on your personal data within our group of companies to those areas and persons who need this data to fulfil contractual and legal obligations or to implement our legitimate interest (e.g. the accounting department). We also use the service provider Personio, which is strictly bound by instructions, as a further processor for applicant management. Your data will not be passed on beyond this. If an employment contract is concluded after the application process, we store the data from your application that is required for the implementation of your employment relationship. The legal basis for this processing is § 26 (1) sentence 1 BDSG.
We are obliged to inform the works council about the application procedure, to submit the necessary application documents and to provide information about the persons involved (Section 99 (1) of the Works Constitution Act). Your personal data will be transmitted to the works council for the purpose of fulfilling these participation and co-determination rights.
We use strictly instruction-bound service providers who support us, for example, in the areas of IT or the archiving and destruction of documents and with whom separate contracts for order processing have been concluded. We do not transfer your data to organisations outside the EU or the EEA.
Storage duration/criteria for determining the storage duration
If there is no statutory retention period, the data will be deleted as soon as storage is no longer necessary or the legitimate interest in storage has expired. If you are not hired, this is usually the case no later than six months after completion of the application process or after receipt of the rejection. We also delete data if you revoke your consent to the processing of your data.
We store applications that we have included in the talent pool for 6 months. The documents will then be deleted. We will retain your declaration of consent for inclusion in our talent pool for a further three years in order to comply with our accountability obligations within the meaning of Art. 5 (2) GDPR. In individual cases, individual data may be stored for longer (e.g. travel expense reports). The duration of storage then depends on the statutory retention obligations, e.g. from the German Fiscal Code (6 years) or the German Commercial Code (10 years). Further storage of your data is also permitted if further processing is necessary for the assertion, exercise or defence of legal claims after we have weighed up your interests.
Automated decision making
Since the decision on your employment relationship is not based exclusively on automated processing, there is no automated decision in individual cases within the meaning of Art. 22 GDPR.
Your data protection rights
You have the right to receive information about the personal data stored about you free of charge upon request (Art. 15 (1) GDPR). In addition, if the legal requirements are met, you have the right to rectification (Art. 16 GDPR), erasure (Art. 17 GDPR) and restriction of processing (Art. 18 GDPR) of your personal data and to data portability (Art. 20 GDPR).
You have the right to revoke your consent at any time with effect for the future if the data is processed on the basis of Art. 6 (1) sentence 1 lit. a or Art. 9 (2) lit. a GDPR. Please send your cancellation to: career@edding.com.
You have the right to object to data processing in accordance with Art. 21 GDPR if the data is processed on the basis of Art. 6 (1) sentence 1 lit. e or f GDPR. Please address the objection to: career@edding.com.
Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a data protection supervisory authority. The right to lodge a complaint may be exercised in particular with a supervisory authority in the Member State of the data subject's habitual residence, place of work or place of the alleged infringement.
Our data protection officer
We are supported by our data protection officer in the fulfilment of our data protection obligations. In the event of an enquiry, please name the company in question. The contact details of our data protection officer are
CONTACT DETAILS
datenschutz nord GmbH
Sechslingspforte 2
22087 Hamburg
E-mail: office@datenschutz-nord.de
Web: https://www.dsn-group.de/