Data privacy

1. An overview of data protection

General information

The fol­low­ing inform­a­tion will provide you with an easy to nav­ig­ate over­view of what will hap­pen with your per­son­al data when you vis­it this web­site. The term “per­son­al data” com­prises all data that can be used to per­son­ally identi­fy you. For detailed inform­a­tion about the sub­ject mat­ter of data pro­tec­tion, please con­sult our Data Pro­tec­tion Declar­a­tion, which we have included beneath this copy.

Data recording on this website

Who is the responsible party for the recording of data on this website (i.e., the “controller”)?

The data on this web­site is pro­cessed by the oper­at­or of the web­site, whose con­tact inform­a­tion is avail­able under sec­tion “Inform­a­tion about the respons­ible party (referred to as the “con­trol­ler” in the GDPR)” in this Pri­vacy Policy.

How do we record your data?

We col­lect your data as a res­ult of your shar­ing of your data with us. This may, for instance be inform­a­tion you enter into our con­tact form.

Oth­er data shall be recor­ded by our IT sys­tems auto­mat­ic­ally or after you con­sent to its record­ing dur­ing your web­site vis­it. This data com­prises primar­ily tech­nic­al inform­a­tion (e.g., web browser, oper­at­ing sys­tem, or time the site was accessed). This inform­a­tion is recor­ded auto­mat­ic­ally when you access this website.

What are the purposes we use your data for?

A por­tion of the inform­a­tion is gen­er­ated to guar­an­tee the error free pro­vi­sion of the web­site. Oth­er data may be used to ana­lyze your user patterns.

What rights do you have as far as your information is concerned?

You have the right to receive inform­a­tion about the source, recip­i­ents, and pur­poses of your archived per­son­al data at any time without hav­ing to pay a fee for such dis­clos­ures. You also have the right to demand that your data are rec­ti­fied or erad­ic­ated. If you have con­sen­ted to data pro­cessing, you have the option to revoke this con­sent at any time, which shall affect all future data pro­cessing. Moreover, you have the right to demand that the pro­cessing of your data be restric­ted under cer­tain cir­cum­stances. Fur­ther­more, you have the right to log a com­plaint with the com­pet­ent super­vising agency.

Please do not hes­it­ate to con­tact us at any time if you have ques­tions about this or any oth­er data pro­tec­tion related issues.

2. Hosting

External Hosting

This web­site is hos­ted by an extern­al ser­vice pro­vider (host). Per­son­al data col­lec­ted on this web­site are stored on the serv­ers of the host. These may include, but are not lim­ited to, IP addresses, con­tact requests, metadata and com­mu­nic­a­tions, con­tract inform­a­tion, con­tact inform­a­tion, names, web page access, and oth­er data gen­er­ated through a web site.

The host is used for the pur­pose of ful­filling the con­tract with our poten­tial and exist­ing cus­tom­ers (Art. 6(1)(b) GDPR) and in the interest of secure, fast, and effi­cient pro­vi­sion of our online ser­vices by a pro­fes­sion­al pro­vider (Art. 6(1)(f) GDPR). If appro­pri­ate con­sent has been obtained, the pro­cessing is car­ried out exclus­ively on the basis of Art. 6 (1)(a) GDPR and § 25 (1) TTDSG, inso­far the con­sent includes the stor­age of cook­ies or the access to inform­a­tion in the user’s end device (e.g., device fin­ger­print­ing) with­in the mean­ing of the TTDSG. This con­sent can be revoked at any time.

Our host will only pro­cess your data to the extent neces­sary to ful­fil its per­form­ance oblig­a­tions and to fol­low our instruc­tions with respect to such data.

We are using the fol­low­ing host:

Host Europe GmbH
Hansestrasse 111
51149 Köln

Data processing

We have con­cluded a data pro­cessing agree­ment (DPA) with the above-men­tioned pro­vider. This is a con­tract man­dated by data pri­vacy laws that guar­an­tees that they pro­cess per­son­al data of our web­site vis­it­ors only based on our instruc­tions and in com­pli­ance with the GDPR.

3. General information and mandatory information

Data protection

The oper­at­ors of this web­site and its pages take the pro­tec­tion of your per­son­al data very ser­i­ously. Hence, we handle your per­son­al data as con­fid­en­tial inform­a­tion and in com­pli­ance with the stat­utory data pro­tec­tion reg­u­la­tions and this Data Pro­tec­tion Declaration.

Whenev­er you use this web­site, a vari­ety of per­son­al inform­a­tion will be col­lec­ted. Per­son­al data com­prises data that can be used to per­son­ally identi­fy you. This Data Pro­tec­tion Declar­a­tion explains which data we col­lect as well as the pur­poses we use this data for. It also explains how, and for which pur­pose the inform­a­tion is collected.

We here­with advise you that the trans­mis­sion of data via the Inter­net (i.e., through e‑mail com­mu­nic­a­tions) may be prone to secur­ity gaps. It is not pos­sible to com­pletely pro­tect data against third-party access.

Information about the responsible party (referred to as the “controller” in the GDPR)

The data pro­cessing con­trol­ler on this web­site is:

helag elec­tron­ic gmbh
Graf-Zep­pelin-Str. 41
72202 Nagold

Phone: +49 (0) 7452 / 824 0
E‑mail: info@helag-electronic.de

The con­trol­ler is the nat­ur­al per­son or leg­al entity that single-handedly or jointly with oth­ers makes decisions as to the pur­poses of and resources for the pro­cessing of per­son­al data (e.g., names, e‑mail addresses, etc.).

Storage duration

Unless a more spe­cif­ic stor­age peri­od has been spe­cified in this pri­vacy policy, your per­son­al data will remain with us until the pur­pose for which it was col­lec­ted no longer applies. If you assert a jus­ti­fied request for dele­tion or revoke your con­sent to data pro­cessing, your data will be deleted, unless we have oth­er leg­ally per­miss­ible reas­ons for stor­ing your per­son­al data (e.g., tax or com­mer­cial law reten­tion peri­ods); in the lat­ter case, the dele­tion will take place after these reas­ons cease to apply.

General information on the legal basis for the data processing on this website

If you have con­sen­ted to data pro­cessing, we pro­cess your per­son­al data on the basis of Art. 6(1)(a) GDPR or Art. 9 (2)(a) GDPR, if spe­cial cat­egor­ies of data are pro­cessed accord­ing to Art. 9 (1) DSGVO. If you have con­sen­ted to the stor­age of cook­ies or to the access to inform­a­tion in your end device (e.g., via device fin­ger­print­ing), the data pro­cessing is addi­tion­ally based on § 25 (1) TTDSG. The con­sent can be revoked at any time. If your data is required for the ful­fill­ment of a con­tract or for the imple­ment­a­tion of pre-con­trac­tu­al meas­ures, we pro­cess your data on the basis of Art. 6(1)(b) GDPR. Fur­ther­more, if your data is required for the ful­fill­ment of a leg­al oblig­a­tion, we pro­cess it on the basis of Art. 6(1)© GDPR. Fur­ther­more, the data pro­cessing may be car­ried out on the basis of our legit­im­ate interest accord­ing to Art. 6(1)(f) GDPR. Inform­a­tion on the rel­ev­ant leg­al basis in each indi­vidu­al case is provided in the fol­low­ing para­graphs of this pri­vacy policy.

Designation of a data protection officer

We have appoin­ted a data pro­tec­tion officer for our company.

Günter Stal­leck­er

Phone: +49 (0) 7452 / 824 0
E‑mail: datenschutz@helag-electronic.de

Information on data transfer to the USA and other non-EU countries

Among oth­er things, we use tools of com­pan­ies dom­i­ciled in the United States or oth­er from a data pro­tec­tion per­spect­ive non-secure non-EU coun­tries. If these tools are act­ive, your per­son­al data may poten­tially be trans­ferred to these non-EU coun­tries and may be pro­cessed there. We must point out that in these coun­tries, a data pro­tec­tion level that is com­par­able to that in the EU can­not be guar­an­teed. For instance, U.S. enter­prises are under a man­date to release per­son­al data to the secur­ity agen­cies and you as the data sub­ject do not have any lit­ig­a­tion options to defend your­self in court. Hence, it can­not be ruled out that U.S. agen­cies (e.g., the Secret Ser­vice) may pro­cess, ana­lyze, and per­man­ently archive your per­son­al data for sur­veil­lance pur­poses. We have no con­trol over these pro­cessing activities.

Revocation of your consent to the processing of data

A wide range of data pro­cessing trans­ac­tions are pos­sible only sub­ject to your express con­sent. You can also revoke at any time any con­sent you have already giv­en us. This shall be without pre­ju­dice to the law­ful­ness of any data col­lec­tion that occurred pri­or to your revocation.

Right to object to the collection of data in special cases; right to object to direct advertising (Art. 21 GDPR)

IN THE EVENT THAT DATA ARE PROCESSED ON THE BASIS OF ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO AT ANY TIME OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA BASED ON GROUNDS ARISING FROM YOUR UNIQUE SITUATION. THIS ALSO APPLIES TO ANY PROFILING BASED ON THESE PROVISIONS. TO DETERMINE THE LEGAL BASIS, ON WHICH ANY PROCESSING OF DATA IS BASED, PLEASE CONSULT THIS DATA PROTECTION DECLARATION. IF YOU LOG AN OBJECTION, WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA, UNLESS WE ARE IN A POSITION TO PRESENT COMPELLING PROTECTION WORTHY GROUNDS FOR THE PROCESSING OF YOUR DATA, THAT OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS OR IF THE PURPOSE OF THE PROCESSING IS THE CLAIMING, EXERCISING OR DEFENCE OF LEGAL ENTITLEMENTS (OBJECTION PURSUANT TO ART. 21(1) GDPR).

IF YOUR PERSONAL DATA IS BEING PROCESSED IN ORDER TO ENGAGE IN DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR AFFECTED PERSONAL DATA FOR THE PURPOSES OF SUCH ADVERTISING AT ANY TIME. THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS AFFILIATED WITH SUCH DIRECT ADVERTISING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR DIRECT ADVERTISING PURPOSES (OBJECTION PURSUANT TO ART. 21(2) GDPR).

Right to log a complaint with the competent supervisory agency

In the event of viol­a­tions of the GDPR, data sub­jects are entitled to log a com­plaint with a super­vis­ory agency, in par­tic­u­lar in the mem­ber state where they usu­ally main­tain their dom­i­cile, place of work or at the place where the alleged viol­a­tion occurred. The right to log a com­plaint is in effect regard­less of any oth­er admin­is­trat­ive or court pro­ceed­ings avail­able as leg­al recourses.

Right to data portability

You have the right to demand that we hand over any data we auto­mat­ic­ally pro­cess on the basis of your con­sent or in order to ful­fil a con­tract be handed over to you or a third party in a com­monly used, machine read­able format. If you should demand the dir­ect trans­fer of the data to anoth­er con­trol­ler, this will be done only if it is tech­nic­ally feasible.

SSL and/or TLS encryption

For secur­ity reas­ons and to pro­tect the trans­mis­sion of con­fid­en­tial con­tent, such as pur­chase orders or inquir­ies you sub­mit to us as the web­site oper­at­or, this web­site uses either an SSL or a TLS encryp­tion pro­gram. You can recog­nize an encryp­ted con­nec­tion by check­ing wheth­er the address line of the browser switches from “http://” to “https://” and also by the appear­ance of the lock icon in the browser line.

If the SSL or TLS encryp­tion is activ­ated, data you trans­mit to us can­not be read by third parties.

Information about, rectification and eradication of data

With­in the scope of the applic­able stat­utory pro­vi­sions, you have the right to at any time demand inform­a­tion about your archived per­son­al data, their source and recip­i­ents as well as the pur­pose of the pro­cessing of your data. You may also have a right to have your data rec­ti­fied or erad­ic­ated. If you have ques­tions about this sub­ject mat­ter or any oth­er ques­tions about per­son­al data, please do not hes­it­ate to con­tact us at any time.

Right to demand processing restrictions

You have the right to demand the impos­i­tion of restric­tions as far as the pro­cessing of your per­son­al data is con­cerned. To do so, you may con­tact us at any time. The right to demand restric­tion of pro­cessing applies in the fol­low­ing cases:

  • In the event that you should dis­pute the cor­rect­ness of your data archived by us, we will usu­ally need some time to veri­fy this claim. Dur­ing the time that this invest­ig­a­tion is ongo­ing, you have the right to demand that we restrict the pro­cessing of your per­son­al data.
  • If the pro­cessing of your per­son­al data was/is con­duc­ted in an unlaw­ful man­ner, you have the option to demand the restric­tion of the pro­cessing of your data in lieu of demand­ing the erad­ic­a­tion of this data.
  • If we do not need your per­son­al data any longer and you need it to exer­cise, defend or claim leg­al enti­tle­ments, you have the right to demand the restric­tion of the pro­cessing of your per­son­al data instead of its eradication.
  • If you have raised an objec­tion pur­su­ant to Art. 21(1) GDPR, your rights and our rights will have to be weighed against each oth­er. As long as it has not been determ­ined whose interests pre­vail, you have the right to demand a restric­tion of the pro­cessing of your per­son­al data.

If you have restric­ted the pro­cessing of your per­son­al data, these data – with the excep­tion of their archiv­ing – may be pro­cessed only sub­ject to your con­sent or to claim, exer­cise or defend leg­al enti­tle­ments or to pro­tect the rights of oth­er nat­ur­al per­sons or leg­al entit­ies or for import­ant pub­lic interest reas­ons cited by the European Uni­on or a mem­ber state of the EU.

Rejection of unsolicited e‑mails

We here­with object to the use of con­tact inform­a­tion pub­lished in con­junc­tion with the man­dat­ory inform­a­tion to be provided in our Site Notice to send us pro­mo­tion­al and inform­a­tion mater­i­al that we have not expressly reques­ted. The oper­at­ors of this web­site and its pages reserve the express right to take leg­al action in the event of the unso­li­cited send­ing of pro­mo­tion­al inform­a­tion, for instance via SPAM messages.

4. Recording of data on this website

Cookies

Our web­sites and pages use what the industry refers to as “cook­ies.” Cook­ies are small text files that do not cause any dam­age to your device. They are either stored tem­por­ar­ily for the dur­a­tion of a ses­sion (ses­sion cook­ies) or they are per­man­ently archived on your device (per­man­ent cook­ies). Ses­sion cook­ies are auto­mat­ic­ally deleted once you ter­min­ate your vis­it. Per­man­ent cook­ies remain archived on your device until you act­ively delete them, or they are auto­mat­ic­ally erad­ic­ated by your web browser.

In some cases, it is pos­sible that third-party cook­ies are stored on your device once you enter our site (third-party cook­ies). These cook­ies enable you or us to take advant­age of cer­tain ser­vices offered by the third party (e.g., cook­ies for the pro­cessing of pay­ment services).

Cook­ies have a vari­ety of func­tions. Many cook­ies are tech­nic­ally essen­tial since cer­tain web­site func­tions would not work in the absence of the cook­ies (e.g., the shop­ping cart func­tion or the dis­play of videos). The pur­pose of oth­er cook­ies may be the ana­lys­is of user pat­terns or the dis­play of pro­mo­tion­al messages.

Cook­ies, which are required for the per­form­ance of elec­tron­ic com­mu­nic­a­tion trans­ac­tions, or for the pro­vi­sion of cer­tain func­tions you want to use (e.g., for the shop­ping cart func­tion) or those that are neces­sary for the optim­iz­a­tion (required cook­ies) of the web­site (e.g., cook­ies that provide meas­ur­able insights into the web audi­ence), shall be stored on the basis of Art. 6(1)(f) GDPR, unless a dif­fer­ent leg­al basis is cited. The oper­at­or of the web­site has a legit­im­ate interest in the stor­age of required cook­ies to ensure the tech­nic­ally error free and optim­ized pro­vi­sion of the operator’s ser­vices. If your con­sent to the stor­age of the cook­ies and sim­il­ar recog­ni­tion tech­no­lo­gies has been reques­ted, pro­cessing occurs exclus­ively on the basis of the con­sent obtained (Art. 6(1)(a) GDPR and § 25 (1) TTDSG); this con­sent may be revoked at any time.

You have the option to set up your browser in such a man­ner that you will be noti­fied any time cook­ies are placed and to per­mit the accept­ance of cook­ies only in spe­cif­ic cases. You may also exclude the accept­ance of cook­ies in cer­tain cases or in gen­er­al or activ­ate the delete func­tion for the auto­mat­ic erad­ic­a­tion of cook­ies when the browser closes. If cook­ies are deac­tiv­ated, the func­tions of this web­site may be limited.

In the event that third-party cook­ies are used or if cook­ies are used for ana­lyt­ic­al pur­poses, we will sep­ar­ately noti­fy you in con­junc­tion with this Data Pro­tec­tion Policy and, if applic­able, ask for your consent.

Consent with Borlabs Cookie

Our web­site uses the Bor­labs con­sent tech­no­logy to obtain your con­sent to the stor­age of cer­tain cook­ies in your browser or for the use of cer­tain tech­no­lo­gies and for their data pri­vacy pro­tec­tion com­pli­ant doc­u­ment­a­tion. The pro­vider of this tech­no­logy is Bor­labs — Ben­jamin A. Bornschein, Rüben­kamp 32, 22305 Ham­burg, Ger­many (here­in­after referred to as Borlabs).

Whenev­er you vis­it our web­site, a Bor­labs cook­ie will be stored in your browser, which archives any declar­a­tions or revoc­a­tions of con­sent you have entered. These data are not shared with the pro­vider of the Bor­labs technology.

The recor­ded data shall remain archived until you ask us to erad­ic­ate them, delete the Bor­labs cook­ie on your own or the pur­pose of stor­ing the data no longer exists. This shall be without pre­ju­dice to any reten­tion oblig­a­tions man­dated by law. To review the details of Bor­labs’ data pro­cessing policies, please vis­it https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/

We use the Bor­labs cook­ie con­sent tech­no­logy to obtain the declar­a­tions of con­sent man­dated by law for the use of cook­ies. The leg­al basis for the use of such cook­ies is Art. 6(1)© GDPR.

Server log files

The pro­vider of this web­site and its pages auto­mat­ic­ally col­lects and stores inform­a­tion in so-called serv­er log files, which your browser com­mu­nic­ates to us auto­mat­ic­ally. The inform­a­tion comprises:

  • The type and ver­sion of browser used
  • The used oper­at­ing system
  • Refer­rer URL
  • The host­name of the access­ing computer
  • The time of the serv­er inquiry
  • The IP address

This data is not merged with oth­er data sources.

This data is recor­ded on the basis of Art. 6(1)(f) GDPR. The oper­at­or of the web­site has a legit­im­ate interest in the tech­nic­ally error free depic­tion and the optim­iz­a­tion of the operator’s web­site. In order to achieve this, serv­er log files must be recorded.

Request by e‑mail, telephone, or fax

If you con­tact us by e‑mail, tele­phone or fax, your request, includ­ing all res­ult­ing per­son­al data (name, request) will be stored and pro­cessed by us for the pur­pose of pro­cessing your request. We do not pass these data on without your consent.

These data are pro­cessed on the basis of Art. 6(1)(b) GDPR if your inquiry is related to the ful­fill­ment of a con­tract or is required for the per­form­ance of pre-con­trac­tu­al meas­ures. In all oth­er cases, the data are pro­cessed on the basis of our legit­im­ate interest in the effect­ive hand­ling of inquir­ies sub­mit­ted to us (Art. 6(1)(f) GDPR) or on the basis of your con­sent (Art. 6(1)(a) GDPR) if it has been obtained.

The data sent by you to us via con­tact requests remain with us until you request us to delete, revoke your con­sent to the stor­age or the pur­pose for the data stor­age lapses (e.g. after com­ple­tion of your request). Man­dat­ory stat­utory pro­vi­sions — in par­tic­u­lar stat­utory reten­tion peri­ods — remain unaffected.

5. Plug-ins and Tools

YouTube with expanded data protection integration

Our web­site embeds videos of the web­site You­Tube. The web­site oper­at­or is Google Ire­land Lim­ited (“Google”), Gor­don House, Bar­row Street, Dub­lin 4, Ireland.

We use You­Tube in the expan­ded data pro­tec­tion mode. Accord­ing to You­Tube, this mode ensures that You­Tube does not store any inform­a­tion about vis­it­ors to this web­site before they watch the video. Nev­er­the­less, this does not neces­sar­ily mean that the shar­ing of data with You­Tube part­ners can be ruled out as a res­ult of the expan­ded data pro­tec­tion mode. For instance, regard­less of wheth­er you are watch­ing a video, You­Tube will always estab­lish a con­nec­tion with the Google Double­Click network.

As soon as you start to play a You­Tube video on this web­site, a con­nec­tion to YouTube’s serv­ers will be estab­lished. As a res­ult, the You­Tube serv­er will be noti­fied, which of our pages you have vis­ited. If you are logged into your You­Tube account while you vis­it our site, you enable You­Tube to dir­ectly alloc­ate your brows­ing pat­terns to your per­son­al pro­file. You have the option to pre­vent this by log­ging out of your You­Tube account.

Fur­ther­more, after you have star­ted to play a video, You­Tube will be able to place vari­ous cook­ies on your device or com­par­able tech­no­lo­gies for recog­ni­tion (e.g. device fin­ger­print­ing). In this way You­Tube will be able to obtain inform­a­tion about this website’s vis­it­ors. Among oth­er things, this inform­a­tion will be used to gen­er­ate video stat­ist­ics with the aim of improv­ing the user friend­li­ness of the site and to pre­vent attempts to com­mit fraud.

Under cer­tain cir­cum­stances, addi­tion­al data pro­cessing trans­ac­tions may be triggered after you have star­ted to play a You­Tube video, which are bey­ond our control.

The use of You­Tube is based on our interest in present­ing our online con­tent in an appeal­ing man­ner. Pur­su­ant to Art. 6(1)(f) GDPR, this is a legit­im­ate interest. If appro­pri­ate con­sent has been obtained, the pro­cessing is car­ried out exclus­ively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TTDSG, inso­far the con­sent includes the stor­age of cook­ies or the access to inform­a­tion in the user’s end device (e.g., device fin­ger­print­ing) with­in the mean­ing of the TTDSG. This con­sent can be revoked at any time.

For more inform­a­tion on how You­Tube handles user data, please con­sult the You­Tube Data Pri­vacy Policy under: https://policies.google.com/privacy?hl=en.

Google Maps

This web­site uses the map­ping ser­vice Google Maps. The pro­vider is Google Ire­land Lim­ited (“Google”), Gor­don House, Bar­row Street, Dub­lin 4, Ireland.

To enable the use of the Google Maps fea­tures, your IP address must be stored. As a rule, this inform­a­tion is trans­ferred to one of Google’s serv­ers in the United States, where it is archived. The oper­at­or of this web­site has no con­trol over the data trans­fer. In case Google Maps has been activ­ated, Google has the option to use Google web fonts for the pur­pose of the uni­form depic­tion of fonts. When you access Google Maps, your browser will load the required web fonts into your browser cache, to cor­rectly dis­play text and fonts.

We use Google Maps to present our online con­tent in an appeal­ing man­ner and to make the loc­a­tions dis­closed on our web­site easy to find. This con­sti­tutes a legit­im­ate interest as defined in Art. 6(1)(f) GDPR. If appro­pri­ate con­sent has been obtained, the pro­cessing is car­ried out exclus­ively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TTDSG, inso­far the con­sent includes the stor­age of cook­ies or the access to inform­a­tion in the user’s end device (e.g., device fin­ger­print­ing) with­in the mean­ing of the TTDSG. This con­sent can be revoked at any time.

Data trans­mis­sion to the US is based on the Stand­ard Con­trac­tu­al Clauses (SCC) of the European Com­mis­sion. Details can be found here: https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.

For more inform­a­tion on the hand­ling of user data, please review Google’s Data Pri­vacy Declar­a­tion under: https://policies.google.com/privacy?hl=en.

6. Custom Services

Job Applications

We offer web­site vis­it­ors the oppor­tun­ity to sub­mit job applic­a­tions to us (e.g., via e‑mail, via postal ser­vices on by sub­mit­ting the online job applic­a­tion form). Below, we will brief you on the scope, pur­pose and use of the per­son­al data col­lec­ted from you in con­junc­tion with the applic­a­tion pro­cess. We assure you that the col­lec­tion, pro­cessing and use of your data will occur in com­pli­ance with the applic­able data pri­vacy rights and all oth­er stat­utory pro­vi­sions and that your data will always be treated as strictly confidential.

Scope and purpose of the collection of data

If you sub­mit a job applic­a­tion to us, we will pro­cess any affil­i­ated per­son­al data (e.g., con­tact and com­mu­nic­a­tions data, applic­a­tion doc­u­ments, notes taken dur­ing job inter­views, etc.), if they are required to make a decision con­cern­ing the estab­lish­ment or an employ­ment rela­tion­ship. The leg­al grounds for the afore­men­tioned are § 26 GDPR accord­ing to Ger­man Law (Nego­ti­ation of an Employ­ment Rela­tion­ship), Art. 6(1)(b) GDPR (Gen­er­al Con­tract Nego­ti­ations) and – provided you have giv­en us your con­sent – Art. 6(1)(a) GDPR. You may revoke any con­sent giv­en at any time. With­in our com­pany, your per­son­al data will only be shared with indi­vidu­als who are involved in the pro­cessing of your job application.

If your job applic­a­tion should res­ult in your recruit­ment, the data you have sub­mit­ted will be archived on the grounds of § 26 GDPR and Art. 6(1)(b) GDPR for the pur­pose of imple­ment­ing the employ­ment rela­tion­ship in our data pro­cessing system.

Data Archiving Period

If we are unable to make you a job offer or you reject a job offer or with­draw your applic­a­tion, we reserve the right to retain the data you have sub­mit­ted on the basis of our legit­im­ate interests (Art. 6(1)(f) GDPR) for up to 6 months from the end of the applic­a­tion pro­ced­ure (rejec­tion or with­draw­al of the applic­a­tion). After­wards the data will be deleted, and the phys­ic­al applic­a­tion doc­u­ments will be des­troyed. The stor­age serves in par­tic­u­lar as evid­ence in the event of a leg­al dis­pute. If it is evid­ent that the data will be required after the expiry of the 6‑month peri­od (e.g., due to an impend­ing or pending leg­al dis­pute), dele­tion will only take place when the pur­pose for fur­ther stor­age no longer applies.

Longer stor­age may also take place if you have giv­en your agree­ment (Art­icle 6(1)(a) GDPR) or if stat­utory data reten­tion require­ments pre­clude the deletion.

Admission to the applicant pool

If we do not make you a job offer, you may be able to join our applic­ant pool. In case of admis­sion, all doc­u­ments and inform­a­tion from the applic­a­tion will be trans­ferred to the applic­ant pool in order to con­tact you in case of suit­able vacancies.

Admis­sion to the applic­ant pool is based exclus­ively on your express agree­ment (Art. 6(1)(a) GDPR). The sub­mis­sion agree­ment is vol­un­tary and has no rela­tion to the ongo­ing applic­a­tion pro­ced­ure. The affected per­son can revoke his agree­ment at any time. In this case, the data from the applic­ant pool will be irre­voc­ably deleted, provided there are no leg­al reas­ons for storage.

The data from the applic­ant pool will be irre­voc­ably deleted no later than two years after con­sent has been granted.