Data privacy information for applicants

Responsible authority and data protection officer

Responsible authority:

Andreas Hettich GmbH
Föhrenstraße 12
78532 Tuttlingen
Germany

Phone: +49 7461 705-0
E-Mail: info@hettichlab.com

You can find more information about our company, details about the authorized representatives, and additional contact options in the legal notice on our website: https://www.hettichlab.com/imprint/

External Data Protection Officer:

We have appointed a Data Protection Officer in our company. You can reach them using the following contact details:

DDSK GmbH
Stefan Fischerkeller
Phone: +49 7542 949 21 -0
E-Mail: anfragen@ddsk.de

Scope of data processing

Sources and categories of data

We process the data you have submitted to us in connection with your application in order to assess your suitability for the position (or possibly other open positions within our company) and to carry out the application process. Additionally, we process personal data that you have published on the internet and that we are permitted to process under data protection laws. This includes, for example, your resume, career history, etc.

Purposes and legal bases for processing the data

We process your personal data in compliance with the provisions of the EU General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG), and other applicable laws.

The legal basis for processing your personal data in this application process is primarily Article 6 (1) (b) GDPR in conjunction with Section 26 BDSG. According to this, the processing of data is permitted if it is necessary for the decision to establish an employment relationship.

Should the data be required for legal proceedings after the completion of the application process, data processing may occur based on the conditions of Article 6 GDPR, particularly for the protection of legitimate interests as per Article 6 (1) (f) GDPR. Our interest would then be in asserting or defending claims.

Furthermore, your voluntarily given consent under Article 6 (1) (a) GDPR may serve as the legal basis for data processing (e.g., inclusion in the applicant pool, newsletter for new job offers). Consent can be withdrawn at any time with effect for the future.

If special categories of personal data are processed according to Article 9 (1) GDPR, this is done in the context of establishing an employment relationship, exercising rights, or fulfilling legal obligations. This processing is based on Article 9 (2) (b) GDPR in conjunction with Section 26(3) BDSG. Additionally, the processing of health data may be necessary for assessing your ability to work according to Article 9 (2)(h) GDPR in conjunction with Section 22 (1) (b) BDSG.

If we process your personal data for a purpose not mentioned above, we will inform you beforehand.

Consequences of not providing data

As part of your application, you must provide the personal data that is necessary for establishing the employment relationship or that we are legally required to collect.

Automated individual decision-making

We do not use any purely automated decision-making procedures in accordance with Article 22 GDPR. Should we implement such a procedure in specific cases in the future, we will inform you separately, as required by law.

Recipients of the data within the EU

Within our company, only those individuals and departments (e.g., relevant department, management, HR) who need your personal data for the application process will have access to it.

After receiving your application, the HR department will review your application data. Suitable applications are then forwarded internally to the department heads responsible for the respective open position. The further process is then coordinated accordingly. Generally, only those individuals within the company who need access to your data for the proper conduct of our application procedure will have it.

Recipients of the data outside the EU

Should we transfer personal data to service providers or group companies outside the European Economic Area (EEA), such transfers will only occur if the third country has been recognized by the EU Commission as providing an adequate level of data protection, or if other appropriate data protection guarantees are in place (e.g., binding corporate rules or EU Standard Contractual Clauses).

Storage period

Data from applicants will be deleted after 4 months in the event of a rejection.

If you have agreed to further storage of your personal data for future job openings or for a period exceeding the current application process, your data will be included in our applicant pool. Data in the pool will be deleted after two years.

If you receive a job offer during the application process, the data from the applicant management system will be transferred to our personnel information system, currently SAP.

Rights of data subjects

Under certain conditions, you can assert your data protection rights against us. Please submit your requests for exercising your rights in writing or by email to the address provided above or directly in writing or by email to our Data Protection Officer.

• You have the right to obtain information from us about the data we hold on you in accordance with Article 15 GDPR (subject to limitations under Section 34 BDSG).
• Upon your request, we will correct any inaccurate or incorrect data we hold about you in accordance with Article 16 GDPR.
• If you wish, we will delete your data based on the principles of Article 17 GDPR, provided that no other legal regulations (e.g., statutory retention obligations or restrictions under Section 35 BDSG or a prevailing interest on our part, such as defending our rights and claims) oppose this.
• Considering the conditions of Article 18 GDPR, you can request that we restrict the processing of your data.
• If your personal data is processed based on legitimate interests according to Article 6 (1) (f) GDPR or if it is necessary for the performance of a task carried out in the public interest or in the exercise of official authority, you have the right, under Article 21 GDPR, to object to the processing of your personal data if there are reasons related to your particular situation or if the objection is against direct marketing. In the latter case, you have a general right to object, which will be implemented by us without needing to specify a particular situation.
• You also have the right, under the conditions of Article 20 GDPR, to receive your data in a structured, commonly used, and machine-readable format or to transmit it to a third party.
• Additionally, you have the right to withdraw any consent previously given for the processing of personal data at any time, with effect for the future.

• Furthermore, you have the right to lodge a complaint with a data protection supervisory authority (Article 77 GDPR). However, we recommend that you first address any complaint to our Data Protection Officer.

   

The relevant supervisory authority for us can be reached at:

The Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg Lautenschlagerstraße 20, 70173 Stuttgart.

Version 23/08/2021