Privacy information for applicants
With the following explanations, we are informing our applicants in accordance with the General Data Protection Regulation, in conjunction with the German Data Protection Act (BDSG), about the processing of personal data by us and our affiliates as well as the rights appertaining to applicants.
1. Who is responsible for the data processing?
The following entity is responsible for processing the data:
BEWITAL Holding GmbH + CO. KG (hereinafter “company”)
Industriestr. 10
46354 Südlohn-Oeding
Tel: +49 2862 581-10
Email: info@bewital.de
Website: www.bewital.de
2. How can the data protection officer be reached?
We have appointed a data protection officer who can be contacted by email at datenschutz@bewital.de
or by post at the address stated in section 1. above. Please add the following to any postal correspondence: “Data Privacy – Personal/Confidential”.
3. What personal data is processed?
During the application process, the company processes the data provided by the applicant (e.g. CV, certificates, contact details). The processing is carried out for the purpose of selecting applicants. Without the data we cannot carry out the application process with you.
4. For what purpose is the data processed and on what legal basis?
Personal data will be processed exclusively for the purposes of the application process and any resulting employment relationship. The legal basis for the processing is Art. 6 (1) (a, b or f) GDPR.
5. Is personal data shared and, if so, with whom?
As part of the application process, information is passed on internally to the departments relevant to and involved in the process. Data may be shared within the group of companies if other companies are entrusted with the performance of tasks within the scope of application procedures.
6. Is personal data sent to a third country?
Personal data is not sent to a third country.
7. How long is personal data stored?
The data will be stored within the statutory retention periods and deleted promptly at the end of the application process. If we receive consent from applicants to permanently store their application, we will store the application data. Consent given can be withdrawn at any time.
Regardless of the retention periods, it is ensured at all times that only authorised employees have access to the data. This applies to paper files as well as digital data in IT systems.
Reasonably near the expiration of the statutory retention obligation, paper-based files are destroyed and data in IT systems is deleted in compliance with data protection requirements.
8. What rights does the data subject have?
From a data protection point of view, applicants are considered data subjects whose data is processed.
In this respect, data subject rights must be guaranteed through adherence to certain requirements under the General Data Protection Regulation (GDPR):
8.1. Access
8.2. Rectification
8.3. Erasure / right to be forgotten
8.4. Restriction
8.5. Objection
8.6. Right to data portability
8.7. Withdrawal of consent
8.8. Right to complain to a supervisory authority
9. Is there an obligation to provide data?
In order to participate in the application process, the data and information required for the application must be made available by the applicant.
10. Is data used for automated decision-making or profiling?
No techniques are employed as part of the application process which would facilitate profiling under Art. 4 No. 4 GDPR or automated decision-making under Art. 22 GDPR.