according to Art. 13 and Art.14 of the General Data Protection Regulation (GDPR)
Data protection is a key concern for us. The following describes how we process your data and sets out your rights as an applicant.
Who is responsible for processing your data, and who you can consult for assistance?
B+B Thermo-Technik GmbH
Heinrich-Hertz-Strasse 4
D – 78166 Donaueschingen, Germany
Contact details of the Data Protection Officer
Edmund Hilt
hilt evolution
Nelkenstrasse 36
D – 71272 Renningen, Germany
datenschutz(at)hilt-evolution.com
Purposes of processing data and legal basis
We process your personal data in accordance with the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and other relevant data protection regulations. Our contract documents, forms, consents and other information provided to you (such as on our website or in our terms and conditions) contain more details and set out additional purposes of processing.
Consent (Art. 6 (1) lit. a GDPR)
If you have given us a consent to process personal data, it forms the legal basis for the processing detailed in the specific statement of consent. You can revoke your consent at any time with effect for the future.
Fulfilment of legal obligations (Art. 6 (1) lit. b GDPR)
We will process your personal data for the purposes of executing the application procedure. The processing may also be effected electronically. This will be the case especially if you submit your application documents to us electronically, such as by e-mail or via a web form.
Fulfilment of legal obligations (Art. 6 (1) lit. c GDPR)
We will process your personal data where necessary in order to fulfil legal obligations.
Legitimate interest of ourselves or third parties (Art. 6 (1) lit. f GDPR)
We may also use your personal data on the basis of a balancing of interests in order to preserve the legitimate interests of ourselves or of third parties. This may be done for the following purposes:
- To obtain information from and exchange data with credit agencies, in the case of commercial risk beyond our normal scope.
- To store your data in restricted form if erasing it is not possible, or possible only at unreasonable cost and expense, owing to the particular way in which it is stored.
- To cross-check against European and international anti-terror lists, if this extends beyond the legal obligations.
- To assert legal claims and defend in the case of legal disputes which are not linked directly to the contractual relationship.
- To assure and assert our domiciliary rights by appropriate measures (including video surveillance).
Categories of personal data which we process
We process the following data:
- Name, first name
- Contact details (e.g. e-mail address, postal address, telephone number)
- Complete application documents (e.g. CVs, certificates, references)
Who will receive your data?
We will forward your personal data within our organisation to the departments which need it in order to fulfil our contractual and legal obligations and to preserve our legitimate interests.
The following parties may additionally be provided with your data:
- Data processors contracted by us (Art. 28 GDPR), contractors providing ancillary services and other data controllers under the terms of the GDPR, in particular in the fields of IT, logistics, courier and printing services, external data centres, IT applications support/maintenance, archiving, document processing, bookkeeping and financial controlling, data destruction, purchasing/procurement, customer relationship management, lettershops, marketing, call centres, website management, financial auditing, banking
- Public agencies and institutions where we are subject to legal or regulatory obligations to provide information, report or pass on data, or where passing on data is in the public interest
- Agencies, organisations and institutions pursuant to our legitimate interests or those of third parties (e.g. to public authorities, credit agencies, collection agencies, legal advisors, courts of law, expert auditors and regulatory bodies)
- Other parties to which we transfer data based on your consent
Transfer of your data to a third country or an international organisation
Your data will not be processed outside the EU or the EEA.
How long will we store your data for?
Where the data controller enters into a contract of employment with an applicant, the submitted data will be stored for the purposes of executing the employment relationship in accordance with the law. Where the data controller does not enter into a contract of employment with an applicant, the application documents will be automatically deleted three months after notification of rejection, provided deletion of them is not contrary to other legitimate interests of the data controller. Other legitimate interests in this context include, for example, an obligation to submit evidence in proceedings pursuant to equality law (AGG – German General Law on equal treatment).
To what extent will automated decision-making (including profiling) be employed in individual cases?
We employ no purely automated decision-making procedures under the terms of Article 22 GDPR. If we do employ such procedures in individual cases, we will notify you specially, where so required by law.
Your data protection rights
You have the right to information concerning your data according to Art. 15 GDPR, the right to rectification of your data according to Art. 16 GDPR, the right to erasure of your data according to Art. 17 GDPR, the right to restriction of processing of your data according to Art. 18 GDPR, and the right to data portability according to Art. 20 GDPR.
You also have the right to submit a complaint to a data protection authority (Art. 77 GDPR). According to Art. 21 GDPR, you fundamentally have the right to object to the processing of your personal data by us. However, the said right to object applies only in special circumstances relating to your personal situation, and it may be that our rights are contrary to your right to object. If you wish to assert one of these rights, please contact our Data Protection Officer datenschutz(at)hilt-evolution.com.
Extent of your obligations to provide your data to us
You need provide only the data necessary for the application process. Without that data we will not normally be in a position to enter into a contract of employment with you. Where we request additional data from you, we will advise you in each specific case that it is provided on a voluntary basis.
Your right of complaint to the regulatory authority
You have the right to submit a complaint to a data protection authority (Art. 77 GDPR). The data protection authority to which we are subject is:
Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit (The Data Protection and Freedom of Information Officer of the State of Baden-Württemberg)
https://www.baden-wuerttemberg.datenschutz.de/
Data protection information for customers and interested parties
Data protection information for suppliers and service providers
