Data privacy information for candidates

pursuant to Art. 13 and Art. 14 of the General Data Privacy Regulation GDPR

To us, data privacy is paramount. We will here inform you about how we process your data and the rights you have in this respect.

1. Who is responsible for data processing and whom may you contact in this regard?
BOSIG Holding GmbH & Co. KG
Legally represented by BOSIG Holding Beteiligungs-GmbH
These are legally represented by the Managing Director Oliver Schmid
Brunnenstraße 75-77
73333 Gingen

2. Contact details of the Data Privacy Officer
This email address is being protected from spambots. You need JavaScript enabled to view it.

3. Purposes of processing and legal basis
Your personal data will be processed in accordance with the provisions of the General Data Privacy Regulation (GDPR), the Bundesdatenschutzgesetz BDSG [Federal Data Privacy Act] and other relevant data privacy regulations. You may find further details and amendments on the purposes of processing in our contract documents, forms, declarations of consent and other information made available to you (e.g. on the website).

3.1 Consent (Art. 6 (1) (a) GDPR)
Your consent to the processing of personal data will serve as the legal basis for processing. You may revoke your consent at any time, with effect into the future.

3.2 Performance of contractual obligations (Art. 6 (1) (b) GDPR)
We will process your personal data in the course of handling your application. Processing may also be digital. This will apply especially when you submit your application documentation electronically, e.g. by e-mail or via a form on the website.

3.3 Compliance with legal obligations (Art. 6 (1) (c) GDPR)
We will process your personal data should we be legally obligated to.

This may be the case if, among other:

  • Reference is required to European and international counter-terrorism lists

 

Disclosure of personal data is required within the framework of official/judicial measures for purposes of evidence, law enforcement or civil claims.

3.4 Our own legitimate interests or those of third parties (Art. 6 (1) (f) GDPR)
We may also use your personal data to assess the interests in ensuring that our own or third party legitimate interests will be maintained. This may be required for the following purposes:

  • Limited retention of your data should deletion be impossible or require unreasonably high effort due to special storage methods
  • Comparison with European and international counter-terrorism lists should this surpass legal obligations
  • Ensuring and exercising our domestic authority through corresponding action (e.g. video surveillance)

 

4. Categories of personal data we will process
The following data are processed:

  • Personal data (name, date of birth, place of birth, nationality, civil status, occupation/industry and similar)
  • Contact details (mailing address, e-mail address, telephone number and similar)
  • Complete application documentation (e.g. CV, certificates, references)

 

5. Who will obtain your data?
We will forward your personal data to internal departments that need the data for contractual and legal purposes or to protect our legitimate interests.

The following bodies may also receive your data:

  • • public bodies and institutions in cases where we may be under legal or regulatory obligation to provide information, notification or disclosure of data, or should the latter be in the public interest
  • • other entities that you agreed may receive your data.

 

6. Transmission of your data to a third country or an international organisation
No data will be processed outside the EU or the EEA.

7. How long will we store your data?
Should the entity responsible for processing conclude a contract of employment with a candidate, the transmitted data will be stored compliant with regulatory requirements, for purposes of the employment relationship. Should the entity responsible for processing not conclude an employment contract with the candidate, the application documents will be automatically deleted three months after communication of such decision, unless deletion opposes other legitimate interests of the entity responsible for processing. Other legitimate interest would, for instance, include provisioning of proof under an action under the Allgemeines Gleichbehandlungsgesetz (AGG) [General Equal Treatment Act].

8. To what extent will automated decision-making be applied in individual cases (including profiling)?
We are not using automated decision-making procedures as per Article 22 GDPR. We will specifically inform you should we resort to this in individual cases, provided this is required by law.

9. Your data privacy rights
You have the right to information under Art. 15 GDPR, the right to correction under Art. 16 GDPR, the right to deletion under Art. 17 GDPR, the right to limit processing under Art. 18 GDPR and the right to data transferability under Art. 20 GDPR.

You also have the right to lodge a complaint with a supervisory data privacy authority (Art. 77 GDPR). Article 21 GDPR also grants you the basic right to object to our processing of your personal data. This right to objection will, however, be prerequisite upon your special personal circumstances; our domestic authority may oppose your right of objection. Please contact our Data Privacy Officer This email address is being protected from spambots. You need JavaScript enabled to view it. should you intend to assert such a right..

10. Extent of your obligations to provide us with your data
You will need to provide only the data required for your application. We will generally not be able to conclude a contract of employment with you unless we have this information. You will be separately informed of the voluntary nature of any additional information we may request.

11. Your right to lodge a complaint with the competent supervisory authority
You have the right to lodge a complaint with the supervisory data privacy authority (Art. 77 GDPR). The supervisory authority responsible for us is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit [The State Commissioner for Data Privacy and Freedom of Information]
Königstrasse 10 a
70173 Stuttgart