Applicants

Data Processor

Name and contact details of the responsible party:

DEWE Brünofix GmbH
Fabrik für Metallchemie
Pruppacher Weg 8
D-91126 Rednitzhembach
Tel.: +49 9122 9868-0
Fax: +49 9122 9868-30
E-Mail: info@bruenofix.de

Managing Director:
Ralf S. Schmidt

Nuremberg District Court, HRB 2775
VAT No: DE133509734

Name and contact details of the Data Protection Officer:

Ms. Gisela Pöllinger
Datenschutz Pöllinger GmbH
Dresdner Str. 38
92318 Neumarkt
Tel.: 09181/2705770
Email: datenschutz@datenschutz-poellinger.de

Scope of processing and origin of data

Purpose of and legal basis for processing Art. 6, (1) a, b, f GDPR

Applicant data: 

Collection, processing or use of personal data of applicants only as necessary for the implementation and processing of the application procedure and evaluation of the extent of suitability for the post concerned. 

The processing of your application data is necessary to be able to determine the reasons for employment. The main legal basis for this is Art. 6, (1) b GDPR. Where the use of your personal data is based on your consent, you can revoke such consent with effect for the future at any time. The processing of particular categories of personal data (e.g. health data) is based on your consent in compliance with Art. 9, (2) a GDPR, unless otherwise allowed by pertinent legislation such as Art. 9, (2) b. 

Your application data will be handled confidentially at all times. If we need to process your application data for any other purpose than that described above, we will inform you beforehand.

Origin (source) and categories of personal data that are processed

The personal data categories being processed include your master data in particular (first name, surname, name affixes, citizenship), contact data (private address, mobile telephone number, e-mail address) and other data pertaining to the application process (cover letter, references, questionnaires, interviews, qualifications and previous activities). If you have voluntarily provided special categories of personal data in your application documentation or during the application process (e.g. health data, religion, degree of disability), this data will only be processed if you have provided consent or where allowed by pertinent legislation. Your personal data is usually provided directly by you during the recruitment process. We may also obtain data from third parties (e.g. job placement agencies) who have previously received your data from you. We also process personal data that we have obtained from publicly available reliable sources (e.g. professional social networks). Your data is also processed on the basis of Article 6 (1), lit. b GDPR. 

Recipients (categories) of personal data

Within the company, only those persons and departments who require your personal data for decision making and for compliance with (pre)-contractual and legal obligations will receive your personal data (e.g. Management, Human Resources, applicable Departments, Works Council, disabled employees' representative). 

External authorities (contractual partners) insofar as they are necessary for contract fulfilment. 

External contractors (service providers) in compliance with Art. 28 GDPR required for handling data processing on our behalf. 

• EDP service providers, personnel consultants, recruiters, temporary work agencies, disposal service providers, etc.

Other external authorities: Companies belonging to the group or other external authorities required for fulfilment of the purposes mentioned above, provided that the person concerned has consented in writing, where this is necessary for contract fulfilment or where data transfer is permitted by overriding legitimate interest:

• Such as e.g. credit institutions, salary payments, tax accountant

Transfers to third countries

Personal data transfer outside of the European Union will not take place.

Duration of storage / Deletion

In compliance with legal retention period:

3 months

• Speculative applications (e-mail), digital applications in general

6 months

• Applications in response to job advertisements, taking into account the General Equal Treatment Act (AGG)

We will delete your personal data at the latest six months following conclusion of the application process in the event that employment does not occur. This does not apply if legal provisions contradict this requirement or if further retention is necessary for purposes of evidence or if you have given consent for a longer period of retention. If we cannot offer you a post, but we think your profile may be of interest to us for future vacancies, we will keep your personal application data for longer if you give us your express consent to do so.

The following data will be deleted in compliance with Art. 17 GDPR:

• When storage of the data is no longer necessary 
• When the person concerned has withdrawn their consent for data processing
• When the data has been unlawfully processed
• When a legal duty to delete is applicable according to EU or national law

Rights of the data subject

• Information concerning the data stored in relation to the person (Art. 15 GDPR) The data subject can request information about the purposes of the processing, the categories of personal data concerned, the categories of recipient to whom the personal data have been or will be disclosed, the envisaged period for which the personal data will be stored, the existence of the right to request rectification, erasure, restriction of processing or to object to such processing, the right to lodge a complaint with a supervisory authority, the source of the data if not collected by us, the existence of automated decision-making, including profiling and, where applicable, meaningful information about the details involved.
• Rectification - Where incorrect personal data is processed (Art. 16 GDPR) 
• Deletion and restriction, as well as objection to processing (Art. 17, 18 and 21 GDPR)
• Right to receive the personal data (Art. 20 GDPR) you have provided to us in a structured, commonly used and machine-readable format and to request transfer of those data to another controller.
• Withdrawal of consent (Art. 7, (3) GDPR). This will mean that we will no longer be able to process the data to which this consent relates.
• Right to lodge a complaint with a relevant supervisory authority (Art. 77 GDPR). 
  Our data protection authority is: 
  Bayerisches Landesamt für Datenschutzaufsicht, Promenade 27, 91522 Ansbach

Right to object

Insofar as your personal data is processed on the basis of legitimate interests in compliance with Art. 6, (1), f GDPR, you have the right to object on grounds relating to your particular situation. We will then no longer process your personal data unless we can provide compelling legitimate grounds for such processing that override your interests, rights and freedoms or where such processing necessary for the establishment, exercise or defence of legal claims. You have the right to refuse permission for processing of your personal data for purposes of direct marketing without giving any reasons.

Right to revocation of consent

Every data subject has the right, in the sense of Art. 6, (1 ) a or Art. 9, (2) a, to revoke individual or all consents that may have been provided for e.g. contract fulfilment at any time and without any personal disadvantage without this revocation affecting the lawfulness of the processing implemented under consent up until revocation.

Please send any revocation of consent or objections in writing to:

DEWE Brünofix GmbH
Fabrik für Metallchemie
Pruppacher Weg 8
D-91126 Rednitzhembach
E-Mail: datenschutz@bruenofix.de

Automated decision-making and profiling

No automated decision-making processes (Art. 22 GDPR) or other profiling measures (Art. 4 GDPR) are implemented.

This information obligation relating to data protection is currently valid as of May 2019.

It may become necessary to edit this information due to various reasons, including changes to legal or governmental provisions. The currently valid information obligation relating to data protection can be called up and downloaded at any time from the website www.bruenofix.de.