Privacy policy for applicants
1. entity responsible for data processing and contact details
Responsible party in the sense of data protection law:
Ansmann AG
Human Resources Department
Industriestrasse 10
97959 Assamstadt
E-mail: bewerbung@ansmann.de
Contact details of our data protection officer:
Data Protection Officer Reinhardt Büschel
Industriestrasse 10
97959 Assamstadt
E-mail: dsb@ansmann.de
2. purposes and legal basis on which we process your data
We process personal data in accordance with the provisions of the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and other applicable data protection regulations. Details in the following. Further details or additions to the purposes of data processing can be found in the respective contract documents, forms, a declaration of consent and other information provided to you.
2.1. purposes within the scope of your consent (Art. 6 para. 1 a DSGVO)
Your personal data may also be processed for certain purposes (e.g. obtaining references from previous employers or using your data for subsequent vacancies) on the basis of your consent. As a rule, you can revoke this consent at any time. You will be informed separately about the purposes and consequences of revoking or refusing consent in the relevant text of the consent. As a general rule, the revocation of consent only takes effect for the future. Processing that took place before the revocation is not affected by this and remains lawful.
2.2. purposes for the fulfillment of a contract or pre-contractual measures (Art. 6 para. 1 b DSGVO).
Your personal data is processed for the purpose of processing your application in response to a specific job advertisement or as an unsolicited application, and in this context in particular for the following purposes: examination and assessment of your suitability for the vacant position, performance and conduct evaluation to the extent permitted by law, if necessary for registration and authentication for the application via our website, if necessary. for drawing up the employment contract, verifiability of transactions, orders and other agreements as well as for quality control through appropriate documentation, measures to fulfill general due diligence obligations, statistical evaluations for corporate management, travel and event management, travel booking and travel expense accounting, authorization and badge management, cost recording and controlling, reporting, internal and external communication, accounting and tax assessment of company services (e.g., canteen meals), accounting and tax assessment of company services (e.g., canteen meals), accounting and tax assessment of company services (e.g., canteen meals).(e.g., canteen meals), billing via company credit card, occupational health and safety, contract-related communication (including scheduling appointments) with you, assertion of legal claims and defense in legal disputes; ensuring IT security (including system and plausibility tests) and general security, e.g. Building and facility security, safeguarding and exercising domiciliary rights by means of appropriate measures and, if necessary, video surveillance for the protection of third parties and our employees, as well as for the prevention and preservation of evidence in the event of criminal acts; guaranteeing the integrity, prevention and investigation of criminal acts; authenticity and availability of data, control by supervisory bodies or control authorities (e.g. auditing).
2.3. purposes to comply with legal requirements (Art. 6 para. 1 c DSGVO) or in the public interest (Art. 6 para. 1 e DSGVO).
Like everyone involved in business, we are also subject to a large number of legal obligations. Primarily, these are legal requirements (e.g., Works Constitution Act, Social Code, commercial and tax laws), but also, where applicable, regulatory or other official requirements (e.g., employers' liability insurance association). The purposes of processing may include identity and age verification, fraud and money laundering prevention (e.g. matching with European and international anti-terror lists), company health management, ensuring occupational safety, fulfilling control and reporting obligations under tax law, and archiving data for data protection and data security purposes, as well as for the purposes of audits by tax advisors/auditors, tax and other authorities. In addition, the disclosure of personal data may become necessary in the context of official/court measures for the purposes of gathering evidence, criminal prosecution or the enforcement of civil law claims.
2.4. purposes within the scope of a legitimate interest of us or third parties (Art. 6 para. 1 f DSGVO)
Beyond the actual fulfillment of the (preliminary) contract, we may process your data if it is necessary to protect the legitimate interests of us or third parties. Your data will only be processed if and insofar as there are no overriding interests on your part that speak against such processing, such as in particular for the following purposes: measures for the further development of existing systems, processes and services; comparisons with European and international anti-terrorism lists, insofar as these go beyond the legal obligations; enrichment of our data, including through the use of or research into publicly available data, insofar as this is necessary; benchmarking.This includes the use or research of publicly available data where necessary; benchmarking; development of scoring systems or automated decision-making processes; building and facility security (e.g., through access controls and video surveillance), where this goes beyond general due diligence requirements; internal and external investigations, security audits;
3. the categories of data we process, insofar as we do not receive data directly from you, and their origin
Insofar as this is necessary for the contractual relationship with you and the application you have made, we may process data permissibly obtained from other bodies or other third parties. In addition, we process personal data that we have permissibly obtained, received or acquired from publicly accessible sources (such as commercial and association registers, civil registers, the press, the Internet and other media), insofar as this is necessary and we are permitted to process this data in accordance with the statutory provisions.
Relevant personal data categories may include, in particular, where applicable:
- Address and contact data (registration and comparable data, e.g. e-mail address and telephone number)
- Information about you on the Internet or social networks
4. recipients or categories of recipients of your data
Within our company, those internal departments or organizational units receive your data that need them to fulfill our contractual and legal obligations (such as managers and specialist managers who are looking for a new employee or are involved in the decision on filling a position, accounting, company doctor, occupational safety, employee representatives, etc., if applicable) or within the scope of processing and implementing our legitimate interests. Your data will only be passed on to external bodies as follows
- for purposes where we are obliged (e.g. tax authorities) or entitled to disclose, report or pass on data in order to comply with legal requirements, or where the disclosure of data is in the public interest (see section 2.4);
- to the extent that external service providers process data on our behalf as order processors or function transferees (e.g. credit institutions, external data centers, printers or companies for data disposal, courier services, postal services, logistics);
- on the basis of our legitimate interest or the legitimate interest of the third party for the purposes stated in section 2.2 (e.g. to authorities, credit agencies, lawyers, courts, experts, affiliated companies and committees and supervisory bodies);
- if you have given us consent to transfer the data to third parties.
We will not pass on your data to third parties unless we inform you of this separately. Insofar as we commission service providers within the scope of order processing, your data will be subject there to the security standards specified by us in order to protect your data appropriately. In other cases, the recipients may only use the data for the purposes for which it was transmitted to them.
5. duration of the storage of your data
In principle, we process and store your data for the duration of your application. This also includes the initiation of a contract (pre-contractual legal relationship).
In addition, we are subject to various storage and documentation obligations, which result, among other things, from the German Commercial Code (HGB) and the German Fiscal Code (AO). The retention and documentation periods specified there are up to ten years beyond the end of the contractual relationship or the pre-contractual legal relationship. If you are not hired, your application documents will be returned in their original form after six months. Electronic data will be deleted accordingly after six months. If we wish to store your data for longer for subsequent vacancies or if you have placed your data in an applicant pool, the data will be deleted at later dates; you will be informed of the details in connection with the respective process.
If the data are no longer required for the fulfillment of contractual or legal obligations and rights, they will be deleted on a regular basis, unless their - temporary - further processing is necessary for the fulfillment of the purposes listed under section 2.2 due to an overriding legitimate interest of our company. Such an overriding legitimate interest exists, for example, if deletion is not possible or only possible with disproportionate effort due to the special nature of the storage. In these cases, we may also store your data after the end of our contractual relationship for a period agreed with the purposes and, if necessary, use it to a limited extent. In principle, a restriction of processing takes the place of deletion in these cases. In other words, the data is blocked against the otherwise usual use by appropriate measures.
6. processing of your data in a third country or by an international organization
Data is transferred to countries outside the European Economic Area EU/EEA (so-called third countries) if it is necessary to fulfill a contractual obligation to you (e.g. application for a position abroad), or if it is in the legitimate interest of us or a third party, or if you have given us your consent.
In this context, the processing of your data in a third country may also take place in connection with the involvement of service providers within the scope of commissioned processing. If there is no EU Commission decision on an adequate level of data protection for the country in question, we will ensure that your rights and freedoms are adequately protected and guaranteed in accordance with EU data protection requirements by means of appropriate contracts. Information on the appropriate or adequate guarantees and the possibility of how and where to obtain a copy of these can be obtained on request from the company data protection officer or the HR department responsible for you.
7. your data protection rights
Under certain conditions, you can assert your data protection rights against us. Every data subject has the right to information according to Art. 15 DS-GVO, the right to correction according to Art. 16 DS-GVO, the right to deletion according to Art. 17 DS-GVO, the right to restriction of processing according to Art. 18 DS-GVO and the right to data portability from Art. 20 DS-GVO. With regard to the right to information and the right to erasure, the restrictions pursuant to Sections 34 and 35 BDSG apply. In addition, there is a right of appeal to a data protection supervisory authority (Art. 77 DS-GVO in conjunction with § 19 BDSG).
Your requests to exercise your rights should be addressed in writing, if possible, to the address above or directly to our Data Protection Officer.
8. scope of your obligations to provide us with your data
You only need to provide the data that is required for processing your application or for a pre-contractual relationship with us, or which we are legally obliged to collect. Without this data, we will generally not be able to continue the application and selection process. If we request additional data from you, you will be informed separately about the voluntary nature of the information.
Existence of automated decision-making in individual cases (including profiling)
We do not use any purely automated decision-making processes pursuant to Article 22 of the GDPR. If we do use such a procedure in individual cases in the future, we will inform you separately, provided this is required by law.
Information about your right to object Art. 21 DSGVO
- You have the right to object at any time to the processing of your data based on Art. 6 (1) f DSGVO (data processing based on a balance of interests) or Art. 6 (1) e DSGVO (data processing in the public interest). However, the prerequisite for your objection is that there are reasons arising from your particular personal situation. This also applies to profiling based on this provision within the meaning of Art. 4 No. 4 DSGVO.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims.
You can, of course, withdraw your application at any time. - We do not plan to use your personal data for direct marketing purposes. Nevertheless, we must inform you that you have the right to object to advertising at any time; this also applies to profiling, insofar as it is associated with such direct advertising. We will observe this objection for the future.
The objection can be made form-free and should preferably be addressed to
Human Resources Department
Ansmann AG
Industriestr. 10
97959 Assamstadt
