Datenschutzerklärung Bewerber

Information regarding the collection and processing of personal data in accordance with the General Data Protection Regulation and Federal Data Protection Act (BDSG) during the application process for Hermann Hartje KG

1. Collection and processing of personal data and origin of data

During the application process, we process the following personal data: Master data (first name, last name, titles, date of birth etc.), work permit/residence permit where relevant, contact details (private address, (mobile) phone number, email address), skill data (e.g. particular knowledge and abilities), suitability of health condition (if relevant for the position), and additional data from the application documents where relevant (qualification, activities, certificates etc.). We also process the personal data associated with your (unsolicited) application and which you have provided to us voluntarily.

In principle, your personal data is collected directly from you during the application process, in particular from the application documents which you submit to us. Apart from this, we may receive data from personnel consultants and recruiters as part of a recruitment process. Furthermore, personal data which we have reliably obtained from publicly accessible sources (e.g. professional networks) may also be processed. In order to consider your (unsolicited) application, we need you to provide the personal data which are required for the decision regarding whether to establish an employment relationship.

2. Purposes and legal basis of processing

We process your personal data in line with the provisions of the GDPR and the BDSG. First and foremost, data processing serves the purpose of making a decision regarding whether to establish an employment relationship, in order to evaluate whether you are well-suited and possess the relevant skills and professional performance for the position you are applying for. We also use your personal data in order to contact you and arrange an interview if relevant. The predominant legal basis for this processing is Art. 88 (1) of the GDPR in conjunction with Section 26 (1) of the BDSG. Your data will exclusively be processed to fill the specific position or in the context of an unsolicited application. In addition, the processing of health data may be necessary in order to asses your capacity for work in accordance with Art. 9 (2)(h) GDPR in conjunction with Section 22 (1)(b) BDSG.

If an employment relationship is established between you and our company, we will continue to process the personal data we have received from you in accordance with Art. 88 GDPR in conjunction with Section 26 BDSG for the purposes of the employment relationship insofar as this is necessary for performance or termination of the employment relationship or to exercise or fulfil the rights and obligations associated with protecting the employee’s interests arising from a law or collective bargaining agreement, a company or service agreement (collective agreement).

If you would like to be included in our applicant pool in the event that you are not hired for the position, we require a declaration of consent from you. If your application comes into consideration for other vacant positions in the company, we also require a declaration of consent (Art. 6 (1)(a) GDPR) from you.

3. Use and disclosure of personal data

Within our company, only those persons and entities receive your personal data who are involved in the decision regarding your hiring, insofar as this is necessary for the decision about whether to establish an employment relationship. We may transfer your personal data to affiliated companies insofar as this is permitted in the context of the purposes and legal bases outlined under Clause 2 and this transfer is necessary in order to fill the position.

Your personal data will also be processed on our behalf based on a contract processing agreement pursuant to Art. 28 GDPR. We will then ensure that the processing of personal data occurs in compliance with the Information regarding collection and processing of personal data in accordance with the General Data Protection Regulation and Federal Data Protection Act (BDSG) during the application process for Hermann Hartje KG Page 2/2 provisions of the GDPR. In this case, the categories of recipients are providers of Internet services as well as providers of applicant management systems and software. Apart from this, any further transfer of data to recipients outside the company will only occur insofar as legal provisions permit or require this, if disclosure is necessary to fulfil legal obligations or if you have granted us your consent.

4. Duration of data storage

We only store your personal data for as long as this is necessary for the decision regarding your application. Your personal data or application documents will be deleted no later than six months after the end of the application process (e.g. notification of negative decision) unless longer storage is legally required or permitted. In addition, we will only store your personal data insofar as this is required by law or in the specific case for the assertion, exercise or defence of legal claims for the duration of a legal dispute. If you have consented to a longer storage of your personal data, we will save this according to the specifications in your declaration of consent. If an employment, training or internship relationship results after the application process, your data will initially continue to be stored and then transferred to personnel files where required and permitted.

In certain circumstances, you will receive an invitation to be included in our talent pool after the application process. This gives us the opportunity to consider you in the future during our applicant selection for suitable vacancies. If we have a relevant declaration of consent from you, we will store your application documents in our talent pool according to the specifications of your consent or future consent.

5. Data transfer to third countries

In principle, we will not transfer your applicant to third countries (countries outside the European Union) or to an international organisation.

6. Obligation to provide data

In order to consider your application, we need you to provide the personal data which are required for the decision regarding whether to establish an employment relationship.

7. Use of automated decision-making processes in individual cases or profiling measures

We do not use any purely automated processing operations to reach a decision.

8. Your rights

You can assert the following rights: Access to information in accordance with Art. 15 GDPR regarding the personal data which we have saved concerning you. Rectification in accordance with Art. 16 GDPR. If your personal data which we have saved is inaccurate or complete, you have the right in accordance with Art. 16 GDPR to demand their rectification or completion. Erasure in accordance with Art. 17 GDPR, as long as this is not opposed by other legal obligations, you have the right to the erasure of your personal data which we have saved. Restriction of processing in accordance with Art. 18 GDPR. You have the right to obtain the restriction of processing, insofar as you contest the accuracy of the personal data, the processing is unlawful but you oppose the erasure of the personal data and we no longer require the data, but you require it for the establishment, exercise or defence of legal claims, or if you have objected to processing pursuant to Article 21 GDPR. Data portability in accordance with Art. 20 GDPR. If the processing was carried out with the help

to request clarification, or assert claims to access information, withdrawal or objections to data protection. You also have the right of complaining to a data protection supervisory authority if you believe that the processing of your personal data is not lawful. The address of the supervisory authority responsible for our company is: State Officer for Data Protection and Freedom of Information for Lower Saxony, Prinzenstr. 5, 30159 Hannover, Germany, Email: poststelle@lfd.niedersachsen.de