Data Processor
Name and contact details of the controller:
DEWE Brünofix GmbH
Fabrik für Metallchemie
Pruppacher Weg 8
D-91126 Rednitzhembach
Tel.: +49 9122 9868-100
Fax: +49 9122 9868-130
E-mail: info@bruenofix.de
Managing Director:
Ralf S. Schmidt
Nuremberg District Court HRB 2775
VAT registration number: DE133509734
Name and contact details of the data protection officers:
Mrs Gisela Pöllinger
Datenschutz Pöllinger GmbH
Dresdner Str. 38
92318 Neumarkt
Tel.: 09181/2705770
Email: datenschutz@datenschutz-poellinger.de
Scope and origin of the data
Purpose and legal basis for the processing Art. 6, paragraph 1, a) b) f) DSGVO
Applicant data:
The collection, processing or use of personal data of applicants is carried out for the purpose of conducting and processing the application procedure and assessing the extent to which a candidate is suitable for a position.
The processing of your applicant data is necessary to decide on the establishment of an employment relationship. The primary legal basis for this is Art. 6 (1) b) GDPR. If the processing of your data is based on consent, you have the right to withdraw your consent at any time with effect for the future. The processing of special categories of personal data (e.g. health data) is based on your consent in accordance with Art. 9 (2a) GDPR, unless legal authorisation such as Art. 9 (2b) is applicable. Your applicant data will be treated confidentially at all times. Should we wish to process your applicant data for a purpose not mentioned above, we will inform you in advance.
Origin (source) and categories of personal data that are processed
The categories of personal data processed include, in particular, your master data (first name, last name, name affixes, nationality), contact data (private address, (mobile phone number, email address) and other data from the application process (cover letter, certificates, questionnaires, interviews, qualifications and previous activities). If you have also voluntarily provided special categories of personal data (e.g. health data, religious affiliation, degree of disability) in your application letter or during the application process, processing will only take place if you have consented to this or if a legal authorisation justifies it. As a rule, your personal data is collected directly from you as part of the recruitment process. In addition, we may have received data from third parties (e.g. employment agencies) to whom you have provided your data for forwarding. We also process personal data that we have legitimately obtained from publicly accessible sources (e.g. professional social networks). The processing of your data is carried out in this respect on the basis of Article 6 (1) (b) GDPR.
Recipients (categories) of personal data
Within the company, your personal data will only be made available to those individuals and departments (management, human resources, specialist departments) who require it for the recruitment decision and to fulfil our pre-contractual/contractual and legal obligations.
External bodies (contractual partners) insofar as these are necessary for the fulfilment of the contract. External contractors (service companies) in accordance with Art. 28 GDPR for the processing of data on our behalf.
- IT service providers, personnel brokers, temporary employment agencies, waste disposal service providers
Other external bodies, group-affiliated companies or other external bodies for the fulfilment of the above-mentioned purposes, insofar as the data subject has given his written consent, this is necessary for the fulfilment of the contract or a transmission is permissible for reasons of overriding legitimate interest.
- Credit institutions Salary payments, tax consultants
Transfer to third countries
Personal data is not transferred outside the European Union.
Duration of storage / Deletion
After the legal retention period:
- 3 months Speculative applications (email), general digital applications
- 6 months Applications in response to job advertisements to comply with the General Equal Treatment Act (AGG)
We will delete your personal data no later than six months after completion of the application process if an employment relationship is not established. This does not apply if legal provisions prevent the deletion or if further storage is necessary for the purpose of providing evidence or if you have consented to longer storage. If we are unable to offer you a position, but believe, based on your profile, that your application may be of interest for future job offers, we will store your personal application data beyond this time, provided that you have given your express consent to do so.
In accordance with Article 17 of the GDPR, the corresponding data will also be deleted if:
- the storage of the data is no longer necessary
- the data subject has withdrawn their consent to the data processing
- the data has been unlawfully processed
- there is a legal obligation to delete under EU or national law.
Rights of the data subject
- Information about the data stored about you (Article 15 of the GDPR). In particular, you can request information about the purposes of the processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the source of your data if it was not collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information about the details.
- Rectification – If incorrect personal data is processed (Art. 16 GDPR),
- erasure and restriction as well as objection to the processing (Art. 17, 18 and 21 GDPR).
- Right to data portability (Art. 20 GDPR) to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format or to request transmission to another controller.
- Withdrawal of consent (Art. 7 (3) GDPR). As a result, we are no longer allowed to continue the data processing based on this consent in the future
- Right to lodge a complaint with the competent supervisory authority (Art. 77 GDPR).
The data protection supervisory authority responsible for us is:
Bayerisches Landesamt für Datenschutzaufsicht, Promenade 27, 91522 Ansbach, Germany
Right to object
If we process your data to protect legitimate interests in accordance with Art. 6 (1) f) GDPR, you can object to this processing for reasons arising from your particular situation. We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims. You have the right to object, without any indication of reasons, to the processing of your personal data for direct marketing purposes.
Right to revoke consent
Every data subject has the right within the meaning of Art. 6 (1) a) or Art. 9 (2) a) to revoke at any time and without detriment to himself or herself individual or all consents that were granted for the purpose of fulfilling a contract, for example, without affecting the lawfulness of the processing carried out on the basis of the consent up to the revocation.
Please address the revocation of consent and objection in writing to:
DEWE Brünofix GmbH
Fabrik für Metallchemie
Pruppacher Weg 8
D-91126 Rednitzhembach
E-Mail: datenschutz@bruenofix.de
Automated decision-making and profiling
No automated decision-making processes as per Art. 22 GDPR or other profiling measures as per Art. 4 No. GDPR are used.
Validity of and changes to this information obligation in accordance with Art. 13 and Art. 14 GDPR
This data protection information obligation is currently valid and is dated July 2019.
It may be necessary to change this information due to, among other things, changes in legal or official requirements. You can access and print out the current data protection information at any time on the website www.bruenofix.de.