Information relating to the data obtained by us within the framework of the application (irrespective of whether by post or email)
1. General information:
a) If you would like to apply for a job with the LHD Group Deutschland GmbH, either by post or by email, you will need to provide us with at least the following information:
- Your full name
- Your postal or electronic contact address
- A cover letter
- Your CV
There is no legal or contractual obligation to provide this data. However, your application cannot be processed if you do not disclose this information.
b) Please also inform us whether you agree to your data being retained for a period of up to 12 months, so that we can contact you in the event of future vacancies. This is voluntary.
c) Please note that if you send your application by email without using encryption technology, your application will not be encrypted end-to-end and we cannot guarantee the unilateral security of the data.
2. Purposes of the processing and legal basis
a) We process the data transferred within the framework of the application exclusively for the purpose of being able to process your application. The underlying legal basis is your consent pursuant to Article 6, Paragraph 1(a) of the GDPR and, insofar as special types of personal data (e.g. details relating to health, religion, ethnic origin, political opinions or other particularly ‘sensitive’ data) are involved, your consent pursuant to Article 9, Paragraph 2(a) of the GDPR. If you wish to exclude these special types of personal data from being processed by us in principle, we request you to remove such details from the application documents, or to render them unrecognisable and, therefore, not to submit them.
b) You can revoke your consent at any time either in full or in part with future effect. In order to do so, simply send an email to email@example.com, stating your full name and address. Of course, you can also inform us that you wish to revoke consent by sending a letter to LHD Group Deutschland GmbH, Herseler Straße 20, 50389 Wesseling, Germany. Please note that it may then be no longer possible for your application to be considered, or to be considered in the submitted form.
c) In the event of a successful application, we would like to point out already that the data provided will also be used for personnel matters within the framework of your employment, on the basis of Article 88 of the GDPR in connection with Section 26 of the new version of the Federal Data Protection Act (BDSG).
d) Furthermore, the data is processed pursuant to Article 6, Paragraph 1(f) of the GDPR for the protection of our legitimate interests in connection with the application process. Legal claims between the parties can also result from this (e.g. claims pursuant to the General Equal Treatment Act, pre-contractual claims for compensation). The processing of personal data may therefore be necessary for the establishment or defence of such claims.
3. Recipient of your data
a) Your application (irrespective of whether by post or email) is exclusively brought to the attention of and processed by employees tasked with the application process. These are selected employees from the HR/IT department and the respective manager from the department where the advertised position is located. All employees tasked with processing data are obliged to respect the confidentiality of your data.
b) Furthermore, it may the case in certain circumstances that other IT service providers, if they carry out maintenance work or other IT-related services for us, gain an insight into your data.
c) We will only disclose your personal data to third parties if an appropriate legal or contractual obligation to do so exists and insofar as this is necessary and legally permissible.
4. Retention period
a) Your data is processed, in principle, for the duration of the application process. If we are not able to offer you employment, we will retain the data provided by you for a maximum of six months after conclusion of the application procedure (sending the rejection letter). This is necessary in order to be able to respond to questions related to the rejection and, if necessary, to comply with the legal burden of proof, for example arising from the General Equal Treatment Act.
b) In the event that you have given your consent for this and we expect to be able to offer another vacancy in the near future that corresponds to your application profile, we will store your data for up to 12 months after conclusion of the application procedure (sending the rejection letter), in order to contact you in the event of any new job vacancies.
c) You can withdraw your application at any time. In this case, your data will be deleted immediately. However, in this case too, we also reserve the right to retain certain data, as described in 4(a).
d) In the event of a successful application, the data provided by you can be used for necessary personnel matters within the scope of your employment. In this case, the data is retained for the duration of the employment relationship. This data will then be deleted after termination of the employment relationship, at the latest after expiry of the legal limitation period or contractual limitation period applicable to the employment relationship.
5. Right of revocation, right of access and other rights
a) Pursuant to Article 15 of the GDPR, you have the right to receive information about the personal data concerning you that we have processed. In particular, you can request information about:
- The purposes of the processing
- The nature of the collected data
- The categories of recipients
- The envisaged period for which the data will be stored
- The existence of the right to rectify, erase or restrict the processing of data or to object to such processing
- The right to lodge a complaint
- The source of your data, insofar as it wasn’t collected by us
- The existence of automated decision-making, including profiling and, at least in those cases, meaningful information about the details involved.
b) Pursuant to Article 7, Paragraph 3 of the GDPR, you have the right to withdraw your consent at any time. As a result, we will no longer be permitted to continue processing the data that was based on this consent in future.
c) Furthermore, you can object to the data processing – insofar as this takes place on the basis of protecting our legitimate interests in accordance with Article 6, Paragraph 1(f) of the GDPR – pursuant to Article 21 of the GDPR, insofar as there are grounds to do so relating to your particular situation or the objection relates to direct marketing. In the latter case, you have a general right of objection, which is permissible without specifying a specific situation.
d) Pursuant to Article 16 of the GDPR, you have a right to rectify inaccurate data and to have incomplete personal data completed.
e) Pursuant to Article 18 of the GDPR, you have the right to restrict processing of your data insofar as you contest the accuracy of the data, the processing is unlawful but you oppose its erasure and we no longer need the data but you require it for the establishment, exercise or defence of legal claims or you have objected to processing pursuant to Article 21 of the GDPR.
f) In accordance with Article 17 of the GDPR, you have a right to erase the personal data we have stored if one of the grounds for erasure provided in Article 17 of the GDPR applies (if the data is no longer necessary in relation to the purposes for which it was collected, if you have withdrawn your consent and there is no other legal ground for the processing, if you have lawfully objected to the processing pursuant to Article 21 of the GDPR, if the data has been unlawfully processed or if the erasure is necessary for a compliance with a legal obligation to which we are subject), unless the processing is necessary for exercising our right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims.
g) Furthermore, pursuant to Article 20 of the GDPR, you have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that that data is transmitted to another controller.
h) Please send your requests for information and other queries, including any objections or revocations, stating your full name, to firstname.lastname@example.org or by post to LHD Group Deutschland GmbH, Herseler Straße 20, 50389 Wesseling, Germany.
i) Furthermore, you have the right to submit a complaint to a data protection supervisory authority if you believe that the processing of your personal data contravenes statutory data protection regulations. This can take place with the supervisory authority responsible for the data controllers, for example. The supervisory authority responsible for the LHD Group Deutschland GmbH is the Data Protection and Freedom of Information Officer for North Rhine-Westphalia, Kavalleriestr. 2-4, 40213 Düsseldorf, Germany.