Information on the Processing of Your Personal Data
With the following information, we inform you about how your personal data is processed when you apply to us or express interest in becoming a supplier or partner. Please also refer to the general information provided under “General Information.”
Collection of Your Personal Data During the Application Process
We generally collect your personal data from the information you provide. Personal data includes all information relating to an identified or identifiable natural person, allowing you to be identified directly or indirectly.
When you apply to us, we collect the information you submit in your application documents, whether by post, email, or online via our career portal. The same applies if, for example, a recruitment agency forwards your application documents to us.
If your application is successful and an employment relationship is established, your data will be stored in your personnel file. We will also need to collect additional personal data required to carry out the employment relationship.
This includes, for example, personal identification and contact details (e.g. name, address, date of birth, religion, nationality, gender, marital status, email address, phone number), payment details (e.g. your IBAN), information about your work or residence permit, qualification data (e.g. school diploma, vocational training), CV, employment references, health insurance affiliation, tax ID number, insurance details, and, if applicable, information about severe disability status.
Providing your personal data is necessary; otherwise, it may not be possible to establish an employment relationship.
To manage the employment relationship, it may also be necessary to process personal data that we have lawfully received from other companies or third parties, such as social security institutions, for the relevant purpose.
Purposes and Legal Bases for Processing During the Application Process and Employment Relationship
Your personal data is processed in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).
To establish, carry out, and terminate the employment relationship:
We process your personal data as necessary to establish, carry out, and terminate the employment relationship. The legal basis is § 26 (1) sentence 1 BDSG. This includes, for example, assessing your qualifications during the application process, transferring your bank details for salary payments, or recording your working hours.
To fulfill legal obligations:
We also process your personal data where required by law. The legal basis is likewise § 26 (1) sentence 1 BDSG. For example, we must transmit certain data to tax authorities and social security institutions.
Based on your consent:
If none of the above legal bases apply, we process your personal data based on your explicit consent. The legal basis is § 26 (2) BDSG. This applies, for example, to the publication of photos on our website. You may withdraw your consent at any time with future effect. Processing that occurred before the withdrawal remains unaffected.
To detect criminal offenses:
Your personal data may be processed to detect criminal offenses if documented factual indications justify the suspicion that you committed a crime during the employment relationship, the processing is necessary for detection, and your legitimate interest in excluding the processing does not outweigh it. The legal basis is § 26 (1) sentence 2 BDSG.
Who Receives Your Personal Data?
Within our company, only those departments that require your personal data to fulfill contractual and legal obligations and are authorized to process such data will have access. In the case of applications, only those involved in the recruitment process will have access.
External parties may receive your data if required by law or necessary to fulfill the employment relationship, e.g. your bank, social security institutions, health insurance providers, tax authorities, professional associations, auditors, etc.
In the course of our operations, we may engage data processors who support us in delivering our services, such as data center providers, IT partners, document shredding services, external payroll accountants, etc. These processors are contractually obligated to maintain professional confidentiality and comply with GDPR and BDSG requirements.
Special Notes for Online Applications
If you choose to apply online, your personal data will be collected via an input form and stored in a database. Both are provided by the service provider d.vinci HR-Systems GmbH, Nagelsweg 37–39, 20097 Hamburg. We have entered into a data processing agreement with d.vinci HR-Systems GmbH to ensure that data protection standards are upheld just as they are within our company.
Will Your Data Be Transferred to Third Countries or International Organizations?
Your personal data is not currently transferred to recipients outside the European Economic Area, nor is such a transfer planned.
