CETONI GmbH’s data protection declaration on applications
We are pleased that you would like to apply for a position in our company. In the following, we explain how we process your personal data in the context of an application. We also provide additional relevant information on this topic.
1. Who is responsible for processing your personal data?
CETONI GmbH, Wiesenring 6, 07554 Korbussen (hereinafter referred to as “we”) is the responsible party within the meaning of the EU General Data Protection Regulation (“GDPR”).
2. For what purposes and on what legal basis do we process personal data?
We process personal data about you for the purpose of your application for an employment relationship, insofar as this is necessary for the decision on the establishment of an employment relationship with us. The legal basis for this is Section 26 Para. 1 in conjunction with para. 8 p. 2 BDSG.
Furthermore, we can process personal data about you insofar as this is necessary to defend against legal claims asserted against us from the application process. The legal basis is Art. 6 Para. 1, letter f GDPR, the legitimate interest is, for example, a burden of proof in proceedings under the General Equal Treatment Act (AGG).
As far as there is an employment relationship between you and us, we can, according to § 26 Abs. 1 BDSG, further process the personal data already received from you for the purpose of the employment relationship, if this is necessary for the implementation or termination of the employment relationship or for the exercise or fulfillment of the rights and obligations arising from a law or a collective agreement, a company or service agreement (collective agreement) and the representation of the interests of the employees.
3. Which categories of personal data do we process?
We process data related to your application. This can be general data about yourself (such as your name, address and contact details), information about your professional qualifications and school education or information about professional training or other information that you provide to us in connection with your application.
In addition, we can process job-related information that you have made publicly available, such as a profile on professional social media networks.
4. What categories of recipient data are there?
We can transfer your personal data to companies affiliated with us, provided this is within the scope of the provisions set out in no. 3. In addition, personal data is processed on our behalf on the basis of contracts in accordance with Art. 28 GDPR, in particular by host providers or providers of applicant management systems.
5. Is the transfer to a third country intended?
A transfer to a third country is not intended.
6. How long will your data be stored?
We store your personal data for as long as it is necessary to decide on your application. If there is no employment relationship between you and us, we can also continue to store data insofar as this is necessary to defend against possible legal claims. The application documents will be deleted two months after notification of the rejection decision, unless longer storage is necessary due to legal disputes.
7. What are your rights?
As an applicant with us, you have the following data protection rights. You can contact us regarding these rights using the contact information provided in no. 1 and 2:
- a. You have the right to receive information about your personal data processed by us and to request access to your personal data and/or copies of this data. This includes information about the purpose of use, the category of data used, their recipients and authorized users and, if possible, the planned duration of data storage or, if this is not possible, the criteria for determining this duration;
- b . Correction, deletion or restriction of processing: You have the right to require us to correct any incorrect personal data concerning you without delay. Taking into account the purposes of processing, you have the right to request the completion of incomplete personal data – including by means of a supplementary declaration.
- c. Right of objection: Insofar as the processing of your personal data takes place on the basis of Art. 6 Paragraph 1 Letter f GDPR, you have the right to object to the processing of this data at any time, for reasons that arise from your particular situation. We will then no longer process this personal data, unless we can prove compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
- d. Right of withdrawal: If the processing is based on consent, you have the right to withdraw your consent at any time without affecting the legality of the processing carried out on the basis of the consent up to the point of withdrawal. You can contact us or our data protection officer at any time using the above information.
- e. Right to deletion: You have the right to demand that we delete personal data relating to you immediately, and we are obligated to delete personal data immediately if one of the following reasons applies:
- The personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
- You object to the processing of data in accordance with number 7.c above and there are no overriding legitimate reasons for processing.
- The personal data was processed unlawfully.
- The deletion of personal data is necessary to fulfill a legal obligation under Union law or the law of the member states to which we are subject. This does not apply if the processing is necessary:
- to fulfill a legal obligation that requires processing under the law of the Union or of the member states to which we are subject.
- to assert, exercise or defend legal claims.
- f. Right to restriction of processing: You have the right to request that we restrict processing, if one of the following conditions is met:
- the correctness of the personal data is contested by you for a period that enables us to check the correctness of the personal data,
- the processing is unlawful and you refuse to delete the personal data and instead request that the use of the personal data be restricted;
- we no longer need the personal data for the purposes of processing, but you need them to assert, exercise or defend legal claims, or
- you have lodged an objection to the processing in accordance with number 7.c above, as long as it has not yet been determined whether our legitimate reasons outweigh yours.
If processing has been restricted in accordance with this letter f, these personal data – apart from their storage – may only be processed with your consent or for the establishment, exercise or defense of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of an important public interest of the Union or a member state. If you have obtained a restriction on processing, we will inform you before the restriction is lifted.
- g. Right to lodge a complaint: Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your place of residence, your place of work or the place of the alleged infringement, if you are of the opinion that the processing of your personal data violates GDPR provisions.
8. Necessity of providing personal data
The provision of personal data is not required by law or contract, nor are you obligated to provide personal data. However, the provision of personal data is necessary for the conclusion of an employment contract with us. This means that if you do not provide us with any personal data in an application, we will not enter into an employment relationship with you.