Privacy Policy - Careers
Dear applicant,
Thank you for your interest in our company. In accordance with the provisions of Articles 13, 14, and 21 of the General Data Protection Regulation (GDPR), we hereby inform you about the processing of personal data that you have provided during the application process and that we may have collected, as well as your rights in this regard. To ensure that you are fully informed about the processing of your personal data as part of the application process, please take note of the following information.
1. RESPONSIBLE BODY WITHIN THE MEANING OF DATA PROTECTION LAW
Stiegelmeyer GmbH & Co. KG
Ackerstraße 42
32051 Herford
Telefon +49 (0) 5221 185 – 0
2. CONTACT DETAILS OF OUR DATA PROTECTION OFFICER
Stiegelmeyer GmbH & Co. KG
- Der Datenschutzbeauftragte -
Ackerstraße 42
32051 Herford
3. PURPOSES AND LEGAL BASIS OF PROCESSING
We process your personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG), insofar as this is necessary for the decision on the establishment of an employment relationship with us. The legal basis for this is Art. 88 GDPR in conjunction with § 26 BDSG for the purposes of the employment relationship, if this is necessary for the decision on the establishment of an employment relationship.
Furthermore, we may process your personal data if this is necessary to fulfill legal obligations (Art. 6 (1) (c) GDPR) or to defend or assert legal claims. The legal basis for this is Art. 6 (1) (f) GDPR. The legitimate interest is, for example, a burden of proof in proceedings under the General Equal Treatment Act (AGG).
If you give us your express consent to process personal data for specific purposes, the lawfulness of this processing is based on your consent in accordance with Art. 6 (1) (a) GDPR. Consent that has been given can be revoked at any time with effect for the future (see section 9 of this privacy policy).
If an employment relationship is established between you and us, we may, in accordance with Art. 88 GDPR in conjunction with § 26 BDSG, further process the personal data already received from you for the purposes of the employment relationship, insofar as this is necessary for the performance or termination of the employment relationship or for the exercise or fulfillment of the rights and obligations of employee representation arising from a law or a collective agreement, a works agreement or a service agreement (collective agreement).
Your data will also be processed in order to be able to use the tool in question for the purposes of communication and collaboration. Furthermore, your data may be processed for the purposes of information security and to ensure the functional security and stability of the IT systems.
4. CATEGORIES OF PERSONAL DATA
We only process data that is relevant to your application. This may include general personal data (name, address, contact details, etc.), information about your professional qualifications and education, information about professional development, and any other data that you provide to us in connection with your application.
In addition, various types of data are processed in the course of communication between you and us, depending on the tool used. Such processing may include identification data (e.g., names, addresses, email), content data (e.g., text entries, audio data, videos, documents), usage data (e.g., websites visited, time of access, date, type of access, information about the data/files/documents accessed), meta/communication data (e.g., IP addresses, device/hardware information, location data if released by the user, live transmission of sound and images).
5. SOURCES OF DATA
We process personal data that we receive from you by post or email when you contact us or submit an application.
6. RECIPIENTS OF DATA
We only share your personal data within our company with those departments and individuals who need this data to fulfill contractual and legal obligations or to implement our legitimate interests.
We may transfer your personal data to affiliated companies, provided this is permissible within the scope of the purposes and legal bases set out in section 3 of this data protection information sheet.
Your personal data will be processed on our behalf on the basis of data processing agreements in accordance with Art. 28 GDPR. In these cases, we ensure that the processing of personal data is carried out in accordance with the provisions of the GDPR. In this case, the categories of recipients are providers of Internet service providers and providers of applicant management systems and software.
Your personal data, which is processed for the purpose of communication and collaboration using the Microsoft 365 tool, is transferred on our behalf to the service provider of Microsoft 365 applications and services on the basis of data processing agreements in accordance with Art. 28 GDPR. Microsoft 365 applications and services are provided by Microsoft Corporation, One Microsoft Way Redmond, WA 98052-6399 USA.
Microsoft provides information about the processing of personal data at https://www.microsoft.com/de-de/privacy/privacystatement.
Please note that we have no influence on Microsoft's data processing. Insofar as personal data is processed in connection with Microsoft's legitimate business transactions, Microsoft is the independent data controller for this use and, as such, is responsible for complying with all applicable laws and obligations of a data controller.
Otherwise, data will only be transferred to recipients outside the company if this is permitted or required by law, if the transfer is necessary to fulfill legal obligations, or if we have your consent.
7. TRANSFER TO A THIRD COUNTRY
A transfer to a third country is generally not intended.
8. DURATION OF DATA STORAGE
We store your personal data for as long as is necessary to make a decision about your application. Your personal data and application documents will be deleted no later than six months after the end of the application process (e.g., notification of rejection), unless longer storage is legally required or permitted. Beyond this, we only store your personal data for as long as is necessary by law or in specific cases to assert, exercise, or defend legal claims for the duration of a legal dispute.
If you have consented to the longer storage of your personal data, we will store it in accordance with your declaration of consent.
If the application process results in employment, training, or an internship, your data will initially continue to be stored, as necessary and permissible, and then transferred to your personnel file.
If applicable, you may receive an invitation to join our talent pool following the application process. This allows us to consider you for suitable vacancies in the future when selecting applicants. If we have your consent, we will store your application data in our talent pool in accordance with your consent or any future consent.
9. YOUR RIGHTS
Every data subject has the right to information under Art. 15 GDPR, the right to rectification under Art. 16 GDPR, the right to erasure under Art. 17 GDPR, the right to restriction of processing under Art. 18 GDPR, the right to notification pursuant to Art. 19 GDPR, and the right to data portability pursuant to Art. 20 GDPR.
In addition, you have the right to lodge a complaint with a data protection supervisory authority pursuant to Art. 77 GDPR if you believe that the processing of your personal data is not lawful. The right to lodge a complaint exists without prejudice to any other administrative or judicial remedy.
If the processing of data is based on your consent, you are entitled to withdraw your consent to the use of your personal data at any time in accordance with Art. 7 GDPR. Please note that the revocation only applies to the future. Processing that took place before the revocation is not affected. Please also note that we may be required to retain certain data for a specific period of time in order to comply with legal requirements (see section 8 of this privacy policy).
Right to object
If your personal data is processed in accordance with Art. 6 (1) (f) GDPR to safeguard legitimate interests, you have the right under Art. 21 GDPR to object to the processing of this data at any time for reasons arising from your particular situation. We will then no longer process this personal data unless we can demonstrate compelling legitimate grounds for the processing. These must outweigh your interests, rights, and freedoms, or the processing must serve to assert, exercise, or defend legal claims.
To exercise your rights, you can contact us using the contact details provided in section 1.
10. NECESSITY OF PROVIDING PERSONAL DATA
The provision of personal data for the proper execution of an employment relationship (e.g., employment contract) is voluntary. However, we can only conclude or execute an effective employment relationship with you if you provide the personal data necessary for the commencement and execution of the employment relationship when the employment relationship is concluded.
11. AUTOMATED DECISION-MAKING
The decision regarding your employment relationship is not based solely on automated processing. This means that no automated decision-making takes place in individual cases within the meaning of Article 22 GDPR.