Mandatory information for applicants

We collect and use the personal data of our applicants only to the extent necessary to carry out the application process. The protection of our applicants’ personal data is important to us. We therefore process personal data in accordance with the applicable legal provisions on the protection of personal data and data security.

I. Contact information of the controller

The controller as per the General Data Protection Regulation and other national data protection legislation of the member states as well as other data protection regulations is:

WASSERMANN TECHNOLOGIE GMBH
Sebastian Wassermann, Eberhard Hahl
Bürgermeister-Ebert-Straße 5
36124 Eichenzell
Phone: +49 6659 82-0
E-mail: info@wassermann-technologie.de
Website: www.wassermann-group.com

II. Contact information of the (external) data protection officer

The data protection officer of the controller is:

BerIsDa GmbH
Rangstraße 9
36037 Fulda
Germany
Phone: +49 661 29698090
E-mail: dsb@wassermann-technologie.de
Website: www.berisda.de

III. Description of processing

1. Description and scope of data processing

We collect and process your personal data in order to offer advertised positions and to be able to carry out the selection process. The data you provide will be processed for the purpose of processing your application and, if an employment relationship is established, also for the purpose of implementing the employment relationship.

The primary purpose of data processing is therefore to establish an employment relationship with us. We may process the following categories and types of personal data:

  • General information about you and personal data
    • First name, surname, maiden name, name affixes, gender, private address, postal address if applicable, telephone numbers (landline and mobile), personal e-mail address
    • If provided by you: Date of birth (and age), marital status, religion
    • If it results from your application picture: Information on health characteristics, e.g. glasses or racial and ethnic origin
  • Information about your knowledge and skills
    • CV information, e.g. information about schools, training, and studies, information regarding prior employment (including job title, previous employer, role, department, location), profession experience
    • Information about previous successes, acquired skills
    • Proof of further education/training and passed exams, certificates
  • Information about your desired employment, e.g. start date, site, desired salary
    • such as starting date, place of work, salary expectations

In addition, we collect the following data from you if you provide this information on your application and:

  • If you are not an EU citizen:
    • Information about your citizenship
    • Information about residence documents (residence and work permits)
  • If it is relevant to the advertised position and legally permissible:
    • Information about suitability on health grounds
    • Information about past convictions; information from the criminal record
    • Information about any disabilities
    • Information from the driver’s license (e.g. information about the license category)
  • If you hold other employment: Information about other employment (e.g. main or secondary employment, type)

In addition to the above data, we may process other personal data if you sent us these in your application.

Your personal data is generally collected directly from you as part of the recruitment process, in particular from the application form on our website, the application documents, the job interview and the personnel questionnaire. Furthermore, we may process personal data from publicly accessible sources (e.g. websites, professional networks), which we use permissibly and only for the respective purpose. We also receive data from third parties (e.g. recruitment agencies, recruitment agencies).

The provision of your personal data is neither legally nor contractually required, but is necessary for the application process with us. There is no obligation to provide this data. However, failure to provide it may mean that we are unable to consider your application in the application process for an advertised position. No fully automated decision-making (including profiling) pursuant to Art. 22 GDPR is used to process the data provided by you.

Addition to your talent pool

We offer you the opportunity to have your personal data stored in our talent pool beyond the end of the specific application process and to have it considered for interesting vacancies. During this period, you may be contacted and the application process continued if you are considered for another position.

If you would like to be included in our talent pool in the event of a rejection, we require a declaration of consent from you. If you receive a rejection, you will be referred to our talent pool and given the opportunity to give us your consent. There is a corresponding link in the rejection email, which will redirect you to our website where you can voluntarily give your consent. As soon as you have successfully given your consent, your application will be stored in our talent pool for twenty-four months and you will receive a confirmation email. The confirmation email will contain a revocation link, which you can use to revoke your consent for the entire storage period of twenty-four months. To do this, you will be redirected to our website where you will have the opportunity to withdraw your consent. After successful revocation, you will receive a confirmation email. In this case, your data will be deleted immediately.

If you have provided us with “special categories of personal data” as per art. 9 GDPR in the documents submitted for the application process, your consent will apply to this information as well.

Entering into an employment contract

If there is an employment relationship between you and us, we may process the personal data already received from you for the purposes of the employment relationship in accordance with Section 26 (1) BDSG. This is done if this is necessary for the performance or termination of the employment relationship or for the exercise or fulfillment of the rights and obligations of the representation of employees’ interests arising from a law or a collective agreement, a works or service agreement (collective agreement).

Your data is processed in the application process on the basis of Art. 88 (1) GDPR in conjunction with Section 26 (1) BDSG for the purpose of establishing an employment relationship with WASSERMANN TECHNOLOGIE GmbH.

If you give us your consent for inclusion in the talent pool, the legal basis for the processing of the data is the existence of consent in accordance with Section 26 (2) BDSG in conjunction with Art. 6 (1) sentence 1 lit. a GDPR.

3. Duration of processing, option for withdrawal and removal

If your application is not successful, your application documents will be deleted six months after completion of the application process unless you have consented to a longer retention period (storage in the talent pool for 24 months).

If you have given us your consent to store your data in our talent pool, you have the right to revoke your declaration of consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. You can send your revocation to the controller via the link in the confirmation email, by email or by post. In this case, your data will be deleted immediately. After you withdraw your consent, the data you have provided will be processed to comply with statutory retention obligations or on the basis of our legitimate interests.

If you are hired, we will transfer your application documents to your personnel file. After termination of the employment relationship, we will continue to store the personal data that we are legally obliged to retain. This regularly results from legal obligations to provide evidence and retain data, which are regulated in the German Commercial Code and the German Fiscal Code, among others. We will send you the data protection information for employees, in which you will find more detailed information, when you accept employment.

4. Data recipient

Within our company, access to your personal data is restricted to offices and departments that are involved in conducting the application process and making the decision on your employment.

As part of our service provision, we commission processors who contribute to the fulfillment of contractual obligations. These are service providers, such as service providers for IT maintenance services, video conferencing tools or newsletter dispatch (so-called processors). These service providers will only act in accordance with our instructions and are contractually obliged to comply with the applicable data protection requirements. For this purpose, we conclude corresponding written order processing contracts with these service providers. This is a contract prescribed by data protection law, which ensures that our service providers process the personal data of our [data subjects] only in accordance with our instructions and in compliance with data protection regulations (GDPR, BDSG, etc.).

5. Data transmission to third countries

Under no circumstances will the data provided by you be transferred to a third country or an international organization. If, in individual cases, you wish the data you have provided to be transferred to a third country or an international organization, we will only do so with your written consent.

IV. Rights of the data subject

If we process your personal data, you as the data subject have the following rights towards us as the controller:

1. Right of access, art. 15 GDPR

Within the framework of the applicable legal provisions, you have the right to (free) information about your collected and stored personal data at any time. This also includes information about the purposes of processing, its origin and recipients, the storage period and the existence of various rights.

2. Right to rectification, art. 16 GDPR

You have a right to rectification (also in the sense of completion) of your data vis-à-vis the controller if the processed personal data concerning you is incorrect or incomplete for the purpose of processing. The controller must make the correction without delay.

3. Right to erasure, art. 17 GDPR

As per the conditions of art. 17 GDPR, you can request deletion of your personal data at any time, unless there are circumstances that authorize or obligate the controller to continue processing your personal data (e.g. statutory retention periods).

4. Right to restriction of processing, art. 18 GDPR

If the legal requirements apply, you can demand restriction of processing of your personal data within the scope of art. 18 GDPR.

5. Right to data portability, art. 20 GDPR

If you have provided us with personal data and automated processing is carried out on the basis of your consent or on the basis of a contract, you have the right to transfer the data provided by you within the scope of Art. 20 GDPR, provided that this does not adversely affect the rights and freedoms of other persons. The data will be provided in a commonly used, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done insofar as it is technically feasible.

6. Right to object, art. 21 GDPR

You have the right to object to processing within the scope of Art. 21 GDPR if the data processing is carried out for the purpose of direct marketing or profiling. You can object to processing on the basis of a balancing of interests by stating reasons arising from your particular situation.

You have the right to revoke your declaration of consent under data protection law at any time. The legality of the data processing carried out until the revocation remains unaffected by the revocation. You can send the revocation by e-mail or by post to the controller.

8. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, place of work, or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.

The supervisory authority responsible for us is the Hessian Commissioner for Data Protection and Freedom of Information. If you are in another federal state or not in Germany, you can also contact the data protection authority there.