We think automatically

Mandatory information for applicants

We collect and use personal data from our applicants only in as far as this is required for processing the application. Protecting our applicants’ personal data is very important to us. We therefore process personal data in compliance with the applicable legal regulations for protecting personal data and data security

I. Contact information of the controller

The controller as per the General Data Protection Regulation and other national data protection legislation of the member states as well as other data protection regulations is:

Sebastian Wassermann, Eberhard Hahl
Bürgermeister-Ebert-Straße 5
36124 Eichenzell
Tel.: +49 6659 82-0
E-Mail: info@wassermann-technologie.de
Website: www.wassermann-group.com

II. Contact information of the (external) data protection officer

The data protection officer of the controller is:

BerIsDa GmbH
Rangstraße 9
36037 Fulda
Tel.: +49 661 29698090
E-Mail: dsb@wassermann-technologie.de
Website: www.berisda.de

III. Description of processing

1. Description and scope of data processing

We collect and process your personal data in order to advertise job vacancies and carry out the selection process. The data provided by you are processed for the purpose of processing your application and, in the event of the application resulting in employment, also for conducting the employment.

In erster Linie dient die Datenverarbeitung daher der Begründung eines Beschäftigungsverhältnisses mit uns. Wir verarbeiten gegebenenfalls die folgenden Kategorien und Arten personenbezogener Daten:

  • General information about you and personal data
    • First name, last name, maiden name, suffixes, gender, private address, mailing address if necessary, phone numbers (landline and cell phone), personal email address
  • Information about your knowledge and skills
    • CV information, e.g. information about schools, training, and studies, information regarding prior employment (including job title, previous employer, role, department, location), profession experience
  • Information about your desired employment, e.g. start date, site, desired salary
    • wie bspw. Eintrittsdatum, Betriebsstätte, Gehaltsvorstellungen

In addition, we collect the following data from you if you provide this information on your application and:

  • If you are not an EU citizen:
    • Information about your citizenship
  • If it is relevant to the advertised position and legally permissible:
    • Information about suitability on health grounds
  • If you hold other employment: Information about other employment (e.g. main or secondary employment, type)

In addition to the above data, we may process other personal data if you sent us these in your application.

Your personal data will always be collected directly from you as part of the hiring process, in particular on the application form on our website, the application documents, the job interview, and the HR questionnaire. We may also process personal data from publicly accessible sources (e.g. websites, social networks) which we use properly and only for the respective intended purpose. We also receive data from third parties (e.g. employment agencies, recruitment agencies).

Providing your personal data is required neither legally nor contractually, but is required for our application process. There is no obligation to provide this information. Not providing the information, however, can result in us being unable to consider your application for an advertised position during the application process. Automated individual decision making (including profiling) as per art. 22 GDPR is not used for processing the data provided by you.

Addition to your talent pool

We offer you the opportunity to have your personal data saved in our talent pool after the specific application process has been closed, so it can be considered for future interesting vacant positions. During this period, we may contact you and continue the application process if you are a suitable candidate for another position.

If your application is unsuccessful and you want to be added to our talent pool, we need you to provide your consent. If your application is unsuccessful, we will inform you about our talent pool and give you the opportunity to provide your consent. The email will contain a link that will take you to our website, where you can give your consent if you wish. When you have provided your consent, your application will be saved in our talent pool for 24 months. You will receive an email to confirm this. The confirmation email will contain a link that you can use to withdraw your consent during the entire 24-month period. This link will take you to our website where you can withdraw your consent. You will receive an email to confirm this. You information will then be deleted immediately.

If you have provided us with “special categories of personal data” as per art. 9 GDPR in the documents submitted for the application process, your consent will apply to this information as well.

Entering into an employment contract

If your enter into an employment contract with us, we can continue processing the data already received from you as per art. 26(1) German Data Protection Act (BDSG) for the purposes of the employment. This is done if it is required for carrying out or terminating the employment or for exercising or complying with the rights and duties of the body representing the employees’ interests based on legislation, a collective labor agreement, a works agreement, or service agreement (collective agreement).

2. Purpose and legal basis of processing

Your data are processed during the application process based on art. 88(1) GDPR in connection with art. 26(1) BDSG for entering into employment with WASSERMANN TECHNOLOGIE GmbH.

If you give us consent to add you to the talent pool, the legal basis for processing the data is consent as per par. 26(2) BDSG in connection with art. 6(1)(1)(a) GDPR.

3. Duration of processing, option for withdrawal and removal

If your application is not successful, your application documents will be deleted six months after completion of the application process unless you have consented to a longer retention period (storage in the talent pool for 24 months).

If you have consented to having your data stored in our talent pool, you have the right to withdraw your data protection consent at any time. Withdrawing your consent does not affect the legitimacy of the processing that was carried out based on the consent before consent was withdrawn. You can sent your withdrawal of consent to the controller through the link in the confirmation email, by email, or by mail. In this case, your information will be deleted immediately. After you have withdrawn your consent, the data provided by you will be processed for the purpose of complying with statutory retention periods or for the purpose of our legitimate interests.

If you start employment with us, we transfer your application documents to your HR file. After your employment ends, we will continue to store the personal data that we have to retain due to legal requirements. This is typically due to legal verification and retention requirements that are set out in the German Commercial Code and Tax Levy Regulations, among other things. The data protection information for employees where you can find more detailed information will be sent to you when you accept the employment.

4. Data recipient

Within our company, access to your personal data is restricted to offices and departments that are involved in conducting the application process and making the decision on your employment.

As part of supplying our products and services, we hire contract processors to help with meeting our contractual obligations. These are service providers, e.g. service providers for IT maintenance services, video conferencing tools, or newsletter distribution (so-called contract processors). These service providers work only on our instruction and are contractually bound to comply with the applicable data protection requirements. For this purpose, we enter into appropriate contract processing agreements with these service providers. This is an agreement stipulated by data protection legislation that ensures that our service providers process the personal data of our [Betroffenen] only upon our instructions and in compliance with the data protection regulations (GDPR, BDSG, etc.).

5. Data transmission to third countries

The data provided by you will never be transmitted to a third country or an international organization. If, in exceptional cases, you desire transmission of the data provided by you to a third country or an international organization, we will do so only with your written consent.

IV. Rights of the data subject

If we process your personal data, you as the data subject have the following rights towards us as the controller:

1. Right of access, art. 15 GDPR

Under the applicable legal regulations, you have the right to obtain information (free of charge) about your collected and stored personal data. This includes, among other things, information about the purposes of the processing, the origin and recipient, the duration of storage, and the existence of various rights.

2. Right to rectification, art. 16 GDPR

You have the right to obtain from the controller rectification (also in the sense of completion) of your personal data if the processed personal data that affect you is incorrect or incomplete for the purpose of the processing. The controller must make this rectification without undue delay.

3. Right to erasure, art. 17 GDPR

As per the conditions of art. 17 GDPR, you can request deletion of your personal data at any time, unless there are circumstances that authorize or obligate the controller to continue processing your personal data (e.g. statutory retention periods).

4. Right to restriction of processing, art. 18 GDPR

If the legal requirements apply, you can demand restriction of processing of your personal data within the scope of art. 18 GDPR.

5. Right to data portability, art. 20 GDPR

If you have provided personal data and automated processing is carried out based on your consent or a contract, you have a right to have the data provided by you transferred within the scope of art. 20 GDPR, in as far as this does not affect the rights and freedoms of other persons. The data is provided in a common machine-readable format. If you request direct transfer of the data to another controller, this will be carried out only if it is technically feasible.

6. Right to object, art. 21 GDPR

You have the right to object to processing within the scope of art. 21 GDPR in as far as the data processing is carried out for the purpose of direct advertising or profiling. You can object to processing based on a balancing of interests by stating the reasons that result from your specific situation.

7. Right to withdraw your consent, art. 7(3) GDPR

You have the right to withdraw your data protection consent at any time. The legitimacy of the processing that was carried out before consent was withdrawn remains unaffected. You can sent your withdrawal of consent to the controller by email or mail.

8. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, place of work, or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.

The supervisory authority responsible for us is the Officer for Data Protection and Freedom of Information of the State of Hesse. If you reside in a different German state or outside of Germany, you can also contact the local data protection authority.