Data protection information

Data protection information for applicants pursuant to Art.13 and Art. 14 General Data Protection Regulation GDPR

Data protection is of high priority for us. Below, please learn how we process your data and which rights you have.

1. Who is responsible for processing your data, and who can you contact?

ZWT Zisterer GmbH + Co.KG
Eschenwasen 14
78549 Spaichingen

Managing Director: Ms Bettina Bernhard

Email: datenschutz@zwt-zisterer.de

2. Purposes of data processing, and legal basis

Your personal data is processed pursuant to the regulations of the General Data Protection Regulation (GDPR), the German Data Protection Act BDSG and other relevant data privacy regulations. To see further details on the purposes of data processing, please refer to our contract documents, forms, declarations of consent and the other information made available to you, for example on our website.

2.1 Consent (Art. 6 sub-para. 1 lit. a GDPR)

If you have given us your consent to processing your personal data, this consent is the legal basis for our processing of your data. You can revoke your consent at any time with effect for the future.

2.2 Performance of a contract (Art. 6 sub-para. 1 lit. b GDPR)

We process your personal data for the purposes of handling the application procedure. Processing may also be carried out by electronic means. This is particularly true if you send us your application documents electronically, for example via email.

2.3 Compliance with legal obligations (Art. 6 sub-para. 1 c GDPR)

We process your personal data if this is required to comply with our legal obligations.

2.4 Legitimate interest pursued by us or third parties (Art. 6 sub-para. 1 f GDPR)

We can furthermore use your personal data, based on weighing of interests, to safeguard the legitimate interests pursued by us or third parties. We will do this for the following purposes:

  • Procurement of information and data exchange with inquiry agencies, if the risks involved in concluding the contract without security are unacceptable to us;
  • The restricted storage of your data if, due to the special type of storage, deletion is not possible or would require disproportionate efforts;
  • The assertion of legal claims and defense in legal disputes which are not directly associated with the contractual relationship;
  • Securing and exercise of our domestic rights by respective measures (e.g. video surveillance).

3. Categories of personal data processed by us

The following data is processed:

  • Name, first name
  • Contact data (such as email address, street address, phone number)
  • Complete application documents (such as CV, date of birth, place of birth, family status, religious denomination, certificates, proofs of qualification, references)

4. Who will receive your data?

Within our company, we transfer your personal data to those departments which require it for complying with our contractual and statutory obligations or for implementing our legitimate interest.

Furthermore, the following parties may receive your data:

  • Processors assigned by us (Art. 28 GDPR), service providers for supporting activities, and other controllers in the sense of the GDPR, particularly in the following areas: IT services, logistics, courier services, printing services, external computer centers, support/maintenance of IT applications, archiving, data destruction, telecommunications;
  • Public authorities and institutions in the presence of a legal or statutory obligation which commits us to inform on, report or disclose information, or if the disclosure of data is in the public interest;
  • Agencies and institutions by reason of the legitimate interest of us or the third party (e.g. disclosure to authorities, inquiry agencies, debt collection agencies, lawyers, courts, experts, and supervisory authorities;
  • Other agencies to which we are allowed to transfer your data based on your permission.

5. Transfer of your data to a foreign country or an international organization

Your data will not be processed outside of the EU or the EEA.

6. How long do we store your data?

If the controller responsible for processing your data concludes a contract of employment with an applicant, the transmitted data will be stored in compliance with the statutory regulations for the purposes of managing the employment relationship. If the controller responsible for processing your data does not conclude a contract of employment with an applicant, the application documents will be deleted six months after notification of the decision of rejection, provided that deletion is not contrary to any other legitimate interests of the controller’s. Other legitimate interest in this sense is for example a burden of proof in proceedings under the General Equal Treatment Act (AGG).

7. Do we use automated individual decision-making (including profiling)?

We do not use purely automated decision-making processes pursuant to Art. 22 GDPR. Should we use these processes in isolated cases, we will inform you specifically if required by law.

8. Your data protection rights

You have the right of access pursuant to Art. 15 GDPR, the right to rectification pursuant to Art. 16 GDPR, the right to erasure pursuant to Art. 17 GDPR, the right to restriction of processing pursuant to Art. 18 GDPR, and the right to data portability pursuant to Art. 20 GDPR.

Furthermore, you have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). Pursuant to Article 21 GDPR, you generally have the right to object to the processing of your personal data by us. This right to object, however, only applies in the presence of particular grounds relating to your personal situation, and our company’s rights may possibly be in conflict with your right to object. If you wish to assert one of these rights, please contact the data protection controller of our company (see 1.).

9. Scope of your obligation to disclose your data to us

You only need to disclose that data which is required for the application process. As a rule, we will be unable to conclude a contract of employment with you without this data. Should we ask you for data beyond this scope, we will specifically point out that disclosure of this data is voluntary.

10. Your right to lodge a complaint with the responsible supervisory authority

You have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The supervisory authority responsible for us is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit
Königstrasse 10 a
70173 Stuttgart

Výrobní program