Privacy Policy Statement

2. How and for what purpose are cookies and tracking used?

Our applicant pages use cookies and similar technologies. Cookies are small text files that your browser stores on your device. Cookies support the functionality of the website and allow us to analyze and personalize your activities to make our offering more user-friendly, effective, and personal.

The first category of cookies, i.e., those that support the functionality of the website, are called functional cookies. Without them, you would not be able to visit our website.

Cookies and similar technologies required for analysis and personalization are called consent-based cookies. The storage of these cookies is not a prerequisite for visiting our applicant pages. However, not using these cookies may limit the user-friendliness and access to the functions of the websites. These cookies are only stored on your device if you consent.

Your browser has settings that allow you to specify that you want to be informed about all cookies set, allow only certain cookies, block certain or all cookies, or have cookies automatically deleted when you close the browser. Disabling cookies may limit the functionality of the website.

Ensuring the functionality of our applicant pages

We use cookies and similar technologies to ensure the functionality of our applicant pages. For example, cookies allow us to:

• Save your preferred language and similar settings for your next visit,
• Distribute website requests across different web servers (load balancing),
• Provide a consistent context (session) for multiple website requests,
• Manage consent regarding cookies and similar technologies.

Our legitimate interest in data processing is to enable smooth usability of our applicant pages.
This processing is lawful on the basis of our legitimate interest pursuant to Art. 6 Para. 1 lit. f) GDPR or Art. 25 Para. 1 No. 2 TDDDG.

Analysis and Personalization

Based on your consent, we use cookies and similar technologies to analyze user behavior on our applicant pages and adapt them accordingly.

With your consent, we process information about your device and browser (e.g., language setting, device type, country of origin of the request) each time you visit our websites. We also record how you interact with our website (e.g., referral source, search terms, navigation history, duration of visit, and number of pages visited).

This processing is lawful on the basis of your consent pursuant to Art. 6 Para. 1 lit. a) GDPR or Art. 25 Para. 1 TDDDG. You can withdraw or change your consent at any time with effect for the future by accessing the tracking settings via the corresponding icon or link (e.g., "Cookie Settings" or "Tracking Settings"). Alternatively, you can also adjust your browser settings regarding the use of cookies and similar technologies.

Use of Google Analytics

We use features of the web analytics service Google Analytics for analysis and personalization. This service is provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses cookies. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.

You can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google as well as the processing of this data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

Further information on the use and processing of user data by Google Analytics can be found in Google's privacy policy at: Data Security - Analytics Help (google.com)

3. For what purpose and on what legal basis is your Data processed?

We process your Data primarily to carry out the application procedure with you (legal basis: Section 26 Para. 1 BDSG). Concretely, the processing comprises the following purposes:

Examination whether your application with your qualifications and your professional career meets the requirements of the respective job description

Contact

• Planning and organization of job interviews and, if applicable, return dispatch of your application documents
• If applicable, reimbursement and transfer of possible interview costs
• Upon the establishment of an employment relationship: Sending of the (draft for the) employment contract as well as the collection of your Data as an employee

Where necessary, we also process your Data to protect the following legitimate interests (legal basis: Art. 6 para. 1 lit. f ) GDPR):

• Information about other possible interesting job offers at GELITA
• Transfer of your application documents to the personnel file (if an employment relationship is established)
• Collection of Data that you have made public in professionally oriented social networks, e.g. XING or LinkedIn (active sourcing)
• Assertion, exercising or defense of legal claims.
• Statistical purposes (anonymized only)

We also process your Data in order to fulfill our statutory obligations owing to Art. 6 Para. 1 lit. c) GDPR in particular in conjunction with the following laws and for the following purposes:

• Provision of information according to Section 57 Second Book German Social Code [Zweites Buch Sozialgesetzbuch - SGB II]
• Comparison with “anti-terror lists” pursuant to Sections 17 and 18 of the Foreign Trade and Payments Act (AWG) and Regulations (EC) No. 2580/2001, No. 881/2002 and No. 753/2011
• Examination according to the German Act on the Tracing of Profits from Serious Crimes [Gesetz über das Aufspüren von Gewinnen aus schweren Straftaten - GwG] if we are obligated to do so by law
• Fulfillment of retention obligations
• Compliance with data protection requirements (e.g. management of data protection declarations and data subject rights management)

If you grant us your consent to process data for certain purposes, the lawfulness of this processing exists on the basis of your consent (legal basis: Art. 6 Para. 1 lit. a) GDPR) A granted consent can be revoked at any time. Please note that the revocation will only be effective for the future. Processing, which took place before the revocation is not affected by the revocation.

If you have transmitted personal data of special categories to us in terms of Art. 9 Para. 1 GDPR, we process these on the basis of your consent pursuant to Art. 9 Para. 2 lit. a) GDPR. You can revoke this consent at any time with effect for the future.
The processing of the Data which are collected when using the Internet is carried out for the purpose of being able to display the website and to guarantee its stability and security. The legal basis is Art. 6 Para. 1 lit. f GDPR.

4. Which Data do we process and where does it come from?

For the above-mentioned purposes, we process personal data that we receive from you or through a recruitment consultant in contact with you as part of the application process. This Data comes primarily from the information you provide and documents uploaded to our application portal or communication with you or a recruiter. Furthermore, this Data can be obtained within the framework of the active sourcing described above. These are the following categories of personal data:

• Master data, e.g. gender, name, address, telephone numbers, email address, date of birth
• Data on education and your professional experience
• Other Data that you provide to us as part of the application, such as photo, salary requirements, language and IT skills and how you became aware of us
• Communication data, such as the content of personal or telephone conversations and other data that you provide to us in the course of communication with you
• Declarations under data protection law, such as declarations of consent, revocation or objection and declarations on the assertion of your data subject rights, including the information you provide to us when asserting your rights.

We do not expect any transmission of data of special categories from you (Art. 9 Para. 1 GDPR), which include, for example, details regarding your racial or ethnic origin, political, religious or ideological beliefs, union membership, health condition or sexual identity. We request you to only send us such Data if you consider this information to be absolutely relevant in the application process and if you agree with the processing of these Data for the purpose of the execution of the application process. If you send such data of special categories to us, we process these with your consent.

4.1. Use of our Recruiting Platform

To provide and optimize the application process, for communication purposes, and for technical security, we primarily use the recruiting platform of Abacus umantis GmbH.

When accessing our recruiting platform, in addition to the application data you transmit to us on the basis of Art. 6 Para. 1 lit. a) GDPR, information automatically transmitted by your browser is collected and stored in our server log files on the basis of Art. 6 Para. 1 lit. f) GDPR. This includes the following data:

• Hostname of the computer = IP address
• Browser type/browser version
• Referrer URL (the previously visited page)
• Date and time
• Operating system used

For GELITA AG, this data cannot be assigned to a specific person and is not combined with other data sources.

Duration of Processing

The above-mentioned server log files, which are created on the basis of Art. 6 Para. 1 lit. f) GDPR, are deleted after statistical evaluation.

Your personal application data, which you transmit to us via our recruiting platform on the basis of Art. 6 Para. 1 lit. a) GDPR, will be deleted within 6 months after a rejection has been sent. After this period, a so-called "core data reduction" takes place. These data are then anonymized. The data record can then no longer be traced back to a natural person and serves as a basis for statistical evaluations.

If you have consented to us including your data in our applicant pool, we will store your application data for a maximum of 1 year. After this period, the data record will also be anonymized.

If you conclude an employment contract with us, processing of your data for the purpose of establishing, implementing, and terminating the employment relationship is permitted. In this case, we will provide you with further information on data protection during the employment relationship upon conclusion of the employment contract.

Your application will then be deleted from the application system.

If we are legally obliged to retain certain data pursuant to Art. 6 Para. 1 lit. c) GDPR, this entitles us to store this data until the expiry of the retention periods specified in Sec. 257 Para. 1 Nos. 2 and 3 of the German Commercial Code (HGB) and Sec. 147 of the German Fiscal Code (AO). The retention periods are up to 10 years.

4.2. Social Recruiting Funnels

For our social recruiting activities, we use funnels from Perspective Software GmbH. These are landing pages used by customers in the context of digital marketing to generate qualified contacts.

When you visit one of our social recruiting funnels, Perspective processes data on our behalf to provide the online offering and for contact and inquiry management.

When accessing one of our funnels, information automatically transmitted by your browser is stored in the server log files. The following data may be collected:

• Browser type/browser version
• Operating system used
• Internet service provider
• Hostname of the computer = IP address
• Date and time
• Referrer URL (the previously visited page)

When using Perspective's contact, inquiry, or application forms, the following data is transmitted to Perspective's servers:

• Date and time
• Referrer URL (the previously visited page)
• Context information (e.g., button clicks and selections made on the pages)
• Content of all completed text fields (e.g., contact details such as your name and e-mail address, telephone number, or other personal data, depending on the specific question in the text field)
• Uploaded files

When accessing a funnel, you will be asked to set your cookie preferences or consent to the use of cookies. You can adjust your selection at any time via the cookie consent manager. Further information can be found in the cookie policy, which you can access via the cookie consent manager in the respective funnel.

a) Meta Pixel (formerly Facebook Pixel) and Facebook Conversion API

Our funnels use the Meta Pixel (formerly Facebook Pixel) and Facebook Conversion API, both provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. These tools enable us to track and analyze the behavior of visitors to our website after they have interacted with our advertisements on Facebook, as well as to record and transmit interactions (such as time of access, accessed website, IP address, user agent, and, where applicable, further specific data such as purchased products or shopping cart value) to Facebook in order to improve the effectiveness of our advertising and optimize future marketing measures. According to Meta, the collected data may also be transferred to the USA and other third countries.

The data collected via these tools is anonymous to us as the website operator; we cannot draw any conclusions about the identity of users. However, Meta may link this data to user profiles and use it for its own advertising purposes in accordance with the Facebook Data Usage Policy (https://www.facebook.com/about/privacy/), including the placement of ads on and outside of Facebook. We have no influence over this use of data by Meta.

The use of these services is based on your consent pursuant to Art. 6 Para. 1 lit. a) GDPR and Sec. 25 Para. 1 TTDSG. Consent can be withdrawn at any time.

We also use the advanced matching function within the Meta Pixel, which allows us to transmit additional data (such as place of residence, state, postal code, hashed e-mail addresses, names, gender, date of birth, or telephone number) to Meta in order to further optimize our advertising campaigns and expand custom audiences.

Where personal data is collected on our websites using these tools and forwarded to Meta, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, are jointly responsible for this data processing (Art. 26 GDPR). Joint responsibility is limited exclusively to the collection of the data and its transfer to Meta. The subsequent processing by Meta is not part of the joint responsibility. The obligations incumbent on us jointly have been set out in a joint processing agreement, available at: https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for providing data protection information and for the secure implementation of the tools on our website. Meta is responsible for the data security of its products. Data subject rights (e.g., requests for information) regarding data processed by Meta can be asserted directly with Meta. If you assert your data subject rights with us, we are obliged to forward them to Meta.

Data transfer to the USA is based on the EU Commission's standard contractual clauses. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://www.facebook.com/help/566994660333381.

Meta is certified under the "EU-US Data Privacy Framework" (DPF), an agreement between the European Union and the United States intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these standards. Further information can be obtained at: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt0000000GnywAAC&status=Active

You can deactivate the remarketing function "Custom Audiences" in your Facebook ad settings at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen (login required). If you do not have a Facebook account, you can deactivate usage-based advertising from Facebook on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/.

For further information on how Meta protects your privacy, please refer to Meta’s privacy policy: https://www.facebook.com/about/privacy/.

b) LinkedIn Insight Tag

Our funnels use the Insight Tag from LinkedIn. The provider of this service is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

With the help of the LinkedIn Insight Tag, we receive information about visitors to our websites. If a website visitor is registered with LinkedIn, we can, among other things, analyze the professional key data (e.g., career level, company size, country, location, industry, and job title) of our website visitors and thus better tailor our site to the respective target groups. Furthermore, with the help of LinkedIn Insight Tags, we can measure whether visitors to our websites submit an application or perform another action (conversion measurement). Conversion measurement can also take place across devices (e.g., from PC to tablet). LinkedIn Insight Tag also offers a retargeting function, which allows us to display targeted advertising to visitors to our website outside the website, whereby, according to LinkedIn, no identification of the advertising recipient takes place.

LinkedIn itself also collects so-called log files (URL, referrer URL, IP address, device and browser characteristics, and time of access). The IP addresses are shortened or (if used to reach LinkedIn members across devices) hashed (pseudonymized). The direct identifiers of LinkedIn members are deleted by LinkedIn after seven days. The remaining pseudonymized data is then deleted within 180 days.

The data collected by LinkedIn cannot be assigned to specific individuals by us as the website operator. LinkedIn will store the collected personal data of website visitors on its servers in the USA and use it for its own advertising purposes. For details, please refer to LinkedIn's privacy policy at https://www.linkedin.com/legal/privacy-policy#choices-oblig.

Where consent has been obtained, the use of the above-mentioned service is based exclusively on Art. 6 Para. 1 lit. a) GDPR and Sec. 25 TTDSG. Consent can be withdrawn at any time. If no consent has been obtained, the use of this service is based on Art. 6 Para. 1 lit. f) GDPR; the website operator has a legitimate interest in effective advertising measures including social media.

Data transfer to the USA is based on the EU Commission's standard contractual clauses. Details can be found here: https://www.linkedin.com/legal/l/dpa and https://www.linkedin.com/legal/l/eu-sccs.

You can object to the analysis of usage behavior and targeted advertising by LinkedIn at the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

Furthermore, LinkedIn members can control the use of their personal data for advertising purposes in their account settings. To prevent LinkedIn from linking data collected on our website to your LinkedIn account, you must log out of your LinkedIn account before visiting our website.

Duration of Processing

The personal data processed by Perspective on our behalf will be deleted as soon as they are no longer required for the purpose for which they were collected:

• Data for the provision of the website will be deleted when the respective session is ended. Storage of the IP address in log files takes place for a maximum of 7 days.
• Personal data from contact and inquiry management will be retained as long as necessary to fulfill the processing purpose, or until consent is withdrawn. Exceptions to this principle are data that Perspective must retain due to legal obligations. These include, for example, commercial and tax retention obligations. These retention periods are up to 10 years. If no employment relationship is established, your data will be deleted at the latest six months after completion of the application process, unless you have expressly agreed to longer storage.
   

5. Who gets your Data?

Within the company, the Data transmitted to us are accessible for the respective persons responsible for personnel who are included in the application and selection process. They will be made available to the team leaders of the respective seeking specialist department. Incidentally, those bodies in our company will receive your Data which require these in order to fulfill contractual or statutory obligations. Data processors used by us (Art. 28 GDPR) may also receive Data for these stated purposes. These are IT service providers and service providers who support us in our applicant management as part of a software solution. If an apprenticeship relationship is to be established with you or you start a dual study program, your Data will also be transferred to the respective responsible chamber of industry and commerce or to the partner university in connection with their statutory duties in the context of training/retraining/preparation for vocational training. In addition, we would like to inform you that when you start an apprenticeship, your master data and contact details as well as information on the last school you attended or the school-leaving qualification you obtained will be transferred to the relevant vocational school or to youth accommodation you have used.

Within the group, GELITA AG assumes the processing and control of the application process for the German subsidiaries.


6. Are Data transmitted to a third country?

No transfer of data to third countries is carried out by GELITA AG.

However, in the context of commissioning service providers or their sub-processors, for example in connection with our social recruiting activities as well as tracking and cookies, it may occur that your data is transferred to a non-EU or non-EEA country (third country). Such a transfer of personal data to third countries only takes place if either an adequate level of protection pursuant to Art. 45 GDPR has been established by an adequacy decision of the European Commission, or appropriate safeguards pursuant to Art. 46 GDPR exist.


7. Information on Data processing by personnel consultants

If you send us application documents from applicants as a personnel consultant, we process your personal data on the basis of our legitimate interests pursuant to Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest here lies in the proper traceability of notifications of applications from recruitment consultants, which we must also assign to a corresponding personnel services organization for communication, contract processing or implementation. There are no data transfers to third countries in this context. Within GELITA, only the departments entrusted with the application process will have access to your personal data.
The retention period of your personal data is based on the relevant retention periods under tax and commercial law of up to 10 years.


8. Which Data protection rights do you have?

You have the right to information according to Art. 15 GDPR, the right to rectification according to Art. 16 GDPR, the right to erasure according to Art. 17 GDPR, the right to restriction of the processing according to Art. 18 GDPR as well as the right to data portability pursuant to Art. 20 GDPR. With the right to information and the right to erasure, the restrictions according to Sections 34 and 35 BDSG shall apply. In addition, there is a right to lodge a complaint at a data protection supervisory authority (Art. 77 GDPR in conjunction with Section 19 BDSG).

Insofar as we process Data in order to safeguard legitimate interests, you have the right, for reasons, which arise from your particular situation, to object to the processing of your Data (Art. 21 GDPR). If you object to the processing, we will no longer process your personal data, unless we can prove essential reasons for the processing worthy of protection, which outweigh your interests, rights or freedoms or if the processing serves the assertion, exercising or defense of legal claims. The objection can be carried out informally and should as far as possible be directed at one of the addresses stated above under Subclause 1.

If you have granted your consent to the processing of Data, you can revoke this consent at any time. The revocation will only be effective for the future. Processing, which took place before the revocation is not affected by the revocation.
If you have consented to the Data processing, then you have the right to revoke your consent at any time. A revocation will have no disadvantages for you. The lawfulness of the processing until the revocation will not be affected by the revocation. The revocation can be declared in an email to [email protected]. After revocation, the Data will no longer be processed. This shall not apply if we are entitled or obliged to do this by law.

You have the right to lodge complaints under the data protection law, in particular at the federal state officer for data protection and freedom of information Baden-Württemberg, Königstraße 10a, 70173 Stuttgart.


9. Do you have to provide your Data?

Within the scope of the application process, Data must be made available which enable the initiation or establishment of a contractual relationship or we are obligated to collect such data by law. In our online application portal, the Data to be provided for an application submission is marked as mandatory. Without these Data, we will not be able to carry out the application procedure. The provision of the Data which are collected during Internet use is not stipulated. Without these Data, a visit to our website would however not be possible for technical reasons.


10. To what extent is there an automated decision-making process in an individual case?

For the establishment and implementation of the contractual relationship, we principally do not use any fully automated decision-making processes pursuant to Art. 22 GDPR. Should we use this procedure in individual cases, we will inform you hereof separately if this is stipulated by law.


11. To what extent are your Data used for profiling (Scoring)?

We do not process your Data with the aim of assessing certain personal aspects (profiling). Profiling is therefore not used.