Privacy Policy Statement

II. For what purpose and on what legal basis is your Data processed?

We process your Data primarily to carry out the application procedure with you (legal basis: Section 26 Para. 1 BDSG). Concretely, the processing comprises the following purposes:

Examination whether your application with your qualifications and your professional career meets the requirements of the respective job description

Contact

• Planning and organization of job interviews and, if applicable, return dispatch of your application documents
• If applicable, reimbursement and transfer of possible interview costs
• Upon the establishment of an employment relationship: Sending of the (draft for the) employment contract as well as the collection of your Data as an employee

Where necessary, we also process your Data to protect the following legitimate interests (legal basis: Art. 6 para. 1 lit. f ) GDPR):

• Information about other possible interesting job offers at GELITA
• Transfer of your application documents to the personnel file (if an employment relationship is established)
• Collection of Data that you have made public in professionally oriented social networks, e.g. XING or LinkedIn (active sourcing)
• Assertion, exercising or defense of legal claims.
• Statistical purposes (anonymized only)

We also process your Data in order to fulfill our statutory obligations owing to Art. 6 Para. 1 lit. c) GDPR in particular in conjunction with the following laws and for the following purposes:

• Provision of information according to Section 57 Second Book German Social Code [Zweites Buch Sozialgesetzbuch - SGB II]
• Comparison with “anti-terror lists” pursuant to Sections 17 and 18 of the Foreign Trade and Payments Act (AWG) and Regulations (EC) No. 2580/2001, No. 881/2002 and No. 753/2011
• Examination according to the German Act on the Tracing of Profits from Serious Crimes [Gesetz über das Aufspüren von Gewinnen aus schweren Straftaten - GwG] if we are obligated to do so by law
• Fulfillment of retention obligations
• Compliance with data protection requirements (e.g. management of data protection declarations and data subject rights management)

If you grant us your consent to process data for certain purposes, the lawfulness of this processing exists on the basis of your consent (legal basis: Art. 6 Para. 1 lit. a) GDPR) A granted consent can be revoked at any time. Please note that the revocation will only be effective for the future. Processing, which took place before the revocation is not affected by the revocation.

If you have transmitted personal data of special categories to us in terms of Art. 9 Para. 1 GDPR, we process these on the basis of your consent pursuant to Art. 9 Para. 2 lit. a) GDPR. You can revoke this consent at any time with effect for the future.
The processing of the Data which are collected when using the Internet is carried out for the purpose of being able to display the website and to guarantee its stability and security. The legal basis is Art. 6 Para. 1 lit. f GDPR.

Recruiting Platform: GELITA AG collects and stores the information transmitted automatically by your browser with each access to this website in its server log files. This concerns the following Data:

Host name of the computer = IP address,
Browser type/browser version,
Referrer URL (the previously visited site)
Time
Operating system used.

For GELITA AG, these Data cannot be allocated to a certain person and an allocation with other sources is not carried out. The Data will be erased after a statistical evaluation.

III. Which Data do we process and where does it come from?

For the above-mentioned purposes, we process personal data that we receive from you or through a recruitment consultant in contact with you as part of the application process. This Data comes primarily from the information you provide and documents uploaded to our application portal or communication with you or a recruiter. Furthermore, this Data can be obtained within the framework of the active sourcing described above. These are the following categories of personal data:

• Master data, e.g. gender, name, address, telephone numbers, email address, date of birth
• Data on education and your professional experience
• Other Data that you provide to us as part of the application, such as photo, salary requirements, language and IT skills and how you became aware of us
• Communication data, such as the content of personal or telephone conversations and other data that you provide to us in the course of communication with you
• Declarations under data protection law, such as declarations of consent, revocation or objection and declarations on the assertion of your data subject rights, including the information you provide to us when asserting your rights.

We do not expect any transmission of data of special categories from you (Art. 9 Para. 1 GDPR), which include, for example, details regarding your racial or ethnic origin, political, religious or ideological beliefs, union membership, health condition or sexual identity. We request you to only send us such Data if you consider this information to be absolutely relevant in the application process and if you agree with the processing of these Data for the purpose of the execution of the application process. If you send such data of special categories to us, we process these with your consent.

If you visit our website, we will moreover process data which your browser transmits to our server (e.g. IP address, date and time when the website was called up, address of the website from which you came to our website (referrer URL), as well as information relating to the files called by you).

IV. Who gets your Data?

Within the company, the Data transmitted to us are accessible for the respective persons responsible for personnel who are included in the application and selection process. They will be made available to the team leaders of the respective seeking specialist department. Incidentally, those bodies in our company will receive your Data which require these in order to fulfill contractual or statutory obligations. Data processors used by us (Art. 28 GDPR) may also receive Data for these stated purposes. These are IT service providers and service providers who support us in our applicant management as part of a software solution. If an apprenticeship relationship is to be established with you or you start a dual study program, your Data will also be transferred to the respective responsible chamber of industry and commerce or to the partner university in connection with their statutory duties in the context of training/retraining/preparation for vocational training. In addition, we would like to inform you that when you start an apprenticeship, your master data and contact details as well as information on the last school you attended or the school-leaving qualification you obtained will be transferred to the relevant vocational school or to youth accommodation you have used.

Within the group, GELITA AG assumes the processing and control of the application process for the German subsidiaries.

V. How long is your Data stored for?

Your personal data will be erased within 6 months after the sending of a rejection. After expiration of this period of time, a so-called "truncated data reduction" will be carried out. These Data is then anonymized. The data record will not allow any conclusions to be drawn any more about the natural person and serves as a basis for statistical evaluations.

If you have agreed that we may also include your Data in our applicant pool, then we will store your application data for a maximum of 1 year. After this time, the data record is also anonymized.

If you conclude an employment contract with us, processing of your Data is permitted for the purpose of the establishment, implementation and termination of the employment relationship. In this case, we will make further information available to you relating to data protection during the employment relationship upon conclusion of the employment contract.

Your application will then be erased in the application system.

Insofar as we are obligated by law according to Art. 6 Para. 1 lit. c) GDPR to store certain Data, this shall entitle us to storage of these Data until the expiration of the storage deadlines stated in Section 257 Para. 1 No. 2 and 3 German Commercial Code [Handelsgesetzbuch – HGB and Section 147 German Fiscal Code [Abgabenordnung – AO]. The storage deadlines are accordingly up to 10 years.

VI. Are Data transmitted to a third country?

A data transmission to third countries will not take place.

VII. Information on Data processing by personnel consultants

If you send us application documents from applicants as a personnel consultant, we process your personal data on the basis of our legitimate interests pursuant to Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest here lies in the proper traceability of notifications of applications from recruitment consultants, which we must also assign to a corresponding personnel services organization for communication, contract processing or implementation. There are no data transfers to third countries in this context. Within GELITA, only the departments entrusted with the application process will have access to your personal data.
The retention period of your personal data is based on the relevant retention periods under tax and commercial law of up to 10 years.

VIII. Which Data protection rights do you have?

You have the right to information according to Art. 15 GDPR, the right to rectification according to Art. 16 GDPR, the right to erasure according to Art. 17 GDPR, the right to restriction of the processing according to Art. 18 GDPR as well as the right to data portability pursuant to Art. 20 GDPR. With the right to information and the right to erasure, the restrictions according to Sections 34 and 35 BDSG shall apply. In addition, there is a right to lodge a complaint at a data protection supervisory authority (Art. 77 GDPR in conjunction with Section 19 BDSG).

Insofar as we process Data in order to safeguard legitimate interests, you have the right, for reasons, which arise from your particular situation, to object to the processing of your Data (Art. 21 GDPR). If you object to the processing, we will no longer process your personal data, unless we can prove essential reasons for the processing worthy of protection, which outweigh your interests, rights or freedoms or if the processing serves the assertion, exercising or defense of legal claims. The objection can be carried out informally and should as far as possible be directed at one of the addresses stated above under Subclause 1.

If you have granted your consent to the processing of Data, you can revoke this consent at any time. The revocation will only be effective for the future. Processing, which took place before the revocation is not affected by the revocation.
If you have consented to the Data processing, then you have the right to revoke your consent at any time. A revocation will have no disadvantages for you. The lawfulness of the processing until the revocation will not be affected by the revocation. The revocation can be declared in an email to [email protected]. After revocation, the Data will no longer be processed. This shall not apply if we are entitled or obliged to do this by law.

You have the right to lodge complaints under the data protection law, in particular at the federal state officer for data protection and freedom of information Baden-Württemberg, Königstraße 10a, 70173 Stuttgart.

IX. Do you have to provide your Data?

Within the scope of the application process, Data must be made available which enable the initiation or establishment of a contractual relationship or we are obligated to collect such data by law. In our online application portal, the Data to be provided for an application submission is marked as mandatory. Without these Data, we will not be able to carry out the application procedure. The provision of the Data which are collected during Internet use is not stipulated. Without these Data, a visit to our website would however not be possible for technical reasons.

X. To what extent is there an automated decision-making process in an individual case?

For the establishment and implementation of the contractual relationship, we principally do not use any fully automated decision-making processes pursuant to Art. 22 GDPR. Should we use this procedure in individual cases, we will inform you hereof separately if this is stipulated by law.

XI. To what extent are your Data used for profiling (Scoring)?

We do not process your Data with the aim of assessing certain personal aspects (profiling). Profiling is therefore not used.