2. Contact details of the data protection officer
You can contact our data protection officer at the following address:
SiDIT GmbH
E-mail: info@sidit.de
SiDIT GmbH, Langgasse 20, 97261 Güntersleben, Germany
3. Collection and storage of personal data in applications and on the basis of applicant profiles on applicant portals as well as the type and purpose and their use
3.1. Collection and storage
When
- you contact us for the first time,
- you submit an application to us,
- we contact you for the first time based on your applicant profile on job portals such as Experteer and/or Indeed, or
- we contact you for the first time based on your profile on professional social media platforms such as LinkedIn and/or XING, we generally process the following information
- Title, first name, surname,
- address,
- a valid e-mail address,
- telephone number (landline and/or mobile),
- all other data that you provide in your application documents (in particular CV, certificates)
- all other data that you have released in the applicant profile on applicant portals
- all other data that you provide in the application process (in applicant questionnaires, interviews, etc.)
- voluntarily provided special categories of personal data
3.2 What do we process your data for (purpose of processing) and on what legal basis?
In the following, we will inform you what we process your data for and on what legal basis.
3.2.1. For the fulfillment of contractual obligations and pre-contractual measures (Art. 6 para. 1 letter b GDPR)
We process your data to fulfill contractual obligations and pre-contractual measures with you, i.e. in particular
- for the internal processing of your application
- to carry out the application process
- for correspondence with you
- for the implementation or termination of an employment relationship
- to exercise or fulfill rights and obligations arising from the law or
- from a collective agreement, a works or service agreement
- to process any existing liability claims and to assert any claims against you.
3.2.2 Based on your consent (Art. 6 (1) (a) GDPR)
In principle, we will delete your data no later than 6 months after the end of the application process, provided there are no further reasons for retention, see point 5. If you have given us your consent to process your personal data as part of an "applicant pool", we will delete this no later than three years after it has been granted. The purpose of the "applicant pool" is to be able to consider you for a future vacancy. You can revoke your consent at any time with effect for the future. We inform you that the withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
3.2.3. On the basis of legitimate interests (Art. 6 para. 1 letter f GDPR)
Furthermore, we may process your personal data insofar as this is necessary for the defense of legal claims against us arising from the application procedure for legitimate interests (e.g. claims arising from the AGG), Art. 6 para. 1 letter f GDPR.
3.2.4. Due to legal requirements (Art. 6 para. 1 letter c GDPR)
We are subject to various legal obligations, such as statutory retention and documentation obligations under commercial law (from HGB, StGB or AO).
3.2.5. The processing of special categories of personal data (Art. 9 (2) GDPR)
We process the special categories of personal data provided by you if you have given us your consent in accordance with Art. 9 para. 2 a) GDPR or if the processing is necessary so that we can exercise your rights under labor law and social security and social protection law and fulfill our obligations in this regard. You can withdraw your consent at any time with effect for the future. We inform you that the withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
4. Transfer of data to third parties and processors
The disclosure of personal data also constitutes processing within the meaning of the previous section 3.2. However, we would like to take this opportunity to inform you separately about the issue of disclosure to third parties. The protection of your personal data is very important to us. For this reason, we are particularly careful when it comes to passing on your data to third parties.
If your applicant profile is suitable for a vacant position at one of our affiliated companies (advist AG, advist training GmbH), we reserve the right to forward your documents to fill this position.
Your personal data is also generally transferred to other third parties for the following purposes:
- Processors with whom we have concluded an agreement in accordance with Art. 28 GDPR
- Accounting (e.g. tax consultant)
- Legal disputes (e.g. lawyer)
- Communication platform (e.g. email, WhatsApp, other messenger services)
5. Deletion
Your personal data will be deleted by us if they are no longer necessary for the purposes for which they were collected or otherwise processed, if the processing is not necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims.
6. Name and contact details of the controller
You have the right:
- in accordance with Art. 7 para. 3 GDPR, to withdraw your consent once given to us at any time. As a result, we may no longer continue the data processing based on this consent in the future;
- to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;
- in accordance with Art. 16 GDPR, to demand the immediate correction of incorrect or incomplete personal data stored by us
in accordance with Art.
- 17 GDPR, to demand the deletion of your personal data stored by us, insofar as these are no longer necessary for the purposes for which they were collected or otherwise processed, the processing is not necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
- in accordance with Art. 18 GDPR, to demand the restriction of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to delete it and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have lodged an objection to the processing in accordance with Art. 21 GDPR
in accordance with Art.
- 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request the transfer to another controller and in accordance with Art. 77 GDPR, to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace for this purpose.
7. Name and contact details of the controller
If your personal data are processed on the basis of legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, provided that there are reasons for this arising from your particular situation. If you wish to exercise your right to object, simply send an email to info@ososoft.de
