Datenschutzerklärung

1 General Information
Thank you for your interest in our company and your current or past application for employment with us. You will find below information on how your personal data is processed in connection with your application.

Controller and Data protection officer

Kendrion (Markdorf) GmbH
Riedheimer Str. 5
88677 Markdorf
+49 7544 964-0
+49 7544 6218
info-markdorf@kendrion.com

For further information on our company, authorised representatives and other contact options, please go to the legal information page on our website: https://www.kendrion.com/en/imprint

If you have any questions or comments on data protection (e.g. on information and updating of your personal data), you can also contact our data protection officer.

Contact details of the data protection officer:

DDSK GmbH
– Herr Stefan Fischerkeller –
Dr.-Klein-Str. 29
88069 Tettnang
Germany
dataprotection.de@kendrion.com

2 Processing frame

2.1 Source and categories of personal data
We process the data that you have sent us associated with your application to check your suitability for the position (or other positions in our company that may be suitable) and conduct the application process. Moreover, we may be processing the data which you have published and are available on the internet as far as it is permitted under data protection law. This includes CVs, career etc.

2.2 Purposes and legal bases of the processed data
We process your personal data in compliance with the provisions of the EU General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG-Neu) and other relevant laws.

The legal basis for the processing of your personal data in this application procedure is primarily Art. 6 Para. 1 lit. b) GDPR and Sec. 26 BDSG-Neu. Accordingly, the processing of the necessary data in connection with the decision on the establishment of an employment relationship is legitimate.

Should the data be required once the application process has been concluded, the data may be processed on the basis of the requirements of Art. 6 GDPR, particularly for exercising legitimate interests in accordance with Art. 6 para. 1 f) GDPR. In such case, our interest is the assertion or defense of claims.

Special categories of personal data pursuant to Art. 9 Para. 1 GDPR are processed for the purpose of establishing an employment relationship, exercising rights or fulfilling our legal obligations. The processing is based on Art. 9 para. 2 b) GDPR and Section 26 para. 3 BDSG-Neu. In addition, the processing of data concerning health may be necessary for the assessment of your ability to work in accordance with Sec. 9 Para. 2 h) GDPR and Sec. 22 Para. 1 b) BDSG-Neu.

Furthermore, due to the European anti-terror regulations 2580/2001 and 881/2002, we are obliged to compare your data with the so-called "EU terror lists" in order to ensure that no funds or other economic resources are made accessible for terroristic purposes.
We will inform you in advance if we decide to process your personal data for any purpose not mentioned above.

2.3 Consequences of non-availability of data
As part of your application, you have to provide the personal data necessary to establish the employment relationship or which we are legally obliged to collect.

2.4 Automated individual decision-making
We do not use automated decision-making methods according to Article 22 GDPR. If we do use such a method in individual cases in the future, we will inform you separately if this is required by law. Under certain circumstances, we may process some of your data with the aim of evaluating certain personal aspects (profiling).

2.5 Recipients of data
2.5.1 Within the EU
Within our company, only the persons necessarily involved in the application process (e.g. specialist departments, management, personnel department) will receive your data.

Your application data is reviewed by the HR department once your application has been received. Suitable applications are forwarded internally to the persons in the respective departments responsible for the vacant position. The further course of action is determined after that. Only persons who require your data for the proper processing of your application are given access to it within our company.

In addition, we use a specialized software provider for our application process. This provider operates as a service provider for us and may also obtain knowledge of your personal data in connection with the maintenance and servicing of our systems. We have signed a so-called data processing agreement with this provider, which ensures that the data processing is done in a lawful way.

2.5.2 Outside the EU
If we transfer personal data to service providers or corporate enterprises outside the European Economic Area (EEA), the transfer will only take place if the third country has been approved by the EU Commission on the basis of an adequacy decision or if other appropriate data protection guarantees (e.g. binding corporate rules or standard data protection clauses) have been provided.

2.6 Storage period
In case of rejection, the applicants’ data will be erased within three months after notice of rejection.

If you have given the consent to your personal data being stored for other job possibilities or a period of time longer than the current application process, we will include your data in our pool of applicants. The data in this pool is erased after one year. In the case that your application for a position is successful, the data is transferred from the applicant data system to our HR information system.

3 Your rights as a data subject
Under certain circumstances you can assert your data protection rights against us.

• Thus you have the right to receive information from us about your data stored with us in accordance with the rules of Art. 15 GDPR (if necessary with restrictions in accordance with § 34 BDSG-Neu).
• At your request, we will correct the data stored about you in accordance with Art. 16 GDPR if it is inaccurate or erroneous.
• If you so wish, we will delete your data in accordance with the principles of Art. 17 GDPR, provided that other statutory provisions (e.g. statutory storage obligations or the restrictions under § 35 BDSG-Neu) or an overriding interest on our part (e.g. to defend our rights and claims) do not prevent this.
• Taking into account the requirements of Art. 18 GDPR, you may request us to restrict the processing of your data.
• Furthermore, you may object to the processing of your data in accordance with Art. 21 GDPR, on the basis of which we must terminate the processing of your data. However, this right of objection only applies in very special circumstances of your personal situation, whereby the rights of our company may conflict with your right of objection.
• You also have the right to receive your data under the conditions of Art. 20 GDPR in a structured, common and machine-readable format or to forward it to a third party.
• In addition, you have the right to revoke your consent to the processing of personal data at any time with effect for the future.
• You also have the right to appeal to a data protection supervisory authority (Art. 77 GDPR). However, we recommend that you always submit a complaint to our data protection officer first.
• Your requests regarding the exercise of your rights should, if possible, be addressed in writing or by e-mail to the above address or directly in writing or by e-mail to our data protection officer.

You also have the option of contacting the above data protection officer or a data protection supervisory authority with a complaint.
The data protection supervisory authority responsible for us is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Postfach 10 29 32, 70025 Stuttgart
Lautenschlagerstraße 20, 70173 Stuttgart
Tel.: 0711/61 55 41 – 0
Fax: 0711/61 55 41 – 15
E-Mail: poststelle@lfdi.bwl.de
Internet: https://www.baden-wuerttemberg.datenschutz.de