Data protection information for applicants
The following information provides you with an overview of the processing of your personal data by our company as well as your rights arising from the European General Data Protection Regulation ("GDPR")
1. Data processing controller and data protection officer
The controller responsible for data processing ("company", "we") is: Industrieterrains Düsseldorf-Reisholz AG
Henkelstraße
16440589 Düsseldorf
Telephone: +49 211 748 36-0
E-mail: mail(at)idr.de Thedata protection officer of our company is: Sascha Hasselbach
Kronprinzstr. 47-4940764
Langenfeld Phone: +49 2173 20 41 244
E-mail: sascha.hasselbach(at)datenschutz-extern-nrw.de
2. Data sources and type of use of personal data
We process personal data that we receive from you as part of your application to us. We only collect the information required for the application process. If you apply for a position and have not already provided all relevant information in your application, you will be asked for certain personal data (e.g. first name, surname, address, e-mail address, telephone number, CV). You may also be asked position-related questions. For an application to our company, it is also mandatory to include your professional background. Please note that your data will not be stored anonymously, but will be accessible to the HR department and the relevant departments within our company. The personal data usually generated are: first name, surname, address, e-mail address, telephone, application documents (letter of application, CV, references, certificates, etc.) During the application process, we store the usual correspondence data such as postal address, e-mail address and telephone numbers in addition to your surname and first name. In addition, application documents such as letters of application, CVs, professional, training and further education qualifications and references are recorded. This data is stored and processed exclusively in the context of your application
3. Purpose and legal basis of data processing
Your personal data will be processed in accordance with the applicable data protection regulations, in particular the GDPR and the German Federal Data Protection Act (BDSG). Specifically, this is done for the following purposes and on the following legal bases
a) Based on your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR
If you have given us your consent to process your data for specific purposes, e.g. to forward your application to another company or to include your data in an applicant pool, we will process your data on the legal basis of your consent. The scope and purpose of the data processing is described in the corresponding declaration of consent provided to you. You can revoke your consent to the processing of personal data at any time. The revocation only takes effect in the future. Processing of personal data prior to the revocation is not affected by this
b) To decide on the establishment of an employment relationship with you in accordance with Art. 88 GDPR in conjunction with § Section 26 (1) of the Federal Data Protection Act ("BDSG")
The processing of personal data in the context of your application is permitted insofar as this is necessary for the decision on the establishment of an employment relationship with you. The legal basis for this arises from Art. 88 GDPR in conjunction with § Section 26 para. 1 BDSG
c) Other purposes and legal bases
Furthermore, we may process your personal data if this is necessary to fulfill legal obligations (Art. 6 para. 1 lit. c GDPR) or to defend against legal claims asserted against us. The legal basis for this is Art. 6 para. 1 lit. f GDPR. The legitimate interest is, for example, a burden of proof in proceedings under the General Equal Treatment Act (AGG).
If there is an employment relationship between you and us, we may, in accordance with Art. 88 GDPR in conjunction with Section 26 BDSG § Section 26 BDSG, we may further process the personal data already received from you for the purposes of the employment relationship, insofar as this is necessary for the performance or termination of the employment relationship or for the exercise or fulfillment of the rights and obligations of the representation of employees' interests arising from a law or a collective agreement, a works or service agreement (collective agreement).
4. Who receives my data?
Your personal data will be accessed by the departments that need it to process your application. Your data is therefore only accessible to employees of the HR department and the persons responsible for the selection of applicants at our company. Under no circumstances will your data be passed on to companies or persons outside our company or used for other purposes without your consent or other legal basis. If service providers and vicarious agents are also involved in the data processing process, this is generally only possible if the legal obligations prescribed in the GDPR and the BDSG are complied with. We not only recruit to fill vacancies ourselves, but also at our subsidiary Bünger Bau- und Projektmanagement GmbH, Henkelstraße 164, 40589 Düsseldorf. Your personal data will also only be transferred to Bünger Bau- und Projektmanagement GmbH if there is a legal basis for this and it is necessary for one of the above-mentioned purposes. Otherwise, personal data may be processed on our behalf on the basis of contracts in accordance with Art. 28 GDPR, in particular by providers of systems for applicant management and applicant selection procedures
5. Is my personal data transferred to a "third country"?
Your personal data will not be transferred to countries outside the EU or the EEA
6. How long will my data be stored?
If you take up employment with us, your personal data, or at most an extract thereof, will be placed in your personnel file. This data will be stored during your period of employment and for a maximum of 10 years after the end of your period of employment. Further information on the processing of employee data is set out in our employee data protection policy. If you have applied but have received a rejection, your data will be stored for a maximum of three (3) months after completion of the application process and then deleted. This does not apply if legal provisions prevent deletion, if further storage is necessary for the purpose of providing evidence or if you have expressly consented to longer storage. You will not be notified of the deletion of your data
7. What data protection rights can I exercise as an applicant?
As a "data subject", you have the following rights vis-à-vis us with regard to the personal data concerning you (Art. 15 et seq. GDPR): The data subject has the right to obtain confirmation from us as to whether personal data concerning him or her is being processed; if this is the case, he or she has a right of access to this personal data and to the information listed in detail in Art. 15 GDPR. The data subject has the right to obtain from us without undue delay the rectification of inaccurate personal data concerning him or her and, if necessary, the completion of incomplete personal data (Art. 16 GDPR). 16 GDPR). The data subject has the right to obtain from us the erasure of personal data concerning him or her without undue delay where one of the grounds listed in Art. 17 GDPR applies, e.g. if the data is no longer required for the purposes pursued (right to erasure). The data subject has the right to obtain from us restriction of processing where one of the conditions listed in Art. 18 GDPR applies, e.g. if the data subject has objected to processing, for the duration of the verification by the controller.
If we process your data to protect our legitimate interests, you can object to this processing on grounds relating to your particular situation. We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or the processing serves the establishment, exercise or defense of legal claims.Without prejudice to any other administrative or judicial remedy, every data subject has the right to lodge a complaint with a supervisory authority if the data subject considers that the processing of personal data relating to him or her infringes the GDPR (Art. 77 GDPR). The data subject may exercise this right before a supervisory authority in the Member State of their habitual residence, place of work or place of the alleged infringement. In North Rhine-Westphalia, the competent supervisory authority is: State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia
Kavalleriestr. 2-4
40213 Düsseldorf
Telephone: 0211/38424-0
E-mail: poststelle(at)ldi.nrw.de Status: January/2020