Data Privacy Policy for collaboration Factory AG Job Applicants

Last Updated: December 2019

1. Preamble

This is to inform you as an employee of our company about the processing of your personally identifiable data in connection with your employment with us according to the EU General Data Protection Regulation (GDPR), Article 13, 14.

Your personally identifiable data is collected and processed exclusively as provided by applicable data privacy laws and regulations. According to applicable data privacy legislation, processing of your personally identifiable data is prohibited unless expressly permitted or mandated by law or permitted by you in a legally valid statement. This Data Privacy Policy provides you with detailed information about how we process your data.

2. Data Controller

This Data Privacy Policy applies to the processing of data by us as a Data Controller pursuant to GDPR, Art. 4(7). Our contact details are as follows:

collaboration Factory AG
Rauwöhrstraße 27
D-83115 Neubeuern

Represented by: Dr. Rupert Stuffer (CEO)
Registry court, registration number: Traunstein Local Cord, HRB 23389
Contact:
E-Mail: info@collaboration-factory.de
Tel: +49 (0)89 809133 230
Fax: +49 (0)89 809133 239

3. Data Security Officer

Marco Niederhausen
collaboration Factory AG
Arnulfstraße 34
D-80335 Munich, Germany
marco.niederhausen@collaboration-factory.de

4. Definitions

Unless specified otherwise in this Data Privacy Policy, whether explicitly or implicitly, the definitions provided in GDPR, Art. 4 shall apply to the terms used herein. Pursuant to GDPR, Art. 4(1), personally identifiable data includes any data referring to an identified or identifiable natural person. This includes information such as the person’s first and last names, date of birth, home and workplace contact information, working hours and compensation.

5. International transmission of data

We will not process your personally identifiable data in a third country (i.e. any country outside the European Union (EU) or the European Economic Area (EEA)) unless such processing is necessary to fulfill our pre-contractual or contractual obligations (pursuant to GDPR, Art. 6(1)(1)(b)), you have given your consent (pursuant to GDPR, Art. 6(1)(1)(a), we are legally required to do so (GDPR, Art. (6)(1)(1)(c), or doing so is in our legitimate interest (GDPR, Art. 6(1)(1)(f). The same shall apply to the processing of your data by third parties in a third country on our behalf. Furthermore, your data will not be transmitted to a third country unless permitted according to GDPR, Art. 44 et seq.

6. Deletion of data

We will delete your data six months after the end of the application process or, with you give your permission to the storage of your data in our talent pool, after a period of five years.

6.1. Rights of the Data Subject

You have the following rights:

  • The right to request information about your personally identifiable data as processed by us pursuant to GDPR, Art. 15. In particular, you may request information about the purposes of such processing, the category of the personally identifiable data, the category of the data recipients to whom your data has been or will be disclosed, the planned duration of data storage, your rights of rectification, erasure, restriction of processing, and objection, the existence of the right to lodge a claim, the origin of your data not collected by us, and the existence of an automated decision-making process including profiling, as well as meaningful information about the details thereof;
  • The right to demand immediate rectification of incorrect data and the right to amend incomplete personally identifiable data stored by us pursuant to GDPR, Art. 16;
  • The right to erasure of your personally identifiable data stored by us pursuant to GDPR, Art. 17, unless processing the data is required to exercise the right of free expression of opinion or the right of information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend a legal claim;
  • The right to restrict the processing of your personally identifiable data pursuant to GDPR, Art. 18, provided you are contesting the correctness of the data, or provided that processing the data is unlawful but you do not wish the data to be deleted although we do not need your data anymore and you need the data to assert, exercise or defend legal claims or you have objected to the processing of your data pursuant to GDPR, Art. 21.
  • The right to obtain your personally identifiable data which you have provided to us in a structured, commonly used, machine-readable format, or to transmit your data to another data controller pursuant to GDPR, Art. 20;
  • The right to lodge a complaint with a supervisory authority pursuant to GDPR, Art. 77. To exercise this right you may typically contact the supervisory authority in charge of your regular place of residence or employment or the supervisory authority in charge of our company headquarters.

6.2. Withdrawing your consent

If we are processing your personally identifiable data on the basis of your consent given pursuant to GDPR, Art. 6(1)(a), you have the right to withdraw your consent pursuant to GDPR, Art. (7)(3) for the future.

To exercise your right to withdraw your consent, you may notify us by e-mail to info@collaboration-factory.de. As an alternative option, you may use the contact information provided in section 2 above.

 7. Processing your personally identifiable data

Below we provide an overview of data processing activities that may apply to your personally identifiable data over the course of your application process:

7.1. Recruiting process

For this purpose we will process the following personally identifiable data for you:

  • Your contact information (in particular, your name, address, date of birth, telephone number, e-mail address)
  • Your application information (i.e. any data you have submitted or provided to us with your application, such as information regarding your professional skills and your education, information about your continued professional education, your cover letter, transcripts, employer references etc.)

We will process this data for the following purposes:

  • As a basis for any employment agreement
  • To build a talent pool of applicants for future job openings

We will process your data on the following legal basis:

  • GDPR, Art. 6 (1) (b)
  • GDPR, Art. 6 (1) (a) (for our talent pool)

The following parties will receive this data:

  • Internal: Supervisors or other internal parties in charge of hiring the person; business executives or authorized representatives
  • External: Data processors contracted to process human resources information

 

For more information about our data privacy practices please go here.