Data privacy information

for job applicants at Bertsch Innovation GmbH

Please note: This page was pre-translated with help of machine learning. In the event of errors, the German language version of this page has precedence.

The protection of your privacy is of greatest importance to us. We have received the data from you as part of your application. We collect and use your data for our own purposes in accordance with the General Data Protection Regulation (GDPR).
In the following, we inform you as a affected person within the definition of data protection law of the information required by Articles 13 and 14 GDPR when collecting personal data:

1. Responsible Party
a) Name and contact details of the responsible party

Bertsch Innovation GmbH
Kronenstraße 25
70174 Stuttgart

T: +49 711 9688160
F: +49 711 96881610

E-Mail: info@bertschinnovation.com

b) Data Privacy point of contact:
If you have any questions about the collection, processing or use of your personal data, for information, correction, blocking or deletion of data, please contact our responsible point of contact, whose contact details are:

Andreas Lekies
Bertsch Innovation GmbH
Kronenstraße 25
70174 Stuttgart

E-Mail: datenschutz@bertschinnovation.com
www.bertschinnovation.com

2. Processing scope

a) Purpose of data processing and legal basis
We process your personal data for the purpose of carrying out the application process, insofar as this is necessary. This includes, for example, contacting you regarding the application, the application selection process, possibly initiating the conclusion of a contract, analysis and internal reporting of recruitment activities at a higher level and, if necessary, compliance with legal requirements.
If you give us your consent, we will store your personal data beyond the application process in order to inform you about new job offers. You can revoke your declaration of consent at any time with effect for the future. Of course, you can also apply to us without giving us this consent.
The data processing is carried out on the legal basis of Article 88 GDPR in conjunction with Section 26 BDSG (data processing in the employee context for the purpose of recruitment) and Article 6 (1) (b) and (c) GDPR. Special categories of personal data (e.g. health data) are processed on the basis of Art. 9 GDPR exclusively if you have given your express consent for one or more specified purposes or if this is necessary for the exercise of rights or the fulfillment of obligations arising from labor law, social security law and social protection law. If you have given us your consent, the legal basis for this is Art. 6 lit. a) GDPR.

b) Categories of personal data that are processed.

We process the following categories of data from you in particular: Name, address, other contact data, date of birth, data on curriculum vitae, education, work experience, qualifications, certificates, results of the personnel selection procedure and comparable data, as well as, if applicable, the data that you additionally provide to us on a voluntary basis. If applicable, we store data on your bank details in order to be able to reimburse you for travel expenses.

c) Source of personal data

As a matter of principle, your personal data is collected from yourself, unless it is provided to us by another source, in particular by public authorities or – if you name third parties as references – by these third parties.

d) Duration of data storage
We generally store your personal data for the duration of the application process and for a further 6 months beyond that. In individual cases, individual data may be stored for a longer period, e.g. for the purpose of travel expense accounting. If your application leads to employment with us, your application data will subsequently continue to be stored and processed for the purpose of establishing, implementing and terminating the employment relationship. In this case, you will be informed separately about this change of purpose. If you have given us your consent to store your personal data beyond the application process in order to inform you about new job offers, we will store your data for a period of 24 months or until you revoke your consent.

3. disclosure of the data, confidential treatment and foreign reference
a) Recipients or categories of recipients of personal data
Our company operates at four locations, where personnel responsibilities cross departmental, and company boundaries. For this reason, the responsible superiors may also be in Freiburg, Markdorf and Tunis (Tunisia) can access your applicant data. Access from Tunisia is via a VPN connection. Your data will not be transferred to a third country as a result. Categories of recipients of the personal data are the HR department, the management, the responsible department heads or direct superiors.

b) Confidential treatment and protection of your personal data
It goes without saying that we treat your data confidentially and are committed to protecting it. We have taken various security measures to protect your personal data from unauthorized access, use and disclosure. We delete and anonymize all personal data that we no longer need. We use service providers who are strictly bound by instructions and who support us, for example, in the areas of personnel selection, EDP or the archiving and destruction of documents and with whom separate contracts for order processing have been concluded. Only specially authorized employees are allowed to process your personal data and are obliged to treat it confidentially.

c) No data transfer to a third country or to an international organization.

Your personal data will not be transferred to a country outside the European Union or to an international organization.

4. data subject rights

If personal data is processed by you, you are a data subject within the meaning of the DS-GVO and you are entitled to the following rights vis-à-vis the controller:

(a) Right to information

Pursuant to Article 15 of the DS-GVO, you may request confirmation from the controller as to whether personal data concerning you is being processed. If this is the case, you have the right to obtain information about this personal data and the information referred to in Article 15(1)(a) – (h) DS-GVO, such as the purposes of processing, categories of personal data processed, whether disclosure to third parties will take place and the planned storage period. In addition, you have a right to receive a copy of the personal data that is the subject of the processing.

b) Right to rectification

Article 16 DS-GVO grants you the right to have inaccurate and/or incomplete personal data corrected without delay.

c) Right to deletion

Pursuant to Article 17 DS-GVO, you may request the controller to erase the personal data concerning you without undue delay, provided that one of the grounds referred to in Article 17(1)(a)-(f) DS-GVO applies. Accordingly, grounds for the right to erasure include,

– that the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;

– that you revoke a consent you have given and there is no other legal basis for the processing; or

– That the personal data has been processed unlawfully.

The right to erasure does not exist insofar as processing is necessary under Article 17(3)(a)-(e) of the GDPR, such as for the exercise of the right to freedom of expression and information, for compliance with a legal obligation which requires processing under Union or Member State law to which the controller is subject, or for the establishment, exercise or defense of legal claims.

d) Right to restriction of processing
According to Article 18 of the GDPR, you have the right, under certain conditions, to request the restriction of the processing of personal data concerning you. This is the case if you dispute the accuracy of the personal data concerning you for a period of time and the controller must be given the opportunity to verify the accuracy of the personal data; the processing is unlawful and you object to the erasure of the personal data and request instead the restriction of the use of the personal data;
the controller no longer needs the personal data for the purposes of processing, but you need them for the establishment, exercise or defense of legal claims; or
if you have objected to the processing in accordance with Article 21(1) DS-GVO and it is not yet clear whether the legitimate grounds of the controller outweigh your grounds.

e) Notification to recipients and right to information.
If you have asserted the right to rectification, erasure or restriction of processing vis-à-vis the controller pursuant to Article 17 DS-GVO, the controller is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right against the controller to be informed about these recipients.

f) Right to data portability
Article 20 GDPR grants you the right to receive the personal data concerning you that you have provided to the controller in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller without hindrance from the controller to whom the personal data was provided, provided that the processing is based on your consent or on a contract and the processing is carried out with the help of automated procedures. In exercising this right, you also have the right to obtain that the personal data concerning you be transferred directly from one controller to another controller, where technically feasible. The freedoms and rights of other persons must not be affected by this.

g) Right of objection
If your personal data is processed on the basis of Article 6(1) sentence 1 lit. e) DS-GVO for the performance of a task carried out in the public interest or in the exercise of official authority, or on the basis of Article 6(1) sentence 1 lit. f) DS-GVO for the protection of the legitimate interests of the controller or a third party, you have the right under Article 21 DS-GVO to object at any time to the processing of personal data relating to you on grounds relating to your particular situation. This also applies to profiling based on these provisions.
The controller will then no longer process the personal data concerning you, unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

h) Right to revoke the declaration of consent under data protection law.
If you have given your consent to the processing of personal data relating to you in accordance with Article 6(1) sentence 1 lit. a) DS-GVO, you have the right to revoke your declaration of consent at any time (Article 7(3) DS-GVO). The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

i) Right to submit a complaint to a supervisory authority
Pursuant to Article 77 of the GDPR, without prejudice to any other administrative or judicial remedy, you have the right to file a complaint with a supervisory authority, in particular in the Member State of your residence, workplace or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.

j) Automated decisions including profiling
Your personal data will not be used for automated decision making.

Bertsch Innovation GmbH
Kronenstr. 25
70174 Stuttgart

Sitz der Gesellschaft: Stuttgart, Amtsgericht Stuttgart
Handelsregister: HRB 20570
Geschäftsführung: Wolfgang Zingler