The following information provides an overview of the collection and processing of your application data by us and your related rights.
WHO IS RESPONSIBLE FOR DATA PROCESSING?
The controller within the meaning of data protection law is:
PEMA Vollkorn-Spezialitäten GmbH & Co. KG
Goethestraße 23
95163 Bad Weißenstadt
You can find further information about our company, details of the persons authorized to represent it, and additional contact options in the legal notice ("Impressum") on our website: www.pema.de/impressum
OUR DATA PROTECTION OFFICER
We have appointed a data protection officer within our company. You can reach them via the following contact options:
ITs Hein GmbH
Kulmbacher Str. 27b
95460 Bad Berneck
Email: datenschutz@pema.de
We expressly point out that when using this email address, the content is not exclusively received by our data protection officer alone. If you wish to exchange confidential information, we therefore ask you to first contact us via this email address to arrange direct contact with the data protection officer.
FOR WHAT PURPOSES DO WE PROCESS YOUR DATA AND ON WHAT LEGAL BASIS?
We process the data you have sent us in connection with your application in order to assess your suitability for the position (or, where applicable, other open positions within our company) and to carry out the application process. The legal basis for the processing of personal data is generally Art. 6 GDPR, unless there are specific legal provisions. In particular, the following options apply:
a) Consent (Art. 6 (1)(a) GDPR)
If you have declared your consent to us for the collection, processing, or transfer of certain personal data, this consent forms the legal basis for the processing of that data. You may give your consent for extended retention of your application (12 months).
b) Data processing based on a balancing of interests (Art. 6 (1)(f) GDPR)
In certain cases, we process your data to safeguard a legitimate interest of ours or of third parties.
The legitimate interests on the basis of which the company collects or processes certain data are listed below:
c) Data processing for purposes of the employment relationship (§ 26 BDSG (new))
We base the processing of personal data submitted by the applicant on the legal basis under § 26 (1) BDSG (new — German Federal Data Protection Act).
Applicants are considered employees for this purpose. The processing is necessary for deciding whether to establish an employment relationship.
If personal data is processed based on your consent, you have the right to withdraw that consent at any time with effect for the future. If we process data based on a balancing of interests, you have the right, as a data subject, to object to the processing of personal data in accordance with the requirements of Art. 21 GDPR.
HOW LONG IS THE DATA STORED?
Email (digital applications):
The storage of personal data in the application process is limited to three months. Stored applications are reviewed monthly and deleted once this period has been reached.
If you have given consent for extended retention of 12 months, the data will be retained for a maximum of this period. Applications are regularly reviewed to assess whether continued storage is still appropriate.
Application folders (physical applications):
The storage of personal data in the application process is limited to three months. Stored applications are reviewed monthly and deleted once this period has been reached.
Rejected applications are returned to the applicant by post together with the rejection letter.
If you have given consent for extended retention of 12 months, the data will be retained for a maximum of this period. Applications are regularly reviewed to assess whether continued storage is still appropriate.
WHO RECEIVES MY DATA?
Internal recipients:
External recipients:
Your personal data is processed by us exclusively within the Federal Republic of Germany.
No transfer of data takes place outside Germany.
YOUR RIGHTS AS A "DATA SUBJECT"
Every data subject has the right to information under Art. 15 GDPR, the right to rectification under Art. 16 GDPR, the right to erasure under Art. 17 GDPR, the right to restriction of processing under Art. 18 GDPR, the right to object under Art. 21 GDPR, and the right to data portability under Art. 20 GDPR. The right to information and the right to erasure are subject to the restrictions under §§ 34 and 35 BDSG.
In addition, you have the right to lodge a complaint with a competent data protection supervisory authority (Art. 77 GDPR in conjunction with § 19 BDSG).
You may withdraw any consent given for the processing of personal data at any time with effect for the future. This also applies to the withdrawal of declarations of consent given to us before the General Data Protection Regulation took effect, i.e., before May 25, 2018. Please note that withdrawal only takes effect for the future. Processing carried out before the withdrawal is not affected by it.