Information about the processing of your applicant data
We hereby inform you about the processing of your personal data by Chromsystems GmbH in accordance with Art. 13 of the General Data Protection Regulation (GDPR) and the rights to which you are entitled under data protection law.
1. Who is responsible for data processing?
The controller responsible for data processing is Chromsystems Instruments & Chemicals GmbH, Am Haag 12, 82166 Gräfelfing, Germany, e-mail: mailbox@chromsystems.de (see imprint).
2. Who is the data protection officer?
The data protection officer of Chromsystems is available to answer your questions about the processing of your personal data directly via the contact form, at the e-mail address datenschutz(at)chromsystems.de or at the postal address of the above-mentioned controller with the addition "the data protection officer".
3. which categories of data do we use as an employer and where do they come from?
The categories of personal data processed include, in particular, your master data (such as first name, surname, name affixes), contact data (such as private address, (mobile) telephone number, e-mail address), all data resulting from your application documents (including health data, if applicable, if contained therein) and, if applicable, bank details (to reimburse travel expenses).
As a rule, your personal data is collected directly from you as part of the application process. We may also have received data from third parties (e.g. recruitment agencies).
We also process personal data that we have legitimately obtained from publicly accessible sources (e.g. professional networks).
4. For what purposes and on what legal basis is data processed?
We process your personal data in compliance with the provisions of the GDPR, the Federal Data Protection Act (BDSG) and all other relevant laws (e.g. ArbZG etc.).
The data processing serves exclusively to decide on the establishment of an employment relationship. The primary legal basis for this is Art. 6 para. 1 sentence 1 b) GDPR in conjunction with § Section 26 para. 1 sentence 1 BDSG.
In addition, your separate consent pursuant to Art. 6 para. 1 sentence 1 a), 7 GDPR in conjunction with Section 26 para. 1 sentence 1 BDSG may be required.
§ Section 26 (2) BDSG as a data protection permission regulation.
If you have given us your permission to store your personal data beyond the application procedure for a specified period of time and to use it for similar application procedures, the legal basis is Art. 6 para. 1 a GDPR in conjunction with Section 26 para. 2 BDSG. § Section 26 para. 2 BDSG.
Insofar as special categories of personal data (in particular health data, e.g. a severe disability) are processed in accordance with Art. 9 para. 1 GDPR, this serves exclusively to fulfill our obligations under § 164 SGB IX as part of the application process.
If we wish to process your personal data for a purpose not mentioned above, we will inform you of this in advance and of the legal basis for this.
5. Who receives your data?
Within our company, only the persons and departments responsible for the specific application process will receive your personal data. These are the employees in the HR department as well as the managers and potential supervisors of the specialist departments in which a position is to be filled and the management. Service providers employed by us and acting on our behalf (so-called processors, cf. Art. 28 GDPR) may also process data for these purposes.
6. Will your data be transferred to a third country??
We do not transfer any personal data to third parties outside the European Economic Area (EEA).
7. How long will your data be stored??
If there is no statutory retention period, the data will be deleted as soon as storage is no longer necessary or the legitimate interest in storage has expired. If you are not hired, this is usually the case no later than six months after the application process has been completed.
In individual cases, individual data may be stored for longer (e.g. travel expense reports). The duration of storage then depends on the statutory retention obligations, e.g. from the German Fiscal Code (6 years) or the German Commercial Code (10 years).
If you have given us your permission to store your personal data beyond the application process for a specified period, this retention period applies.
8. What data protection rights can you assert?
Every data subject has the right of access under Art. 15 GDPR, the right to rectification under Art. 16 GDPR, the right to erasure under Art. 17 GDPR, the right to restriction of processing under Art. 18 GDPR and the right to data portability under Art. 20 GDPR.
The restrictions under Sections 34 and 35 BDSG apply to the right of access and the right to erasure.
9. Where can you lodge a complaint?
You also have the right to lodge a complaint with the competent supervisory authority. The competent data protection supervisory authority is the
Bavarian State Office for Data Protection Supervision, Promenade 27 (Castle), 91522 Ansbach,
Telephone: 0049 (0) 981 53 1300, Fax: 0049 (0) 981 53 98 1300,
E-mail: poststelle@lda.bayern.de
10. To what extent do automated individual case decisions or profiling measures take place?
We do not use any purely automated processing procedures to reach a decision - including profiling - on the establishment of an employment relationship.