Here we inform you about the processing of your personal data by zapliance GmbH and the rights to which you are entitled under data protection law in the context of the application process.
Responsible for data processing is
Phone: +49 (0)40-5544 4490
The company data protection officer of zapliance can be reached at the above address, for the attention of Mr. Olaf Mangliers, or here.
What categories of data do we use as an employer and where do they come from?
The categories of personal data processed include in particular your master data (such as first name, last name, name affixes, nationality), contact data (such as private address, (mobile) phone number, e-mail address), as well as the data of the entire application process (cover letter, certificates, questionnaires, interviews, qualifications and previous activities). This may also include special categories of personal data (such as health data, religious affiliation, degree of disability) if you have voluntarily provided us with these. In this case, processing will only take place if you have expressly consented to this or if a legal authorization justifies this.
As a rule, your personal data is collected directly from you as part of the application process. In addition, we may have received data from third parties (e.g. recruitment agencies) to whom you have made your data available for disclosure.
For what purposes and on what legal basis is data processed?
We process your personal data in compliance with the provisions of the EU General Data Protection Regulation (DSGVO), the German Federal Data Protection Act (BDSG) and all other applicable laws (e.g. BetrVG, AGG, etc.).
The primary purpose of the data processing is to check your suitability for the position in question (or, if applicable, other open positions in our companies) and to carry out or process the application procedure. The processing of your applicant data is necessary in order to be able to decide on the establishment of an employment relationship. This is done primarily in accordance with Art. 6 (1) b) DSGVO in conjunction with Section 26 (1) BDSG as the legal basis. In addition, Art. 6 Para. 1 a), 7 DSGVO in conjunction with § 26 Para. 2 BDSG (e.g. in the case of further storage of your data) may also be used as the legal basis for data protection on the basis of your separate consent.
Insofar as you have provided us with special categories of personal data pursuant to Art. 9 (1) DSGVO, these will only be processed following your consent pursuant to Art. 9 (2) a) DSGVO in conjunction with Section 26 (3) BDSG. In addition, the processing of health data may be necessary for the assessment of your ability to work pursuant to Art. 9 (2) h) in conjunction with Section 22 (1) b) BDSG.
Your applicant data will be treated confidentially at all times. If we want to process your data for a purpose not mentioned above, we will inform you in advance and ask for your consent.
Who gets your data?
Within our company, only those persons and departments (e.g. specialist department, works council, representatives of the severely disabled) receive your personal data that require it for the hiring decision and to fulfill our pre-contractual/contractual and legal obligations.
What data protection rights can you assert as a data subject?
You can request information about your stored personal data at the above address. In addition, you can, under certain conditions, request the correction or deletion of your data. You may also have the right to restrict the processing of your data and the right to receive the data you have provided in a structured, common and machine-readable format.
Right of objection
You have the right to object to the processing of your personal data for direct marketing purposes without giving reasons. If we process your data to protect legitimate interests, you may object to this processing on grounds relating to your particular situation. We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
Where can you complain?
You have the possibility to contact the above-mentioned data protection officer or the supervisory authority for data protection pursuant to Art. 77 DSGVO with a complaint at any time.
How long will your data be stored?
We delete your personal data as soon as they are no longer required for the above-mentioned purposes. After the end of the application process, your personal data will only be stored for as long as claims can be asserted against us (usually 6 months). This does not apply if legal provisions prevent deletion or if further storage is required for purposes of evidence.
In the event that you have agreed (separately) to further storage of your personal data, we will transfer your data to our applicant database where it will be deleted at the latest after the expiry of two years (or until revocation).
Optional: If you are selected for a position, the data from the applicant data system will be transferred directly to our HR information system.
Will your data be transferred to a third country?
Your data will not be transferred to a third country.
Are you obligated to provide your data?
There is no obligation to provide your personal data.
However, this is absolutely necessary for the conclusion of an employment contract. Without the provision of your personal data in the required scope, it will therefore not come to a contract conclusion on an employment relationship with us.
To what extent do automated individual case decisions or profiling measures take place?
We do not use automated processing to make a decision – including profiling – about the establishment, performance or termination of an employment relationship.