Privacy Policy for Job Applicants
1. Privacy Notice for Job Applicants
We are delighted that you are interested in our company and are applying, or have applied, for a position with us. Below, we would like to provide you with information regarding the
processing of your personal data in connection with your application.
Who is responsible for data processing?
The data controller within the meaning of data protection law is
HECHT Technologie GmbH
Schirmbeckstr. 17
85276 Pfaffenhofen / Ilm
You can find further information about our company, details of the authorised representatives and other contact options on our website: https://www.hecht.eu
What data do we process about you? And for what purposes?
We process the data you have sent us in connection with your application in order to assess your suitability for the post (or, where applicable, other vacant positions within our company) and
to carry out the application process.
What is the legal basis for this?
The legal basis for the processing of your personal data in this application process is primarily Section 26 of the German Federal Data Protection Act (BDSG) in the version applicable from 25 May 2018. According to this provision,
the processing of data necessary in connection with the decision on whether to establish an employment relationship is permitted. Should the data be required for legal proceedings following the conclusion of the application process, data processing may take place on the basis of the conditions set out in Article 6 of the GDPR, in particular for the
pursuit of legitimate interests pursuant to Article 6(1)(f) of the GDPR. Our interest in this case is to assert or defend claims.
How long will the data be stored?
Data relating to applicants will be deleted after 6 months in the event of a rejection. Should you consent to the continued storage of your personal data or
have already given your consent, we will transfer your data to our talent pool. This data will initially be stored for 2 years and may be extended further with your consent
. If no further consent is given, the data will be deleted after 2 years. Your data may be deleted early upon written request.
Once you have been recruited, the data protection policy for employees applies.
To whom is the data disclosed?
We use a specialist software provider for the application process, who acts as a service provider on our behalf. In exceptional cases relating to the maintenance and upkeep
of the systems, this provider may also gain access to your personal data. We have entered into a so-called data processing agreement with this provider, which ensures that
data processing is carried out in a lawful manner. Your application details will be reviewed by the HR department upon receipt of your application. Suitable applications are then forwarded internally to the department heads responsible for the respective vacancy, and the next steps are coordinated. Within the company, access to your data is restricted to those individuals who require it for the proper conduct of our recruitment process.
Where is the data processed?
The data is processed exclusively in data centres within the European Union.
Your rights as a ‘data subject’
You have the right to access the personal data we process about you. In the event of a request for information that is not made in writing, please understand that we may then require you to provide evidence proving that you are the person you claim to be. Furthermore, you have the right to rectification, erasure or restriction of processing, insofar as you are entitled to this by law. Where personal data is processed on the basis of your consent, you have the right to withdraw your consent at any time with effect for the future. The lawfulness of the processing carried out on the basis of your consent up until its withdrawal remains unaffected. You also have the right to object to the processing in accordance with the statutory provisions. The same applies to the right to data portability.
Right to lodge a complaint
You have the right to lodge a complaint regarding our processing of personal data with a
data protection supervisory authority.