Privatsphäre

privacy
Information on the processing of personal data (data protection information)
Information on the processing of personal data (data protection information)
(Status 01.01.2022)
Welcome to our data protection area. We are very pleased that you are interested in our company. With the help of this data protection notice, we would like to inform you in detail about when we collect which data and how it is processed.
Responsible
according to Art. 4 Para. 7 EU General Data Protection Regulation:
Ackermann GmbH
Address:
Vockenhauserstr. 16, 78048 VS-Villingen
Germany
Telephone: +49 176 32930570
Email: info@ackermann.gmbh
General information on the collection of personal data
With the following information we inform you transparently about the type and scope of the processing of personal data,
- during your visit to our website,
- the use of our online offers
- external online presence on social media platforms
- as part of the application process
- as well as in business relationships with customers and service providers
be collected.
The legal basis for our data protection is formed in particular by the provisions of the General Data Protection Regulation (GDPR) and the supplementary provisions of the Federal Data Protection Act (BDSG) (new).
Purpose / legal basis of the processing
In such cases in which we obtain your consent for the processing of personal data, Article 6 (1) (a) GDPR serves as the legal basis.
Article 6 (1) (b) GDPR serves as the legal basis for the processing of personal data required to fulfill a contract concluded between you and us. This also applies to processing operations that are necessary to carry out pre-contractual measures.
Article 6 (1) (b) GDPR serves as the legal basis for the processing of personal data required to fulfill a contract concluded between you and us. This also applies to processing operations that are necessary to carry out pre-contractual measures.
In the event that processing of personal data is necessary to fulfill a legal obligation to which we are subject, Article 6 (1) (c) GDPR serves as the legal basis.
In the event that vital interests of the data subject or another natural person require the processing of personal data, Article 6 Paragraph 1 lit. d GDPR is the legal basis.
In the event that the processing of personal data is necessary to protect a legitimate interest of our company or a third party and your interests, fundamental rights and fundamental freedoms do not outweigh the first interest, Art. 6 Paragraph 1 lit. f GDPR is the legal basis for the processing.
Transfer of personal data
If we transfer your personal data to other bodies or disclose them to them as part of our processing, this is done exclusively on the basis of one of the legal bases mentioned. The recipients of this data can include, for example, payment service providers within the scope of fulfilling the contract. In cases where we are required to do so by law or court order, we must transmit your data to authorities entitled to receive information.
If external service providers support us in processing your data (e.g. data analysis, sending newsletters), this is done as part of order processing in accordance with Art. 28 GDPR. In doing so, we only enter into contracts with those service providers who offer sufficient guarantees that suitable technical and organizational measures will ensure the protection of your data.
Data transmission to third countries
Data transmission to third countries (outside the European Union or the European Economic Area) only takes place if this is in accordance with the legal requirements. Subject to express consent or contractually or legally required transmission, we only process or have the data processed in third countries with a recognized level of data protection or according to Art. 44 ff. GDPR on the basis of special guarantees, such as contractual obligations through so-called standard protection clauses of the EU Commission (information page of the EU Commission: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection_de ).
Storage of the data
As soon as the respective purpose for the storage no longer applies, we will delete or block your personal data. In addition, your personal data will only be stored if special statutory retention periods (in particular commercial and tax retention requirements) at national or European level prevent deletion
definition
Our data protection information is based on terms used and defined in the GDPR. In order to ensure that our data protection regulations are easy to read and understand, we would like to explain the most important terms in advance.
Personal data
„Personal data“ is any information relating to an identified or identifiable natural person (hereinafter „data subject“). A natural person is considered to be identifiable if, directly or indirectly, in particular by means of assignment to an identifier such as a name, an identification number, location data, an online identifier or to one or more special features, the expression of the physical, physiological, genetic, psychological, economic, cultural or social identity of this natural person can be identified.
Processing
„Processing“ is any process carried out with or without the help of automated processes or any such series of processes in connection with personal data such as collecting, recording, organizing, organizing, storing, adapting or changing, reading out, querying, the use, disclosure by transmission, distribution or any other form of making available, matching or linking, restriction, deletion or destruction.
Responsible
„Responsible“ is the natural or legal person, authority, institution or other body that alone or jointly with others decides on the purposes and means of processing personal data. If the purposes and means of this processing are specified by Union law or the law of the Member States, the person responsible or the specific criteria for his naming can be provided for by Union law or the law of the Member States.
Pseudonymization
„Pseudonymization“ is the processing of personal data in such a way that the personal data can no longer be assigned to a specific data subject without the use of additional information, provided that this additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data are not assigned to an identified or identifiable natural person.
Processor
„Processor“ is a natural or legal person, public authority, agency or other body that processes personal data on behalf of the person responsible.
Recipient
„Recipient“ is a natural or legal person, public authority, agency or other body to which personal data are disclosed, whether a third party or not. However, authorities that may receive personal data in the context of a specific investigation mandate under Union or Member State law are not considered recipients.
Third Party
„Third Party“ is a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct responsibility of the controller or processor, are authorized to process the personal data.
Consent
„Consent“ is any expression of will voluntarily given by the data subject in an informed manner and unequivocally for the specific case in the form of a declaration or other clear affirmative action, with which the data subject indicates that they are consenting to the processing of data concerning them agrees to personal data.
Profiling
„Profiling“ is any type of automated processing of personal data that consists of using this personal data to evaluate certain personal aspects relating to a natural person, in particular aspects related to work performance, economic situation, analyze or predict that natural person’s health, personal preferences, interests, reliability, conduct, whereabouts or relocation.
Data protection for applications
We offer you the opportunity to apply to us digitally (eg via online form or e-mail) or by post. In the following we will inform you about the scope, purpose and use of your personal data collected as part of the application process.
Scope and purpose of data collection
In order for us to be able to consider you in the application process for a specific position, customary and meaningful application documents are required, with which you inform us about your personality profile and your qualifications.
The personal data you provide and transmit to us as part of your application usually includes:
cover letter, curriculum vitae with the usual personal information (first and last name, date of birth, address, telephone number, e-mail address, photo) as well as evidence and testimonials.
In principle, we only use your application documents to decide on filling the position for which you have expressly applied. We only process the personal data provided to us insofar as this is necessary for the purpose of making a decision on establishing an employment relationship with us. The legal basis for this is Art. 6 (1) (b) GDPR, Art. Contact details, date of birth, information about your professional qualifications and school education or information about professional training). If you voluntarily provide us with further information, we process this on the basis of your consent in accordance with Article 6 (1) (a) GDPR. In the course of the application process, further personal data may be collected from you personally and from generally accessible sources for this information purpose. Within our company,
If we process personal data about you to defend against legal claims asserted against us from the application process, we refer to Article 6 Paragraph 1 lit. f GDPR as the legal basis. The legitimate interest is, for example, a burden of proof in proceedings under the General Equal Treatment Act (AGG).
If you send us an unsolicited application that does not refer to a specific position, we will include your application documents in the context of staffing decisions for all possible positions. We will make the applicant data available for selected decision-makers in our company so that they can find out about your personality profile and your qualifications. In this case, too, the legal basis for data processing is Art. 6 (1) (b) GDPR in conjunction with Art. 28 GDPR, Section 26 (1) BDSG (new).
Categories of recipients of personal data
Your personal data will only be transmitted to third parties for the purposes listed below. We only pass on your personal data, which we have received as part of the application process, to third parties if:
- you have given your express consent to this in accordance with Art. 6 (1) (a) GDPR, Section 26 BDSG (new),
- the transfer according to Article 6 paragraph 1 lit. f GDPR is necessary to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data,
- in the event that there is a legal obligation to pass on data pursuant to Article 6 (1) (c) GDPR, and
- this is legally permissible and required for the establishment or processing of contractual relationships with you in accordance with Article 6 (1) (b) GDPR, Section 26 (1) sentence 1 BDSG (new).
Retention period of the data
If we cannot make you a job offer, you reject a job offer, withdraw your application, revoke your consent to data processing or ask us to delete the data, the data you have transmitted, including any remaining physical application documents , will be stored for a maximum of 6 months saved or stored after the application process has been completed (retention period) in order to be able to understand the details of the application process in the event of discrepancies (Article 6 (1) (f ) GDPR).
If an application procedure leads to a hiring, we will include your application documents in your personnel file on the basis of Art. 6 Para. 1 lit. b GDPR, Section 26 Para the personality profile you described and the qualifications you mentioned.
Provision of the data
The provision of your personal data is not required by law in the initiation phase of an employment relationship. However, the provision of personal data is necessary for the conclusion of a contract for an employment relationship with us. This means that if you do not provide us with any personal data in an application, we cannot and will not enter into an employment relationship with you.
Automated decision-making There is no automated decision in individual cases within the meaning of Art. 22 GDPR. This means that we evaluate your application personally and the decision on your application is not based solely on automated processing.
business relationships
The following information shows you how we handle your data when you contact us, when contract negotiations take place with us and/or contractual agreements exist with us.
Processing purposes and legal basis
The data is processed for the purpose of submitting an offer, specifying it, and processing the contract. The processing of your data is required in accordance with Article 6 (1) (b) GDPR in order to initiate and fulfill contracts.
Furthermore, the processing of your personal data on the basis of Art. 6 Para. 1 lit. f GDPR may be necessary to protect our legitimate interests. Our legitimate interests consist in avoiding economic disadvantages through credit checks, invitations to events, assertion of legal claims and avoidance of legal disadvantages (eg in the event of insolvency), defense against dangers and liability claims and avoidance of legal risks, e-mails, prevention of criminal offenses.
Data category and origin of data
We process the following categories of data:
master and contact data: title, name (first and last name), company, department and position in the company, address, e-mail, telephone, fax, date of birth, contract data, billing data.
The data from the data categories mentioned were sent to us directly by the business/service/cooperation partners and interested parties.
Recipients
We do not pass on your personal data to third parties. Excluded from this are our service partners if this is necessary to fulfill the contract, such as parcel and letter deliverers, banks for the collection of direct debits, tax authorities, credit bureaus if necessary, etc.
Duration of storage
The data stored about you will be deleted after the contract has been fulfilled, provided there are no other statutory storage requirements. Such are, for example, commercial and financial data. These are deleted after ten years in accordance with legal regulations, unless longer retention periods are prescribed or necessary for legitimate reasons. If you revoke your consent to the use of your data, it will be deleted immediately, unless the above reasons speak against it.
Right to object
You have the right to object to the processing. You can object to the future use of your data at any time.
Provision of the data
The provision of the personal data is contractually required or necessary for the conclusion of a contract. Failure to provide the required personal information would result in our not being able to enter into a business relationship with you.