Privacy policy for applicants

Information obligations according to Art. 13/14 GDPR

The following information provides you with an overview of the collection and processing of your application data by us and your associated rights.

1. Name and address of the responsible bodies

Responsible is:
The controller within the meaning of the GDPR and other data protection laws applicable in the Member States of the European Union and other provisions of a data protection nature is the:
Rausch & Pausch SE
Albert-Pausch-Ring 1
95100 Selb
Phone: +49 9287 884-0
E-mail: info@rapa.com

Website of the entire Rausch & Pausch Group: www.rapa.com

2. Name and address of the data protection officer

You can reach our data protection officer under the following contact options:
EYEDSEC – INFORMATION SECURITY GMBH
Richard Laqua
Friedrichstr. 25
D-95444 Bayreuth
Tel: +49 921 23059935
Fax: +49 921 23059937
E-mail: r.laqua@eyeDsec.de
Any data subject can contact our data protection officer directly at any time with any questions or suggestions regarding data protection.

3. Which of your personal data are used by us?

Personal data is information that can be used to identify a person or describe their behavior, i.e. information that can be traced back to a person.
We process personal data that we receive from applicants in order to process and carry out applicant management. In detail, this is the following personal data required by the controller:

  • Contact details
  • Meaningful application by e-mail or in writing
  • Depending on the job advertisement, the applicant’s salary expectations
  • All personal data submitted by the applicant (e.g. CV, cover letter, possibly picture, qualifications)

4. For what purposes do we process your data and on what legal basis?

a) On the basis of your consent (Art. 6 para. 1 a GDPR)
If you have given us your consent to the collection, processing or transfer of certain personal data, this consent forms the legal basis for the processing of this data.
You can give your consent to the extended storage (24 months) of the application.
We also collect consent to send you information about the company, such as greeting cards and employee newsletters.
You can revoke your declaration of consent at any time. This also applies to consents given to us before May 25, 2018. A declared revocation does not affect the legality of the processing carried out up to the declaration of revocation.

b) On the basis of a legitimate interest (Art. 6 Abs. 1 f GDPR)
In certain cases, we process your data to protect our legitimate interests or those of third parties. The legitimate interests on the basis of which the company collects or processes certain data are listed below.

  • Measures for building and plant safety (visitor log)
  • Notes during the interview (file in applicant folder)
  • Information may be collected from your previous employer (for job advertisements with budget responsibility)

c) Data processing for the purposes of contract preparation (Art. 6 para. 1 b GDPR)
We base the processing of the personal data transmitted by the applicant on the legal basis of Art. 6 para. 1 b GDPR (contract preparation or execution). The processing is necessary for the decision on the establishment of an employment relationship.

5. Who receives my data?

Internal receivers:

  • Human Resources
  • Information technology
  • Line manager
  • Management

External receivers:

  • IT service provider, if applicable

6. Will my data be transferred to countries outside the European Union (so-called third countries)?

Data will not be transferred to a country outside the European Union (so-called third country).

7. How long will my data be stored?

The storage of personal data in the application process is limited to six months. These applications are checked monthly and deleted when the deadline is reached.
If you have given your consent for an extended retention period of 24 months, the data will be retained for a maximum of this period. Applications are checked every six months to ensure that they are stored appropriately.
The deletion/destruction of e-mails or application documents sent by post will be documented.
Any correspondence (e.g. e-mail) that we have with you in connection with the application process is subject to certain statutory retention obligations (business letter), which is why (depending on the content of the correspondence) an extended retention period of 6-10 years is possible.

8. What rights do I have in connection with the processing of my data?

As a data subject, you have the right to information (Art. 15 GDPR) about which personal data has been stored about you. Unless your request conflicts with a legal obligation to retain data, you have the right to have incorrect data corrected (Art. 16 GDPR) and to have your personal data erased (Art. 17 GDPR) or processing restricted (Art. 18 GDPR). If the processing is based on consent (pursuant to Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR), this consent can be revoked at any time without affecting the lawfulness of the processing carried out on the basis of the consent until revocation.
In addition, you have a right to data portability (Art. 20 GDPR) and a right to object (Art. 21 GDPR) if the processing is based on a legitimate interest.
To exercise these rights, please contact the controller or its data protection officer (see above for contact details).
You also have the option of contacting the supervisory authority directly. For the Rausch & Pausch Group, this is the Bavarian State Authority for Data Protection Supervision (https://www.lda.bayern.de/de/index.html).

9. Do I have an obligation to provide my personal data?

There is no legal or contractual obligation to provide your personal data. However, we ask for your understanding that certain personal data is necessary in order to carry out the application process. Failure to provide this information may result in us being unable to fully assess your suitability for the company and therefore having to reject your application.

10. Does automated decision-making or profiling take place?

No automated decision-making/profiling takes place.

11. What right do I have in the case of data processing based on a legitimate or public interest?

You have acc. Art. 21 para. 1 GDPR, the data subject shall have the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on Article 6(1)(e) (data processing in the public interest) or Article 6(1)(f) (data processing in the public interest). point (f) (data processing for the purposes of a legitimate interest).

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.