Duty to inform

Duty to inform
pursuant to Art. 13 /14 of the General Data Protection Regulation (GDPR)

With this data protection information we inform you in accordance with Art. 13/14 (GDPR) about the data processing in our company Spitzmüller AG.

Controller within the meaning of data protection law

Spitzmüller AG
Brambachstr. 12
DE-77723 Gengenbach
Represented by:
Torsten Volkmann

contact
Phone: +49 (0) 7803/96 95-0
Fax: +49 (0) 7803/ 7474
E-mail: info@spitzmueller.de

Contact details of the data protection officer
H. C. Huber, Licensed ISO 27001 Auditor, persCert (TÜV) SÜD, external DPO
The data protection officer can be contacted at the above
address above and at info@huberdatenschutz.de.

We process the following personal data, among others

• First and last name, title, title if applicable
• Postal address/s, date of birth
• Telephone number/s, tax ID, bank details
• Fax number/s, if applicable
• e-mail address/s
• Information required for the appropriate fulfilment of the contract
• We process personal data for the purposes of executing and processing the customer relationship

customer relationship, including correspondence,

• fulfilment of our contractual and legal obligations and
  processing in the context of mutual claims arising from the contractual relationships
  (e.g. invoicing, service, remuneration and liability claims, etc.).
• To carry out compliance and credit checks
• For the processing of applications/e-recruiting § 26 para. 1 BDSG (new version),
• If applicable, inclusion in an applicant pool for subsequent contact Art. 6 para. 1a GDPR
• Establishment, implementation and termination of the employment relationship Art. 13 para. 1 c GDPR
• The legal basis for data processing in our company is Art. 6 (1) (a), (b), (c) and (f) GDPR.

The transfer of personal data to third parties only takes place on your behalf and with your consent. We pass on personal data to the following recipients within the scope of the contractual relationship:

• Social insurance providers, creditors, professional association, tax consultants, insurance companies, etc.
  Processors (e.g. computer centres, IT service providers, printing service providers, waste disposal companies, etc.) whose services we only use.
• If necessary, to external personnel service providers / consultants, but only with consent. Art .13 para. 1 e GDPR

Data will only be transferred to third countries (countries outside the European Economic Area - EEA) if this is necessary for the execution of the contractual relationship or if you have given us your consent or if this is otherwise permitted by law. In this case, we take measures to ensure the protection of your data, for example through contractual regulations. We only transfer data to recipients who ensure the protection of your data in accordance with the provisions of the GDPR for transfer to third countries, Art. 44 to 49 GDPR.

Your personal data will be stored by Spitzmüller AG after collection for as long as is necessary for the fulfilment of the respective task, taking into account the statutory retention periods. As a rule, personal data will be deleted within ten years after termination of the employment relationship in accordance with Art. 13 para. 2 a GDPR. A different storage period is determined on a case-by-case basis depending on the criteria. Personal data is erased six months after the end of the application process, taking into account Section 61b (1) ArbGG in conjunction with Section 15 AGG. § SECTION 15 AGG. Art. 13 para. 2a GDPR. In the event of inclusion in the applicant pool, the data will be deleted after 2 years if no suitable position can be offered. In the event of recruitment, the required data will be transferred to the personnel file.

You have the following rights as a ‘data subject’ whose data we process:

• Right to information in accordance with Art. 15 GDPR
• Right to rectification in accordance with Art. 16 GDPR
• Right to erasure ‘to be forgotten’ in accordance with Art. 17 GDPR
• Right to restriction of processing in accordance with Art. 18 GDPR
• Right to transmission of your data in a structured, commonly
  common and machine-readable format in accordance with Art. 20 GDPR.

If we process your personal data for certain purposes on the basis of your consent, you have the right to withdraw your consent at any time in accordance with Art. 7 (3) GDPR. After receiving your revocation, we will cease data processing for the purposes for which you have given us your consent. The lawfulness of the processing prior to receipt of your revocation remains unaffected.

Right to object: If we process your personal data to protect legitimate interests within the meaning of Art. 6 para. 1 letter f GDPR, you have the right under Art. 21 para. 1 GDPR to object to this processing on grounds relating to your particular situation. You can object to processing for the purposes of direct marketing at any time without giving reasons in accordance with Art. 21 para. 2 GDPR. If you have consented to the processing of your data, you have the right to revoke this consent at any time for the future. This does not affect the lawfulness of the processing up to the point of revocation. To exercise your right to object, it is sufficient to send us an informal notification by email: info@spitzmueller.de stating which data processing you object to.

Existence of a requirement to provide personal data Art. 13 para. 2e GDPR. The data collected is required to carry out the application process. If the data is not provided, it will not be possible to carry out the application process.

If you believe that the processing of your personal data violates the General Data Protection Regulation, you have the right to lodge a complaint with a supervisory authority for data protection (usually the State Commissioner for Data Protection and Freedom of Information) in accordance with Art. 77 para. 1 GDPR. The complaint can be lodged in particular with the supervisory authority responsible for your habitual residence, place of work or place of the alleged infringement.

The following supervisory authority is responsible for data protection at our company's registered office: The State Commissioner for Data Protection and Freedom of Information Königstrasse 10 a, 70173 Stuttgart, e-mail: poststelle@lfdi.bwl.de

This information corresponds to the legal status as of 25 May 2018. We reserve the right to adapt our data protection information to changes in regulations or case law.

Dieses Dokument als PDF herunterladen