Data protection declaration for applicants (m/f/d)

According to the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG) This data protection declaration informs you about how Alberdingk Boley GmbH processes your personal data if you apply to us for an advertised position or send an unsolicited application.

This data protection declaration applies in addition to our existing general  data protection declaration, in which you will receive specific information on how we process your personal data when you visit the website or on topics that are not specific to an application.

1. Note on the responsible body The responsible body for data processing is:
ALBERDINGK BOLEY GmbH
Düsseldorfer Strasse 53
47829 Krefeld, Germany
T +49 (0) 2151 528 0
F +49 (0) 2151 57 36 43
info@alberdingk-boley.de

2. Which personal data (categories) do we process?
We collect and store all data that you send us through your application. This includes your contact details, your application documents (curriculum vitae, cover letter, previous professional experience, training and certificates, as well as our notes from interviews with you), your desired salary, the type of employment you want and the available date and, in exceptional cases, your identification documents. In addition, this also applies to all other data that you transmit to us, including all correspondence that you have with us during the application process. This may also include special categories of personal data such as health data, which we collect, store and process, for example, as part of a recruitment examination. We may also obtain the above information about you from other sources, including recruitment agencies, the references you provide to us, websites and other publicly available information on the internet. This includes, for example, data that you have obviously made public as part of an online profile. We may also receive data that you transmit to us via third-party websites, e.g. social networks such as LinkedIn or Xing or job boards such as Stepstone or indeed. If you apply via our online portal, we can collect access information, such as the IP address of your access device. You can find more information about this in our data protection declaration on our website.

3. For what purpose and on what legal basis are your data processed?
We collect and process your personal data in order to be able to offer jobs and carry out the selection process. The data you provide will be processed to process your application and, if an employment relationship is established, also to carry out the employment relationship. Processing for any other purpose does not take place. The legal basis is Section 26, paragraph 1 in conjunction with Section 8 Sentence 2 BDSG (new) and Section 22, paragraph 1 b) BDSG (new) or, for public profiles, Article 6 f) GDPR in conjunction with Article 9, paragraph 2 e) GDPR. Furthermore, we can process personal data about you insofar as this is necessary to defend against legal claims asserted against us from the application process. The legal basis is Art. 6 Para. 1 b) and f) GDPR. The legitimate interest is, for example, a burden of proof in proceedings under the General Equal Treatment Act (AGG). If there is an employment relationship between you and us, we can process the personal data already received from you for the purposes of the employment relationship in accordance with Section 26 (1) BDSG (new). This takes place if this is necessary for the implementation or termination of the employment relationship or for the exercise or fulfillment of the rights and obligations arising from a law or a collective agreement, a company or service agreement (collective agreement) for the representation of the interests of the employees.

4. Recipients or categories of recipients In principle, your data will not be passed on to third parties.
Your personal data can be processed on our behalf on the basis of contracts in accordance with Art. 28 GDPR, in particular by providers of systems for applicant management and applicant selection processes. Personal data will also be disclosed to public authorities and/or law enforcement agencies if necessary for the above purposes, if required by law or if necessary to protect our legitimate interests in accordance with applicable laws.

5. Data subject rights
You can request information about the data stored about you at the above addresses. In addition, under certain conditions, you can request the correction or deletion of your data. You may also have a right to restrict the processing of your data and a right to the data you have provided being issued in a structured, common and machine-readable format.

6. Duration of Data Storage
We only store your personal data for as long as we need it for the legitimate interests of Alberdingk Boley GmbH under applicable law, unless you give us your express consent to use your records for other positions that become available. If data storage is no longer required, the data will be deleted. If you accept employment with us, we will store your personal data for the entire duration of your employment in accordance with the employee data protection declaration, which we will send to you upon acceptance of employment.

7. Right to Object
If we process your data to protect legitimate interests, you can object to this processing for reasons that arise from your particular situation. We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims. If we have asked you for your consent, you can revoke it at any time. If you wish to revoke your consent to the processing of your personal data by Alberdingk Boley GmbH, this will not affect any processing that has already taken place.

8. Right to Complain
In the event of violations of the GDPR, those affected have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, their place of work or the place of the alleged violation. The right to lodge a complaint is without prejudice to any other administrative or judicial remedy.

Responsible for us:

State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen)
P.O. Box 20 04 44
40102 Duesseldorf, Germany
Phone: 0211/38424-0
Fax: 0211/38424-10
Email: poststelle@ldi.nrw.de