This privacy policy explains how HM-Südwest Personal GmbH (hereinafter referred to as “We” or “Our”) processes, transmits/sends and protects your personal data. Personal data is all information that concerns you.

1 Purpose, categories of personal data, legal basis and storage

1.1 Categories of personal data and purposes of processing

In particular, we process the following categories of your personal data as part of the application process. We only use information that you have provided us with or that we can obtain from publicly available sources:

(a)
Basic data (e.g: Name, contact details, marital status, date of birth, gender, nationality, citizenship

(b)
Sensitive data such as religious affiliation or denomination or any severe disability (only if specified by you)

(c)
Education, professional background, references, skills, competencies and other information from your resume, cover letter or entry in our contact form;

(d)
if applicable, driver’s license class including any training and certificates for the management and use of company cars or vehicles for business use;

(e)
Personal data contained in log files or security reports (in particular IP address, user name, password, place and time of access to our network) for the purpose of system protection and monitoring and logging the use of our network to ensure its security;

1.2 Legal basis for the processing of your personal data

The legal basis is basically Art. 6 para. 1 lit. (b) of the Data Protection Basic Regulation EU 2016/679 (DSGVO) in connection with § 26 Federal Data Protection Act (BDSG-neu), which allows the processing of your personal data for the purpose of fulfilling pre-contractual measures with us.

If information about you is not required for this purpose, we will only process it with your consent in accordance with Art. 6 Par. 1 lit. (a) DSGVO.

Furthermore, Art. 6 para. 1 lit. (c) can be applied as a legal basis, if we have to process your personal data to fulfil a legal obligation.

1.3 Do you have to provide us with your personal data?

The provision of your personal data is a prerequisite for the application process and possible employment. If you do not wish to provide us with the information required for this purpose, we cannot consider you for the positions we advertise.

1.4 Do we make automated decisions about you?

We do not make any automated decisions, solely about automated processing, including profiling, which has legal implications for you.

1.5 Retention periods

The criteria used to determine the applicable retention periods are that we retain your personal data for as long as (a) necessary for the application process, (b) or beyond the duration of the application process if necessary or if you have consented to this, (c) in accordance with applicable legal retention laws or as long as you have not revoked any consent you may have given.

In principle, your applicant data will be stored for 6 months after a possible rejection and then deleted or destroyed.

2 Transfer of personal data to third parties

2.1 Passing on your data

We will only pass on your personal data to those entities that need your data to fulfill our tasks. For this purpose it may be necessary for service providers to support us. It may also be necessary to pass on your data to other units of our group of companies. Furthermore, your application documents may be passed on to other units of our group of companies if there are vacant positions that match your application/qualifications. In doing so, we observe the data protection regulations. Your personal data may be passed on to the following recipients in particular:

– IT service providers,

– waste disposal service provider.

– Authorities, offices, banks

– other service providers who support us, e.g. with regard to the hiring process.

2.2 Transfer of your personal data to third parties in countries outside the European Union

Third parties, according to point 2.1, to whom we pass on personal data, may be located outside the European Union. If there are no appropriate decisions by the European Commission for the country in question (which means that the level of data protection in that country is not comparable to the level of data protection in the European Union), we will use the appropriate protection measures for your personal data. In principle, your data will be transferred to third countries without an adequate level of data protection using the so-called EU standard contractual clauses. If you have any further questions in this regard, please contact the data protection officer(s).

3 Your rights

According to the regulations of the EU data protection basic regulation you can assert the following rights against us:

– Right to information

– Right of rectification

– Right to limit processing

– Right to deletion / right to be forgotten (under certain circumstances)

– Right to data transferability (under certain circumstances)

– Right of objection

If the processing of your personal data requires your consent, you also have the right to revoke this consent without affecting the lawfulness of our processing based on your consent prior to its revocation.

To exercise any of your rights listed above or if you believe that we are processing your personal data in an unlawful manner, please contact office@hm-swp.de