In this data protection notice, we inform you about our handling of your personal data, which we process as part of the application process, and inform you about your rights in this regard.

Who is the controller and who is the data protection officer?

The data controller is:

Vollack Gruppe GmbH & Co. KG
Am Heegwald 26
76227 Karlsruhe, Germany

e-mail: info@vollack.de

Further information can also be found at:
https://vollack.de/en/imprint and https://vollack.de/en/privacy-policy

Contact details of the external data protection officer:

dacuro GmbH
Heinrich-Hertz-Straße 11
69190 Walldorf, Germany

e-mail: datenschutz@vollack.de
website: www.dacuro.de

What personal data do we collect and where does it come from?

As part of the application process, we process the following personal data:

-       Core data (such as first name, last name, name suffixes, gender, date/place of birth, nationality, marital status, etc.)

-       Contact data (e.g., private address, (mobile) telephone number, e-mail address)

-       if applicable, work permit/residence permit

-       Qualification data, such as educational history, occupational activities, assessments, certificates, further education and training

-       special knowledge and skills, as far as relevant to the advertised post

-       if applicable, severely disabled status

As part of the recruitment process, your personal data is generally collected directly from you, or we receive it from a recruitment agency.

For what purposes and on what legal basis are your data processed?

In the first place, the data are processed in order to establish an employment relationship. The primary legal basis for this is § 26 BDSG. The voluntary information provided by you (e.g., application photo) in the course of the application process is processed on the basis of art. 6 para. 1 lit. a) GDPR.

If your application documents contain sensible personal data, e.g., information about health, religious beliefs or ethnic origin, then our processing is also based on article 9 (2) (b) GDPR due to our legal obligations as an employer and the associated protection of your fundamental rights.

We use your contact data exclusively to contact you and to inform you about the progress of the application process. We use other information contained in your application exclusively to determine your suitability for the open position.

If, after the rejection of your application, you wish us to include your application in the future application procedure, we will store your application documents on the basis of your consent (art. 6 para. 1 lit. a) GDPR), which we will obtain separately.

How long will your data be stored?

Your personal data will be deleted as soon as it is no longer necessary to achieve the purpose for which they were collected. In the event of hiring, we will transfer your application documents to your personnel file, insofar as they are necessary for the implementation of the employment relationship. After the termination of the employment contract, the personal data will continue to be stored due to our legal proof and retention obligations. The storage period is then up to ten years.

In case of rejection, your application documents will be deleted no later than six months after the end of the application process.

If you decide to be included in our applicant pool, your application documents will be kept for a period of 2 years or until the revocation of your consent. If still relevant, we will remind you after 2 years that your personal data are still stored in our applicant pool and the possibility of revocation at any time.

Who receives your data?

Within Vollack Gruppe GmbH & Co. KG, only those persons, who are involved in the decision regarding your employment (the employees of the HR department, the heads of departments, the regional management) receive your personal data.

In addition, we use the personnel software of Personio SE & Co. KG, which we also use to operate our online application process.

Online application process

On our website, you can apply to us using the online application form. This recruiting website is run by Personio SE & Co. KG (Seidlstraße 3, 80335 Munich, Germany, further “processor”).

The purpose of the processing is our personnel and applicant management administration, in which personal data is also processed.

If you send us your application via the application form, your enquiry, including all personal data resulting from it, will be stored and processed by Personio SE & Co. KG for the purpose of processing your application. We do not pass on this data without your consent.

Further information on data processing by Personio SE & Co. KG can be found at:
https://www.personio.com/privacy-policy/,
https://www.personio.com/legal-notice/ and
https://www.personio.com/terms/

We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract mandated by data privacy laws that guarantees that they process personal data of our website visitors only based on our instructions and in compliance with the GDPR.

What rights do you have as a data subject?

You have the following rights under articles 15 - 21 GDPR:

-       Right of access (Art. 15 GDPR)

-       Right to rectification (Art. 16 GDPR)

-       Right to erasure (Art. 17 GDPR)

-       Right to restriction of processing (Art. 18 GDPR)

-       Right to data portability (Art. 20 GDPR)

-       Right to object to processing (Art. 21 GDPR)

Please contact the controller or our external data protection officer (see information above).

The right to withdraw your consent

If we process your data based on your consent, you have the right to revoke it at any time with effect for the future. The legality of the consent-based data processing until the revocation remains unaffected.

Please contact the controller or our external data protection officer (see information above).

The right to lodge a complaint with supervisory authority

You have the right to lodge a complaint with a supervisory authority. The supervisory authority competent in our case is:

The Data Protection Authority of the Federal State of Baden-Württemberg
Lautenschlagerstraße 20
70173 Stuttgart
Germany

fon: +49 711 - 61 55 410
e-mail: poststelle@lfdi.bwl.de  

Will your data be transferred to a third country?

It is true that we only use processors and service providers based within the EU/EEA and make sure that their servers are located within the EU/EEA. However, some service providers belong to global corporations whose headquarters are located outside the EU/EEA, e.g. in the USA. In this case, we cannot rule out the transmission of your data with absolute certainty.

Are you obliged to provide your data?

To process your application, we need the personal data from you, which are necessary to make a decision in connection with the employment relationship. The lack of relevant personal data in the application documents may result in non-consideration in the allocation of the job, training or internship position.

To what extent are automated individual decisions or profiling measures taking place?

We do not use purely automated processing processes to bring about a decision.