Data protection information for you as applicant and your application process

This information shall brief you as applicant or data subject about the elicitation and processing of your personal data within the scope of your application process at Invia SSC Germany GmbH (hereinafter also referred to as: “we”/”us”) – the controller. The information is provided on the accordance with the regulations in Art. 13 and 14 of the DS-GVO.

1. Controller

Invia SSC Germany GmbH
Dittrichring 18 -20
04109 Leipzig
info@invia.de

2. Contact data of the DPO/Data Protection Officer:

You can reach our data protection officer at:

Invia SSC Germany GmbH
z.Hd. Datenschutzbeauftragter
Dittrichring 18 -20
04109 Leipzig
datenschutz@invia.de

3. The purposes of processing your personal data and the legal basis for the processing

We process your personal data for the purpose of decision finding about the establishment of your employment.

When we receive an application, we process the following personal data of yours:

  • Title, first name, last name,
  • a valid e-mail address, other electronic communication data if applicable,
  • address,
  • telephone number (landline and/or mobile),
  • Curriculum vitae (including date of birth),
  • references, certificates,
  • other applicant data and information, if applicable also data according to Art. 9 DS-GVO
  • Salary expectations

Das machen wir, um Dein Bewerbungsverfahren durchführen zu können, Dir gegebenenfalls einen Arbeitsvertrag anbieten zu können und/oder eventuell vorliegende Haftungsansprüche sowie die Geltendmachung etwaiger Ansprüche gegen Dich abzuwickeln.

We do that to conduct your application process, to offer you as the case may be an employment contract and/or to handle eventually any liability claims and the enforcement of any rights against you.

The data processing is carried out at your request and is necessary in accordance with Art. 88 DS-GVO in connection with. § 26 para. 1 p. 1 BDSG regarding the aforementioned purposes for the appropriate processing of the application and considers our legitimate interest to process your personal data for the evaluation for the suitability of the position and the (possible) filling of the position.

Beyond that it may occur that we process your personal data upon your consent. Such case takes place when we intend to overtake your application in our talent pool. Therefor we kindly ask you to give your consent to include your data in our talent pool as well as to readdress you within the time frame you consented for.

The legal basis for this processing is Art. 6 para. 1 lit. a DS-GVO.

Besides we process your personal data due to our prevailing interest after weighing of interests. Please see the following data below:

  • IP-Adresse des Nutzers,
  • Datum und Uhrzeit des Aufrufs der Webseite,
  • das Protokoll, z.B. https,
  • die Anfragemethode „Get“ bzw. „Post“,
  • Inhalt zur Anfrage bzw. Angabe der abgerufenen Datei, die an den Nutzer übermittelt wurde,
  • Zugriffsstatus (erfolgreiche Übermittlung, Fehler etc.),
  • die jeweils übertragene Datenmenge in Byte,
  • ein- und ausgehender Datenverkehr („Traffic“),
  • eine Prozess-Identifikationsnummer („Prozess-ID“),
  • die Dauer, bis der Webserver die Anfrage des Nutzers beantwortet hat,
  • die Webseite, von der aus ein Zugriff des Nutzers erfolgt ist,
  • durch den Nutzer verwendeter Browser, das Betriebssystem, die Oberfläche, die Sprache des Browsers und die Version der Browsersoftware.

The processing of personal data is carried out in order to:

  • Gewährleistung eines reibungslosen Verbindungsaufbaus der Website,
  • Gewährleistung einer komfortablen Nutzung unserer Website,
  • Auswertung der Systemsicherheit und -stabilität sowie zu weiteren administrativen Zwecken.

The legal basis for this processing is Art. 6 para. 1 p. 1 lit. f DS-GVO.

In the event that personal data is processed on the basis of our weighing of interests, section 7 contains specially highlighted information on your right to object.

4. recipients or categories of recipients of your personal data

A disclosure or Transmission of your personal data to a third party takes place when this is necessary for preparation and handling of the application process, for the treatment of other business activities or for fulfillment of mandatory law, including, but not limited to, tax-law and national insurance law.

A Disclosure or transmission of your personal data takes also place if:

  • there is a legal obligation for the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. c DS-GVO or
  • the disclosure is necessary for the enforcement, exercise or defence of legal claims pursuant to Art. 6 (1) sentence 1 lit. f DS-GVO and there is no reason to assume that you have an prevailing legitimate interest in the non-disclosure your personal data.

Categories of recipients of personal data are, including but not limited to, social and labour administration offices, data destruction service providers, waste disposal service providers, tax advice and legal advice service providers, IT service providers.

Within our company, access to your personal data is granted to those persons who need it to fulfill our pre-contractual and legal obligations.

Data recipients are, in particular, our IT service providers, personnel service providers and data/file shredders as processors, insofar as they shall receive personal data, or they could receive personal data in connection with their services and maintenance activities for our company IT. Processors shall only process personal data which they receive in connection with our processing from us as a controller, only due to our instructions. Corresponding declarations of commitment and confidentiality or data processing addendums secure their activities.

We do not carry out the web hosting for the personal data received through the use of our websites at the Internet address invia.de by ourselves. In addition we therefor deploy a processor seated at Sitz in Deutschland und mit dem Standort von dessen Servern in Deutschland.

There is principally no intention to transfer personal data to a third state (a country outside the European Union or the European Economic Area).

5. Duration of storage

Your personal data will be stored upon receiving the application. In case of our inability to offer you an employment, we will retain the data submitted for up to six months after staffing took place in order to answer questions in connection with the application and rejection, insofar as this does not conflict with any statutory or official retention obligations.

In case you have consented to your inclusion to the applicant pool, your personal data will be stored for the consented period after the decision to vacancy notice. This enables us to contact you in case of future job offers.

Insofar we offer you an employment contract/employment relationship, we store your personal data in accordance with the relevant tax and commercial law retention and documentation obligations. These include a retention obligation of six or ten years for the commercial documents mentioned in §§ 238 and 257 of the Commercial Code. Corresponding provisions are also contained in the Fiscal Code and the Social Code for the retention of the documents mentioned herein.

Due to termination of the retention periods under commercial law, social law or tax law, the obligation to deletion does not automatically emerge, as in individual cases there may still be a legitimate interest in archiving in order to be able to provide information in the event of legal disputes, for example. This also applies to cases of preservation of evidence within the scope of statutes of limitations. According to §§ 195 ff. of the German Civil Code (BGB), these limitation periods can be up to 30 years, with the regular limitation period being three years.

6. Rights of the data subject

If personal data is processed from you by us, you have the following rights as a data subject:

6.1. Right of information

You can request information about your personal data that we process in accordance with Art. 15 DS-GVO.

6.2. Right of rectification

If the information relating to you is not (or is no longer) correct, you can request a correction in accordance with Article 16 of the GDPR. If your data is incomplete, you can request completion.

6.3. Right to deletion

You can request the deletion of your personal data under the conditions of Art. 17 of the General Data Protection Regulation (DS-GVO).

6.4. Right to limitation of processing

You have the right to request a restriction of the processing of your personal data (“blocking”) in the cases of Art. 18 DS-GVO.

6.5. Right to complain

If you are in opinon that the processing of your personal data violates data protection law, you have the right to complain to a data protection supervisory authority of your choice in accordance with Article 77 (1) of the GDPR.

6.6. Right of objection

You have the right to object on the specific grounds of Article 21 (1) of the GDPR. We will inform you about this in section 7.

6.7 Right of data portability

In the event that you have provided us with personal data in accordance with Art. 20 (1) DS-GVO, you have the right to have the data, which we process automatically, on the basis of your consent or in fulfilment of a contract handed over to you or to third parties in a structured, common and machine-readable format.

6.8. Automated decision making and profiling

We do not use any procedure of automatic decision-making including profiling according to Art. 4 (4) and Art. 22 DS-GVO.

7. Especially highlighted information

Article 21 of the GDPR obliges us to highlight a specific right of yours. The special emphasis concerns the following passages, which are set in cursive and underlined.

Right to object on a case-by-case basis upon weighing interests

  1. You have the right to object to the processing of your personal data on grounds relating to your particular situation. The prerequisite for this is that the data processing is carried out based on our weighing of interests according to Art. 6 para. 1 lit. f DS-GVO.
  2. b) The cases have been described in general terms in this data protection information.
  3. c) In the event of an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing of such data which prevail the interests, rights and freedoms of yours. This is also the case if the personal data serves the assertion, exercise or defence of legal claims.

8. Withdrawal of consent

If the processing of personal data by us is based on your consent, you have the right to withdraw this consent at any time by making a declaration to us. The revocation of the consent shall not affect the lawfulness of the processing carried out based on the consent until the revocation. We will inform you of this before the consent is given.

9. Obligation of provision

The provision of your personal data is not required by law or contract but is necessary for the processing of your application. The provision of the data is voluntary. If you do not provide the data, it will not be possible to process your application.

10. Data protection

If you contact us via an e-mail address specified on our website, the transport of the content of the e-mail to us is not end-to-end encrypted. This means that the e-mails are usually encrypted during transport via the e-mail providers involved but are not encrypted on the servers there.

If you contact us via the fax address given on our website, the transmission of the message to us is also not encrypted and therefore insecure regarding the data or information contained therein.

11. Amendment of this privacy information

This data protection information does not require your consent and is subject to regular review regarding the need for change. The previous version will be archived by us in the event of replacement by a new version.