III. General Data Processing Information
1. Extent to which personal data is processed
We process all personal data that you provide us with through your application to the EDAG GROUP career page (www.edag.com/en/career/jobs-application/job-advertisements), including the data that results from the context of your application.
We may also gather personal data about you from other sources, including personnel service providers, the references you have provided, websites and other data available to the public on the Internet. This includes, for instance, data you have clearly made public within the scope of an online profile on a business social network. We can also receive data that you transmit to us via third-party websites, for instance von job markets such as Stepstone or Monster. This data may include the following: your contact details, your desired salary, the type of employment you are seeking and the date of your availability.
We only gather special categories of personal data (information about racial and ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic or biometric data, data concerning health or data concerning a person’s sex life or sexual orientation) when this is prescribed by law. If you voluntarily provide us with special categories of personal data, you hereby expressly consent to the processing of this data as described in this data privacy statement.
If you apply via our online portal, we can gather access information such as the IP address of your access device. Further information relating to this can be taken from the data privacy statement on our website.
We use the software solution provided by Prescreen as an applicant tracking system (ATS), which can be accessed via the subdomain edag.jobbase.io. Prescreen International GmbH, Mariahilfer Strasse 17, 1060 Vienna, Austria, is a provider of cloud-based applicant management solutions. Prescreen operates its applicant management system software and the IT infrastructure required for this independently. Prescreen acts as our service provider in relation to the processing operations in the ATS referred to below, i.e. Prescreen only processes data on our behalf, and only in accordance with the specifications and instructions we issue on the basis of an order processing contract (Article 28 para. 3 of the GDPR). The processing of personal data under the responsibility of Prescreen is described in a separate data privacy statement, which can be downloaded at https://prescreen.io/de/privacy-policy-website/.
2. Purpose of and legal basis for the processing of personal data
We process your personal data in order to be able to fill vacant positions and carry out the selection procedure. The legal basis for this is Article 6 section 1 lit. b) of the GDPR in conjunction with Article 26 section 1 of the German Federal Data Protection Act (BDSG) (new).
The legal basis for the processing of your personal data in the context of inclusion in our talent pool is consent according to Article 6 section 1 lit. a) of the GDPR.
In addition, we can also process personal data about you insofar as this is necessary to conduct the defence, in the event of legal claims arising from the application process being made against us. The legal basis for this is Article 6 section 1 f) of the GDPR. The legitimate interest here is proof of interest in a judicial procedure. We have balanced our proof of interest and the interest in maintaining confidentiality of the person concerned. Our interest prevails.
In addition, for the purpose of security screening, we may check your master data (name, address, date of birth, place of birth) against the terrorist lists in the appendices to the current versions of Regulation (EC) No. 2580/2001 of 27 December 2001, Regulation (EC) No. 881/2002 of 27 May 2002 and/or Regulation (EU) No. 753/2011 of 1 August 2011, to ensure that the persons listed there are not provided with money or economic resources. The legal basis for this is Art. 6 para. 1 c) of the GDPR in conjunction with the relevant regulation.
3. Data erasure and storage period
We store application documents for a maximum of 6 months after completion of the application process, after which they are destroyed. Insofar as our processing is based on a legitimate interest or consent, we store your personal data for as long as this is necessary for the respective purpose, or for as long as we are entitled or obliged to process the data.
If you consent to being included in our talent pool, we store your application documents for a period of 24 months from the start of the application process, in order to be available for future job offers. You can withdraw your consent for the talent pool at any time.
4. Data recipients
If you consent to being included in our talent pool, in order to be able to offer you suitable jobs, we can also pass on your application documents to Group companies associated with us, as defined by Articles 15 et seq. of the German Companies Act (AktG).
Moreover, personal data can also be processed on our behalf on the basis of contracts in accordance with Article 28 of the GDPR, in particular by suppliers of recruiting management and applicant selection process systems.
Personal data is also handed on to the public authorities and/or law enforcement authorities if necessary for the above-mentioned purposes, if prescribed by law or if necessary for the protection of our legitimate interests, in compliance with applicable law.
5. Data transmission to third countries
Should we transmit personal data to service providers or Group companies outside of the European Economic Area (EEA), the data is only transmitted insofar as the EU Commission has confirmed that the third country provides an adequate level of data protection, or other data protection guarantees (e.g. binding corporate data protection regulations or EU standard contract clauses) exist.