Processing of (personal) data by the entity in charge of the online application process
Data protection information for applicants
Data protection information about our processing of applicant data in accordance with Art. 13, 14 of the General Data Protection Regulation (GDPR)
Data Controller
The person responsible pursuant to Art. 4 Para. 7 of the General Data Protection Regulation (GDPR), the:
notebooksbilliger.de AG, Wiedemannstraße 3, 31157 Sarstedt, Deutschland, as well as NBB Service und Logistik GmbH & Co. KG, die C&P Holding GmbH and C&P Immobilien GmbH, each registered office in Wiedemannstraße 3, 31157 Sarstedt.
For questions about data protection, such as data processing in our company, or request for right of access or deletion, the following contact options are available to you:
Tel.: 030 3982021052
Fax: 03317309
Email: datenschutz@notebooksbilliger.de
Data Protection Officer
Our Data Protection Officer is:
Thomas Althammer, c/o Althammer & Kill GmbH & Co. KG, Roscherstraße 7, 30161 Hannover, Deutschland
He is responsible for the monitoring and compliance of data protection in our company and is available to you for confidential issues. You can reach him via email: kontakt-dsb@althammer-kill.de
Data processing in the application process
If you apply to us electronically, e.g., by e-mail or via our contact form, we collect and process your personal data for the purpose of establishing or initiating an employment relationship and in order to take steps prior to entering into a contract, Art. 88 GDPR and, if applicable, Art. 6 para. 1 lit. b GDPR.
By applying on our recruiting page, you express your interest in taking up employment with us. As part of the application process, we collect and process data from various sources. First, it concerns data that you transmit to us as part of the application process; these include, in particular application documents or interviews. In addition, we reserve the right to obtain personal data from professional platforms, such as Xing and LinkedIn, as far as this is necessary to determine your suitability for the position. If necessary, third parties, such as former employers or recruiters, may also provide us with personal data. For example, when validating your certificate of employment.
The processing may concern the following personal data or data categories: personal master data (e.g. name, address, date of birth), contact data (e.g. email address, telephone number), education data, performance data and employment data (e.g. professional qualifications and school education, professional trainings) as well as other data from application documents and interviews, such as information regarding your availability and salary expectations, cover letter or curriculum vitae.
Under certain circumstances, we may process special categories of personal data in accordance with Art. Art. 9 Para. 1 DSGVO, if you provide information on this; it can include, for example, severe disability data. This is done on the basis of Art. 9 Para. 2 b) GDPR.
In addition, we may process your personal data if this is necessary to fulfill legal obligations (Art. 6 para. 1 lit. c DSGVO) or to exercise or defend legal claims in the context of the application procedure (e.g., claims under the General Equal Treatment Act). In these cases, data processing is carried out based on Art. 6 para. 1 lit. f GDPR. If you give us your express consent to a processing of personal data for certain purposes, data processing is carried out based on your consent in accordance with Art. 6 para. 1 lit. a DSGVO. A given consent can be revoked at any time, with effect for the future.
Only those of our employees who are entrusted with the preparation and execution of the application process or, in the case of a talent pool, with the supervision of the pool and the talents have access to your data. This includes employees of the human resources department and the departments in which vacancies are to be filled.
For the processing of applicant data, we use the services of personnel administration and applicant management software from Personio GmbH, Buttermelcherstraße 16, 80469 Munich, Germany (hereinafter referred to as "Personio"). The data transmitted as part of your application will be encrypted transmitted, stored and processed in a database operated by Personio. Further information on the data protection of Personio can be found at: https://www.personio.de/ueber-uns/datenschutz/. Personio processes your personal data on our behalf based on order processing contracts in accordance with Art. 28 GDPR.
Third Country Transfer
Data transfer is not planned.Storage period
If necessary, we will store your data for the duration of the application process.Data will be stored for a maximum period of 6 (six) months after the end of the application process. The procedure ends as soon as you receive our rejection, or you withdraw the application. This is usually done to fulfill legal obligations or to defend against any claims arising from legal regulations.
Subsequently, we are obliged to delete or anonymize your data. In the case of anonymization, the data is only available to us as so-called metadata without direct personal reference for statistical evaluations (for example, women's or men's quote of applications, number of applications per period, etc.).
Joining our Talent Pool
If you give us your express consent, we will also store your data for inclusion in our "Talent Pool" for up to 24 (twenty-four) months after the end of the application process to identify any other interesting positions for you. The storage for this purpose takes place based on your consent in accordance with Art. 6 Para. 1 lit. a DSGVO. A given consent can be revoked at any time, with effect for the future. If you make use of your right of withdrawal, we will no longer be able to address and consider you in future vacancies. The legality of the processing based on your consent until revocation remains unaffected.
Successful conclusion of an employment relationship
If an employment relationship between you and us is established after the application process, we will transfer your data to the personnel file and delete it after expiry of the statutory retention periods.
Obligation to provide data
To decide whether we want to establish an employment relationship with you or to manage your data in a talent pool, we need all or parts of the above-mentioned personal data, depending on the position. Without this data, we cannot perform the application process or the inclusion in a talent pool. The provision of your applicant data is voluntary.
Automated decision-making in individual cases
Within the application process, we do not use purely automated processes for decision-making.
Your Rights
Below you will find an overview of your (data subject) rights. You can exercise your rights against us using the contact details provided above.Right of Access
According to Art. 15 DSGVO, you have the right to obtain an information stored about you, their source and recipients as well as the purpose of data processing at any time. In addition, you can request a copy of your data, which are the subject of the agreement.Right to rectification
According to Art. 16 DSGVO, you have the right to correct or complete your data stored by us at any time.Right to erasure (“right to be forgotten”) / blocking
Under the conditions of Art. 17 DSGVO, you have the right to delete your data stored by us at any time. This may be the case, if
- the data is no longer necessary for the purposes for which we collected it or processing in another way;
- you revoke your consent, which is the basis for data processing, and we lack any other legal basis for processing;
- you object to the processing of your data and there are no overriding legitimate interest for the processing;
- we have processed the data unlawfully;
This does not apply if processing is necessary,
- to fulfil a legal obligation that requires us to process your data, in particular with regard to legal retention periods;
- to establishment, exercise or defend legal claims.
Right to restriction of processing
Under the conditions of Art. 18 GDPR, you have the right to restrict data processing if
- you dispute the accuracy of your data and cannot correct it yourself;
- the processing is unlawful and you oppose the erasure of the personal data and requests the restriction of their use instead
- we as a controller no longer need your data for the purposes of the processing, but data is required by you for the establishment, exercise or defence of legal claims; or
- you have objected to processing pursuant to Article 21(1) pending the verification whether the legitimate grounds of the controller override those of the data subject.
Right to data portability
If requested by you, we will provide your data, which you have provided to us personally, to you in a structured, common and machine-readable format and / or transmit it to another responsible person (e.g. another webshop), as far as this is technically possible (Art. 20 GDPR).
Right to object to processing
If data are processed on the basis of Art. 6 para. 1 lit. f DSGVO (data processing for the purposes of the legitimate interests), the data subject has the right to object to the processing at any time on grounds relating to his or her particular situation. We will then no longer process the personal data unless we demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims (Art. 21 GDPR). You can submit your objection at datenschutz@notebooksbilliger.de.
Such an objection affects the lawfulness of the processing of your personal data after you have expressed it to us.
Right to lodge a complaint with the supervisory authorities
You have the right to complain at any time about our processing of your personal data to the data protection supervisory authority responsible for us if you believe that this processing violates applicable data protection law.