according to Arts. 13, 14 and 21 of the General Data Protection Regulation (GDPR)

We attach a great deal of importance to data privacy. We have provided information for you below to explain how we process your data and what rights you are entitled to. 

1. Who is responsible for data processing and who can you contact?

Karl Knauer KG
Zeller Str. 14
77781 Biberach
Germany
Tel.: +49 (0)7835 782 0
Email: datenschutz@karlknauer.de
Web: www.karlknauer.com 

2. The data protection officer’s contact details

Christoph Boser
Tel.: +49 (0)7835 782 0
Email: datenschutz@karlknauer.de

3. Purposes of processing and legal bases

Your personal data will be processed according to the provisions set out in the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and other relevant data protection regulations. Our contractual documents, forms, consent forms and other information made available to you (e.g. on the website or in the terms and conditions) will provide you with further details and additional information regarding the purposes of processing.

3.1. Consent (Art. 6 (1) (a) of the GDPR)

If you have given us consent to process personal data, the consent in question forms the legal basis for the processing mentioned there. You may revoke your consent at any time with effect for the future.

3.2. Fulfilling contractual obligations (Art. 6 (1) (b) of the GDPR)

We process your personal data for the purpose of handling the application process. Processing may also be carried out electronically. This is particularly the case if you send us your application documents electronically, e.g. by email or using an online form on the website.

3.3. Fulfilling legal obligations (Art. 6 (1) (c) of the GDPR)

We process your personal data if doing so is necessary to fulfil legal obligations.

3.4. Our or third parties’ legitimate interests (Art. 6 (1) (f) of the GDPR)

We may also use your personal data based on balancing of interests to safeguard our or third parties’ legitimate interests. This is done for the following purposes:

• Limited storage of your data, if erasure is not possible, or is only possible with a disproportionately high effort due to the special nature of the storage.
• Enriching our data by using or researching publicly available data.
• Asserting legal claims and providing defence in legal disputes that are not directly attributable to the contractual relationship.
• Internal and external investigations and/or security audits.
• Securing and exercising our domiciliary rights using appropriate means (e.g. video surveillance). 

4. Categories of personal data that we process

We process the following data:

• Surname, first name
• Contact details (e.g. email address, postal address, phone number)
• Complete application documents (e.g. CV, certificates, references)

5. Who receives your data?

We disclose your personal data within our company to the divisions that need the same to meet contractual and legal obligations or to implement our legitimate interests.

The following bodies may receive your data too:

• Processors that we engage (Art. 28 of the GDPR), service providers for supporting activities and other controllers under the GDPR, particularly in the areas of IT services, logistics, courier services, printing services, external data centres, support / maintenance of IT applications, archiving, document processing, accounting and controlling, data destruction, purchasing / procurement, customer management, letter shops, marketing, telephony, website management, tax consulting, auditing services, credit institutions
• Public bodies and institutions in the event of a legal or official obligation that we are obligated to provide information, report or disclose data under, or if the disclosure of data is in the public interest
• Authorities and institutions based on our or the third party’s legitimate interest (e.g. to authorities, credit agencies, debt collection companies, lawyers, courts, expert consultants, companies and committees that form part of the group, and inspection bodies)
• Other bodies for which you have given us your consent to such data transfer operations  

6. Data transfer to a third country or an international organisation 

Data is not processed outside of the EU or the EEA.

7. How long do we store your data for?

If the controller concludes an employment contract with an applicant, the transferred data will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. If the controller does not conclude an employment contract with the applicant, the application files will be automatically deleted six months after the applicant has been notified of the rejection decision, unless storage is otherwise justified by the controller’s legitimate interests. ‘Other legitimate interest’ in this respect includes a duty to provide evidence in proceedings under the German General Equal Treatment Act (AGG).

8. To what extent does automated individual decision-making take place?

We do not use any purely automated decision-making processes according to Art. 22 of the GDPR. Insofar as doing so is required by law, we will inform you separately should we use these methods in individual cases.

9. Your rights under data protection legislation

You have a right of access according to Art. 15 of the GDPR, a right to rectification according to Art. 16 of the GDPR, a right to erasure according to Art. 17 of the GDPR, a right to restriction of processing according to Art. 18 of the GDPR and a right to data portability from Art. 20 of the GDPR. 

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 of the GDPR). You have the right to object to our personal data processing operations according to Art. 21 of the GDPR in principle. But this right of objection only applies in the case of very special circumstances arising from your personal situation, whereby our company’s rights may potentially conflict with your right of objection. Please contact our data protection officer (datenschutz@karlknauer.de) if you’d like to exercise any of these rights. 

10. Scope of your obligations to provide us with your data

You only need to provide the data that is required for the application process. Without this data, we will generally be unable to conclude an employment contract with you. If we request additional data from you, you will be informed separately that providing such information is voluntary.

11. Right to lodge a complaint with the competent supervisory authority

You have the right to lodge a complaint with the data protection supervisory authority (Art. 77 of the GDPR).

Our competent supervisory authority is:

Baden-Württemberg State Commission for Data Protection and Freedom of Information
Königstrasse 10 a
70173 Stuttgart
Germany
Tel.: +49 (0)711 615541-0
poststelle@lfdi.bwl.de